2026-05-06T20:41:47Z https://yabu.me Daniël https://yabu.me/npub1v79wn9xm2qhlyuz52xxdl59vvnt4etgf2udl2gfzphxlnlcauc7qye2ss7 https://files.mastodon.social/accounts/avatars/000/198/225/original/a967bccfcf027f9e.png https://files.mastodon.social/accounts/avatars/000/198/225/original/a967bccfcf027f9e.png https://yabu.me/nevent1qqs20acyty42k8d64utzmml9tkmfc8mkgqf5plrtvmeufkhlf8c3m0szypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrcr2g93c In reply to <a href='/nevent1qqsxxm8nrkly89f0pjwa2vcxlylgtcumt6x3w0jygj0wyfzuxnkef7sptalqc'>nevent1q…alqc</a><br/>_________________________<br/><br/>Do you have a reference for that? You might be mixing up Motorola Mobility with Motorola Solutions, which are two separate companies. 2026-05-10T18:44:02Z https://yabu.me/nevent1qqst7wyargtqtvp73yy7wpwgyqyv8t8wk8r5uzhjwgu0v7cu2f7xf4czypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrc43r789 In reply to <a href='/nevent1qqsw8j939akaswlukz4ptlr5qw9yy5dh2egjz4tqj8a7xglvljl474s7fmxsv'>nevent1q…mxsv</a><br/>_________________________<br/><br/>Moreover, what is better for longevity, a phone that gets nearly all updates on day 1 and has an SoC that is fast enough for years to come or a phone that is a security risk from day 1 and had a pretty mediocre SoC even when it was released?<br/><br/>E.g. Fairphone promised at least five years of updates for the Fairphone 4. However, in 2026 it still running a Linux patch release (4.19.197) from 2021. 2026-04-06T17:28:57Z https://yabu.me/nevent1qqsw8j939akaswlukz4ptlr5qw9yy5dh2egjz4tqj8a7xglvljl474szypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrcudz7zq In reply to <a href='/nevent1qqszvv2c0hmcf90mkma0sj2hjpcr6wv37yeaxanlv8vru3wchp779ksle73jc'>nevent1q…73jc</a><br/>_________________________<br/><br/>Conflict-free minerals are a good point, but you save a lot more minerals (and thus labor extracting these minerals) by buying a second-hand phone, or ensuring that your phone gets a good second life by e.g. selling it. 2026-04-06T17:22:25Z https://yabu.me/nevent1qqszvv2c0hmcf90mkma0sj2hjpcr6wv37yeaxanlv8vru3wchp779kszypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrcr54l30 In reply to <a href='/nevent1qqs2z79shd85h6rx89nm030f7xn3ruaywxgjp4khug89xmsq2le3rqs29rchr'>nevent1q…rchr</a><br/>_________________________<br/><br/>That is very much a secondary effect though. By buying a new Fairphone you are directly financing a Chinese ODM (T2Mobile) that develops the hardware and software, with proprietary Chinese TCL blobs.<br/><br/>And for the large price you get a phone with an SoC, cameras, and speakers of a 200-300 Euro phone.<br/><br/>Most of the extra cost does not go to wages, the extra wage cost is ~$1.90 according to their own marketing materials 2026-04-06T17:20:58Z https://yabu.me/nevent1qqsw6rqkg3dt7vktn2nzvw8xrhw0vg76krlc2szy6ja6fe73jk0eu0szypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrcd665a3 In reply to <a href='/nevent1qqswgvvsfw6j88hf98xf54mkwwrpxyla7272zaxvs2cdcawzhg67x8s2cfnrh'>nevent1q…fnrh</a><br/>_________________________<br/><br/>maybe buying a second-hand Pixel is an option? Re-using a phone is a great way of reducing the impact of phone production.<br/><br/>Fairphone is bad when it comes to security. It doesn&#39;t have a secure element like the Titan M2 in the Pixel (only TrustZone) and their kernels, firmware blobs etc. are way outdated. Even on the FP6 they are still shipping firmware blobs from June last year, even though Qualcomm does monthly security bulletins. 2026-04-06T15:17:56Z https://yabu.me/nevent1qqszlyetnyqft3c860eecw0cvfuqpxepaaxn282fmnpunp82xtrdacqzypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrce0kp73 In reply to <a href='/nevent1qqsxdl5entnp66ty6t7973yp42jjj4vufmx4q4g2d962m2w4su0nalc8yamr4'>nevent1q…amr4</a><br/>_________________________<br/><br/>Put differently, he is using the &#34;think of the children&#34;-argument to attack anyone who has better privacy and security than them.