[liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

Erik de Castro Lopo mle+libs at mega-nerd.com
Thu Sep 12 16:14:27 PDT 2013


Bernard Tyers - ei8fdb wrote:

> Stefan: Why not?

For verification, OpenPGP on smartphones is *possibly* ok. For
a device used to sign or encrypt smartphones are totally
inappropriate regardless of the potential convenience.

No such agency and the like are almost certainly able (with the
help of carriers and manufacturers) backdoor and exploit all
the major smartphone brands and models [0].

Smartphones are horrendously complex, rely heavily on untrusted
binary blobs, have mutiple CPUs some without direct owner/user
control (eg the CPU doing the baseband processing) [1]. 
Currently these devices are impossibly difficult to secure.

Erik

[0] http://www.spiegel.de/international/world/privacy-scandal-nsa-can-spy-on-smart-phone-data-a-920971.html
[1] http://www.geeky-gadgets.com/baseband-hacking-a-new-way-into-your-smartphone-17-01-2011/
-- 
----------------------------------------------------------------------
Erik de Castro Lopo
http://www.mega-nerd.com/



More information about the liberationtech mailing list