this post was submitted on 16 Sep 2023
105 points (98.2% liked)

Technology

72859 readers
3135 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
L4s@hackingne.ws
105
Apple and Google Are Introducing New Ways to Defeat Cell Site Simulators, But Is it Enough? (www.eff.org)
submitted 2 years ago by leo@lemmy.linuxuserspace.show to c/technology@lemmy.world
13 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] AProfessional@lemmy.world 10 points 2 years ago* (last edited 2 years ago) (2 children)

Even that isn’t enough. The wireless modules of normal phones have direct access to system memory and, by law, have proprietary firmware. Some exploits have been found over the years. This needs to be isolated to avoid backdoors/bugs.

[–] narc0tic_bird@lemm.ee 10 points 2 years ago (1 children)

Not saying you're wrong, but I'd love to read the sources to your claims.

[–] elderflower@lemmy.world 3 points 2 years ago (1 children)

Example: https://grapheneos.org/faq#baseband-isolation

Yes, the baseband is isolated on all of the officially supported devices. Memory access is partitioned by the IOMMU and limited to internal memory and memory shared by the driver implementations...Earlier generation devices we used to support prior to Pixels had Wi-Fi + Bluetooth implemented on a separate SoC. This was not properly contained by the stock OS and we put substantial work into addressing that problem.

Baseband modems were not isolated from kernel memory in stock Android, GrapheneOS had to do it themselves using the IOMMU. We do not know for sure due to the proprietary/closed-source nature of baseband modem drivers, but we have no reason to assume any OEM (Samsung, Xiaomi etc) implemented proper isolation of baseband modem and system memory.

[–] narc0tic_bird@lemm.ee 1 points 2 years ago

That'd be a huge oversight on their part. Thanks for the clarification.

[–] jet@hackertalks.com 7 points 2 years ago

By law? Which law?