Linux on Mobile and open EC and Coreboot etc. are all making rapid progress at the moment. I would still say we are talking in terms of years before more general Linux Phone adoption would be possible, and still the fact your online bank etc. doesn't make an app for Linux would be prohibitive to many (although anbox might help), so I understand pessimism here, but I think the excitement around Linux mobile and open hardware is sufficient that it will at least be revolutionary that it is possible to run open hardware and Linux phones etc. same as SteamOS was a failure if you look only at numbers of Steam Machines, and a revolution in Linux gaming if you look at Proton, GamerOS and all the improvements that came with it.
Viable alternatives affect the behavior of others, even if they "fail".
And if you're already a desktop Linux user like me, open hardware is already a reality. Only thing that's stopped me trading Dell XPS 13 for Purism 14 is that I will miss the QHD+ screen, as it is standard HD res. Still really tempted though.
Power or RISC-V ISA hardware are in low stock, have very few, specialised vendors and are not affordable. I have great sympathy for people who refuse to pay the outrageous difference to off-the-shelf hardware that can be bought anywhere just to gain a level of privacy that they should have in the first place.
AMD and Intel have rootkits in their hardware which are designed to be exceedingly difficult to remove. If the customer is a spy agency, they will ship with the rootkit disabled. If the customer is just a normal person like the one writing the article, one will not be able to have one for money or good words.
https://www.csoonline.com/article/3220476/researchers-say-no...
* spy on others
* try not to get spied on
This is my experience in removing the ARC firmware code from two different HP desktops (I attached both BIOS images):
https://github.com/corna/me_cleaner/issues/233
These PCs are quite inexpensive. I run OpenBSD with hardened Chrome on one of them, for all of my finances.
However, there was a recent Firefox bug in OpenBSD, and the patches weren't applied uniformly. It does seem that Chrome is more consistent, and gets more attention.
It still might fail. We try because we feel it is too important to simply do nothing, not because we expect mass success.
Not great for normies, but that's my tip anyway. Media consumption is a wedge issue and if you're prepared to spend money for privacy, there are a few ways it can be done.
IANAL but seems to me like laws along the lines of "you can reverse engineer DRM without being arrested" and "the patent holder/whatever of the DRM cannot deny you a license to use this without a good reason" seem like the right direction to me. Then the linux distros or anyone else can go off and build/integrate the DRM to the extent that they wish.
Because Widevine is so widespread and acts as a gatekeeper for content (for example Netflix), if Google doesn't bless your platform with Widevine support you're essentially dead as a consumer media platform.
Google should not have this kind of power because competition is good.
It also makes me pretty pessimistic when it comes to privacy. I can uninstall Windows/MacOS on my laptop, coreboot it, use FOSS/privacy-centric software, etc. but it doesn't really mean much when my phone (which is basically attached to my body 24 hours a day, and is my main conduit of communication with others) is a privacy/security nightmare.
I love my Pinephone. It is undoubtedly my own, with no strings or trillion-dollar corporation helping steer. It's lots of fun to play with, but unless people already half-jokingly compare you to RMS due to your extremism, it's not ready.
Android circa 2009 would be a reasonable comparison: the potential is clear, the software is rapidly evolving, and there's a benevolent dictator at the helm. And that's enough for me to be happy with it :)
The basics are pretty much down. Kernel support is solid. It can make calls, send texts (MMS mileage may vary), and use data pretty reliably. Web browsing is actually pretty fast with Angelfish. You technically have access to the full repository of Linux ARM software, and some of it even resizes properly to the phone. The camera is usable but terrible. Anbox works for Android apps but is painfully slow and can't share data with the rest of the phone to my knowledge.
Battery life is terrible, I don't think that the phone has power states of any kind, so it's either with the screen on, on with the screen off, or off altogether. Updates frequently break my install, although updating through SSH has been working for me recently on Tumbleweed without breaking anything. Little things like Plasma not having a way to exit the keyboard, apps taking up full screen with no way to exit them, etc.
Performance is painfully slow, but has also improved (for KDE anyways) by leaps and bounds. It used to be completely unusable but now it's merely very slow.
I would say it's somewhere between for developers, and usable, at this point. You could use it with some sacrifices, and still have a functional wireless communication device. It absolutely is nowhere near replacing my OnePlus running Android, however.
Sure, not quite as handy — or Handy, for the German-speakers among us — as a physical phone... But, say you keep your laptop with you in a backpack (Rucksack ;-) ) or such, and a Bluetooth hands-free headset clipped to your ear...? I hear lots of youngsters listen to music continually nowadays, so they already have some kind of earbuds in all the time anyway. Or maybe even some kind of Bluetooth "satellite" handset, to make it easier to initiate outgoing calls / read and write text messages?
