A Hardware Privacy Monitor for iPhones
schneier.com
schneier.com
There is apparently no sense of irony in asking us to trust JavaScript from some random place called "PubPub" in order to even view this. Why is it no longer reasonable to expect simple text information on the WWW to be conveyed without requiring JavaScript?
-Slightly ridiculous threat model (trust should be achieved at the silicon and work its way up, not the reverse). If you don't trust your phone's hardware or software, switch phones. IMHO working towards improving trust and security features is better spent time than trying to shift trust from the phone to the tools you use to monitor and distrust it.
-While journalists are heavily targeted, the research is nihilistic and feeds into fears of 0days. If someone out there has the ability to remotely turn off airplane mode, they aren't going to burn it outside of a WW3-level crises.
-Re: 'silent phone'. What use is an unnetworked phone? Can't call, email, message, find directions, lookup topics, backup recordings. Journalists use phones because they are useful, not because they need to be perfectly secured.
Since we cannot secure the silicon, we need other technical means to build up trust. A devices like this is a good step in the right direction.
I don't think people with access to hardware or other backdoors would only use them only in a WW3-level crises. It's not unreasonable for journalists to defend against these threats.
See BroadPwn.
WLan attacks are usually more targeted and not as suitable for mass surveillance than modem based attacks/tracking.
Having the modem activated let's the provider track my location all the time. That is a big no-go for me.
[1] https://www.version2.dk/blog/blackphone2-review-1-508188
[2] https://www.version2.dk/blog/blackphone2-review-2-545078
[3] https://www.version2.dk/blog/blackphone2-review-3-551639
For those who do not know, PHK wrote jail() on FreeBSD.
This assertion relies on an assertion that such exploits are so rare as to be priceless.
You might be right that if someone only had one such exploit that they would be very, very cautious about using it. But what if they have a half dozen or so?
Given documented cases of three letter agencies intercepting electronic devices to install implants, how can anyone realistically trust any phone they buy, ever?
Trust in the sense of feeling (not knowing) that there is a reasonable chance that the phone might be secure?
Here's how:
Walk into the store and buy it on the spot. And definitely choose your OS vendor wisely... get your phone from a company that has its own stores, controls inventory in those stores tightly, and does not use the customer as its product. This way you at least maximize your chances of being secure. Do not order the phone online, even from the vendor's web site.
Trust in the sense of 100% absolute knowledge that there is no compromise? Realistically, there's no way to know 100.00000%
Much easier said than done. If the iPhone's hardware can't be trusted, which other phone can be? In such a situation using something like this actually seems to be the easy route towards hardware security against interception.
I love it how people ask rhetorical questions without thinking through what the answers might be, and how those answers might undermine their points.
A few things journalists could do with an un-networked device: take notes, take photos, record audio, record video, show people pictures and other things stored on the phone, look up information that is stored locally, find contacts numbers and then call them from a different device... the list could go on, but is that not enough?
It's an interesting effort. I don't see a need to diss it, even though the usage scenarios seem a bit arcane.
0. Trusting any bit of silicon isn't backdoored or buggy.
1. Trusting any opaque binary firmware isn't backdoored or buddy.
2. Having "firewall" level of control of bus device lifecycle not in control of the user action and/or system policies.
We need more peripheral firewalls, external firmware imaging IDS/IPS like this project and depotting open-source chips that can be functionally OCR'ed under xray/microscope.
https://www.media.mit.edu/events/forbidden/overview
Kind of like Defcon for grown ups.