**** BEGIN LOGGING AT Fri Oct 06 03:00:01 2017 Oct 06 04:31:33 Steps toward a privacy-preserving phone: https://lwn.net/SubscriberLink/735597/2a1493751cbba859/ Oct 06 04:31:47 hmm, no mention of Neo900 Oct 06 04:33:52 * pabs3 does some evangelism in the comments :) Oct 06 05:01:00 https://vizzzion.org/blog/2017/10/plasma-convergence-technically/ Oct 06 07:12:18 :-D Oct 06 07:18:38 DocScrutinizer05: looks like people aren't familiar with the Neo900: https://lwn.net/Articles/735623/ Oct 06 07:18:56 (and think it is still only a concept) Oct 06 07:19:03 yes Oct 06 07:19:14 a pity Oct 06 07:19:54 I hope the kickstarter will change this, also a mentionung at FSF would help a lot. But basically first thing we need is a prototype now Oct 06 07:20:18 oh, there will be a Neo900 kickstarter? Oct 06 07:20:40 "old concept" LOL, as if the article itself had not stated exactly that about modem separation Oct 06 07:21:15 (KS) yes, I don't see another way ro generate the needed number of preorders resp the amount of funds Oct 06 07:21:22 ah, that was a reply to my assertion that Neo900 is better: https://lwn.net/Articles/735622/ Oct 06 07:21:52 (better than what Purism proposes for the Librem 5) Oct 06 07:22:00 yeah Oct 06 07:22:59 they assume they can protect against rogue software / malware with physical mechanical killswitches. I think when your userland got tainted like this you're doomed anyway Oct 06 07:23:33 no matter what Oct 06 07:24:02 since eventually you *will* enable the killswitch and you still have no clue whatsoever about the rogue sw Oct 06 07:25:04 tight monitoring of the sandbox (even with control LEDs that can't get faked) is the key, not mechanical killswitches Oct 06 07:26:00 their understanding of hw level security is still sparse Oct 06 07:30:36 the threat is _not_ the malware, the threat is you're not realizing there is malware on your device Oct 06 07:31:07 a killswitch doesn't help to realize that Oct 06 07:31:24 Neo900 has detectors that could warn you Oct 06 07:34:51 you can implement those on kernel level resp root permission level, so even while you installed a software with rogue functions, unless that software *rooted* your system it will still detect the malware, and if that fails you still got the LEDs Oct 06 07:36:13 well, fuzzy wording, the sensors are hw, you got drivers in kernel or wherever you like to act when they yell Oct 06 07:37:52 https://research.kudelskisecurity.com/2017/10/04/defeating-eddsa-with-faults/ Oct 06 07:39:14 is Ed25519 the NSA provided/suggested eliptical curve? Oct 06 07:42:24 ooh EdDSA != EXDSA? Oct 06 07:42:31 ECDSA* Oct 06 07:44:59 pabs3: btw a big thank you for constantly providing high quality links Oct 06 07:54:14 np **** ENDING LOGGING AT Sat Oct 07 02:59:59 2017