INFO!!! fairphone DOES SUPPORT CUSTOM ROMS!!!

i like the idea of a fairphone. i dun wana buy one tho - if it doesn hav the features i need/wan.

if fairphone had all dis stuff - it would hav a genuine moat, besides the sustainability stff-

alternative image link (blahaj zone)

  • passepartout@feddit.org
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    1
    ·
    edit-2
    15 hours ago

    I always say this when someone mentions fairphones:

    Fairphone 6 does not keep up with standard Android privacy/security patches and has no secure element to provide working disk encryption for typical users not using a strong password, among other flaws.

    Taken from the GOS forum

    The idea is great, the execution is lacking basic needs in todays world. Missing pin code throttling is kind of insane tbh.

      • passepartout@feddit.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        9 hours ago

        I couldn’t find the part where it says that but that’s what I thought. Pin code throttling is part of AOSP iirc, so they would have to go out of their way to remove it (or base their OS on an older LineageOS release like /e/os).

        Edit: It’s not. It’s about the missing chip. Read the comment.

        • lemmysmash@beehaw.org
          link
          fedilink
          English
          arrow-up
          3
          ·
          10 hours ago

          PIN code throttling can’t be implemented properly if hardware doesn’t support it. This is the very purpose of the secure element.

          It has its own CPU, storage, random number generator and realtime clock. Once a secret (encryption key) is generated inside of it, it can’t get unlocked until this very tiny chip allows it. And the chip uses different kind of protections (in case of weak pins — the most prominent one is throttling using its built-in RTC clock).

          If there’s no secure element, then attacker can just extract the memory chip and easily brute force the encrypted key on the much more powerful (and not throttled by RTC) hardware.

          And since the PIN codes are so weak, even the strongest key derivation functions won’t help against such bruteforce.