coffeeClean

joined 1 year ago
[–] coffeeClean@infosec.pub 4 points 7 months ago* (last edited 7 months ago) (1 children)

You don’t own the phone. That’s how ~~credit~~ nonfree software works.

↑ corrected that for you.

[–] coffeeClean@infosec.pub 1 points 7 months ago* (last edited 7 months ago) (4 children)

The code is inherently in the ~~firmware~~ (edit: kernel) no matter how you acquire the phone.

[–] coffeeClean@infosec.pub 8 points 7 months ago (11 children)

If you don’t control it, you don’t own it.

[–] coffeeClean@infosec.pub -1 points 7 months ago (1 children)

Most of my shopping is done at street markets. When a big parking is filled with vans and portable tables on a weekly basis, there is no surveillance. But if I need something very particular then the cash option gets threatened. E.g. I would like to have a Flipper Zero but these are never at street markets and not even on any shelves anywhere.

[–] coffeeClean@infosec.pub 1 points 7 months ago

I wouldn’t choose a custom rom on the sole basis of anti-theft. My ½-baked suggestion was simply disable the playstore framework (so it’s present but just dead code) and installing an app on the side.

Anyway, I have no interest in anti-theft bricking myself. I don’t envision ever having a phone where i would care about the hardware and would not likely spend more than $50 on a phone. Exceptionally I could one day get a Fairphone. But remote bricking does not tempt me. Making the phone a brick more quickly gets the phone into a landfill as it becomes useless for everyone.

It’s worth noting why phones get stolen. Even cheap phones are getting stolen. It’s not for the hardware. It’s because SIM registration makes it hard for criminals to get anonymous burner chips. So they steal phones just for GSM chips that are registered to someone else.

[–] coffeeClean@infosec.pub 2 points 7 months ago

I think Fairphone did not exist when I last bought a phone. But you make a good point; I overlooked that. It will probably be my next phone whenever I reach a point where open street maps no longer updates on my phone.

[–] coffeeClean@infosec.pub 1 points 7 months ago

I think I read somewhere it’s normally 13, and that’s what worked for me. Thanks for the 'list users' command.. that confirmed it on my phone.

[–] coffeeClean@infosec.pub 10 points 7 months ago* (last edited 7 months ago) (3 children)

This has nothing to do with Google.

Google welded anti-consumer logic into the kernel. Of course that’s on Google. Just like Intel started making CPUs with a management engine that can only work against non-corporate consumers, basically saying fuck the individuals’ needs.. putting individuals at unconscionable risk without their knowledge or consent.

Consumers have decisions to make. Is a consumer happy to feed a supplier who sells them something that works against them? Some are. I’m not. Going forward they fail to earn my business because they have too many masters.

You going to ditch Linux because they support remote management too?

Linux is not locked down. Users can remove anything they want from it.

[–] coffeeClean@infosec.pub 1 points 7 months ago

I think the author said he was in Australia.. but he felt like it’s an encroachment by the US in some way.

[–] coffeeClean@infosec.pub 1 points 7 months ago (4 children)

Probably. But if you want that anti-theft feature, I wonder if you could disable it and then install another app for that which serves you alone. Whatever you install probably wouldn’t be baked into the kernel but probably a good trade-off.

[–] coffeeClean@infosec.pub 3 points 7 months ago* (last edited 7 months ago) (3 children)

As for PayPal, well, your cc / bank also shares lots of data.

Paypal is not a bank. Paypal is an additional MitM. Using Paypal adds another surveillance capitalist to the chain along with your bank and credit network. But indeed, the banks and credit cards are shit so I am fighting the war on cash quite hard. I’ve already been dragged into court for insisting on paying a creditor in cash. I won that case and will continue insisting on cash payments.

If your threat modelling is that severe

My threat model simply includes mass surveillance. Which is in the threat model of everyone who understands and embraces privacy. It’s worth noting that it’s not purely and infosec stance. I also object to feeding a supplier who is acting against me. The moment I detect that a supplier is working against me, I walk on ethical grounds. They have failed to earn my business. The snooping just happens to be the manner in which they are working against me.

your best bet is Tor Craigslist,

I was doing that at one time but something pushed me off. I don’t recall what.. whether it was SMS verify or CAPTCHAs or phone numbers or fussy email address verifiers... something drove me off.

[–] coffeeClean@infosec.pub 3 points 7 months ago* (last edited 7 months ago)

Ethical consumers patronize the lesser of evils, and go without if it’s feasible given only quite shitty options. Affluenza-driven OCD consumption is the unhealthy obsession that ethical consumers manage to avoid.

view more: ‹ prev next ›