News for hackers. Stuff that matters.
Re:Essential Phone, available now by zanny on Thursday August 17, 2017 @08:25PM (#15042348)
Since no one else has, I'll take the piss out of this "hollier than thou" bullshit.

> Devices are your personal property. We won’t force you to have anything you don’t want.

Devices are your personal property. The SoC is still a proprietary trade secret, the baseband is still spying on you for the NSA, the GPU is still a closed blob piece of shit. No mainline driver support, bootloader is closed source, firmware is closed source. We own this phone, you don't.

> We will always play well with others. Closed ecosystems are divisive and outdated.

....

> Devices shouldn’t become outdated every year. They should evolve with you.

Devices become outdated because shitty vendors refuse to open source and mainline drivers for their components.

> Technology should assist you so that you can get on with enjoying life.

Technology should be trustable, and a device where you cannot tell if or when the microphone and/or camera are recording and being remotely accessed is anything but.

Not wanting to single Essential out too much here - every vendor goes on and on about how great this phone is for you, while holding as much of a vice grip over the operation of the device as possible to make sure you need to buy another one as soon as possible through planned obsolescence. It is just the stick up the ass language announcements like these use is really infuriating when the people making them know full well how much they are screwing you over.

The first actually open platform phone is the one that will have longevity. The rest are snake oil about how good they will take of you because you can't take care of yourself with your own software that you can trust.

Re:Essential Phone, available now by TrickyRick on Friday August 18, 2017 @02:30AM (#15044021)
Also don't forget:

> Premium materials and true craftsmanship shouldn’t just be for the few.

Then maybe they should not have priced it in line with the iPhone?

Re:Essential Phone, available now by mangecoeur on Friday August 18, 2017 @04:34AM (#15044517)
Maybe when you live in the Valley you get a very skewed idea of who 'the few' are :P Maybe they think anyone who doesn't buy a new flagship smartphone every 6 months is living in destitution :)
Re:Essential Phone, available now by roryisok on Friday August 18, 2017 @05:14AM (#15044677)
Exactly. The many can't afford to drop €699 on the "base" model phone, especially an unproven one.
Re:Essential Phone, available now by steeve on Thursday August 17, 2017 @08:31PM (#15042384)
> Devices become outdated because shitty vendors refuse to open source and mainline drivers for their components.

YES. This one of the major reasons of the Android versions fragmentation.

However, most of them don't even have mainline-able drivers. See Amlogic which got rejected because of "shitty code".

Re:Essential Phone, available now by throwaway2048 on Friday August 18, 2017 @04:50AM (#15044579)
https://www.cvedetails.com/vulnerability-list/vendor_id-33/p...

For some fun reading, 357 CVEs in the linux kernel in 2017, 191 of them remote root, 95%+ of the total in closed source ARM drivers. (basicly everying labeled broadcomm and qualcomm).

For those keeping score, 2017 ALONE has produced 1/3rd of the linux kernel vulnerabilities ever observed.

We need to demand vendors do better.

Re:Essential Phone, available now by mscdex on Thursday August 17, 2017 @10:50PM (#15043134)
Amlogic is being supported in the mainline kernel, see the work going on for the Odroid C2 for example, which uses an Amlogic S905. See this[1] site for more information and the incoming patches page[2] for a more up-to-date view on what's being worked on.

[1]: http://linux-meson.com/doku.php [2]: https://patchwork.kernel.org/project/linux-amlogic/list/

Re:Essential Phone, available now by steeve on Friday August 18, 2017 @05:54AM (#15044842)
Yes, and this is awesome, but this still ongoing and was not always the case [1] [2]. Following the "shitty code" debacle, Amlogic announced a two year effort to mainline their drivers.

[1] https://github.com/steeve/linux-amlogic

[2] http://www.cnx-software.com/2016/08/19/amlogic-releases-linu...

Re:Essential Phone, available now by jrs95 on Friday August 18, 2017 @07:04AM (#15045116)
> Devices shouldn’t become outdated every year. They should evolve with you.

