Hacker News new | ask | show | jobs
by 323 1657 days ago
But you need to trust that they are actually working, and that the device was not intercepted and modified en route.
1 comments
fsflover 1657 days ago
They have the schematics [0,1] for these devices and even X-rays [1] for Librem 5. Also, anti-interdiction services for the latter [2].

[0] https://wiki.pine64.org/index.php/PinePhone#PinePhone_board_...

[1] https://source.puri.sm/Librem5/community-wiki/-/wikis/Freque...

[2] https://puri.sm/posts/anti-interdiction-services/

link
effie 1656 days ago
Isn't this rather a security theater for the more naive prospective buyers? Even if the device is verified to comply with high-level schematics, it still may not comply on the micro-level. There is the problem with all modem chips being able to access/control phone memory and being potentially controllable by the mobile network operator. How are we going to verify this vulnerability has been removed?
link
fsflover 1656 days ago
If you want to go this deep, consider this: https://www.crowdsupply.com/sutajio-kosagi/precursor. See also: https://news.ycombinator.com/item?id=27897975.
link