Money: Pine64 is a small operation with limited resources, factories have minimum order quantities among other commitments.
Most Pine64 products have pre-alpha software and are aimed at volunteers who can improve it. Lots of people are willing to buy a product for <$150 and "see how it goes". $400 filters out a lot of people who might otherwise chip-away at software bugs on weekends. Additionally, people are less tolerant of dead pixels on a $400 laptop, and Pine64 would rather not deal with returns.
They took all the trees, and put 'em in a tree GNUseum..
Didn't go that route though because of the unavailability of the supported models where I'm at
Canonical supported versions were based on snaps-predating app framework (click packages). There were a couple of phones released with it out of the factory (bq aquarius 4.5 and meizu mx4) and a bq tablet, but rest of the supported phones use android kernels for hw enablement.
Ubutouch has forked the software when Canonical pulled out and even runs an app store, but I think the best hw you can get is Oneplus 6t and then mx4.
I used mx4 as my daily driver for years prior to switching to Android for the first time 3 years ago. While not the fastest phone, mx4 was usable (things I hated most were sharp edges and how it would register touches in my pocket, and then get locked for 10 mins because of wrong passcode).
To be honest, I quite prefer the Ubuntu Touch over Android (and Nokia Meego/Maemo is up there too, but Palm Pre WebOS takes the cake as the best basic phone UX I've experienced).
I think Mobian has the biggest potential to be the pure GNU/Linux system in your pocket, so I am hoping it'd get Unity included too.
First time I've heard of Mobian, looks really interesting. Will keep an eye on it
Most advice I've gotten has been flash a custom Android kernel or a de-Googled distro. This would definitely solve my problems, but this removes the ability to install Play Store apps which are a necessity for me. Not to mention that it gives the possibility of bricking my phone, which is way outside my risk tolerance for just getting rid of some annoying ads.
In case you do want to install a custom Android distribution (ROM) to clean out the Samsung bloat more thoroughly, the risk of hard-bricking your phone is almost non-existent nowadays. The worst that can happen is usually a soft-brick which can be fixed by reinstalling the original OS. As for Play Store, most custom ROMs either include or support installing Google services and Play Store with full functionality.
(disclaimer: I work on custom kernels and ROMs)
I like iOS, but not Android. Let me explain why.
I personally love Linux, Unix philosophy (I'm even sometimes an old beardy zealot about POSIX standards and the old way), and inherent customization possibilities.
On the other hand, I don't want to manage my phone like a desktop or laptop computer, or a server because of a plethora of reasons. First, user interface is not very suitable for that. Second, there's a lot more finicky things to manage. Last but not the least, that management task is continuous.
iOS takes all of these away. Complete backups are built-in (I know android has it, but I don't know how bulletproof is this). Defaults are sensible. Settings do not change spontaneously. OS behavior doesn't change drastically from device to device (Every android vendor tunes their OS and background process policy differently, creating a lot of WTH moments and more finicky management tasks). Updates are not slowed down by the vendor, the operator, the distributor and today's weather.
While iOS is a pretty strict walled garden, devices are set-up and forget. Even you forget that you have an iOS device, because you use it without thinking.
Radio security, isolation and its reasonable and unreasonable parts are discussed here extensively. As a HAM radio operator, I can only say that, radios can do wreak a lot of havoc even with informed tinkering, without any bad intentions. If you take a relatively cheap SDR and listen to your neighborhood spectrum (just see the traffic, not decode anything) your jaw will drop. It's a very crowded up there, and there's a lot of non-public traffic.
Another stuff about custom ROMs and Stock ROMs is SIM services. Yes, many of the SIM menus just sit here unused, but there are useful ones like mobile e-signatures. I carry my e-sig with my phone, in my SIM. So using it requires a verified and official software stack. As far as my experience goes, no custom ROMs run these services (intentionally or unintentionally).
I manage my family's Android phones, and I personally use an iPhone. As far as I can see, it's much easier to leave an iOS device on its terms and it'll fare better.
Feel free to discuss, counter or just burn this comment down. :)
Not to burn you down, but to burn Android down: no, Android does not allow you to take complete backups. Let alone "built-in". The only backups that are made are forced to Google cloud and only backs-up apps that where downloaded through Google Play and app settings for Google stuff. It is an extremely limiting almost non-backup if you're used to going around Google. When switching phones it's still a process of hours / days to get everything set-up the way you had it on a previous phone. Especially if it was rooted.
The only way I know to take a full backup image of an Android phone involves unlocking (not possible on all phones), rooting (not possible on all phones), installing Nandroid and pulling an image over USB. To restore to a "fresh" phone, you need to go through all of those steps again.
This would take hours to weeks depending on who does it and the puzzle your phone manufacturer sets up for you to unlock your phone.
