Replying to Avatar Blinky

Not sure why nostr:nprofile1qqs9l7uwrd4k98qwxjsp87ff36aswkde3g7jgq5ezcep6h45y4dkwdgprpmhxue69uhkxun9v968ytnwdaehgu3wwa5kuef0qys8wumn8ghj7mn0wd68ytn9d9h82mny0fmkzmn6d9njuumsv93k2tcpzpmhxue69uhk2tnwdaejumr0dshsph902p is getting so worked up about the Pixel phone, with #GrapheneOS installed, as being a bad idea?

"Google spent three years subjecting Titan M2 to testing by the third-party lab SGS Brightsight. The chip now has an array of Common Criteria hardware security certifications, the same process that smartcards, SIM cards, and bank card chips go through. Titan M2 passed the highest hardware vulnerability assessment, meaning that it is highly resistant to physical attacks, an area that has been increasingly important to chip makers in recent years."

Can somebody knowledgeable tell why, with all the other security features in a Graphened AOSP + USB C hardeneing, this is getting called out as such a bad idea?

Smartphones are not secure computing environments. Regardless of os, storing life savings on a device CAPABLE of internet connection is foolish. There’s a reason hardware wallets were invented.

If it’s capable of an Internet connection, it can be remotely attacked, and your funds can be stolen. 

Reply to this note

Please Login to reply.

Discussion

Appreciate your take. Any proof out there that a phone has ever been hacked like that? Just curious. I personally use a HWW but I always wonder about alternatives even just as a thought exercise.

Many instances of remote attacks, for example the Pegasus spyware targeting journalists using iPhones a while back.

Snowden did an interview demonstrating why he removes hardware from his phones and only uses wired headphones. If it has a wireless radio, it can be compromised.

Not to mention supply chain attacks where your smartphone could be compromised before purchase. This is why the community recommends open source hardware/software in an airgapped device as the only secure option long term.