5 ms·

Linux is an ecosystem that includes Android. Pixel is an Andoid phone by Google that is supposed to be hardened against local attacks, showing when an unhardene

Linux is an ecosystem that includes Android. Pixel is an Andoid phone by Google that is supposed to be hardened against local attacks, showing when an unhardened OS is booted, etc. No one cares that you can run a firewall on an insecure OS configuration, but they care if your shipped appliance does it.

jraph 2y ago
This is beside the point. The point is that many OSes include tools that you can use to do remote maintenance as long as you have the password and physical access. There's nothing to write home about. There being inactive software somewhere to do maintenance that can be used if you have physical access and the password is as best interesting (curiosity), at worst not newsworthy, and in any case not concerning. Now, phones sold pre-filled with junk / invasive software all over the place is gross.
- jamesjamesdupre 2y ago
  No it is not besides the point. They are not supposed to ship a setup where physical access escalates to permanent spying with no warnings because they are promising things about devices not about an ecosystem's overall functionality to build any possible configuration. Many people feel Google and Apple have ulterior motives, but that is an academic argument unless they abandon this motive, at that point they need to always ship rooted insecure boot phones for our ease of use.
- throwaway290 2y ago
  Funny how you people keep making it as if bins included openly in normal Linux distributions are as bad as some weird unaudited internal tool by Verison of all things, additionally hidden from the user. I would have higher expectations of a Pixel tbh
  - jamesjamesdupre 2y ago
    It seems to me like a lot of it is hatred for the messengers.. But I think Palantir is a perfect organization to resentfully report a telco conspiracy to create a law enforcement back door as long as they didn't get a piece of it.
    - throwaway290 2y ago
      True, there's some irony in that...
  - jraph 2y ago
    We are not remotely saying this. And there are no "messengers" shouted, and there's no hatred. We are saying that tools provided in common linux distros allow you to setup remote control if you have the password and physical access. This is not being bad, it's just that the tools are powerful and included out of the box. As for including an opaque binary, I would expect way better from Linux distros. An opaque binary would be scandalous. But on Android? You already can't trust lineage or aosp because of the proprietary blobs you need on any smartphone for the drivers. Stock Android? Add all the crapware from the manufacturer. Add to this the crap added by the carrier. The phone is already full of inscrutable crap, it's hopeless. Some deactivated stuff seems like a total non event in comparison to all this, including the crap you can't even disable and that does you don't know what and sends who knows what to who knows who. The whole situation is concerning and scandalous, but not much more with that additional, deactivated opaque stuff.
    - jamesjamesdupre 2y ago
      Most of the stuff you refer to are why a company would restrict phones (in its intranet) to only ones that were 1 vendor and not telco modified to possibly deliver the evil maid/police illegal wire tap post (short) arrest. We just discovered that there are not 2 such vendors, but one.
    - throwaway290 2y ago
      > tools provided in common linux distros Again... those tools are open source, audited and have many eyes on them This tool however is shady as heck. google dropped the ball
      - jraph 2y ago
        We can't seem to understand each others. I 100% trust my open source audited rm, but it will definitely remove everything from my system if I call it with parameters "-rf" and "/" with sufficient permission. It is powerful enough, and the whole set of trusty tools I have on my linux distro lets me take control of it remotely. That tool is shady, I agree, but it also deactivated. Do you know what it means on Android for an app to be deactivated? It basically means "not installed". It's here in the file system (on the system partition), but doesn't run. It wouldn't concern me if I had it (though I would prefer it not to be there and for the system partition to be smaller so I can use this space in the user partition), I'm way more concerned by all the craps that actually runs.

jraph 2y ago

This is beside the point. The point is that many OSes include tools that you can use to do remote maintenance as long as you have the password and physical access. There's nothing to write home about. There being inactive software somewhere to do maintenance that can be used if you have physical access and the password is as best interesting (curiosity), at worst not newsworthy, and in any case not concerning. Now, phones sold pre-filled with junk / invasive software all over the place is gross.

jamesjamesdupre 2y ago
No it is not besides the point. They are not supposed to ship a setup where physical access escalates to permanent spying with no warnings because they are promising things about devices not about an ecosystem's overall functionality to build any possible configuration. Many people feel Google and Apple have ulterior motives, but that is an academic argument unless they abandon this motive, at that point they need to always ship rooted insecure boot phones for our ease of use.
throwaway290 2y ago
Funny how you people keep making it as if bins included openly in normal Linux distributions are as bad as some weird unaudited internal tool by Verison of all things, additionally hidden from the user. I would have higher expectations of a Pixel tbh
- jamesjamesdupre 2y ago
  It seems to me like a lot of it is hatred for the messengers.. But I think Palantir is a perfect organization to resentfully report a telco conspiracy to create a law enforcement back door as long as they didn't get a piece of it.
  - throwaway290 2y ago
    True, there's some irony in that...
- jraph 2y ago
  We are not remotely saying this. And there are no "messengers" shouted, and there's no hatred. We are saying that tools provided in common linux distros allow you to setup remote control if you have the password and physical access. This is not being bad, it's just that the tools are powerful and included out of the box. As for including an opaque binary, I would expect way better from Linux distros. An opaque binary would be scandalous. But on Android? You already can't trust lineage or aosp because of the proprietary blobs you need on any smartphone for the drivers. Stock Android? Add all the crapware from the manufacturer. Add to this the crap added by the carrier. The phone is already full of inscrutable crap, it's hopeless. Some deactivated stuff seems like a total non event in comparison to all this, including the crap you can't even disable and that does you don't know what and sends who knows what to who knows who. The whole situation is concerning and scandalous, but not much more with that additional, deactivated opaque stuff.
  - jamesjamesdupre 2y ago
    Most of the stuff you refer to are why a company would restrict phones (in its intranet) to only ones that were 1 vendor and not telco modified to possibly deliver the evil maid/police illegal wire tap post (short) arrest. We just discovered that there are not 2 such vendors, but one.
  - throwaway290 2y ago
    > tools provided in common linux distros Again... those tools are open source, audited and have many eyes on them This tool however is shady as heck. google dropped the ball
    - jraph 2y ago
      We can't seem to understand each others. I 100% trust my open source audited rm, but it will definitely remove everything from my system if I call it with parameters "-rf" and "/" with sufficient permission. It is powerful enough, and the whole set of trusty tools I have on my linux distro lets me take control of it remotely. That tool is shady, I agree, but it also deactivated. Do you know what it means on Android for an app to be deactivated? It basically means "not installed". It's here in the file system (on the system partition), but doesn't run. It wouldn't concern me if I had it (though I would prefer it not to be there and for the system partition to be smaller so I can use this space in the user partition), I'm way more concerned by all the craps that actually runs.