Doesn't have a removable battery...so, how exactly is this going to last me any longer than anything else?

Re:Essential Phone, available now by ericabiz on Friday August 18, 2017 @10:01AM (#15046232)
Don't know about this phone (we'll have to wait for the teardown), but iPhone batteries are pretty easily replaceable, and you don't need to go to an Apple Store to have them replaced. I run a chain of independent repair shops and we replace iPhone batteries all day long.

A press push for environmental reasons has made sure most smartphone batteries aren't glued in.

Now MacBooks and Surface Books, on the other hand, do tend to have glued-in batteries on newer models, so more pressure is needed there. We can still replace them, but they're a pain, and glue is not environmentally friendly at all.

Re:Essential Phone, available now by SippinLean on Friday August 18, 2017 @11:10AM (#15046859)
Extracting them with a torx driver, heat gun, and an hour's labor is not the same as a swappable battery.
Re:Essential Phone, available now by justinjlynn on Friday August 18, 2017 @12:11PM (#15047438)
You forgot the step of desperately trying to not crack anything while doing so for said hour.
Re:Essential Phone, available now by gleenn on Friday August 18, 2017 @03:57PM (#15049260)
Very true, but we are discussing phones, and without glue on my few year old Mac book air, it was less than 10 minutes as there was no glue. Again you're right, it ain't swappable, but it was surprisingly easier than I thought when it isn't glued.
Re:Essential Phone, available now by jrs95 on Friday August 18, 2017 @10:35AM (#15046530)
Good to know! I'll probably go that route in a couple years then rather than buying a new device.
Re:Essential Phone, available now by RachelF on Thursday August 17, 2017 @09:07PM (#15042630)
Yes, it isn't as innovative as the marketing dept would have you believe.

The Xiaomi Mi Mix from 2016 contained more innovative features.

The Essential phone is just another large, high end Android very similar to the Samsung S7/S8 or Xiaomi Mi6 or new LG - Very nice, but not a major innovation.

Re:Essential Phone, available now by froo on Thursday August 17, 2017 @09:26PM (#15042729)
>> Devices shouldn’t become outdated every year. They should evolve with you.

I really don't understand this sentiment.

I've still got my iPhone 6 Plus. I haven't seen the need to upgrade yet. It does absolutely everything I want.

At this rate, the only reason I'm going to upgrade is if I destroy my phone somehow (I've yet to even put a major scratch on any of my smartphones over the years) or if a vendor comes out with some feature where I'm like "yeah, I could really see myself getting use out of that"

>> Technology should assist you so that you can get on with enjoying life.

It's a smartphone for crying out loud. It's a platform designed for communication. Bonus points for having a camera in my pocket and some apps which help me for various tasks.

> The first actually open platform phone is the one that will have longevity.

Exactly, I feel that we're kind of getting there with all of the recent phones that have come out in the last couple of years. There's no real killer feature anyone's come out with, just nice things to have.

Re:Essential Phone, available now by patrickthebold on Thursday August 17, 2017 @09:37PM (#15042785)
>>I've still got my iPhone 6 Plus.

Not the parent, but that's pretty new. I used a 4s earlier this year and there were several apps that couldn't be upgraded and/or stopped working.

Re:Essential Phone, available now by BoorishBears on Thursday August 17, 2017 @11:20PM (#15043298)
I got my pair of Nexus 6 dev phones a month after my iPhone 6 Plus.

The Nexus 6 reached it final OS update with N but the 6+ is about to get iOS 11.

The iPhone 5s is about to get iOS 11. If it weren't for the 64-bit transition I wouldn't be surprised if it had gotten on the iPhone 5 as well.

Apple gives about 5 years of iOS updates, which makes keeping the same phone a lot more feasible. Meanwhile my Google sourced Nexus barely makes it two without landing on security patches-only.

Re:Essential Phone, available now by ufukbay on Friday August 18, 2017 @03:48AM (#15044325)
I got my iPhone 5S (The 5S replaced my 3GS) when it was released and I'm still using it. The only problems I have are a little bit of yellow tint on the screen and the battery not having full capacity.

