removes so much attack surface from doing this lmao
Yes, it can get worse. Why fuck yourself with JS when you can fuck yourself with natively compiled JS bypassing memory protections?
I want a new phone but I cannot afford to pre order a 6a right now
https://www.apple.com/newsroom/2022/07/apple-expands-commitment-to-protect-users-from-mercenary-spyware/
@itzzenxx @getimiskon @inference A sophisticated cyberattack would involve much more. Let me just hit a switch and I'm definitely not going to be bothered by my other devices or the IoT at home. I wonder if they are still giving the information to the government. If one hits that button, I'm fairly certain the government will know if they are watching.
Gotta love apple for making it easier to stalk people and spy. They don't have a great track record for human rights.
Also assuming that they have bounties open encouraging people to try to break this I think they really are going in on this.
Or, you can try GrapheneOS
@itzzenxx @getimiskon @inference They've been known to screw over talented bug hunters. They will just release to 0day solutions again. Even if they didn't have a poor history with bug hunters, they don't pay anywhere near a fair price.
I have a Pinephone. I am responsible for how secure my system is. I don't daily drive it anymore because I have beta hardware which was later considered Alpha hardware. It only has thermal problems, poor battery life because the screen adjusts from off to painful to look at in full sun light. It runs full GNU/Linux.
It was development hardware and yes I helped.
I can flip physical kill switches. That's what real control looks like.
>uses a pinephone thinking it's even remotely secure
classic
bUt MuH sOuRcE cOdE!
@inference @itzzenxx @getimiskon It's more about muh Freedomz. You know what is worse than a GNU/Linux distro that the end user hasn't setup properly or hardened? I can only think of IoT devices. It has its problems but it has what no other phone has, potential.
I've seen security researchers' claims and it is hilarious they believe their own work. For an open phone that allowed them the ability to approach nearly any vector they wanted, they act like it was an accomplishment.
Think about how much it can be hardened before hardware additions. There's really no way to say it's vulnerable without admitting they used a device focused on developers and full access. It's not a legitimate finding but more of an advertisement of a researcher being biased. In such works, one has to cite sources or it's plagiarism. It's hilarious what people will believe.
