Remix.run Logo
ValdikSS 8 hours ago

GrapheneOS is like a veteran and war zone expert: for them, not only the external environment is considered extremely hostile that you should leave your house only wearing an armor and with bodyguards, but also the internal environment is hostile: your bodyguards could be bribed and work against you, that's why you need to somehow be protected against that as well.

Just as physical security, digital security most of the time not as radical, and tradeoffs are usually accepted, especially when they are "invisible": hardware and software security features are usually not mentioned in the specs and the regular and even power user just don't know most of them and what do they do.

When GrapheneOS says "private" and "secure", they mean top-of-the-line security features, updates as soon as possible, all available mitigations against zero-days and insecure code which will limit the impact before the patch, etc. Security as in a killdozer.

When other say "private" and "secure", most of the time it means: "we've followed all the recommendations applicable to our development budget, device price point, and support life time". Graphene does not like that definition of these words.

For smartphone, chip manufacturer goal is not to protect the user at all costs, but to provide reasonable security features for the price.

BUT the goal of chip manufacturer to protect the device at all costs is for… game consoles! That's why Xbox, PlayStation, Switch all run on a custom silicon and not an ordinary chips!

SahAssar 7 hours ago | parent | next [-]

> That's why Xbox, PlayStation, Switch all run on a custom silicon and not an ordinary chips!

Not really. Xbox and PlayStation both run on pretty standard AMD Zen 2 chips. Somewhat customized, but standard enough that people by binned playstation 5 motherboards to use as computers with normal OS'es (lookup BC-250). The last gen with more customized chips was the PS3/Xbox360 era, when both went with a variant of PowerPC, same as Gamecube/Wii/WiiU.

Switch runs on basically the same Nvidia Tegra CPU/GPU as multiple android tablets.

ValdikSS 7 hours ago | parent | next [-]

>but standard enough that people by binned playstation 5 motherboards to use as computers

That doesn't mean that all the features are enabled right from the factory, or that the compatibility with already existing features is lost.

Modern chip's security features are pretty complicated and include hardware patches, hardware debug authentication, multiple provisioning states (and multi-key hierarchy for that), RMA states to clear all the private information, etc.

>Switch runs on basically the same Nvidia Tegra CPU/GPU as multiple android tablets.

Yes, and the one which got cracked with a bootrom vulnerability ;)

That's a pretty working motivation for a chip company to improve their chip security when the company as beefy as Nintendo tells them that their chip is vulnerable they're losing money because the customers can play for free ;). I'm pretty sure patchable bootroms started to be common only after Switch hack.

izacus 6 hours ago | parent | prev [-]

I think you should listen to bringup of Linux on Playstation talk from CCC to understand that those platforms are much more than just "somewhat customized".

There are whole sections of peripheral chips missing and they behave quite a bit differently with how they bootstrap and where things are mapped in memory.

SahAssar 4 hours ago | parent [-]

Peripheral chips, non-standard bootloaders, custom hypervisors and similar is not what people mean when they say "run on a custom silicon".

ValdikSS 3 hours ago | parent | next [-]

?

Even Steam Deck has a custom APU made specifically for it. Call it "customized" if you don't like "custom".

izacus an hour ago | parent | prev [-]

No, they mean customized SoCs which what those chips are as well

Cider9986 7 hours ago | parent | prev [-]

>GrapheneOS is like a veteran and war zone expert: for them, not only the external environment is considered extremely hostile that you should leave your house only wearing an armor and with bodyguards, but also the internal environment is hostile: your bodyguards could be bribed and work against you, that's why you need to somehow be protected against that as well.

Yeah, iPhoens are made that way as well. It's just caring about the privacy of your users.

> When GrapheneOS says "private" and "secure", they mean top-of-the-line security features, updates as soon as possible, all available mitigations against zero-days and insecure code which will limit the impact before the patch, etc. Security as in a killdozer.

I think it's deceptive because people think they will get better privacy/security with a /e/ fairphone when it's actually much worse than an iPhone.

ValdikSS 7 hours ago | parent | next [-]

iPhone is top-of-the-line as well, because they control the whole software and the whole hardware (starting from basically all the chips). That's very rare in the industry.

There are just a bunch of companies which afford to do the same. Maybe Xiaomi will be the next one.

fsflover 7 hours ago | parent | prev | next [-]

> people think they will get better privacy/security with a /e/ fairphone when it's actually much worse than an iPhone

Does /e/OS illegally collect users' data for ads and sends a lot of telemetry to their servers like Apple? https://news.ycombinator.com/item?id=34299433, https://news.ycombinator.com/item?id=26639261

nvme0n1p1 5 hours ago | parent | next [-]

It's amazing how people still fall for the marketing. Apple is an ad company, just like Google. Advertising and data collection is baked into their OS, store, and core apps. They're just trailing behind revenue-wise by a few years.

https://developer.apple.com/documentation/adsupport/asidenti...

https://www.fool.com/investing/2023/11/19/apple-secret-digit...

teekert 5 hours ago | parent | prev [-]

Privacy and security from what is the question. From big tech or from criminals and governments that take your device and plug it into cellebrite machines?

I for one prefer to be protected from big tech. Sure GrapheneOS does both, but Apple does not.

izacus 6 hours ago | parent | prev [-]

> I think it's deceptive because people think they will get better privacy/security with a /e/ fairphone when it's actually much worse than an iPhone.

That's just blatantly not true though - even iPhones collect way more telemetry and Ad data than /e/ OSes.