Maybe I got really lucky with both of my iPhones but even though I hate to pay this ridiculous premium price for iPhones it kinda evens out in the end considering I use the phone for 4-5 years.

Re:Essential Phone, available now by on_and_off on Friday August 18, 2017 @05:35AM (#15044775)
The device does not stop working after that period
Re:Essential Phone, available now by wingerlang on Friday August 18, 2017 @12:12AM (#15043498)
That's still an 6 year old phone, do you consider this long or short? Generally Apple are extremely good at keeping their devices usable.

I used an iPhone 4 up until late last year, my dad is still using it. Now I upgraded to an iPhone 5s.

The annoying part is generally apps that require a higher OS, which is the app developers fault. But even then you don't always necessarily /need/ the absolute newest version of an app.

Re:Essential Phone, available now by simonh on Friday August 18, 2017 @03:47AM (#15044323)
Up until November last year my youngest daughter was using my old 3GS. She loved that phone and could even still download apps from the App Store. I know this because I installed Lemonade Stand for her last summer. You can't get that now because it only worked on the older OS versions, but there it was in the App Store for her 6 years after I bought it. I'd try and boot it now to check it, but I'm not sure where it is.

Planned obsolescence by big fat arse.

Re:Essential Phone, available now by illumin8 on Friday August 18, 2017 @12:41PM (#15047699)
The 6 Plus will be 3 years old in a month. The fact that its still a powerful phone, and will receive OS updates for another couple years speaks volumes about iPhone longevity vs. Android.
Re:Essential Phone, available now by froo on Thursday August 17, 2017 @10:26PM (#15043013)
That doesn't seem to be a manufacturer issue though is it?

In case of tablets, my partner is still using her iPad 2 and Netflix has a version of their app that still runs on that.

The core software on her tablet, like the core software on my older phones that were given to family members still work fine.

Its the 3rd party apps that seem to be abandoned by software developers. That's going to happen regardless of what phone manufacturer's want.

Re:Essential Phone, available now by Joeri on Friday August 18, 2017 @06:12AM (#15044913)
I have an original ipad and netflix is pretty much the only thing that still works fine on that. You can't use it to browse the web anymore because web pages have gotten so heavy it runs out of memory trying to render them. The app store is also broken to the degree of being unusable, even if you could find apps. If it wasn't so locked down it would still make an excellent linux device, but as it stands it's basically a dedicated netflix viewer.

So in my view it's a bit of both. These devices could have a longer life with manufacturer support, but the app developers are the ones driving the obsolescence.

Re:Essential Phone, available now by PacketPaul on Friday August 18, 2017 @09:31AM (#15045912)
App developer here. It is impossible to build an app for the original iPad. Apple tools will not allow you to compile backwards compatibility to iOS 6 (or is it 5?).
Re:Essential Phone, available now by g00gler on Friday August 18, 2017 @08:41AM (#15045573)
App developers are only a piece of this equation, though.

From (solo) developing an sms based app in 2017 there was little incentive to target an API level lower than 19 (KitKat), which provided a standard API for SMS.

The majority of devices support it so what's the incentive to support legacy software?

Now if there are breaking changes introduced to telephony in the future I'll probably maintain 4.4 support and add a check for API level. That isn't feasible for every app, though...

Re:Essential Phone, available now by ekianjo on Thursday August 17, 2017 @09:40PM (#15042795)
> I've still got my iPhone 6 Plus. I haven't seen the need to upgrade yet. It does absolutely everything I want.

That's hardly an old phone. Do you see yourself still using it in 3 years time?

Re:Essential Phone, available now by zanny on Thursday August 17, 2017 @10:11PM (#15042924)
I've got a Galaxy S3, an S4 couple first generation Moto Gs, a 2012 and a 2013 Nexus 7, a Note 2, I think? 2 Note 3s, and a One Plus One in various states of: loaned to cousins, used as house phones, backups in a drawer, backups in cars, or lying on my desk.

They were all either broken, at yard sales, given to me my clients / contacts that don't want them, or were <$20 on ebay.

