Re:Ask HN: How can this happen without the phone covertly li...
by usrn on Monday April 18, 2022 @10:03AM
(#31070728)
The EG.25 (Pinephone modem) baseband (not the Linux firmware (and of course, not the application processor OS)) blob source was up on Github for a while. I read through part of it. I think they managed to get it taken down with a DMCA request and I haven't seen it since.
I really wish I had cloned it locally, I don't know why I didn't.
Nobody is auditing the baseband firmware blobs, and with non-removable batteries phones are never really turned off. I would be surprised if the NSA doesn't have a backdoor in it. Pure conjecture, of course, but the alphabet soup boys have the motivation, the ability, and the history, of getting their backdoors put into tech.