This to me is one of the many absolutely mind-blowing facts about the trash Android OS (disclaimer: I'm still an Android user, because I can't accept a phone without a physical keyboard. Never used Apple products in my life).
Want to wipe your phone and restore an image after you travel into a "spy-state"? Nope. You simply can't with an Android phone.
You know a phone that was able to do this out of the box? My 2013 Blackberry Passport. No rooting or fiddling around required. Just install a desktop app, plug the phone into USB and press "full system backup".
I run a custom honescreen: it's just another Android app! And yet everytime I have to set that back up again manually.
I have very little trust in Google so I don't want to backup to google cloud (I just researched and it seems they do provide end to end backup encryption without Google having the key anywhere since Android 9, is that really the case now?)
Things like the set of apps, settings (both app and system level), game progress, the set of open tabs, etc can be backed up, and IOS is even able to restore old app versions specified in the backup by downloading them from the store.
All that said, both IOS backup options are more comprehensive than the built-in android options.
iOS even restores your open applications and task manager state when you restore from the backup. Even more so, theoretically, it can restore every apps state at the point of backing up. It's a feature ported from macOS.
There is no way Apple is going to let 3rd party could providers do backups directly. I doubt exposing the iPhone as a USB device over the internet with a VM running iTunes would work efficiently.
Maybe you can create an automation like that.
From my experience this is completely false. I just switched from Galaxy S8 to S20, and I transferred everything and had the new phone setup exactly like the old one, with all apps (that would allow it, LINE wouldn't) and even ringtones and text tones set how I had them in about 20 minutes.
Can't you enable developer mode, open a terminal and just run `dd`?
1) You don't want to risk dumping a mounted filesystem because of inconsistencies
2) Good luck getting the right device - in the end it's devicemapper all the way down with a lot of layers (ecryptfs, sdcardfs, bind mounts, ...) stacked between your shell and the device.
3) Unrooted phones don't allow access to raw Unix devices
4) You can't restore these backups anywhere if your phone (like almost all, I think it's a Netflix requirement) uses hardware key storage - simply because the key is in the secure element of your phone. Rooting a Samsung phone kills the HSM and switches over to software key management though.
5) Assuming encryption keys don't get in your way, you can only restore the dump on exactly the same model and firmware of device you have, because every manufacturer does stuff slightly different.
To root "well made" phones, you need to unlock the bootloader, and this will erase the data on the device, to prevent data theft or compromise...
It's a bit messier if your data also lives on an internalized sd card.
Android has had full system backup capabilities through `adb backup` for years. It does not require removing carrier locks or rooting and has been available since Android 2.x iirc.
I've used this to transfer all of my apps, app settings, and system settings between all of my Android phones:
Nexus One -> Galaxy Nexus -> Note 3 -> Galaxy S6 -> Galaxy S8 -> Galaxy S9 -> Galaxy S10 -> Z Fold 2, all with one continuous chain of backup and restores via `adb backup` and `adb restore`.
These restores sometimes even worked flawlessly across different Android OS versions! Sometimes this has caused a lot of weird issues wrt system settings, so admittedly this process can be quite buggy.
Apparently this is false, because apps can "opt out" of ADB backup and many do (see other comments), furthermore it doesn't backup the entire phone, but only the system image (partly). Does it backup the root state of the phone? Nope. Does it backup the restore partition of the phone? Nope. Making it a "maybe full system backup but not full system image backup that is kind of buggy". In other words, like I wrote earlier: not a -full- system backup at all.
I was specifically talking about effortlessly backing up and restoring a full system image. Blackberry OS10 style: plug in phone, press "backup system image" and get a carbon copy of EVERYTHING that runs on the phone that can be restored to a new or existing phone with 1 click. Your post confirms that this is not possible in Android: using ADB is not "effortlessly" and it's not a full system image backup.
Even if I would backup and restore from and to the exact same rooted phone (that's all I'm asking), the restored backup would not be the same as whatever was on the phone when the ADB backup was pulled. Nandroid can do this, in theory, with a lot of hassle (but not on my phone, because TWRP for my phone doesn't support decryption of the system partition).
I use `adb backup` solely as a means of transferring my settings & app library between devices.
These are full system backups including potentially gigabytes of APKs, so I wouldn't want to run it every night. It is possible to use `adb backup` to only backup settings (no app files) if you want a lighter backup, but those backups aren't as useful for my purposes.
This is what I like about iOS. I tested this method a couple of times (with less destruction though), and it just works.
They’re not. Backups are built-in but they’re not complete. For example google Authenticator data is not backed up. Microsoft Authenticator can be backed up, but you need to go through a few extra steps (and have a Microsoft account). Other secrets are not included either - my banks PhotoTAN app doesn’t store any credentials etc. There are reasons why this is so, but it’s really important to handle if you use your phone for 2FA.