In general four things kill these devices:

* Touchscreen breakage. It is almost never worth trying to replace if the screen cracks.

* Flash burnout. Shitty flash chips don't last forever. I've binned almost every older phone than this crop because the flash memory dies.

* Charger port wear. Microusb sucks, replacement parts vary wildly depending on model - I can get an S series charger for <$5 most of the time, but trying to replace a Droid phone charger once was impossible because the charger harness was soldered to the pcb.

* Software. I generally outright ignore devices without a ROM scene and an unlocked bootloader, but even then it is entirely volunteer how long Cyanogen/Lineage/Paranoid/etc are willing to keep supporting these fossil kernels. The S3, Note 2-3, and original Nexus 7 are all on their deathbeds because of lagging community support for these devices. It is worth mentioning, however, for the Samsung devices they have gone community supported far longer at this point than their official support periods lasted. Great job Samsung.

Batteries are usually a non-issue. You can buy shitty Chinese knockoff batteries (or if you are lucky Anker) that don't hold a charge and don't last long, but you can keep these devices running on bootleg parts for a while.

The software is the ultimate killer. What should be the easiest to maintain is the hardest, because corporate greed and hunger for control trumps customer respect. All my mobile devices are cheap, used, or broken when I get them because none of these exploitative abusers are worth giving a direct cent to.

Re:Essential Phone, available now by ekianjo on Thursday August 17, 2017 @10:15PM (#15042944)
> * Flash burnout. Shitty flash chips don't last forever. I've binned almost every older phone than this crop because the flash memory dies.

I have never experienced this before, what are the signs that the flash chip is going sour? Slow to load? Losing information? Is there anything you can do about it ?

Re:Essential Phone, available now by zanny on Thursday August 17, 2017 @10:24PM (#15042994)
Sadly mobile flash doesn't support smart monitoring. There are three indicators, but your flash can randomly fail without any of them being observable:

* Sector reallocations. As flash stops writing or reading the package will reallocate data. This process is intensive and usually lags out the phone. If when moving large amounts of data into / off the flash the whole phone is freezing, it can be due to this.

* Stunted read / write speeds. As the flash degrades and more sectors go bad, your read and write performance suffer. Fragmentation gets worse as working sectors dry up. If your phone was benching ~80MB/s read or write speeds the day you got it and is down to ~20 5 years later, it is likely nearing a failure point. This is usually a gradual aging thing, but you do often see a steep slope of sudden performance crash before the whole chip becomes unusable.

* Crippled access times. The former was data rate, this is data latency. The latency should always be consistent and not age much throughout the life of the chip - the ability to access flash almost always stays near-constant over the lifetime of the chip. If this starts going, for very small data sizes, the chips controller can be dying. Which happens, because in phones a lot of corners are cut, and flash mmus are often really, really cheap.

There is also the really rare chance you find a corrupted file you cannot open that used to work, which can in extremely rare circumstances mean that your phone has ran out of unallocated sectors and is now losing capacity including written data, but that is highly unlikely - flash almost always becomes unwritable way before becoming unreadable, and your phone will fail before unreadability starts manifesting en masse.

It would be useful if we could get A. lifetime write averages for the flash chips in popular phones and B. trace such a number throughout the lifetime of the device, but we don't have those, so you are almost always flying in the dark on when your phones memory will die.

Re:Essential Phone, available now by teknologist on Thursday August 17, 2017 @10:39PM (#15043079)
A year or so ago my iPhone 6 was constantly freezing up and was practically unusable. I tried changing literally every setting available in an attempt to resolve it. Wiping it clean and restoring from a backup solved it.

I was almost convinced it was a problem with the flash chip as symptoms were exactly what you describe here.

Re:Essential Phone, available now by pjc50 on Friday August 18, 2017 @08:15AM (#15045436)
Same as on a desktop: mysterious slowdowns everywhere.

My wife has a four-year-old Windows phone, the Nokia 1020, which is completely fine in all aspects other than suffering from this.

