9,000 pre-orders.

[joseamastodon@mastodont.cat]

@jolla too expensive for me, sorry.

[me@joshuastrobl.social]

@djbiker @jolla Ah TIL. 2.43.1 A1 dmz 20251219 was reported to work according to https://forum.sailfishos.org/t/banking-apps-on-sailfish-os/18438

[me@joshuastrobl.social]

@djbiker @jolla To answer your question about NFC, NFC payments don't work.

[djbiker@social.vivaldi.net]

@me @jolla thks for your answer & Support!

[hummel@stpauli.social]

@lexinova @jolla how?

[lexinova@cyberplace.social]

@Hummel @jolla i won't make ads for alternative, but let's say it miss an hardware to effectively secure the data.

[antti98@mastodon.social]

@lexinova @Hummel @jolla Glad that you didn't advertise north american options! Don't actually know if there is also European options in this non spoken category, is there?

But to the point here, do you think that this "flaw" is super important for wide masses? For opposition activist, journalist etc. who might have real danger, I would encourage some other options, but for average Sven in Europe I think this protects them by their biggest thread factor = North american data mining just fine

[antti98@mastodon.social]

@aho @jolla Jolla is soon publishing the bluetooth support for AAS and they have mentioned similar solution could make the NFC work. Maybe in the (hopefully not that distant) future, we will see. Currently there is already workaround for bluetooth, but non for NFC

[aho@ioc.exchange]

@Antti98 @jolla then maybe next phone then, I'll keep my 👀 open for posts in the forum.

[lexinova@cyberplace.social]

@Antti98 @Hummel @jolla the only secure version i know come from Canada, but many prefer avoid them for strange reason (like i care if their social is kind or not all i want is a secure os)

[dan@social.coop]

@lexinova @Antti98 @Hummel @jolla can you show any documentation that shows how the jolla phone is „a phone that data can be easily extracted from by any person they meet“?

„any person they meet“ is such a ludicrous threshold that it would mean an instant 10.0 CVSS score. So please, show us the CVE link where this exploit is described or erase that statement in your previous toot

[lexinova@cyberplace.social]

@dan @Antti98 @Hummel @jolla it's not a vulnerability you don't need one.

jolla phone miss some hardware security, that was invented after people found a way to extract data from phone, both modern android and modern ios have those hardware protection ... but not ... jolla

[dan@social.coop]

@lexinova @Antti98 @Hummel this is still extremely vague. It even sounds as you’d define „any person you meet“ as „any person that can snatch my phone away from me“

[lexinova@cyberplace.social]

@dan @Antti98 @Hummel yet again i won't go to the detail as i don't know your techical level, but you can search about :

Hardware memory tagging (ARM MTE)
Hardware-based coarse grained Control Flow Integrity (CFI)

the missing do not allow direct hack but with their slow security update, it's certain this device will (if not already) be on automatic hacking hardware (celebrite or hacker's equivalent).

[dan@social.coop]

@lexinova @Antti98 @Hummel oh, so you define „any person you meet“ with „anyone who can take away my phone and plug it into celebrite hardware (or equivalent)“

[lexinova@cyberplace.social]

@dan yes, because anyone you meed can steal a phone without you even seeing it.

also without those security some RCE become possible (and yet again no timely update = hack).

but yeah if you want an insecure phone feel free.

but i will never recommend it until they secure their crap

[antti98@mastodon.social]

@lexinova @Hummel @jolla I don't avoid them just for avoiding them, but as my main threat factor is big tech data mining and undermining EU tech independence I want something that tackles those two. Buying Google hardware to run android fork doesn't bring much (or anything?) to EU tech independency.

But again, I don't know what you do for living and you may live in place like Hungary. Fully understandable to value personal safety over EU tech independence in case you have that kind of threats

[lexinova@cyberplace.social]

@Antti98 @Hummel @jolla you know that simply postponing a little any buying, and some project like graphene os will have another device than google's.

I do not value personal safety over eu tech independence, as you jolla phone remain US tech, as all chips inside are not european, only the company that designed it is in EU, not even them that built them (probably in asia).

so sacrificing your security for the designer is stange to say the least

[antti98@mastodon.social]

@lexinova @Hummel @jolla Well as we don't have consumer grade phone chip manufacturers inside EU currently, it is hard to wish those. For me the Jolla phone is way to support SailfishOS development which I see one of the key things to have European tech independency from US duopoly. Would I love to see full EU made HW? For sure! But currently it isn't available, isn't it? Doesn't matter what HW GOS supports, as there isn't full EU HW, it won't really support EU tech independency IMO

[lexinova@cyberplace.social]

@Antti98 @Hummel @jolla the beasic security issue remain tough, i would cose them mere cent maximum 1€ to have the ship, and i would pay this € to have a secure one.

but they prefer increase their margin and reduce their work i guess ?