AFAIK, applications allow their secrets to be backed up or not, and I'm not mad that my 2FA keys are no backed up and shipped overseas. I keep another copy of my 2FA codes in another application, so it's not a very big problem from my PoV, though.
It's not a problem if you took measures to make sure you have a copy. It's a problem if you just take "full backups" for granted until you figure out that some things don't get included in "full".
And yes, for years one had to do the physical cabled backup restores for this, then these same app developers learned how to exclude their data from those as well. However, as of iOS 12, 13 and 14, there seems to be decreasing to zero effective difference in what’s included between tethered (with password), local WiFi (with password), and OTA iCloud backups.
You may be able to forcibly back these up using a third party tool that also lets you back up sandboxed temp files and the like, tools like iExplorer:
https://macroplant.com/iexplorer/mount-iphone-disk-mode-file...
If you’re jailbroken, that can backup anything under root of course.
But back to your point: I used to backup to Google Authenticator and LastPass's Authenticator to prevent me from losing access when I migrated to a new iPhone since they don't backup. They both worked just fine interchangeably.
Arguably too well, as using 1Password to log in puts the 2FA on the clip board for the next step.
Get Keepass2Android, and it'll track TOTPs just fine. Throw Syncthing on their and you can securely get those to any device you own without involving Google.
It's protection for when using untrusted computing devices, or because most people have their passwords in some way visible or shared.
TOTPs can't be reasonably made much longer then they are while still usefully entered, but my password database never leaves my own devices and neither does the password to it.
If someone compromises my phone to the level they can get that database, then they've already got my Google Authenticator or whatever DB as well anyway.
> they've already got my Google Authenticator or whatever DB as well anyway.
is of course good for them, but they still need to get my password from my other device.
2FA as the internet uses it has always been about dealing with accidental disclosure and public PCs.
That's why my phone doesn't have any bank software installed and doesn't have any password saved. It is logged into my google account though to which you probably can restore some passwords, but for all resources I care about (banking, investements, crypto, etc.) it's not possible. I also use separate email for those. If my HN or reddit account will be compromised via my phone - so be it, I don't really care. I can also tolerate compromised 2FA app as it's useless without passwords which are stored on another machine.
You mention setup & forget, that's how probably 98-99% of Android phones operate. Same for me, all the people and family I know. Initial install&setup after purchase, and then just running 1-click updates if one chooses to. After 3-4 years, switch to another one.
Hardware is +-same, what differences there are are invisible to user (apart from basic things like dual sims and memory card slots, which Apple lacks desperately... and bigger zoom for photos). Some like the smooth Apple UI, some feel they have the same on Android, most don't care. Some care about privacy which Apple seems to be the champion, most of the world simply doesn't care and isn't even aware. Some realize privacy is an illusion even with Apple, if you are 95% of the world that lives outside USA, various 3-letter agencies can do whatever they want and abuse your data in numerous ways without any recourse.
Its all relative, the most important is if one is happy with whatever one has and doesn't have unrealistic expectations.
That sums it pretty well. I don't have anything to counter, but wanted to just say thanks for the frank comment and another perspective.
No Firefox on iOS, hence useless.
My impression is that the Firefox shell offered is still able to provide the various anti-tracking privacy features that many would point to Firefox for, and the variety of browser shells available should mean that you'd be able to find a UI to your liking if Safari's isn't.
At that point, the only thing I can see missing is a non-webkit engine. I get that that's an annoyance and definitely on the same anti-competitive level as 00s era IE, but by and large web developers account for it and it works acceptably. As much as I'd need it to for mobile browsing.
Would just be interested to know if there's something more I'm missing.
No plugins/add-ons effectively.
As a vague counter point, I use Firefox Focus[0][1] which touts the tracker blocking and ad blocking I'd rely on extensions for normally. It meets my needs as the only additional extensions I use on desktop are for tab and session cookie management, both of which are moot points in a browser without tabs and a "clear cookies after each session" policy.
[0] https://play.google.com/store/apps/details?id=org.mozilla.fo... [1] https://apps.apple.com/gb/app/firefox-focus-privacy-browser/...
The topic is about owning your own hardware/software combo - so having addons/customization is the definition of it.
Well, somewhat snarky. It's still a legimate question.
Why would one "need" plugins on a mobile browser? What kind of functionality that mobile Firefox doesn't provide?
>The topic is about owning your own hardware/software combo - so having addons/customization is the definition of it.
Well, the topic is about owing your computer. Which has some merit (even though owing is a kind of a weasel word: you do own it, even if the OS enforces this or that measure. You can sell it at any time, for example, break it and nobody will ask you to return it, etc.).