Re:Essential Phone, available now by froo on Thursday August 17, 2017 @10:21PM (#15042982)
Yes.

My vision isn't great, so I upgraded from my iPhone 4 to the 5 because of the larger screen, and the 5 to the 6+ due to a larger screen.

Really, the screen size has been the main driving factor in my phone purchase decisions.

My 4 & 5 have been passed down to my mother, so they're still in use. Hell, I was still using my 1st gen iPad until just over a year ago when the screen just failed.

Re:Essential Phone, available now by Aaargh20318 on Friday August 18, 2017 @08:59AM (#15045668)
> That's hardly an old phone.

In the smartphone business, it's practically an antique.

Re:Essential Phone, available now by piyush_soni on Friday August 18, 2017 @03:01AM (#15044138)
Besides, they don't give any more software update guarantee then Google's flagships are giving (previously Nexus phones, and now Pixel) - i.e. 2 years.
Re:Essential Phone, available now by erlend_sh on Friday August 18, 2017 @03:12AM (#15044182)
> The first actually open platform phone is the one that will have longevity

FairPhone is trying to do that, in software, hardware and way beyond: https://shop.fairphone.com/en/

Re:Essential Phone, available now by cerberusss on Friday August 18, 2017 @04:23AM (#15044476)
A colleague of mine showed me her FairPhone. She then proceeded to disassemble it, right in front of my eyes. She's a biologist and told me that she broke the screen during fieldwork. Just ordered a new screen on the FairPhone site and replaced it herself. Amazing tech.
Re:Essential Phone, available now by everybodyknows on Friday August 18, 2017 @01:28PM (#15048092)
Fairphone has been pushing into the predictable headwinds, without much help from economy of scale or supportive tech partners:

https://forum.fairphone.com/t/is-it-worth-to-buy-a-fairphone...

Re:Essential Phone, available now by dwighttk on Tuesday August 29, 2017 @10:00AM (#15124301)
"recent upgrade to Android 6.0 Marshmallow"

when was that written?

Re:Essential Phone, available now by mathgenius on Friday August 18, 2017 @02:56AM (#15044115)
And this:

> we’re working around the clock

Why are they working around the clock? It sounds like they are running late and/or don't know what they are doing.

Re:Essential Phone, available now by IanKelling on Thursday August 17, 2017 @08:36PM (#15042418)
And without running proprietary javascript, their page displays no text. So, ya.
Re:Essential Phone, available now by leereeves on Thursday August 17, 2017 @09:20PM (#15042702)
Proprietary means privately owned.

Who owns Javascript? ECMA is a public standard.

Re:Essential Phone, available now by _xhok on Thursday August 17, 2017 @09:29PM (#15042752)
I think he means the unobfuscated code is proprietary.
Re:Essential Phone, available now by leereeves on Thursday August 17, 2017 @09:33PM (#15042770)
Could be. It's not obfuscated

> // Polyfill for creating CustomEvents on IE9/10/11

> function EmailInput(e,t,i,n){function r()

but it does contain some proprietary code from GreenSock.

Re:Essential Phone, available now by column on Friday August 18, 2017 @04:54AM (#15044593)
But is js really needed on such a page? Wouldn't css-grid do the job just fine?
Re:Essential Phone, available now by coldtea on Friday August 18, 2017 @06:03AM (#15044876)
Because 1/100000 of their customers might have JS turned of?
Re:Essential Phone, available now by Retric on Friday August 18, 2017 @08:57AM (#15045659)
The global average it's 0.2% or 1:500, however Taiwan averages 2.3% though Android tablets hit 9.6%. And, some websites see significantly higher rates.

https://blockmetry.com/blog/javascript-disabled

LTDR; Supporting non JS users tends to be very cheap, so it's often well worth the investment.

Re:Essential Phone, available now by coldtea on Friday August 18, 2017 @10:04AM (#15046261)
>The global average it's 0.2% or 1:500, however Taiwan averages 2.3% though Android tablets hit 9.6%. And, some websites see significantly higher rates.

Even at 1/20 I don't think people who turn of JS would make the best kind of customers. I'd expect them to be cranky and demanding...