<br/><br/>This effort to make security and privacy suspect puts them really in the same camp as the people using similar arguments for Chat Control, weakening cryptography, mandatory age verification, etc. They are amplifying this &#34;security is only for bad people&#34;-narrative.<br/><br/>Murena is *not* a privacy company. 2026-04-06T08:24:53Z https://yabu.me/nevent1qqsxdl5entnp66ty6t7973yp42jjj4vufmx4q4g2d962m2w4su0nalczypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrce8cj5y In reply to <a href='/nevent1qqsgk4f56uxn0xflclvun0f2d9q05395m6dsjm2jy5n5n6603qfy6cgh20s08'>nevent1q…0s08</a><br/>_________________________<br/><br/>Ok, I think we can at least agree that Gael Duval&#39;s statement implies that phones that do security hardening are for criminals and spies?<br/><br/>Now, next, which serious projects (not snake-oil security phone companies) focus on phone hardening?<br/><br/>So, in what way is he not attacking <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span> ?<br/><br/>(Perhaps ironically, he is also attacking iOS and Pixel OS, but that will whoosh past his audience, since most people do not know about Apple/Google&#39;s hardening efforts). 2026-04-06T08:19:44Z https://yabu.me/nevent1qqszyf4qq5g5tvy5lx8nkxyzhtrqsfu2efldqqlhmnpmeehx7qusu0szypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrce63wy2 In reply to <a href='/nevent1qqsqxkas0pqf25xajjvep3qcplsc2e9xrd4uwvvudyycr0l65alj2tc3klue2'>nevent1q…lue2</a><br/>_________________________<br/><br/>Ehm, the thread literally starts with a video? It&#39;s pretty clear who they are attacking.<br/><br/>Why are you defending a company that says &#34;security is only for pedophiles and spies&#34;? 2026-04-06T06:38:14Z https://yabu.me/nevent1qqs9vjt6tvkj0tmsutq93vc76z6tnnfkcfujd0w7xl5nnsm422ykmtgzypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrcyrrm7s In reply to <a href='/nevent1qqsypskmnqfl6zssey3wmup5fpldlpcyq6w98rxrtgwkdgw0vpcvemqmlqh20'>nevent1q…qh20</a><br/>_________________________<br/><br/>This is not just a theoretical concern.<br/><br/>Some European countries border on autocracy. Imagine that this initiative is successful. An autocrat could pressure Volla et al. to only attest phones that have a chat backdoor under the thread of banning them from the market.<br/><br/>It is anti-privacy, anti-security, and anti-freedom. 2026-03-18T19:29:52Z https://yabu.me/nevent1qqsypskmnqfl6zssey3wmup5fpldlpcyq6w98rxrtgwkdgw0vpcvemqzypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrclhryed In reply to <a href='/nevent1qqs85zgjwm5cnsvfw73j964sk482ss6dguuqvlm0mxwzesqy0wlj66q35zjfe'>nevent1q…zjfe</a><br/>_________________________<br/><br/>Centralized remote attestation is diametrically opposed to privacy, since it makes projects vulnerable to pressure to weaken security &amp; privacy, delay updates, etc.<br/><br/>AFAIK the support for remote attestation that is already provided in AOSP does not suffer from this issue, because there is not a single entity that enforces it (banks can whitelist signing key fingerprints).<br/><br/>So the only reason I can think of is control. 2026-03-18T19:20:15Z https://yabu.me/nevent1qqswkrcgafavqpdtsmfp9aec40gugu58hx5cpgav9fhr3kc96galneqzypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrctp2scy In reply to <a href='/nevent1qqstdlx3qy3xagz2aghptp96zhxjg6f7y5q3dwqkrc9sn2scgyzgl9chtkefh'>nevent1q…kefh</a><br/>_________________________<br/><br/>And the Volla Phone Quintus is the Daria Bond 5G from an Emirates company (marked up by 560 Euro). Given that Eurowashing, maybe attacking GrapheneOS for using Pixel hardware is a bit rich? At least Pixel has proper device security.<br/><br/>Back to to the original topic. I only have a stake in this as an EU citizen, but having a small set of companies decide who can run what is bad, it&#39;s another attack on the freedom of EU citizens. 