So, the real topic is "doing whatever you want with your OS, with the ability to disable all checks, protections, etc, install custom everything etc".
Which I can see the appeal in some cases.
For a mobile phone what exactly is the great appeal?
I need that plugin.
You usually view webpages in a very minimal interface, small screen, often on the go or leisurly, and with limited interaction on a mobile phone. So, aside from something like an adblocker (for which there are solutions), what would one use?
#2 is dark reader.
[0] https://addons.mozilla.org/en-US/firefox/addon/darkreader/
Of course, nowadays the assets of apps have to be part of the deployable, itself. So it's common to run localhost web server.
On the other hand, it's useless for creation. But that's fine, the trade offs are worth it in my opinion. I have dedicated hardware running Linux/Windows for that purpose.
So much for not changing settings by themselves :)
If that isn’t what you want to happen, you go to the Settings app and turn off those toggles. (But I wish they would have a matching statement on screen that clarifies their changes are permanent until you change them again.)
Temporary toggles being in the control center is great. Most of the time that I quickly disconnect from WiFi or Bluetooth, it’s to solve some immediate, temporary issue.
The settings aren’t “changing themselves” — they’re doing what you asked them to do. The written message tells you what you asked them to do in order to teach new users what these buttons do.
I love iOS in almost every way except sideloading restriction.
If I missed some way to implement what I want, I'd love to hear how can I do that. I don't need much, but I need push notifications from server and I need push notifications when I'm close to some particular location (like open a door when I'm near it). I might need NFC push notification, I'm not sure.
I don't agree that Android suck, I have second phone for testing and while I love iOS more as it feels more polished, I probably will switch to Android in the future, just because I want to run my code on my device.
Apple has refunded me without question whenever an app tried to scam me, no matter how big people popular it was, whereas apps using third-party payment systems almost never give any refunds.
"you don't like what I like and my choices are obviously superior so I'm going to insult your opinion and act as if my opinion is undeniable fact"
https://venturebeat.com/2018/03/15/apple-blocks-app-store-in...
If your app is using any payment processor that's not Apple within the App Store that app is not in compliance with Apple's own App Store policies. Epic Games would be very interested to learn this is happening. If you're using self-signed certificates or an "Iranian App Store" to install things you are also operating outside the bounds of App Store policy.
You're using Apple services in a region that is not officially supported by Apple. I don't understand how you think security and privacy protections are going to be in place when using smuggled hardware that's intentionally compromised and taking active measures to circumvent what protections Apple has, either by jailbreaking or rerouting requests to Apple to some other mirror.
That Fidibo app is obviously not “compliance with App Store policy.” Said policy has never been followed consistently. Feel free to email Epic if you think this changes anything. My magic ball says the best result you can expect is that Apple says, “Oops, they lied, and we didn’t notice.”
Your article is also just an article. App Store is usually fine in Iran, but sometimes there are connection problems. This is not even always a ban from Apple, the Islamic Republic is all too happy to ban foreign services.
Instead of giving me all these made-up stories, give me a list of all the major sacrifices Apple has made for user security. I can’t think of a single one. The nearest thing to a sacrifice they have done is supposedly not selling your data to 3rd parties (except China and friends), but this isn’t that lucrative for them and the PR it generates translates directly into profits. Most privacy choices aren’t this PR-able.
Solid advice. You should follow it.
I also looked into getting some of my own programs into my iPhone but rather than getting stuck on not being able to keep it there for a long time, I got stuck on how to even get the program into the phone. Turns out you need Apple hardware to push the code, so I'm stuck before even being able to try it.
However, the $100 is less a permission slip, and more buys you access to Apple services infrastructure that is largely worth the money so you don’t have to do it yourself and so your users can trust a single brand experience.
(For example, notifications before Apple’s notification service were insane, the app “Growl” made a lot of money just trying to tame the dozens of different ways confounded users’ expectations with notifications. Similarly, updating apps was crazy-making for users, then there was Sparkle, now you get the app hosting and distribution included in the $8/month.)
Just these few services are well worth $8 a month if you compare what you get to any other SaaS we’re buying all the time from HackerNews startups:
- App discovery, hosting, distribution, updates
- CloudKit, iCloud Documents, iCloud K/V Store
- Push Notifications
- Sign-in with Apple
- etc. (NFC is also in the list)
https://help.apple.com/developer-account/#/dev21218dfd6
Since you specifically mention push notifications which of course require an infrastructure to run reliably for you 24/7, there’s a good value for the $8/month. The systems behind making these “just work” for users are complex and expensive.
