Skip to main content ↑ ↓
Topic: Social media (Read 17040 times) previous topic - next topic
0 Members and 8 Guests are viewing this topic.

Re: Social media

Reply #45 –
Quote from: gripped – on
Quote from: n00b – on
Graphene works on a locked bootloader and Lineage does not, right? So objectively not true, right? I mean we can delve into further details if you like, but that's a killer for me.
No you have to unlock the bootloader to install GrapheneOS.
Yes, but you then relock it, yes? Like, you have to, to boot the phone. it is core to it's security model
Quote from: gripped – on
In the end I went with a Fairphone 3. Removable battery and a 3.5 headphone jack, which I wanted if possible. Runs /e/OS. It also has MicroG. It's a bit of a brick but I'm fairly happy with my choice.
yes. but you do not get to have a not fairphone os, and lock the bootloader, right?

To me open hardened os, and locked boot is step one. But I am interested in other arguments.

Is it not the equivalent of having dev signed UEFI boot?

Re: Social media

Reply #46 –
Quote from: n00b – on
yes. but you do not get to have a not fairphone os, and lock the bootloader, right?
You can lock and unlock the bootloader at will with the Fairphone's. The phone does factory reset when you do though. Which is a good thing.
So my bootloader is locked. This is an advantage over the S5 I had, and most other phones with custom roms, as some financial apps don't work with an unlocked bootloader. I'm fairly sure this is the same with a Pixel. As in you can relock the bootloader after installing Graphene etc.

I refuse to buy any phone without an easily swappable battery. Planned obsolescence at its finest.

Edit: Sorry I skimmed the first part. Yes then you relock it. On the the Pixel or the Fairphone the same process.
 

Re: Social media

Reply #47 –
My point is that only pixel allows self signed lockable roms.

If any other phone offered it, Graphene would, probably, support it.

A device has zero security without a locked bootloader.

I agree about a swappable battery. However I will add this note. I have a pixel one year out of warranty. battery swelled. Google replaced the phone for free.

Also, it is really not that hard to change the pixel battery.

Re: Social media

Reply #48 –
Quote from: n00b – on
My point is that only pixel allows self signed lockable roms.
Not exactly sure what that even means but I'll go out on a limb and say you are wrong.
Quote
Also, it is really not that hard to change the pixel battery.
Ok

Re: Social media

Reply #49 –
Quote from: gripped – on
Quote from: n00b – on
My point is that only pixel allows self signed lockable roms.
Not exactly sure what that even means but I'll go out on a limb and say you are wrong.
Interesting response. You could have asked me to support my assertion, which I could, but saying I'm wrong suggests you do not wish to continue this discussion.
For the reader, https://grapheneos.org/faq#supported-devices
"Support for using alternate operating systems including full hardware security functionality"

AFAIK there exists no other device with this capacity.

Re: Social media

Reply #50 –
Quote from: n00b – on
My point is that only pixel allows self signed lockable roms.
Yet you hadn't mentioned self signed once previously so I fail to see how I deduce that was your point all along?

What was being discussed was the ability to re-lock the bootloader. You repeatedly stated the incorrect assertion that this was not possible on the Fairphone when  it is. So at that point it wasn't a huge leap to assume you were wrong again.
Apparently you may not be? The Pixel's after version 2 include the 'Titan M or Titan M2' security chip. The Fairphone does not have this chip or similar.

So if security is the utmost desire and you don't mind having to dissemble the entire phone to replace the battery, and your happy giving Google your money, then the Pixel with Graphene probably is the better choice.

If you want a modular phone, with a choice of privacy respecting roms to install, with apparently slightly reduced security but also the distinct probability that fewer six year olds have been crushing rocks in a giant hole in the ground in The Congo to supply the minerals needed for its manufacture then the Fairphone's seem a reasonable choice (Taking the manufactures and communities word for it here. I haven't been to the DRC myself to verify the claims)

You pays your money you makes your choice.

Re: Social media

Reply #51 –
Quote from: gripped – on
Quote from: n00b – on
My point is that only pixel allows self signed lockable roms.
Yet you hadn't mentioned self signed once previously so I fail to see how I deduce that was your point all along?
what I said was
Quote from: n00b – on
Quote from: gripped – on
No you have to unlock the bootloader to install GrapheneOS.
Yes, but you then relock it, yes? Like, you have to, to boot the phone. it is core to it's security model
Quote from: n00b – on
Quote from: gripped – on
In the end I went with <snip>
yes. but you do not get to have a not fairphone os, and lock the bootloader, right?
In my view I repeatedly asserted Graphene (a custom ROM) can have a locked bootloader, which no other phone OS can, and repeatedly called attention to the difference.
Quote from: gripped
So at that point it wasn't a huge leap to assume you were wrong again.
Apparently you may not be? The Pixel's after version 2 include the 'Titan M or Titan M2' security chip. The Fairphone does not have this chip or similar.
I literally never said what you think i said, and clarified the point repeatedly.

But I thank you for acknowledging I was right all along.

Re: Social media

Reply #53 –
Quote from: Phosphate5 – on
Quote from: Chris Cromer – on
Facebook @artixljnux
Greek Facebook @artixlinuxgr
Facebook? Really?! You guys don't read the news?
https://www.tomshardware.com/software/linux/facebook-flags-linux-topics-as-cybersecurity-threats-posts-and-users-being-blocked

https://www.pcmag.com/news/facebook-accidentally-blocks-users-from-posting-about-linux
apparently facebook says oops