2026-03-18T17:08:14Z https://yabu.me/nevent1qqswrc0s4z28w9qjs5cdfpukq0tfa9ujexlzhzcaj0gw0lpjxrxvvgczypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrcelp4lm In reply to <a href='/nevent1qqs2fqmszzsntdzf5wrl2rg0l7u3d7pesn8tdyuxq6hmhuah3geqvdswxucpv'>nevent1q…ucpv</a><br/>_________________________<br/><br/>it is worth checking Volla&#39;s source trees. They use ancient kernels firmware blobs, etc. It&#39;s pretty much the same issue as GMS Android, the whole attestation thing becomes security theater if phones with years of known holes get attested. 2026-03-09T18:23:14Z https://yabu.me/nevent1qqsquua7av6r3mssrrnznuq42lnjqh26ujukkwq9usml5tfjn4h3n7gzypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrcy5ayuz In reply to <a href='/nevent1qqsqnmrj7dk7r4qm6p3shmzqtetcsdptk80ygdckstsnv3wcju5lddqupy8fa'>nevent1q…y8fa</a><br/>_________________________<br/><br/>At any rate, this is not really a secret, e.g. the PostmarketOS Wiki also states that the Quintus is just the Daria Bond: <a href="https://wiki.postmarketos.org/wiki/The-big-list-of-who-has-what-device">https://wiki.postmarketos.org/wiki/The-big-list-of-who-has-what-device</a><br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1w066x8fx4wzj7nm460lxn6u9ee85h8cm9mcr4zvvw8tssuxe0masslzdyc" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Thoralf Will 🇺🇦🇹🇼</span> (<span class="italic">npub1w06…zdyc</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1khfeh6psn6lq2kts28f8h6gweknjrajxpl603ne0ce7e6705a73q8dnxkz" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Sebastian Eichholz</span> (<span class="italic">npub1khf…nxkz</span>)</a></span> But if you want to overpay 550 Euro for a phone with ancient A78 cores, old kernel trees (Linux 4.19), and questionable security... 2026-03-06T11:56:54Z https://yabu.me/nevent1qqsqnmrj7dk7r4qm6p3shmzqtetcsdptk80ygdckstsnv3wcju5lddqzypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrckkqzcy In reply to <a href='/nevent1qqs0vvccsmyplec7tn5kp3485r5e8zyfmgml8ttdv0ye5f94n2e027satu9fd'>nevent1q…u9fd</a><br/>_________________________<br/><br/>Apparently, the Volla Quintus is a rebranded Daria Bond, designed by Multi Ways International LLC from the Emirates (see the Amazon link in my earlier Toot).<br/><br/>Check the Quintus kernel tree: <a href="https://github.com/HelloVolla/android_kernel_volla_mt6877/commits/volla-15.0/">https://github.com/HelloVolla/android_kernel_volla_mt6877/commits/volla-15.0/</a> . One of the main developers works for the Emirates company that makes the Daria Bond phones (you can match the committer&#39;s name): <a href="https://www.productdesignaward.eu/winners/epda/2024/11768/">https://www.productdesignaward.eu/winners/epda/2024/11768/</a> <br/><br/>Maybe they do some assembly in .de, but it looks like an .ae ODM phone in hardware and software. 2026-03-06T11:52:35Z https://yabu.me/nevent1qqsqcywpstp63vw2mcckkewyh3n63nwerheclmaduckt2lkhjk90yyszypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrcelxc80 In reply to <a href='/nevent1qqsgwu3nlpar7pjum0hre6sk9w2z8ykurl56xd8rx9z5le6za6tuqwskjm3um'>nevent1q…m3um</a><br/>_________________________<br/><br/>My main point is that many so-called European phones are just rebranded products made by non-European ODMs, probably from countries that you do not like either or even less, including kernel/firmware maintenance.<br/><br/>Even though they were designed by a US company, Google Pixels were at least designed from the ground up for security (hardware-assisted exploit mitigation, Titan M2 secure enclave, etc.) and have well-maintained firmware, etc. 2026-03-06T10:41:41Z https://yabu.me/nevent1qqsgwu3nlpar7pjum0hre6sk9w2z8ykurl56xd8rx9z5le6za6tuqwszypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrcam0pgn In reply to <a href='/nevent1qqspcu2qazu54ufpkqgx5hc5plz4zuexgfsjen4plugxtmt9s59zl6c4h329g'>nevent1q…329g</a><br/>_________________________<br/><br/>So instead you pick a phone developed by a UAE company, with parts of the software maintained by the same UAE company?