nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqlwsmhk9t2le9see32l006khunnk6qpxxs30enke3d8lykcd6wstq9f4y79 nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqexv22uulqnmlluszc4yk92jhs2e5ajcs6mu3t00a6avzjcalj9cs8luyws
Pinephones have very poor hardware and firmware security. The software is also a huge downgrade from the privacy and security of iOS or AOSP. Despite the misleading marketing, the reality is that it has far less secure hardware components including the cellular radio and worse isolation. Connecting a cellular radio via USB greatly raises attack surface.
I was writing about using lora devices connected via USB OTG instead of Bluetooth
pinephone has extension module allowing for a back cover to be featured with the small lora antenna connected directly via pins on PCB
speaking about the Lora/meshtastic
any thoughts about the Lilygo t-deck device based on #esp32 ?
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqlwsmhk9t2le9see32l006khunnk6qpxxs30enke3d8lykcd6wstq9f4y79 nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqexv22uulqnmlluszc4yk92jhs2e5ajcs6mu3t00a6avzjcalj9cs8luyws
You could have a 2nd GrapheneOS device if you wanted to keep the mainstream apps and sandboxed Google Play entirely separate at a hardware level but you can still use GrapheneOS for it. Nearly all apps can be used on GrapheneOS. A small but unfortunately growing number are banning using any aftermarket OS with the Play Integrity API but we plan to get it stopped.
good point with the second device, still much better than being tracked by Google or with most recent news Apple Siri ;)
I had in mind those going after fancy folding phones
the top tier phones are shipped with the ai and soon everything else will have it all way down to the low price range so the best solution is to have GraphenOS device instead but not every phone out there can handle it outside of pixel family just yet.
I went through the link you shared
https://grapheneos.org/faq#future-devices
it makes a lot of sense indeed
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqlwsmhk9t2le9see32l006khunnk6qpxxs30enke3d8lykcd6wstq9f4y79 nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqexv22uulqnmlluszc4yk92jhs2e5ajcs6mu3t00a6avzjcalj9cs8luyws
Blocking cameras works fine. Microphones aren't the only way to record audio and sensors provide high enough quality to decode speech consistently. The way they do that isn't correct. The radio kill switches don't offer a significant advantage over disabling them from an OS. It's not worth a massive security downgrade across the board making compromise far easier.
I think having the power circuit cut off is definitely better than anything on os level when malware is on the device, LTE killswitch is hard to find
another solution is a removable 🔋 battery
how many phones out there can run graphenos and have a removable battery?
I would rather swap those and not use pixels
if I can't remove the battery it has to sit in a Faraday bag...having a physical switch for LTE is amazing feature that barely any other device has got (librem5)
there are devices that allow for camera and microphone killswitches but no WiFi/BT/LTE
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqlwsmhk9t2le9see32l006khunnk6qpxxs30enke3d8lykcd6wstq9f4y79 nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqexv22uulqnmlluszc4yk92jhs2e5ajcs6mu3t00a6avzjcalj9cs8luyws
If Pinephones had good security, they'd be supported devices from GrapheneOS. They're the complete opposite of that though. They're missing most of our official security requirements from https://grapheneos.org/faq#future-devices and most half decent phones with basic aftermarket OS support. Pinephones are less secure than half-decent mainstream smartphones not just iPhones/Pixels.
oh ok so this is the reason we cannot have graphenos on pinephones? interesting
two mobile phones in 2025 is a must.
one, new handset for media can have the ai spying on you and everything around you but you can keep it in a small faraday bag for 10$ for most of thr time you don't need it
a second one should be with nostr:npub1235tem4hfn34edqh8hxfja9amty73998f0eagnuu4zm423s9e8ksdg0ht5 to boost your privacy
keep only nostr on it, no other socials
use vpn and pay for it with bitcoin, vpn providers that accept no bitcoin/monero are useless
if you want to gain a higher level of privacy get a second hand pinephone/pro and flash it with fresh linux distro of your choice. you can purchase those for 50$ on ebay if you're lucky. the new one ate sold out. they used to cost <200$ brand new
no socials except nostr and vpn, keep it simple
turn off camera on you pinephone, and microphone using security switches, turn off LTE module and do not put a sim card. connect via wifi to the other phones.
if you are an investigating journalist your opsec goes higher
forget whatsapp never put it on your privacy phone
telegram is far from good - if you need to use it, make sure you chat with others using telegram feature "secret chat"
for the signal app start a new account with no phone number just the login
IMPORTANT
any app that asks for a mobile phone number is your enemy and can only go to the generic phone with ai spying on you
use nostr:npub1exv22uulqnmlluszc4yk92jhs2e5ajcs6mu3t00a6avzjcalj9csm7d828 in incognito mode
how to communicate without the phone that can be easily tracked and bloated with malware?
get lora/meshtastic device like lilly t-deck on aliexpress for 50$ it connects with radio networks for encrypted messaging (get a version without GPS)
connect a little dongle via usb to communicate.
make the signal stronger with the antennas
you might ask the question when can I just go outside with a device that has no sim, and connects me with bitcoiners on nostr and ecash payments?
oh this year, stay tuned
welcome to the project #loranostr 😎
this decade humans will go bananas
lora can operate across large distances and inside the cities on the whitelisted principles so the identifier of the device will allow to participate.
messages are be encrypted
you can connect many states/countries with the mesh network with invite-only access
the network can be disconnected from the Internet or have nostr relays as exit nodes
messages can carry ecash transactions, can you see any potential here?
blocking Lora frequency is problematic as this tech is being used by farmers pulling sensory data, mountain hikers etc
they can try to localise the specific points and jamm those areas but it won't take the whole mesh down
this can serve a part of the bitcoin community, does not need to appeal to everyone out there
any thoughts on #noshtastic?
limitations, challenges? #asknostr
Noshtastic: A Geo-Specific Virtual Nostr Relay for Meshtastic
Noshtastic operates as a standalone Nostr network, designed to function independently of internet-based Nostr relays. Unlike other setups that rely on gatewaying nostr events to and from internet-connected relays, Noshtastic focuses on creating a decentralized and fully self-sufficient communication network using only Meshtastic devices. This ensures reliable message synchronization even in environments without internet connectivity.
it's that time folks again, get your memes ready
....;£íýz{.²zÇ,>
gv.a.È.ÈŠQ2:Ÿ¸ª
K.^J)«_Iÿÿ...¬+|
................
................
......ÿÿÿÿM.ÿÿ..
..EThe Times 03/
Jan/2009 Chancel
lor on brink of
second bailout f
or banksÿÿÿÿ..ò.
*....CA.gŠý°þUH'
.gñ¦q0·.\Ö¨(à9.¦
ybàê.aÞ¶Iö¼?Lï8Ä
óU.å.Á.Þ\8M÷º..W
ŠLp+kñ._¬....
I'm just listening to it, and it's quite good indeed indeed
We throw a party in London, repost if you cannot attend. Every comment gets some sats today 
U mean bitcoin or Bitcoin
I thought turning off the option "enhanced privacy" would stop caching server being used and content gets pushed straight into their relays, when turned on it hides the ip via caching server and IP is never shared with the relay
nothing about 1 sat being 1 satoshi...
1k sats received seconds later, you mean the business indeed