Has anyone ever made a handheld Linux device for secure communication? : OpSec | Torhoo darknet markets
Fuck mobile phones, and laptops can be bulky. Is it possible for me to get the items, like a phone, or even the parts itself like a screen, battery with some raspberri pi shit, stick it together with superglue, and put linux tails on it? or have some software/ui where you only use the device for xmpp and nothing else - open source. Has anyone done this before??
If you are going to do this for any meaningful benefit you need to cut the shit. Linux Phones Suck.
They have no security features (Sandboxing, Mandatory access control etc) for instance, you can't deny an app Microphone Privileges they are either on for the whole system or off. GrapheneOS Pixel phones are far better. They run Open Source Linux with better security features than you will find on any other mobile Linux :)
Raspberry Pi is ARM based, so you are restricted to the fledgling ARM based Linux Distros and Apps. So
if you insist on a Linux phone then instead of making some kind of Frankenstein attention magnet and burning yourself out on the hardware side, buy a Pinephone Pro and look extensively into applying Linux Kernel hardening, use only the smallest footprint system utilities and whatever else to minimize attack surface. And keep your app installs to an absolute minimum. And unless it's done really well it will be all for nothing but security theatre. if you aren't committed to hardening Linux properly then just use GrapheneOS.
Forget your Frankenphone. Ask yourself if you are willing to learn what it takes to Implement long guides like this on a PinePhone.
Another heads up Raspberry Pi is not completely open source as some hardware they use is proprietary so i'd highly advise you not do that. Like i posted though there is other options then just GrapheneOS nowadays, pine64 and purism. Arguably GrapheneOS has been around for pretty long time so im not saying anything against it just that there is an expanding marketplace for these products.
thanks for this reply. The only objective with these phones is to send SMS messages. That's it. Literally. No calls, no snake game, no emojis. Just text. I wonder if it's possible to have two devices configured so all you can do is message the other device it's configured to connect to (less things to do on the device / UI).The main reason why i'll never use a smart phone, hence my thoughts on creating my own hardware (atleast sourcing my own components), is because if i'm using a smartphone, i'm putting faith in whoever created that, that faith correlates to my lack of knowledge on how phones are created. In this case if i got calyxos which only supports pixels, i'll be putting faith in Google on a hardware level, and let me say, I definitely can't say these guys don't haveany shady shit going on with their hardware/phone projects - i ll check what os graphene needs, if it works on pine then that's a win. I can't believe i've never come across this - awesome.
Graphene OS is Pixel exclusive. For good reason too, long software support and good hardware security.
For your use case you would be served well with Genode Sculpt OS on a pinephone. It's not very smart and its Microkernel design is the holy grail of Secure OS design. It can send SMS as far as I know. I'm sure you could even ask someone in the community to assist you with stripping out what few features you don't want in it. That would of course require some kind words, ideally coupled with a donation to the project. You should be very happy with Sculpt OS If what you want is a Secure, Private Open source software Stack on reasonably open hardware, and all you want is SMS. Of course I assume you know SMS is trash and should be avoided if ever possible. Don't use this phone inside your house if you want it to stay private.
There are a lot of original and 3rd party displays and keyboards for RBPI. However, any odd looking device will drag attention if used in public. Better stick to tablets or mini laptops. Maybe a bulky Cat phone can be rebuilt for your purposes.
These devices can be of good use, mainly for the less tech savvy people that still have responsiblities to exchange information remotely but also securely. Equally as you mentioned, these types of devices are generally used by a certain market of people...lol - so it would be wise to keep this initiative under the radar, digitally and physically. Love that you brought more angles of opsec on the opsec idea itself. Nice.
It's just a waste of time. the PinePhone exists and it has the form factor of a regular phone. wasting your time on reinventing the wheel draws your attention from the more important task of pioneering the invention of Linux Security Hardening. Something that is only picking up steam in the last few years and something that is especially lackluster on mobile Linux.
Yeah, waste of time and outright worse than current options. I don't want to work in tech, hell I'm not bad with it, but I just don't have the patience. I'm aware that it is by all means a great field. So I just plan to buy a cheap laptop, get it all running open source stuff entirely free of spyware, and run everything off of that for my illegal transactions. Overall easier than figuring out an open sour e phone and all that.
I haven't got the knowledge to compare the current status of pinephones and how they rest in the worlds marketplace, espeically in the west. WIth more BS coming from governments when it comes to censorship and tracking, do you think there will be a growing marketplace for these type of phones? or is it already booming?
check out zeroterminal3 by N-O-D-E on youtube
the device runs linux and based on pi zero
btw tails does not runs on arm
so you need to set up a customized linux distro
you just described the pinephone 64. You can put sxmo on it on some droidian (easy) or bedrock linux (hard if youre new) base and calls sms and camera will probably work
They have no security features (Sandboxing, Mandatory access control etc) for instance, you can't deny an app Microphone Privileges they are either on for the whole system or off. GrapheneOS Pixel phones are far better. They run Open Source Linux with better security features than you will find on any other mobile Linux :)
Raspberry Pi is ARM based, so you are restricted to the fledgling ARM based Linux Distros and Apps. So
if you insist on a Linux phone then instead of making some kind of Frankenstein attention magnet and burning yourself out on the hardware side, buy a Pinephone Pro and look extensively into applying Linux Kernel hardening, use only the smallest footprint system utilities and whatever else to minimize attack surface. And keep your app installs to an absolute minimum. And unless it's done really well it will be all for nothing but security theatre. if you aren't committed to hardening Linux properly then just use GrapheneOS.
Forget your Frankenphone. Ask yourself if you are willing to learn what it takes to Implement long guides like this on a PinePhone.
https://theprivacyguide1.github.io/linux_hardening_guide
For your use case you would be served well with Genode Sculpt OS on a pinephone. It's not very smart and its Microkernel design is the holy grail of Secure OS design. It can send SMS as far as I know. I'm sure you could even ask someone in the community to assist you with stripping out what few features you don't want in it. That would of course require some kind words, ideally coupled with a donation to the project. You should be very happy with Sculpt OS If what you want is a Secure, Private Open source software Stack on reasonably open hardware, and all you want is SMS. Of course I assume you know SMS is trash and should be avoided if ever possible. Don't use this phone inside your house if you want it to stay private.