9,000 pre-orders.

[dan@social.coop]

@lexinova @Antti98 @Hummel this is still extremely vague. It even sounds as you’d define „any person you meet“ as „any person that can snatch my phone away from me“

[lexinova@cyberplace.social]

@dan @Antti98 @Hummel yet again i won't go to the detail as i don't know your techical level, but you can search about :

Hardware memory tagging (ARM MTE)
Hardware-based coarse grained Control Flow Integrity (CFI)

the missing do not allow direct hack but with their slow security update, it's certain this device will (if not already) be on automatic hacking hardware (celebrite or hacker's equivalent).

[dan@social.coop]

@lexinova @Antti98 @Hummel oh, so you define „any person you meet“ with „anyone who can take away my phone and plug it into celebrite hardware (or equivalent)“

[lexinova@cyberplace.social]

@dan yes, because anyone you meed can steal a phone without you even seeing it.

also without those security some RCE become possible (and yet again no timely update = hack).

but yeah if you want an insecure phone feel free.

but i will never recommend it until they secure their crap

[antti98@mastodon.social]

@lexinova @Hummel @jolla I don't avoid them just for avoiding them, but as my main threat factor is big tech data mining and undermining EU tech independence I want something that tackles those two. Buying Google hardware to run android fork doesn't bring much (or anything?) to EU tech independency.

But again, I don't know what you do for living and you may live in place like Hungary. Fully understandable to value personal safety over EU tech independence in case you have that kind of threats

[lexinova@cyberplace.social]

@Antti98 @Hummel @jolla you know that simply postponing a little any buying, and some project like graphene os will have another device than google's.

I do not value personal safety over eu tech independence, as you jolla phone remain US tech, as all chips inside are not european, only the company that designed it is in EU, not even them that built them (probably in asia).

so sacrificing your security for the designer is stange to say the least

[antti98@mastodon.social]

@lexinova @Hummel @jolla Well as we don't have consumer grade phone chip manufacturers inside EU currently, it is hard to wish those. For me the Jolla phone is way to support SailfishOS development which I see one of the key things to have European tech independency from US duopoly. Would I love to see full EU made HW? For sure! But currently it isn't available, isn't it? Doesn't matter what HW GOS supports, as there isn't full EU HW, it won't really support EU tech independency IMO

[lexinova@cyberplace.social]

@Antti98 @Hummel @jolla the beasic security issue remain tough, i would cose them mere cent maximum 1€ to have the ship, and i would pay this € to have a secure one.

but they prefer increase their margin and reduce their work i guess ?

[antti98@mastodon.social]

@lexinova @Hummel @jolla Or they just aren't hw company? Maybe they aren't that deep in HW design? I would still argue that isn't necessary for 97% of the population when compared to average person thread model (=data mining). I prefer much more to support European initiatives. If Jolla starts to take own hardware position more, this could be demanded more eagerly to be included in the next phone. Now it was much more important that we get decent phone that 80% off the population can happily use

[lexinova@cyberplace.social]

@Antti98 @Hummel @jolla lol thinking this is the problem with modern security.

privacy don't exist without security

[antti98@mastodon.social]

@lexinova @Hummel @jolla surely, if we are talking scenarios where someone with big enough know-how is actively and physically trying to enter your phone. I don't know about you, but I don't think many people has that fear. In my thread model risk for that is basically zero. My concern is European tech independency and US corporations, as I said. Pixel and android forks don't really support that, at least in my opinion. Much more important to get rid of duopoly at least for me

[lexinova@cyberplace.social]

@Antti98 @Hummel @jolla it's where you are wrong, without those hardware security a simple fake usb-c plug half a second can breack your phone and install a malware in it.

let say a malware introduced in phone charger majority of people buy on amazon because it's cheap ?

already found some with those attack in it.

so you charge it and on morning china have access to your phone.

but continue to hide your head in the sand and use an insecure software / hardware.

bye