upvote

points

by gjsman-10005 hours ago |
comments
upvoteby samlinnfer4 hours ago|
next
[-]
1. P(someone wants to run their own firmware)

2. P(someone wants to run their own firmware) * P(this person is malicious) * P(this person implants this firmware on someone else’s computer)

3. The firmware doesn’t install itself

Yeah I think 2 and 3 is vastly less likely and strictly lower than 1.

reply
upvoteby mikestew3 hours ago|
parent|
next
[-]
As an embedded programmer in my former life, the number of customers that had the capability of running their own firmware, let alone the number that actually would, rapidly approaches zero. Like it or not, what customers bought was an appliance, not a general purpose computer.

(Even if, in some cases, it as just a custom-built SBC running BusyBox, customers still aren't going to go digging through a custom network stack).

reply
upvoteby itsdesmond4 hours ago|
parent|
prev|
next
[-]
This guy thinks that if you rephrase an argument but put some symbols around it you’ve refuted it statistically.

P(robably not)

reply
upvoteby samlinnfer4 hours ago|
parent|
[-]
The argument is that P(customer wants to run their own firmware) cancels out and 2,3 are just the raw probability of you on the receiving end of an evil maid attack. If you think this is a high probability, a locked bootloader won’t save you.
reply
upvoteby FabHK3 hours ago|
parent|
[-]
Very neat, but 1) is not really P(customer wants to run their own firmware), but P(customer wants to run their own firmware on their own device).

So, the first term in 1) and 2) are NOT the same, and it is quite conceivable that the probability of 2) is indeed higher than the one in 1) (which your pseudo-statistical argument aimed to refute, unsuccessfully).

reply
upvoteby the__alchemist3 hours ago|
parent|
prev|
next
[-]
I encourage you to re-evaluate this. How many devices do you (or have you) own which have have a microcontroller? (This includes all your appliances, your clocks, and many things you own which use electricity.) How many of these have you reflashed with custom firmware?

Imagine any of your friends, family, or colleagues. (Including some non-programmers/hackers/embedded-engineers) What would their answers be?

reply
upvoteby philistine4 hours ago|
parent|
prev|
next
[-]
As if the monetary gain of 2 and 3 never entered the picture. Malicious actors want 2 and 3 to make money off you! No one can make reasonable amounts of money off 1.
reply
upvoteby lazide4 hours ago|
parent|
prev|
next
[-]
Clearly you’ve never met my ex’s (or a past employer). Not even being sarcastic this time.
reply
upvoteby wombatpm2 hours ago|
parent|
[-]
You expect that stuff to happy with 3 letter agencies.
reply
upvoteby lazide1 hours ago|
parent|
[-]
Sorry, I have no idea what you are trying to say.
reply
upvoteby gjsman-10004 hours ago|
parent|
prev|
[-]
On Android, according to the Coalition Against Stalkerware, there are over 1 million victims of deliberately placed spyware on an unlocked device by a malicious user close to the victim every year.

#2 is WAY more likely than #1. And that's on Android which still has some protections even with a sideloaded APK (deeply nested, but still detectable if you look at the right settings panels).

As for #3; the point is that it's a virus. You start with a webkit bug, you get into kernel from there (sometimes happens); but this time, instead of a software update fixing it, your device is owned forever. Literally cannot be trusted again without a full DFU wipe.

reply
upvoteby samlinnfer4 hours ago|
parent|
[-]
And where are the stats for people running their own firmware and are not running stalkerware for comparison? You don’t need firmware access to install malware on Android, so how many of stalkerware victims actually would have been saved by a locked bootloader?
reply
upvoteby gjsman-10004 hours ago|
parent|
[-]
The entirety of GrapheneOS is about 200K downloads per update. Malicious use therefore is roughly 5-1.

> You don’t need firmware access to install malware on Android, so how many of stalkerware victims actually would have been saved by a locked bootloader?

With a locked bootloader, the underlying OS is intact, meaning that the privileges of the spyware (if you look in the right settings panel) can easily be detected, revoked, and removed. If the OS could be tampered with, you bet your wallet the spyware would immediately patch the settings system, and the OS as a whole, to hide all traces.

reply
upvoteby samlinnfer4 hours ago|
parent|
next
[-]
Assuming that we accept your premise that the most popular custom firmware for Android is stalkerware (I don’t). This is of course, a firmware level malware, which of course acts as a rootkit and is fully undetectable. How did the coalition against stalkerware, pray tell, manage to detect such an undetectable firmware level rootkit on over 1 million Android devices?
reply
upvoteby Zak1 hours ago|
parent|
prev|
next
[-]
This assumes a high level of technical skill and effort on the part of the stalkerware author, and ignores the unlocked bootloader scare screen most devices display.

If someone brought me a device they suspected was compromised and it had an unlocked bootloader and they didn't know what an unlocked bootloader, custom ROM, or root was, I'd assume a high probability the OS is malicious.

reply
upvoteby kuschku4 hours ago|
parent|
prev|
[-]
LineageOS alone has around 4 million active users. So malicious use is at most 1:4, not 5:1.
reply
upvoteby dns_snek4 hours ago|
prev|
[-]
#2 and #3 are fearmongering arguments and total horseshit, excuse the strong language.

Should either of those things happen the bootloader puts up a big bright flashing yellow warning screen saying "Someone hacked your device!"

I use a Pixel device and run GrapheneOS, the bootloader always pauses for ~5 seconds to warn me that the OS is not official.

reply
upvoteby root_axis3 hours ago|
parent|
[-]
Yes. They're making the point that your flashing yellow warning is a good thing, and that it's helpful to the customer that a mechanism is in place to prevent it from being disabled by an attacker.
reply
upvoteby dns_snek2 hours ago|
parent|
[-]
No, they've presented a nonsense argument which Apple uses to ban all unofficial software and firmware as if it had some merit.
reply