<br/><br/>At least you could do yourself a favor and get equivalent Volla Phone Quintus hardware for 500 Euro off: <a href="https://www.amazon.ae/Android-Smartphone-Storage-Octa-Core-Monetization/dp/B0DDYDZC4V?th=1">https://www.amazon.ae/Android-Smartphone-Storage-Octa-Core-Monetization/dp/B0DDYDZC4V?th=1</a><br/><br/>That&#39;s currently 164 Euro.<br/><br/>Of course, that&#39;s just in jest... just pick up a second-hand Pixel and install <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span> and get an actually secure phone with as much or little Google as you want (degoogled by default). 2026-03-06T10:20:46Z https://yabu.me/nevent1qqspeq83ferptursvgq9mawvz2sqg6vr483t4nmju6ec7j02t7v0qegzypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrcdrpmxg In reply to <a href='/nevent1qqs9zvswys9djqv3xs6rp9senrc4dhfj8dldkjhj0rflt9uewagy7sgfw9wr9'>nevent1q…9wr9</a><br/>_________________________<br/><br/>fair, but a lot of people mean SailfishOS, Plasma, Ubuntu Touch when they refer to &#39;mobile Linux&#39;, like (I assume) the person I was reacting to.<br/><br/>I completely agree with your criticism of the security and privacy of the desktop Linux stack. I have been trying to shout that off the rooftops for years, but it&#39;s an uphill battle. 2026-02-20T17:02:58Z https://yabu.me/nevent1qqszp6r5czlgshnse44dvns3htektc99ak2kgxtwwwrp7nj3vnjz73gzypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrc3uv6m2 In reply to <a href='/nevent1qqsp2452pzmjrjn8rz8auqqn9qfkeynwgw33n43avc07sq7uq7cupcgphlc4z'>nevent1q…lc4z</a><br/>_________________________<br/><br/>Most Linux phone OSes have *far worse* security than Android.<br/><br/>Why not just use an AOSP-based OS like <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span> ? You get all of the upsides and very few to none of the downsides.<br/><br/>Even if you do not like Google&#39;s decisions, just ditching the engineering marvel that is AOSP does not make much sense at all. 2026-02-20T12:12:03Z https://yabu.me/nevent1qqsp3e7h3d8yxzj4nfmrxevgsld87ys0r9ups7qzw35607rchfsrymgzypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrc4zxh0a In reply to <a href='/nevent1qqstkczeaa7dp6syvvhf0xqshh4se83274d5xhekckv0luvvnvpnfss8aazny'>nevent1q…azny</a><br/>_________________________<br/><br/>Yes, I know that GrapheneOS can run sandboxed Google Play Services, but the point is to be able to run Google/Apple-less. 2026-01-09T09:29:07Z https://yabu.me/nevent1qqstkczeaa7dp6syvvhf0xqshh4se83274d5xhekckv0luvvnvpnfsszypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrc4en3t2 In reply to <a href='/nevent1qqspv8k98ann4368j6ta3shzevftx0cy6vyg4we2ykal2tk2x4e4znguq2la9'>nevent1q…2la9</a><br/>_________________________<br/><br/>Let&#39;s do it!<br/><br/>Though, please also invest in an alternative to the Google Android and iOS ecosystems.<br/><br/>A lot of Europeans are ready for it, but it is too hard due to app ecosystem lock-in.<br/><br/>Require bank/government apps to also work on Jolla&#39;s Sailfish OS, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span>, etc. In both cases they could still be Android apps, but they have to work without Google Play Services/SafetyNet, etc. 2026-01-09T09:27:47Z https://yabu.me/nevent1qqst4v2c5fmjmcwmemrs5kkmcxkaqf3ghxk70uf5xad7derknupd9tqzypnc46v5mdgzluns23gceh7s43jdwh9dp9t3hafpygxum70lrhnrc7n54d5 Huge shoutout to [@AsahiLinux](<a href="https://social.treehouse.systems/@AsahiLinux">https://social.treehouse.systems/@AsahiLinux</a> ), twprules, and [@nixos_org](<a href="https://chaos.social/@nixos_org">https://chaos.social/@nixos_org</a> ) for making high-end ARM64 NixOS possible.<br/> <img src="https://files.mastodon.social/media_attachments/files/114/014/651/168/651/372/original/43b56d5547bc8803.png"> <br/> 2025-02-16T17:07:22Z