Can someone confirm ?
https://news.ycombinator.com/item?id=26399788
Long story short, you pay $100/year or $8.33/month for access to a suite of services that make apps frictionless for your users, and easier for you as a developer to offer high end features like authentication, notifications, and sync:
- App discovery, hosting, distribution, updates
- CloudKit, iCloud Documents, iCloud K/V Store
- Push Notifications
- Sign-in with Apple
- etc. (NFC is also in the list)
You do not have to pay anything if you do not want any of those services, however you will have to “refresh” your test app cert weekly or work around that.
There is the https://www.fairphone.com/en/ which is a modular and easy to repair smartphone. They also make it easy to install alternative operating systems like Sailfish or an OSS version of Android.
by making the general populous care more about it, and force the electorate's hands.
A problem is, that there's no such thing. There's a common denominator (punishing killers, rapists, thiefs), but this is what punish all governments anyway.
When you go past this point, people's interests are atomized.
You see, in addition to controlling the cellular radio and all of those details, the bass band processor also does real time noise cancellation and a variety of other call quality functions that you would immediately miss if they were not there.
That processor is actually doing a lot of different things and is difficult to remove from a phone and maintain what most people would consider an acceptable user experience.
As another commenter pointed out - the Pinephone is device attempting to do that.
When they are ready, get one. They'll be amazing no matter which OS you end up with.
I don’t think the current dominance of the big two can end until the hardware and software requirements of making a good phone are much much more accessible to normal developers/engineers than they are today.
I could imagine a family of cellular and Wi-Fi devices that present as Ethernet bridges. They'd offer a configuration interface reminiscent of home routers (go to a magic IP either with a REST API or a browser-controllable menu). This eliminates a lot of the delicate, externally facing configuration options and has the side benefit of eliminating a lot of driver development hassle, especially on low-popularity OSs.
They do do this.
Bottom line, it is doable, but I want a working linux phone, where camera and calls/sms/mms work and I dont use any newage communication software, so I dont care. Again, this is completely my use case as I practically consider the phone applications as mostly useless, dont play games and prefer paying in cash.
I hoped Cosmo Communicator[2] would be it but they didn't support the camera and since I am using it for taking notes, it is vital for me. Actually I even went into making degoogled rom for CC but I got stuck at selinux blatantly abused to prevent modifications and maybe some day I will recompile the kernel to kick it out or find time to reverse and binary patch the selinux checking.
Actually PinePhone is becoming more and more interesting option but they should really pump up the specs, again, at least for camera. The second possibility would be sailfish os [3] but again it has some closed source blobs.
I really want the PinePhone to be a solution here, but unfortunately I know it isn't.
That is the opposite of what they want. Do you think whatsapp and a banking app will allow installations that let them track users less? With banking I can sort of understand it, they have to protect the lowest denominator (reused password, no 2fa), so barring different installation methods that are used for "anonymous" purposes I can sort of understand the reasoning behind. but something like whatsapp where the main commodity is your data? Hardly their priority.
Shut off the 'normal' smart phone when you don't need it (for banking or what have you).
Use the web version of Whatsapp (https://web.whatsapp.com/) if you must use it. You could even consider having a WhatsApp specific phone if you have an older model that you've upgraded from that contains no other data.
That was my solution anyway.
Basically what they do is build and maintain a bunch of Matrix bridges for you. Whatsapp, Imessage, Telegram, Facebook, Slack, Twitter, Skype...
Does anyone have experience running the open version on their machine? (self-hosted)
Not a 100% solution but is dead simple and better than 0%
And I've actually got three apps: Firefox, Mattermost and Wireguard
Also, PinePhone can run anbox - slowly.
You'll need a external battery pack though for longer days away from home.
I'm at the point in my life where I don't really need proprietary apps on the go, so my "full take" device is a tablet that mostly stays home.
My bank’s app is essentially a wrapper around their mobile site. I can’t think of any specific features it has that require it to be an app, both technically, and in their implementation.
Check deposit may be the only feature not available in the mobile site. It’s certainly not a technical requirement that they can’t implement that though.
Sometimes when making a card payment online (not necessarily on the phone), my phone shows a notification from the app asking me to confirm the transaction.
I also worry that there isn’t enough of a development community behind the PinePhone to bring it to a basic level of polish. Instead of being the resurrection of the Nokia N900 as a hackable Linux phone, the PinePhone might actually be a repeat of the ill-fated Openmoko Freerunner.
For $150 it's quite a good deal. Plus, the software stacks are quickly improving, especially Mobian.
Sorry to burst your bubble, https://libreboot.org/faq.html#intelme
Purism was able to completely disable Intel's ME
edit: E.g. https://nitter.dark.fail/rootkovska/status/93845887552266649...
Coreboot is great as well, but a bit different.
If/when someone manage to conpromise those, they can basically take over your computer, and Intel/AMD doesn't provide any sort of killswitch or physical way of disabling it.
