[Replicant] GSD4e/GSD4T

[Paul Kocialkowski]

Hi,

Le jeudi 03 septembre 2015 à 14:38 +0200, Paul van der Vlis a écrit :
> Op 03-09-15 om 01:07 schreef Denis 'GNUtoo' Carikli:
> > On Wed, 02 Sep 2015 12:57:00 +0200
> > Paul van der Vlis <paul at vandervlis.nl> wrote:
> > > > PS: Note that the galaxy nexus has a proprietary and signed
> > > > bootloader, so I wonder how much time it's worth.  
> > > 
> > > Do you know any Android phone with a free bootloader??
> > Yes.
> > 
> > Phones that can be supported by Replicant, given enough work for
> > it:
> > * The GTA04.
> 
> An interesting phone, but not sure where to get and strange
> appearance.

Well, Golden Delicous has started a batch of GTA04A5, the latest
revision, recently. You can learn more about it at 
http://www.gta04.org/ and http://www.openphoenux.org/

> > * The LG Optimus black. Can be found second hand real cheap.
> 
> Interesting phone! But no Replicant support?

I have been working on freeing its bootloader for the past year. It's
nearly ready now, so I will start a Replicant port next. I'm busy
working on a lot of things at the same time, so it moves slowly, but
we'll get there.

> > * The Neo900, probably not released yet.
> 
> Interesting, but expensive, big, and not released.
> 
> > Background information:
> > -----------------------
> > For most phones, the SOC(System on a chip) contains some (ARM)
> > code burned into the chip, this code is read-only.
> > This is commonly called the bootrom.
> > 
> > That code is executed first, it's then responsible for loading the
> > bootloader from storage(microSD, flash, etc).
> > 
> > On most phones that bootrom verify the bootloader signature, here
> > however theses 3 phones are left unlocked, so you can run whatever
> > you
> > want.
> > 
> > The Openmoko GTA01 and GTA02 also have no signature checking
> > activated,
> > but they're way too slow.
> > 
> > There is also a more recent LG phone which signing private key has
> > leaked. 
> > We'd need to check with the SFLC before doing anything. I also
> > wonder if that private key could sign bootloaders for other LG
> > phones.
> 
> Interesting too, thanks for your information.
> 
> Another point I find important is a good separation between the modem
> and the rest of the device. The modem should not have access to the
> memory and the storage of the device.

Of course! The GTA04 and the Neo900 were designed in that direction. In
addition, it's easier for us to trust the manufacturer on such a small
scale. The Neo900 also has more hardware features dedicated to
monitoring the modem and reliably turning it off. See http://neo900.org
 for more information.

For other devices, I have started documenting what we know about their
modem isolation. For the Optimus Black, there is no indication that
it's bad, and the modem is believed to have its own memory and storage.

-- 
Paul Kocialkowski, Replicant developer

Replicant is a fully free Android distribution running on several
devices, a free software mobile operating system putting the emphasis
on
freedom and privacy/security.

Website: https://www.replicant.us/
Blog: https://blog.replicant.us/
Wiki/tracker/forums: https://redmine.replicant.us/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.osuosl.org/pipermail/replicant/attachments/20150903/49f01266/attachment.asc>