maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   MeeGo / Harmattan (https://talk.maemo.org/forumdisplay.php?f=45)
-   -   Meego/N9 Privacy compared to Android (https://talk.maemo.org/showthread.php?t=101013)

LisaFass 2020-04-27 17:01

Meego/N9 Privacy compared to Android
 
Hoi,
just some thought provoking questions

since Meego is discontinued i was wondering how safe it is regarding privacy compared to android or microsoft phone os, which arguably have back doors in the system. Also regarding hardware, for example i read the privacy statements of HMD and Huawei, where they quite explicitely say they will log your every action on the phone etc.

Since google apps are not integrated into meego and basically all apps running now are by developpers (openrepos etc), is it likely the provacy is better on meego? only unfortunate thing is battery os non removable. it has been proven that android phones still send out gps data to google servers even if in flight mode - that is something that cant happen with N9 right,? assuming i use non google apps

or is meego much more "attackable" now since it may lack current security updates?
let me know what you think

juiceme 2020-04-27 18:05

Re: Meego/N9 Privacy compared to Android
 
Quote:

Originally Posted by LisaFass (Post 1567133)
Hoi,
just some thought provoking questions

since Meego is discontinued i was wondering how safe it is regarding privacy compared to android or microsoft phone os, which arguably have back doors in the system. Also regarding hardware, for example i read the privacy statements of HMD and Huawei, where they quite explicitely say they will log your every action on the phone etc.

Since google apps are not integrated into meego and basically all apps running now are by developpers (openrepos etc), is it likely the provacy is better on meego? only unfortunate thing is battery os non removable. it has been proven that android phones still send out gps data to google servers even if in flight mode - that is something that cant happen with N9 right,? assuming i use non google apps

or is meego much more "attackable" now since it may lack current security updates?
let me know what you think

Both scenarios apply to some extent.

As long as you do not install google stuff you are safe from their eyes; however using openrepos means you need to trust the community developers. I would say it is fairly safe to do that, but the most paranoid people only install stuff they have compiled themselves.

The fact that the kernel and libraries are hopelessly obsolete does mean that there are gaping holes to be exploited. However the N9 devices are fairly rare so I guess that gives some safety; there is probably nobody actively trying to break into your device.

Macros 2020-04-28 10:12

Re: Meego/N9 Privacy compared to Android
 
The software on the N9 is very good privacy wise, and with Nokia having shut down all services connected to it, you can be even more sure no data about your usage will be sent somewhere.

But we have to face, that there is the big flaw as mentioned by juiceme. The Operating system is old, very old by software standards.

As an example: If you have Bluetooth enabled a skilled hacker can get your data that way. But there exists no known exploit in the wild, so I agree with juiceme that somebody attacking your phone that way is no big risk.

Another aspect is missing protection against somebody reading your data if they acquire the device. Modern phones protect against this by encrypting the data. On the N9 anybody can load a rescueOS image and steal your data.

So you have privacy in your daily life, but don't trust your N9 as save data storage when you travel.

LisaFass 2020-04-28 12:50

Re: Meego/N9 Privacy compared to Android
 
Thanks guys, it is just as i thought

Edit: I was indeed mainly concerned about backdoors in Hardware and software from factory. I was a bit worried after i found out Intel was part of the Meego development team

juiceme 2020-04-28 15:38

Re: Meego/N9 Privacy compared to Android
 
Quote:

Originally Posted by Macros (Post 1567145)
Another aspect is missing protection against somebody reading your data if they acquire the device. Modern phones protect against this by encrypting the data. On the N9 anybody can load a rescueOS image and steal your data.

Actually there's a fix for that; altough I never released it due to some performance problems (which could be mitigated by installing more recent version of fuse but I never got around to packaging it...)

So what I did is I hacked the boot using ubiboot and evtap to create a vkb running on preboot, and used that to input passphrase to ecryptfs. Not as neat as can nowdays be done with luks but fairly good security for /home and /MyDocs

juiceme 2020-04-28 15:42

Re: Meego/N9 Privacy compared to Android
 
Quote:

Originally Posted by LisaFass (Post 1567147)
Thanks guys, it is just as i thought

Edit: I was indeed mainly concerned about backdoors in Hardware and software from factory. I was a bit worried after i found out Intel was part of the Meego development team

Everything is of course possible but there are no known backdoors in the device. (And BTW the chipset is not Intel but an arm variant from TI...)


All times are GMT. The time now is 16:43.

vBulletin® Version 3.8.8