Hacker News new | past | comments | ask | show | jobs | submit
I don't know if I can trust a motorola phone with grapheneOS. Motorola is owned by a Chinese company that has recently been caught for injecting affiliate codes in users purchases. Yes, I know it won't be Motorola's OS but they do modify a large part of the BSP (bootloader, modem, etc.) with their "mot_sec" additions which you'll find if you reverse engineer any motorola firmware. It's unclear if qualcomm will give grapheneOS permission to rebuild or see the source code everything else. Modern phones run multiple operating systems like in the DSP, modem, trustzone, etc.
It concerns me as well as the user-land OS isn't really where control of the RF happens. The OS running in their baseband chip is where the backdoors would best be placed from their perspective. But I'm happy that there are some additional options to run Graphene on the market.
loading story #50383867
loading story #50382004
loading story #50381887
loading story #50381878
My thoughts exactly.

I'm pretty uncomfortable with how many smartphones I'd like to buy end up being Chinese owned companies. I wish Fairphone had a better camera, if it did, I'd just buy one of those and call it day.

loading story #50382411
loading story #50381867
loading story #50381797
loading story #50381888
The OS alone, however, still provides a considerable privacy upgrade over a Googled system and the associated apps including Gemini, GMail, Drive and others. By default, those apps and other Google system components are incredibly invasive and remove or limit the freedom to install other programs.
loading story #50383285
Ok so just don’t do banking and critical communication on a cellular device with mysterious CPUs. What’s your threat model? I like to use a flip phone and just don’t do anything important on it.

What non Chinese manufacture are you looking at? I liked Xperia I for being made in Japan but it’s still Chinese components underneath and as you say there’s no control of all the code.

There’s always Bunnie’s Precursor phone if anyone is interested in commercially developing something reasonably secure and auditable.

loading story #50381672
Why have a compromised phone at all? You're still exposing yourself to telemetry. And if you've ever said anything positive about a Hong Kong democracy activist, you still have to wonder what's going to happen to you if you travel to any country with a mature extradition relationship to China.

I also think it's easy to underestimate your footprint when it comes to ecosystems that involve money in any capacity. No Amazon, Steam, no card information on a Netflix app, no signing in to Google to read a NYT article.

I think either you care about these things categorically or you don't, and I don't think anybody is going to be in the middle space you seem to be envisioning, which is concerned enough about the risks to avoid all banking but still a casual enough attitude about a compromised phone that you're fine with it for uses you consider non-secure.

loading story #50383179
1. Aren't... all phones manufactured in China?

2. I know it's whataboutism, but from the perspective of a non-US consumer, it doesn't exactly make a difference which country exactly spies on me. I use a Chinese web browser because it covers all my use cases and I don't see a problem with that.

loading story #50391371
Also of note: they are a competitor to Flock. While it's not crazy for a company of that scale to bet on both sides of the "privacy vs surveillance state" match, it can be assumed that they'll need to commit to one over the other, somewhere down the line.
loading story #50382549
I always feel amused at these takes from north american citizens.

From a latin american POV, it is same-ish as USA manufacturers, they're also tracking everything we do to sell us more unneeded stuff.

The difference is that chinese government is just trying to sell stuff, while USA government is trying to convert all the southern continent into a colony to impose governments and suck up minerals in the meantime. If you ask me if I trust more China or USA, at least China's intentions are clear and direct.

Of course, you people will always have the argument of "national interest" which for us (at least tech-literate people) that's no argument, but still you will find some bootlickers in the mobs.

loading story #50391465
loading story #50382445
The problem with whataboutism is the same as it always has been, which is that the critique skips the step of checking whether the person who is concerned about Chinese privacy compromises hinges that position on the innocence of Western companies.

That part is assumed, and the whole argument unravels once its established that the assumption doesn't hold. And then either the tankies show up, or everyone forgets about it until the next thread where the process plays out again.

loading story #50381700
loading story #50382582
I on the other hand am looking to purchase electronic devices because they are owned by the Chinese. I work under the impression that everyone and everything is spying on us in this surveillance-capitalist world, so if that's true then why not let others spy on me for a change. Just to give our guys a break. At least the other guys don't condition my loan or my kids' university admission.
loading story #50381746
Ohh it's spyware all the way down.

At this point I might as well code a messaging app called the honest spy.

Honest spy emails transcripts of all your conversations straight to the law enforcement in your jurisdiction.

unfounded fearmongering
loading story #50389981
Supply chain attacks? Is grapheneOS itself audited by an external auditor?
loading story #50386874
loading story #50389776