>LTDR; Supporting non JS users tends to be very cheap, so it's often well worth the investment.

Spending opportunity cost time because there might be some users missing out in Taiwan or some Android tablets? Bah...

Re:Essential Phone, available now by wooter on Friday August 18, 2017 @05:47AM (#15044824)
id imagine the company has web apps (internal and external). why support multiple stacks for what is not even remotely close to their core competency? isomorphism, for example, is a big advantage for both maintainability, community support, and rapid delivery
Re:Essential Phone, available now by spotman on Thursday August 17, 2017 @10:16PM (#15042955)
"the first actually open phone will have longevity"

you mean like openmoko?

Re:Essential Phone, available now by trapperkeeper74 on Thursday August 17, 2017 @10:34PM (#15043059)
Open ASIC IP cores and firmwares are a must-have. Without independently-verifiable silicon, there's no telling was is or isn't there.
Re:Essential Phone, available now by pjc50 on Friday August 18, 2017 @08:21AM (#15045466)
Financing this is the real problem. Open source software relies on volunteer labour and the small costs of donated hosting, hardware etc. Open source hardware does not have nearly enough demand to fund it and cannot protect its revenue stream from competitors.
Re:Essential Phone, available now by exikyut on Friday August 18, 2017 @12:46AM (#15043641)
Totally agree. My question is, how do you verify the fabs are trustworthy?

Genuinely curious - I'm actually trying to answer this myself at the moment. The best I've come up with is, go to >2 fabs, have them deliver wafers but not saw them, scan and compare the wafers using trusted equipment, then take the wafers back to the fab for sawing.

The last step is the biggest issue; you could be bait-and-switched. Sawing doesn't sound as expensive as actual photolithography/etching kit, but I suspect it would still be prohibitive for most.

Thing is, you could tamper with a small number of chips on the wafer image in such a way that a quick but unlikely interaction with the end device would easily spot the tampered units. Then it would be a simple matter to insert a "picker" into somewhere in the manufacturing/shipping logistics to find the tampered device(s) and reroute them.

Re:Essential Phone, available now by pjc50 on Friday August 18, 2017 @08:20AM (#15045459)
It's much harder for the fab to backdoor things than any other stage, and it also takes time for them to prepare such an attack once they have your GDSII files. So it would show up as a manufacturing delay. For anything other than milspec this probably isn't worth worrying about at this time.

Also, I'm not 100% sure that two fabs would actually produce optically identical chips; would there be process differences?

Re:Essential Phone, available now by exikyut on Friday August 18, 2017 @09:21AM (#15045815)
Arg. I'm actually considering the problem of a secure design that's secure both through being transparently open source, and by using a super-simple architecture. And unfortunately these two properties mean that a) well, everyone has the GDSII, and b) the architecture is super-easy to hack. It makes perfect sense that a fab would need time to mount an attack on a closed and complex design though.

Very good point about process differences. That totally makes sense, and would likely require human verification to handle, which for big chips would be, at the very least, hilariously expensive.

Re:Essential Phone, available now by pjc50 on Friday August 18, 2017 @09:38AM (#15045966)
http://sharps.org/wp-content/uploads/BECKER-CHES.pdf is probably the state of the art here. It's basically undetectable.

"Instead of adding additional cir- cuitry to the target design, we insert our hardware Trojans by changing the dopant polarity of existing transistors. Since the modified circuit ap- pears legitimate on all wiring layers (including all metal and polysilicon), our family of Trojans is resistant to most detection techniques, includ- ing fine-grain optical inspection and checking against “golden chips”. We demonstrate the effectiveness of our approach by inserting Trojans into two designs — a digital post-processing derived from Intel’s cryp- tographically secure RNG design used in the Ivy Bridge processors and a side-channel resistant SBox implementation — and by exploring their detectability and their effects on security"

Re:Essential Phone, available now by exikyut on Friday August 18, 2017 @10:31AM (#15046493)
* Sound of groaning *

Thanks. But ugh. That is both absolutely amazing and... well, what did I expect. Of course there are going to be process attacks :)

Hmmm. I guess the only defenses against this are

- trying to design the layout to get good "route coverage" via test routines (sounds hard)

- aiming for super-simple designs that make it difficult to constructively alter the design (pathological simplicity is one part of my idea; yet to determine viability)

- trusting the fab (ha!)

