<DocScrutinizer05>
no blackphone and no cryptophone can compete
2016-07-16
<DocScrutinizer05>
the result is: blackphone etc
<pigeons>
i don't remember the blackphone architecture, does the modem share RAM with the main CPU?
<DocScrutinizer05>
I heard runours they recently noticed that 'flaw' in their product and now aim for an audit of the modem firmware to somewhat ensure the modem doesn't introduce security issues into the blackphone. Alas they will fail epically with that, since... even *if* you were able to completely audit modem firmware (it's as complex as a complete full fledged linux desktop system), nobody could warrant that this audited modem firmware isn't getting
<DocScrutinizer05>
for blackphone it's even pretty likely that they use a shared-RAM approach and thus are as bad as it gets regarding lack of separation between userland (aka linux) system and modem (aka rogue) system
<DocScrutinizer05>
and as I said, all this sandboxing and monitoring is absolutely unique to Neo900 (for all we know) and can't be found even in allegedly 'secure' phones like blackphone
<DocScrutinizer05>
our mantra is: you can't have a secure phone by simply using a allegedly secure OS (see e.g. blackphone), you need to start implementing security on a hw level, only then a secure software on top of that makes any sense
2016-07-05
<pigeons>
he must have a blackphone
<DocScrutinizer05>
well, blackphone always been pretty half-assed approach
<pigeons>
"blackphone" makers. Also please interpret this line for me, "The decision was a business decision and not related to any warrant for user data which we have not received."
2016-07-01
<pigeons>
someone in that link brought up neo900 and with no irony someone else replied that blackphone would fit the bill
2016-06-05
<pigeons>
there are lots of projects that are more marketing than technology. purism, blackphone, etc
<ZetaR>
haroonk_: You mean the Blackphone? IIRC, DocScrutinizer05 mentioned that they didn't even address this problem.
2015-06-22
<DocScrutinizer05>
yes, blackphone is fundamentally flawed on hw level
<jrc>
I've read about blackphone entering this space but if memory serves they don't sandbox the baseband
2015-06-20
<DocScrutinizer05>
btw in that regard our device is way better even than dedicated security phones like blackphone, which has nice software to do encrypted phonecalls etc (our can do as well, when you install the software you like to use for this) but can NOT guarantee that an attacker exploiting the modem OTA has no access to the system and thus would take over the complete device and thus render all the nice security sw moot
2015-06-08
<bencoh>
DocScrutinizer05: yeah I had blackphone in mind, and we did check it :)
<DocScrutinizer05>
(blackphone) Zimmerman (ZRTP) was one of the initiators iirc
<DocScrutinizer05>
blackphone does pretty good secure communication when you watch it from outside (as in "what's the OTA data it sends?"). But it's not particularly better security on hw side than the average cheesy android smartphone it's actually based on
<user_>
How did you guys check blackphone?
<DocScrutinizer05>
bencoh: I know what you're talking about, I guess. We checked blackphone, didn't we?
2015-03-23
<arossdotme>
DocScrutinizerlol Even blackphone's modem is like your landlord.
2015-03-22
<DocScrutinizer05>
it's actually "landlord" vs "fish in fishbowl". Neo900 modem is like a fish in fish bowl. Even blackphone's modem is like your landlord. Not supposed to ever enter your flat without your consent, but you hardly can guarantee that
<DocScrutinizer05>
while even allegedly secure phones like blackphone are using a CPU/SoC with integrateed modem nowadays (to save space and money), we are using a separate modem module (not yet unique, N900 e.g. does basically same) and - unlike any other phone every built - we monitor and control literally every single wire running to the modem
2015-03-19
<DocScrutinizer05>
for Blackphone oddds are it does _not_ have anything like this
<DocScrutinizer05>
both Nokia and blackphone don't allow installation of arbitrary apps by default, only stuff signed on their particular repo with their particular cert
<DocScrutinizer05>
blackphone provides some "secure" apps for doing ZRTP etc
<DocScrutinizer05>
for now I consider even the N9 on par with Blackphone, regarding OS and hw design immanent "security"
<DocScrutinizer05>
I'd love to stand corrected and see Blackphone doing a great job
<DocScrutinizer05>
unless they show me a schamtics of the Blackphone, I don't buy the separation myth
<DocScrutinizer05>
when (for simplicity) two processors (actually it's one) share the same RAM, then it doesn't help to claim "processor B has no API to change variables in processor A's address space" - which is basically what blackphone states here
<DocScrutinizer05>
(blackphone) I'm not sure the default install/config allows installing android apps from those common appshops
<mvaenskae>
i wonder how many blackphone users will just install their usual goto apps and thereby render the blackphone idea useless anyways :)
2014-11-20
<Openbot>
that cares about yourprivacy." so the visitor thinks and goes to blackphone dreamland instantly lol
<DocScrutinizer05>
all those "color" phones, greenphone, blackphone, pinkphone... :-S our next few models will be UV-A, UV-B, X-RAY, GAMMA ;-P
<Openbot>
I met a friend he said you know theres a cool new blackphone with bla bla i was like yeew
<DocScrutinizer05>
but it comes without any OS preinstalled, so it's up to user to turn it into andoid or into replicant or into blackphone or into whatever user wants it to be
<DocScrutinizer05>
it luckily is way better than blackphone android standard crap hardware#
<Openbot>
Just had a lil debate and found he thought it was something like blackphone
<DocScrutinizer05>
a combination of blackphone "OS" and Neo900 hardware would probably make for a really nice secure phone
<Openbot>
Confused like its a secure privacy phone like blackphone na
<DocScrutinizer05>
blackphone is a software solution based on pretty poor and vulnerable hardware. Neo900 is a hardware which allows user to install whatever they can make fit on that platform, even blackphone suite