01:18 <nostalgiccloud> yp

01:18 <nostalgiccloud> yp

01:18 <nostalgiccloud> dos1!

01:19 <nostalgiccloud> Any remote projection when the Neo900 will launch

01:20 <Joerg-Neo900> we're about to do the layout for proro_v2

01:20 <Joerg-Neo900> proto* even

01:21 <nostalgiccloud> Any plans for AOSP?

01:21 <nostalgiccloud> for people like me who want a phone to just work but be libre

01:50 <Joerg-Neo900> AOSP is an OS, we don't do software, that's up to community

01:51 <Joerg-Neo900> which implies you can get AOSP on Neo900 if you want to do it

14:13 <Joerg-Neo900> https://blog.exodusintel.com/2017/07/26/broadpwn/ a few lessons to learn: *) firmware blobs to upload are better than ROM or flash in wifi *) PCIe or any other interface that allows DMA control by peripheral is EVIL *) there's nothing on hw level you could do to secure the damn browser, however there's a whole lot of software solutions, even to the point of checking integrity of connection by downloading and checksumming a reference HTTP://

14:13 <Joerg-Neo900> page

14:15 <Joerg-Neo900> so far Neo900 is on the safe side of fence with the hardware issues, browser is not our domain

14:18 <Joerg-Neo900> ((safe side of fence)) IOW our WiFi chipset for all we can tell has no embedded firmware that could get altered, instead it uploads the firmware on each reset and to our best knowledge there's no way to block the reset. The chipset is not known for vulnerabilities, and even when it gets compromised it can't take over the Application Processor since the hw interface has no means (like DMA) for that

14:29 <Joerg-Neo900> and generally the concept holds: your Linux application environment is your safe harbor that needs to be kept clean and in control by all means. Once this environment is compromised then there's no way back

14:32 <Joerg-Neo900> it's the respnsibility of each single system maintainer, app developer, user, to make sure all programs they introduce to the system are behaving and not exposing vulnerabilities or being a threat in themselves (compare the average android app "needs access to your phone, addressbook, mediafiles..." - WHAT FOR?)