Progress update from the Librem 5 hardware department
If they were &quot;entirely&quot; ethical (which is a silly concept but it&#x27;s already been deployed on this thread so I&#x27;ll run with it), they&#x27;d be more up-front about the features and limitations of their security model. So:<p>* Modern phones (and all the flagship phones) have had separation between their basebands and APs for years; a modern smartphone baseband is essentially a USB peripheral.<p>* The two largest smartphone vendors have large, world-class security teams that do things like audit their basebands. Has Purism?<p>* A modern flagship smartphone will have some kind of secure enclave. Apple&#x27;s has dedicated silicon, and an encrypted memory bus linking it to the AP. How does Purism&#x27;s hardware security model compare?<p>* I don&#x27;t know how much Apple and Google spend annually on outside security research for their flagship phones, but it&#x27;s a lot. Who has Purism engaged to evaluate their designs and spot flaws?<p>If you want to use a niche phone as a fashion or political statement, more power to you. But if you try to market that phone as &quot;transparent code is the core of secure systems&quot;, I&#x27;ll take issue with that; it&#x27;s neither a necessary nor a sufficient condition for security.<p>This phone may very well be more &quot;fair&quot; or &quot;ethical&quot; than an iPhone. But if it&#x27;s not as secure as an iPhone, it&#x27;s unethical to claim otherwise.