321
Apple CEO Tim Cook Donating $1 Million to Trump's Inaugural Fund (www.macrumors.com)
submitted 2 years ago by to c/apple_enthusiast@lemmy.world
108 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 2 years ago (10 children)

I fully agree on the Framework laptop, but Fairphones are insecure and suck. Get yourself a (preferably used) Google Pixel instead and load GrapheneOS on to it, it's very easy and maybe takes 10 minutes.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 10 points 2 years ago (1 child)

    unfortunately as someone who fixes phones day in and day out I cannot own a pixel. absolutely horrendous build quality. there's a gap behind the screen which is held on solely by shitty adhesive on a thin bezel, and the amount of devices I've seen totaled by a drop on a corner destroying that bezel so a new screen can't be installed is insane.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 2 years ago* (4 children)

    Why do you think Fairphone (5) is insecure?

    My experience is not that they suck. But yeah, they sure don't have the same spec as a premium iPhone or a Pixel. But they have a modular design, just like the Framework Laptop. I don't know any other modern phone that does. And they use a SoC that is guaranteed to receive support for a long time.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 7 points 2 years ago (3 children)

    Fairphone fails to properly sign their own operating system. They use the publicly available (!) AOSP test private keys instead of an actual secret key. This breaks fundamental security features of Android like Verified boot, rollback protection, etc. They're also pretty slow with updates, including important monthly Android Security Bulletin patches. This is just the bare minimum for any OEM, and Fairphone fails to properly implement it.

    Google goes above and beyond, and offers cutting edge hardware security in their Pixel devices. They have features that currently can't be found in any other Android phone, like ARMv9 MTE (hardware memory tagging), the Titan M2 secure element, which supports Android StrongBox, the Weaver API and comes with insider attack resistance. GrapheneOS takes full advantage of these features, and combined with their numerous software security improvements offers the most secure mobile OS + hardware combination on the market. You can read more about all the hardening of GrapheneOS on their features overview page: https://grapheneos.org/features
    Plus it's degoogled by default, so it doesn't come with any trackers or bloatware. You can opt to install Google Play services, but they are confined in the standard Android application sandbox, just like any other user-installable app. They don't get any elevated privileges like on other Android-based operating systems.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 2 years ago (1 child)

    publicly available (!) AOSP test private key

    Sounds like they at least addressed the test key issue

    https://www.fairphone.com/en/2024/01/30/security-update-apex-modules-vulnerability-fixed/

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 2 years ago* (last edited 2 years ago)

    I'm sorry, there's no other way to say this, but such a major issue slipping through is just a massive sign of incompetence. I support Fairphone's mission and philosophy, but I just can't trust this company. This isn't the only security issue either. I wouldn't recommend their devices to anyone for this reason.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 2 years ago (2 children)

    @Andromxda @sith There are two things that keep me trapped:

    1. Airdrop. Buggy and unreliable, but oh so handy.
    2. TimeMachine. Also not 100% reliable, but great for the peace of mind.

    For the rest…I switched to Apple in 2001. It used to my secret business weapon (I forced my whole company over to Apple), but those days are long gone.

    Still hate MS-Windows though, so it going to be Linux. Anyone a suggestion for a Linux Airdrop and TimeMachine equivalent?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago* (last edited 2 years ago) (1 child)

    Not a real replacement for AirDrop, since it still requires devices to be on the same network, instead of using ad-hoc Wi-Fi, but LocalSend is pretty nice.

    Which features of Time Machine do you need? Just backing up, or do you also need the file history? For backups the best solution we have is probably Pika Backup (it uses Borg Backup under the hood, so it's compatible with other tools that use the same standard). There's a pretty good video about it: https://www.youtube.com/watch?v=W30wzKVwCHo
    It also lets you grab individual files from a backup, but it doesn't look as nice as the Time Machine file history UI.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •