• 0 Posts
  • 45 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle




  • OK First thing GOS team is currently assuming that Pixel 10+ won’t meet their requirements. But for older Pixels it’s tough. Google just stopped sharing vendor blob, device tree, and instead of openly developing AOSP now it is fully behind close doors only releasing source later with full update. But I have hope. I’ve been daily driving custom ROMs for 10+ years and before I could afford Pixel I had cheap phones which also didn’t share any of these things but custom ROMs were very much thriving and they will always. Yes there may be a little more delay for new devices. All the new features may take longer but GOS already has a lot of security and privacy stuff figured out.

    I think we should all support however we can to not just GOS but also other Custom ROMs. Because there will always be those who’ll stop society from progressing and all we can do is fight back with donations, our time, and resources.









  • OK there are 2 completely opposite thoughts on shredding SSDs

    1. All SSDs have a trim functionality so any unused data gets set to 0 automatically by the os or in some cases by ssd controller

    2. Even if trim sets it to zero there is always some deviation from the original zero and a very very sophisticated attacker can find the actual data. And simply using shred or /dev/zero doesn’t help because SSD controller always writes to different physical location even for same file. And the only real way to ensure data can’t be recovered is to smash it

    Pick and choose depending on your threat model. If you’re just selling it to someone or you know that no nation state actors are after your data then just do normal delete and then do the trim. If you think someone with capabilities is after your data and that they are willing to spend few hundred thousand dollars or even few million for whatever data is in your SSD then just microwave it and then smash with hammer. No need to shred or zero.








  • If you want to run full Foss system then there is pinephone with Linux OS and physical switches to turn off camera and microphone and other stuff. But it is still in very very early stage and it may increase your privacy but it will definitely reduce your security.

    I understand camera and microphone access to malicious actor could be a valuable. But if you think your phone’s camera is compromised you have bigger problems.

    That being said, graphene OS is considered by far the most secure android OS. It has features to turn off camera, mic, sensors. But more importantly it has a lot of additional security features making it harder for anyone to break in. And that using Graphene is or any other is doesn’t directly make you secure.

    Yes I can agree to assume baseband and all the other proprietary firmware is running a malicious code. But they can’t use it to do mass surveillance, because if they do someone will detect it sooner or later. And also this is not the right tool for mass surveillance. 99% people will and have already downloaded apps that track almost everything they do.

    And if your threat model requires you to be safe from malicious firmware, then maybe smart phones aren’t for you.