As someone could in theory cobble together an HDCP compliant rig and good heavens, might be able to intercept and decode HD content!
So much of what makes the tech giants so lucrative is that they act as centralization points for industry level orchestration of what user behavior to support.
You can bet that if an industry working group is stoked, there's likely hidden in there somewhere an implementation detail intended to curb an undesirable user freedom or general capability.
As if that even matters - pointless standard. can't think of any content that there isn't a torrent up hours after it's available lol
(sure the code could still do nasty stuff like facilitate tempest or other sidechannels, but that's leaps and bounds ahead of the built in assumed-RCEs of ME/PSP).
It can be used for 'out of band' management of your system, including firmware/bios rollouts and updates. Allows remote hijacking of attached hardware devices. Basically can puppeteer your entire system.
> why can't we do anything about it?
Because there is no ability to update or modify this code. It is only updatable by the hardware vendor as it is encrypted, signed and checked during update.
Problem is (temporarily) solved :D
For example, for $4k, you can get this with specs roughly equivalent to a normal developer machine: https://www.raptorcs.com/content/BK1SD1/intro.html
I bought two of these last year and they're great, stuff your own memory in there, add some storage and off you go.
Edit: clarified that this would be a mainboard + CPU.
[0] https://www.winehq.org/pipermail/wine-devel/2019-February/14...
To me it makes more sense to continue with this phone, as I can find all the replacement parts I need on AliExpress, rather than investing in a new Librem 5 or a PinePhone. While I appreciate being able to use an open mobile OS, there's the problem of apps, and there's still the hardware problem - it's both more expensive (in the case of the Librem 5 at least) and has the same problem of eventual obsolescence.
At the end of the day you are relying on a suspect network connection, hosted by a profit seeking corporation, regulated by a privacy hostile government, to maintain your connection to the world. No matter how "free" your device is, the network itself will never truly be free.
I can get by without carrying a microphone-and-camera equipped computer controlled by someone else around, and so I don't; but, if I want to return something I bought on the Internet, I don't get a receipt; and, if I want to go to a bar, there's a risk I won't be allowed to pay. (There is a law against the latter problem, but it is not enforced.)
Are there situations where paying without a smartphone is not practically possible? In the Netherlands people sometimes pay with smartphones, but these use the same infrastructure as the ubiquitous debit cards, so it is not an issue here. (Cash on the other hand…)
These payment terminals and the Dutch debit cards are by now all suitable for this type of contactless payment: you either lay the card on top of the terminal or hover it there, or hold it near the side (depending on the model); it can be done completely without terminal and card touching, and of course only the card carrier touches the card (i.e., you don't hand it over as is sometimes done with credit cards).
Credit cards are rarely used for payments in shops here, and are often frowned upon by merchants (and often refused). It's all debit cards (either as a physical card or virtual in a smartphone) and some cash — although covid may well proof to put cash that much closer to the grave.
What am I getting at? Well, I know it's totally paranoid, but what if some agency out there in other countries who build these things are putting things on the boards to send telemetry data back. Perhaps something small and quick now and then while the computer is online. Something that you don't even notice unless you're constantly monitoring the internet traffic in and out. And the traffic itself could be something innocuous also. Something that slips under the radar.
I know I know, I'm totally paranoid here. But does anyone here worry about that at all?
I went ahead and bought a SM-T575 tablet a couple weeks ago. The only tablet I could find in the 8-inch range that had a somewhat decent CPU/GPU, a camera with light, NFC and a replaceable battery - while still being waterproof. And it's not made out of hard plastic that will shatter at the first fall. For all that joy however, it was a fucking PITA to root it and I only succeeded because of a helpful soul messaging me on Reddit of all places.
Seems like the only place one can find stuff supposed to live longer lives is in the expensive Enterprise section of manufacturers for a hefty premium - similar to "smart TVs" where the only "dumb TVs" available are "digital signage" type. And that's not good. We need regulation in this space, and fast.
I'm hoping the EU can help a bit. Please, EU, you're our only hope!!
This is insufficient according to conditions of TFA. It is widely assumed in the security industry (based on evidence from the various state-sponsored attacks we can see) that the NSA and/or other government agencies have backdoors and/or zero-day exploits for both the CPU secure execution modes and common networking hardware. It is very likely that there are "magic packets" which you can send to such devices which install a rootkit payload.
If security against even government intrusion is something you care about, it really difficult to buy or make a modern computer that is configured like computers were in the 80's and 90's: just running code we have complete access to, with no hidden interfaces.
Had a recent experience with a Motorola phone with this. And there was no obvious technical reason they couldn't have held the battery down with something other than a shite ton of glue.
I've been using the Fairphone 2 for a bit over 5 years and while it's not an outstanding phone, it's lasted well enough. The challenge for me in Australia is getting spare parts, as they only ship to Europe sadly.
