Hacker News new | past | comments | ask | show | jobs | submit
lucb1e | on: Motorola Signature 27 with GrapheneOS support
> Motorola continues to build on its commitment to security with ThinkShield®, which helps protect users from the factory to the phone

Anyone know what ThinkShield is? "from the factory to the phone" sounds, well, weird, but maybe they mean it's some sort of tamper proofing from where they flash the firmware until you get the phone? Is that new for GrapheneOS versions?

> Motorola’s commitment to bringing cutting-edge security to everyday users across the globe. \n\n That commitment runs deeper than software: GrapheneOS sets demanding requirements for the hardware it runs on and how it’s kept updated

Besides providing timely security updates, which one would hope they do regardless of Graphene pushing them, isn't it Graphene doing all the actual software work? Since motorola refer to commitments "deeper than software", it sounds like motorola made some software commitments as well

grapheneos | parent | next
Motorola has worked on implementing all of the hardware and firmware security features needed by GrapheneOS. They're helping us port GrapheneOS to their devices themselves and will be helping maintain it. They're also going to be providing us with the driver and firmware code we need and we'll have an opportunity to help harden it. It will be much better than Pixels when it comes to this. We won't have to do reverse engineering and won't be stuck with what's provided since we can get things improved or fixed.
ysnp | parent
>Anyone know what ThinkShield is? "from the factory to the phone" sounds, well, weird, but maybe they mean it's some sort of tamper proofing from where they flash the firmware until you get the phone? Is that new for GrapheneOS versions?

https://www.motorola.com/gb/en/business/thinkshield has been around for a few years and definitely predates their GrapheneOS partnership. My best guess for what it is would be an equivalent to Samsung's Knox https://www.samsungknox.com/en. A suite of features and tools and compliance certificates that make enterprise-oriented security easier.

>Besides providing timely security updates, which one would hope they do regardless of Graphene pushing them, isn't it Graphene doing all the actual software work? Since motorola refer to commitments "deeper than software", it sounds like motorola made some software commitments as well

They are probably referring to meeting GrapheneOS's hardware-backed (deeper than software) requirements which include things like usable MTE support, a decent quality integrated secure element with Weaver support, hopefully things like Wi-Fi privacy improvements and so on.

I still think it is miraculous that Motorola committed to seven years of security and OS updates, and I am not surprised they have mentioned things like "bi-monthly updates" and qualifiers like "up to seven years of security updates" in various bits of marketing copy so far. From my understanding Motorola intend to adopt some GrapheneOS features with Thinkshield rebranding for their Moto OS (for which they are solely responsible). GrapheneOS may well help them with AOSP bug fixes and security fixes, but Motorola will also have no involvement in GrapheneOS.

The phone will be released with Moto OS as normal and Motorola's developers will do all the work for it. It will however be fully compatible/relockable with GrapheneOS.