answer to pb notables: there already is an open source secure phone: Librem 5
secanon here, in response to:
>>12448209 Any tech fags could you develop this?
where they ask if a secure and private phone can be made, in response to what Apple and Android are doing.
There actually already is such a phone, made by the people at purism (https://puri.sm), called the Librem 5:
https://puri.sm/products/librem-5/
They developed the phone exactly to solve that Google/Apple problem, starting years ago, with privacy and (verifiable) security in mind:
-
they designed the motherboard themselves, with hardware security in mind
-
all the components on the main motherboard have open source firmwares
-
they could not find a 4G chip with open source firmware on the market, so they added on the motherboard a daughter board port that can be used to add a 4G module, but will be unprivileged with respect to the rest of the system in terms of security (hardware level enforcement)
-
if I understand correctly, the full hardware specs, wiring schematics, etc. will be open source
-
it runs a completely open source version of linux
-
they developed phone software (call, messaging, keyboard, etc.) that runs on linux, not Android
-
there is zero bit of Android on it
-
for other secanons, the security architecture is very well done, hardware-level segregation of memory accesses, sound crypto of the boot chain starting at the root of trust, etc.
-
doing a security architecture right is hard, and it seems they did it right. It looks similar to real-world security architecture I've seen in the industry.
-
there are physical kill switches for:
= wireless radios (WiFi and Bluetooth)
= cellular signal
= microphone
= and camera
They have been working on it for years, and they are just reaching the mass production stage -perfect fit for our current times.
It's not the latest and greatest in terms of high-tech features, but it seems to be a decent phone if your goal is to get away from Google and Apple, and have a phone with which you can make sure that it is not spying on you, or running root-level or sub-root level (hypervisor) spyware.
Well, at least, it's available now, it's not a pipe dream that may or may not happen in the future.