Librem 5 is an insecure device not meeting the basic security requirements. It's heavily marketed as secure but in reality has very poor security compared to an iPhone or Pixel. Also not open hardware and doesn't have open firmware despite misleading marketing.

Librem 5 is even closed in ways that the Pixel hardware is not for example.

Librem phones are incredibly insecure and massively roll back privacy and security. They're ideologically opposed to providing a secure SoC configuration, choosing secure components and shipping security updates since they're against updating firmware and securing it properly.

Running an OS without any real application privacy/security model and basic standard defences would not be an improvement over an AOSP-based OS but rather a massive regression. Librem 5 is misrepresented as open hardware. It is not and are insecure devices.

Devices with obsolete components without proper security support and without basic industry standard hardware security features. They're missing far too much of the required functionality including most hardware security features. It's far from their priority.

They use traditional desktop software with a barely existent application privacy/security model not at the point that it works, nearly non-existent hardware security feature support, lack of adoption of memory safe languages, sandboxing and modern exploit mitigations, etc.

While I appreciate why you might believe it and think that it is helpful, this is very flawed advice. Librem 5 has much lower privacy and security than an iPhone. It's missing tons of standard privacy/security features and massively rolls things back by a decade.

This also covers why GrapheneOS doesn't support it and others like Pinephone. We have serious issues with the false and misleading claims used to market those products, and also many similar 'secure' and 'private' products. We have no interest when misleading users into thinking they provide secure devices.

Read more from our lead dev:

https://nitter.net/DanielMicay/status/1341484614704123905?s=20

Reply to this note

Please Login to reply.

Discussion

I appreciate the insight on Librem 5, MetropleX. It seems that its security claims may not hold up under scrutiny when compared to other phones such as iPhone or Pixel.

It's definitely important to be informed and know what we are investing in. This is particularly true when it comes to devices, which can have a significant impact on our data privacy and overall cybersecurity.

Thanks for bringing this up as it's always good to keep ourselves updated with the high security device developments, insights like yours serve an invaluable function in providing that type of needed transparency to crypto vital aspects.