I wonder if using a huge process like ~30nm (or even bigger) would mitigate at all.

Edit: Small work fixes, added sentence

Re:Essential Phone, available now by pjc50 on Friday August 18, 2017 @11:58AM (#15047317)
It's much easier to just trust the fab. TSMC do not care about backdooring your hobby project.

If you really want to carry on down this route, I would say the most effective approach would be to regard fab interference as a strange form of "single event upset", and borrow high-availability techniques such as lock-step mode across duplicated processors or subsystems.

Re:Essential Phone, available now by exikyut on Saturday August 19, 2017 @07:26AM (#15052789)
Interesting. I'm curious, what sort of cost level would someone need to be looking at to mount an attack like the BECKER-CHES one? It would be really cool to be able to say "this would be secure until an attacker starts spending $(X?)XXX,XXX." Everything's vulnerable, step 1 is to have a good idea of how vulnerable.

Lock-step sounds interesting but really really hard - the basis of my idea is security through simplicity, and packing everything onto the one chip so only signed encrypted data comes out. Breaking the design down so that lock-stepped processors would reveal tampering would probably violate integrity and likely have blind spots too.

Re:Essential Phone, available now by neltnerb on Friday August 18, 2017 @03:19AM (#15044218)
Trustworthy in what sense? That they are delivering on spec, or that they aren't stealing your IP?

For the prior, I imagine going there and observing QC procedures is the only hope. For the latter, I imagine it involves keeping discrete critical components isolated -- firmware from silicon (and beyond), using different factories so that neither independently has a functional device.

Re:Essential Phone, available now by exikyut on Friday August 18, 2017 @09:23AM (#15045831)
Trustworthy in the context of a "secure as possible" open-source design. Knowing that the layout I shipped is what I got back with no modifications.

Unfortunately my idea would have both the layout and the (OTP-fused) firmware fully open. I'm learning a lot about the challenges of "transparent security" as opposed to security by obscurity...

Re:Essential Phone, available now by dwighttk on Tuesday August 29, 2017 @10:02AM (#15124312)
>The first actually open platform phone is the one that will have longevity.

I hear that a lot, but rarely see it work out that way in practice.

Re:Essential Phone, available now by tomaskafka on Friday August 18, 2017 @12:03AM (#15043462)
> Technology should be trustable, and a device where you cannot tell if or when the microphone and/or camera are recording and being remotely accessed is anything but.

Yes. This means no Google services.

Re:Essential Phone, available now by rand005 on Friday August 18, 2017 @01:02AM (#15043714)
It doesn't. You can have hardware indicators.
Re:Essential Phone, available now by coldtea on Friday August 18, 2017 @06:35AM (#15045009)
They won't matter if you voluntarily send your data to Google services...
Re:Essential Phone, available now by pantalaimon on Friday August 18, 2017 @10:43AM (#15046600)
> Devices become outdated because shitty vendors refuse to open source and mainline drivers for their components.

To play the devil's advocate here, you could also blame Linux for not providing a stable driver ABI and instead tries to force all vendors to adapt their coding practices if they want to play along.

Many companies don't want to take the burden to rewrite their code if the Kernel maintainers have a different opinion on how things should be done.

Re:Essential Phone, available now by zanny on Friday August 18, 2017 @12:03PM (#15047346)
You don't really have to mainline your drivers. You just have to open source them. I guarantee if the chipset drivers and GPU drivers for most Samsung S phones were open sourced the phones would see community merged drivers or a popular third party repo supporting their continued maintenance.

Of course, it would be preferable that companies support their hardware in (open) software themselves (like Intel and AMD do for their GPUs / wifi / ethernet / ASM extensions), but we don't have anything close to that right now in mobile.