I'd love to run a more open software stack, but even just Linux on the top layer would mean not running the apps I need to get through daily life... it's why I had to retire my perfectly working Android 3 phone, so many things stopped working (the Covid tracking app FFS). But under linux are the various radio, camera, wifi etc modules and a lot of those have their own firmware. Pinephone has really struggled with that.
And, that’s great! They shouldn’t know that, maybe there will be some cultural shift in the future, where everyone will be tech-savvy, and companies like Apple starts changing their approach. Until then HN users need to accept that most of those solutions are made for ordinary consumers, and embrace the niche for them. :-)
I have a PinePhone. It's much fun being around the guys who are making the next evolution of phone. Hackers gonna hack.
I'm still here bashing the walled gardens because no matter what the non-techies want to do, they need protecting from themselves by either the .gov or by being given alternatives.
Every day we get closer to giving them another usable option.
People don't drop their battery-powered custom-built PC into 6ft of water and expect it to keep working (then dunk it again after two years of abuse, 4 floor drops, etc have worked against the case, seals, and so forth). They don't take it from freezing temperatures into the warm indoors and expect it to keep on trucking. They don't expose it to extreme temperatures on car dashboards in the summertime and expect it to still perform (it would absolutely hard-lock due to overheating if you tried it). Compared to a phone it doesn't matter very much how much a custom-built PC weighs +/- 1kg; phones fight for grams. If a custom-built PC uses an extra 15w who cares? But that might be more than the entire power budget of a phone SoC. People expect a phone not to spew EM that breaks the ability of anyone around them to use data or make calls. People also expect their phone to be able to complete a 911 call in an emergency so long as some kind of signal exists.
Modularity IS NOT FREE. STOP ACTING LIKE IT IS.
Modularity costs space, weight, and complexity (which often translates into user time spent troubleshooting).
If a user-replaceable screen means giving up waterproofing do you expect that to be a popular tradeoff? If making the battery replaceable reduces battery life by 40% is that a good tradeoff?
It is clear to me some people complaining haven't spent any time researching this topic and have no idea just how much engineering goes into modern electronics nor what the tradeoffs are. If they actually had to live with the results of their claimed preferences a lot of them would hate it and switch back immediately. At best I see people hand-waving half the battery life or double the weight as if it such things were trivial for devices people hold or carry on their person for hours a day.
I'm 100% serious when I say if you are working on your own company or product please make sure you approach these things with eyes open. If you are deliberately going to serve a different part of the market know that going in. It's fine to go after a niche - a niche can be profitable - but understand your customers and what they really value (not just what they claim to value). Don't let a bunch of contrarians on HN convince you there's a market for 10 million modular cell phones. You'll lose a lot of money when your "customers" skewer your product for all the compromises necessary to give them what they claimed to want.
The real tradeoff is size. The ultra thin electronics are the benefit of not having modules. Related to that is performance - the performance you can get is well correlated to how nicely you can put your traces on the PCB connecting the two. Having to go through a connector adds another competing constraint
Source: have done some modular and non modular designs of the same. Not nearly to the same precision and performance requirements as building a phone, but not that far off
There's another round of sales coming up, keep an eye on the blog.
Where can I find, how can I build a computer---that isn't 13 years old---with open firmware of which one doesn't reasonably suspect that the NSA put a backdoor into it?
From experience, no matter what you do, your phone will still continue to ping 1e100.net every few minutes. This may just be something innocuous, but there just is no way to get rid of this behavior (or to understand where it's coming from).
> adb shell settings put global captive_portal_mode 0
will disable it.
Ugh.
The 4G ones run either Android (so a worse experience with the same spyware) or KaiOS (which is still fine but not very available).
They're slowly tightening SafetyNet which makes it harder to use free custom android ROMs as well.
Owning my computer is still relatively possible. I can build a computer from parts which I can choose, and have a choice in which operating system to install on them. Laptops are slightly more closed, but even on those I can choose the OS myself.
Modern smartphones however, seem like walled gardens in which I have no control at all. I cannot choose any of the parts, and even doing simple reparation tasks like replacing a battery is a nightmare these days. I am locked into a single OS on my smartphone, which either spies on you or is locked down even more. Every iteration a bit more control is taken away from the user. And its increasingly hard to step away from them, since a lot of normal interactions such as banking almost requires you to have such a phone.
Both Android and iOS suck. I've made my own Android phone tolerable with F-Droid and trying to ungoogle it as much as possible. But unfortunately I find myself locked into using google play services since solutions like MicroG just don't cut it. They lock me out of slightly too much of my daily smartphone usage (note that this is definitely not the MicroG's developers fault, they have done amazing work).