←back to thread

The Fairphone (Gen. 6)

(shop.fairphone.com)
155 points DavideNL | 9 comments | | HN request time: 0.402s | source | bottom
Show context
pickledoyster ◴[] No.44375563[source]
available with /e/OS too https://shop.fairphone.com/the-fairphone-gen-6-e-operating-s...

As I near the eol of my daily driver, I'm considering a Fairphone, but what it's missing is a folding card holder, like the Satechi wallet stand for iPhone. Putting the phone in horizontal mode on a table and using a bt keyboard is how I do a lot of my writing

replies(4): >>44375611 #>>44375865 #>>44375950 #>>44377060 #
1. poisonborz ◴[] No.44375611[source]
eOS uses microG. I'd wish Fairphone offered partnership with GrapheneOS, especially now that Google broke their workflow. Sandboxed Play Services is pretty much a must for a lot of people.
replies(2): >>44375720 #>>44375737 #
2. daveoc64 ◴[] No.44375720[source]
>I'd wish Fairphone offered partnership with GrapheneOS

The makers of GrapheneOS have indicated that Fairphone doesn't meet their security requirements:

https://grapheneos.social/@GrapheneOS/114737139118874189

I think there are some fundamental flaws with how Fairphone operates, plus they don't seem to release security updates promptly.

replies(2): >>44375858 #>>44376210 #
3. Iolaum ◴[] No.44375737[source]
Unfortunately there seems to be bad blood between the two :(

It would be good if Fairphone could make a product that meets GrapheneOS requirements, but they measure the tradeoffs between security, usability, and cost (to do hardware and software things) differently. Each team is free to make the choices they deem fit. If only the intersection of GrapheneOS and Fairphone users were bigger, market forces would push them towards a common vision.

replies(1): >>44375878 #
4. untitled2 ◴[] No.44375858[source]
So Fairphone is NOT secure?
replies(2): >>44376095 #>>44376421 #
5. IlikeKitties ◴[] No.44375878[source]
> Unfortunately there seems to be bad blood between the two :(

There's is no bad blood here, it's merely that fairphone doesn't meet the required standards for them to be a target the graphene team is interested in supporting offically. There's nothing preventing anyone from porting it themselves and nothing preventing fairphone from porting an inferior version of grapheneos to their phoens.

6. throwaway74354 ◴[] No.44376095{3}[source]
Security is a policy-driven spectrum of considerations and solutions. GrapheneOS targets very specific threat models, which is not possible with Fairphone hardware/BSP. Whether it makes it not secure for your own use cases, it's up to you to decide.

Case in point: re-lockable bootloader requirement. Not everyone is a target for an evil maid types of physical attacks or possible state actor pressure. But when you actually need it, it's not negotiable.

7. thibaultmol ◴[] No.44376210[source]
> plus they don't seem to release security updates promptly.

They did announce they're going to do daily linux patches though, so that's atleast something https://www.phoronix.com/news/Fairphone-6-Linux

8. jeroenhd ◴[] No.44376421{3}[source]
Fairphone is as insecure as most non-flagship Android phones. Make of that what you will.

GrapheneOS takes security very seriously. Your average desktop PC or laptop won't come close to their requirements. That makes GrapheneOS an excellent OS for people who want the security of iOS without the many downsides of Apple. Their patches reduce usability but make the phone more secure than Google's own, official Android build.

However, if you've ever used a Windows (or Linux) laptop, you've already experienced the kind of insecurity that GrapheneOS tries to prevent. No hardware encryption accelerators outside of the CPU, rarely any patches that roll out within a weak of announcement, firmware protection being basically nonexistent, no A/B updates, almost certainly no verified boot (even with Secure Boot enabled), and usually no firmware USB lockdown.

replies(1): >>44381290 #
9. untitled2 ◴[] No.44381290{4}[source]
Interesting enough, GrapheneOS runs exclusively on google devices. This fact makes it obsolete for me. I don't trust google in anything, soft or hard ware.