removes so much attack surface from doing this lmao
Yes, it can get worse. Why fuck yourself with JS when you can fuck yourself with natively compiled JS bypassing memory protections?
I want a new phone but I cannot afford to pre order a 6a right now
https://www.apple.com/newsroom/2022/07/apple-expands-commitment-to-protect-users-from-mercenary-spyware/
@itzzenxx @getimiskon @inference A sophisticated cyberattack would involve much more. Let me just hit a switch and I'm definitely not going to be bothered by my other devices or the IoT at home. I wonder if they are still giving the information to the government. If one hits that button, I'm fairly certain the government will know if they are watching.
Gotta love apple for making it easier to stalk people and spy. They don't have a great track record for human rights.
Also assuming that they have bounties open encouraging people to try to break this I think they really are going in on this.
Or, you can try GrapheneOS
@itzzenxx @getimiskon @inference They've been known to screw over talented bug hunters. They will just release to 0day solutions again. Even if they didn't have a poor history with bug hunters, they don't pay anywhere near a fair price.
I have a Pinephone. I am responsible for how secure my system is. I don't daily drive it anymore because I have beta hardware which was later considered Alpha hardware. It only has thermal problems, poor battery life because the screen adjusts from off to painful to look at in full sun light. It runs full GNU/Linux.
It was development hardware and yes I helped.
I can flip physical kill switches. That's what real control looks like.
https://madaidans-insecurities.github.io/linux-phones.html
@inference @itzzenxx @srestegosaurio @getimiskon You know that your work on Gentoo could be applied to the Pinephone. It's not as vulnerable as it sounds. This was a phone that came without an operating system and has firmware that was reverse engineered by the community. There's a good chance that a device chosen at random is going to be a nightmare to get into. It might be a nightmare after the ingress. It's an interesting community.
it's why GrapheneOS is only avalible for Google Pixel phones, and it's also why I abandoned my Thinkpad T420 over a month ago. You need something like Titan M, PSP, etc, technologies like those are needed to make the computer more secure.
@itzzenxx @srestegosaurio @getimiskon @inference Do you know what a Pinephone is? You should like you don't know what it is. You want to integrate a Yubikey or something similar too? It's trivial to add these.
