I still find it so hard to believe, that there is “really nothing worse than open source TEE solution”?
Why not? Your arguments make zero sense to me. We are not talking about Sony.
Of course you can keep the tin foil hats on, and think all security in the phone is bad. But can’t we consumers make that choice ourselves? If I can see the TEE kernel code on say this new upcoming Jolla phone, I’d be able to make the decision by myself if its good or not, and make apps with proper attributions. You can still opt out.
You say you want a ‘secure store’. TEE is not that, it’s baked in hardware, you do not store anything in it. Mastercard, Sony, Google store keys in it.
You say you want European auditing. TEE (and TPM) are all governed by Americans, so good luck.
I went to each of the web sites of the bodies that govern the specifications. In each case, the funding and management of, even the ‘open foundations’ are not just sponsored but run by American companies. I’ve linked GlobalPlatform above and already talked about this.
I don’t think this is a discussion in good faith. I have actual experience with signing code and even advocate for it for distribution of Sailfish software. But the industry controlled TPM/TEE stuff is a backdoor and a lever in the wrong hands.
If the ‘lowest common denominator’ rules, then I wouldn’t be here in the first place. I’m going to ignore this thread until someone with actual knowledge responds with substantive contributions.
You’re right - not only you ain’t “getting it”, but actively DO refuse to comprehend the obvious logic behind:
It has been said - Sailfish and Jolla are not just an ordinary piece of hard and soft. They’re breath of fresh air, apart from all those mainstream pocket spy-tracking devices with a phone app on 'em installed.
But here you come expecting exactly that - a mainstream tech done by Google & Co on a system, where you’re ment to enjoy the lack of it!
I read this thread and it interested me. I get that implementing hardware-baked key storage run by americans is not good.
But are there other ways to get security approval from companies with apps in Europe that go for the easy security route via Google integrity? I am thinking of this since Vipps Mobilepay in Norway now like others in Europe have chosen to sign a pact with the devil and let Google block out users of MicroG and others and banking apps is something most users need - and I do not want to have to have ANY android or ios phone to be able to use mobile banking. I will rather live withouth it that that. But is there any route to getting software approval outside these ecosystems? I suspect said company and others do not want to make linux app available, and strangely enough they do not offer a normal website as a side solution either. I can not see that EU is doing enough either, since they on on hand build up this mobile pay consortium between european banks to fight Visa and Mastercard, but at the same time these apps can often only function on american OS’es.
Maybe this is a political battle and need pressure on EU, or maybe there is another way to get this done. I am asking since I want Europe to have independence from big tech, but also access to the apps needed in daily life.
Myself, I have written to the mobilepay company and to govt departments. They do not seem very interested in changing the situation. I am at least very happy Sailfish and Jolla exist and I am looking forward to the new phone finally arriving
That is precisely the problem. With the governance the US has it is currently trivial for them to take down anything that even the Europeans have hesitated to do Autistici/Inventati - Wikipedia Not that that particular case is not controversial, but the MEANS. In the end, first deny them DNS and then use the international banking cartels to do the rest. All at the behest of the white house. I’m not a European, but if I were, I would do everything I could to rest control of the finance sector and the DNS root servers from the US while breaking up the Google monopoly once and for all. I’m a Canadian. We just sell the Americans billions in marijuana in the hopes they’ll chill out, eventually. Don’t think it’s working.
Yes, I agree wholeheartedly. I have done all I can as a private citizen of Norway to break away.
All I use now is youtube since I have no good alternative, but with proton mail.
I got rid of everything from imdb account to microsoft windows and I have never been more happy with my tech life. However, I also want Europe to live through an eventual crisis coming, and I can not see our politicians do enough. They drag their feet and we have many nations with different approaches. Some, like Denmark and France do something. Like going for open source office packs and such. For Norway, we do nothing really, we are always late to the dinner. US can cripple our whole nation, our health systems, businesses, departments in govt and much of private society with the control, we only use Linux in parts of military etc. and every mobile is android or ios.
