195
this post was submitted on 03 Oct 2024
195 points (97.6% liked)
DeGoogle Yourself
8856 readers
87 users here now
A community for those that would like to get away from Google.
Here you may post anything related to DeGoogling, why we should do it or good software alternatives!
Rules
-
Be respectful even in disagreement
-
No advertising unless it is very relevent and justified. Do not do this excessively.
-
No low value posts / memes. We or you need to learn, or discuss something.
Related communities
!privacyguides@lemmy.one !privacy@lemmy.ml !privatelife@lemmy.ml !linuxphones@lemmy.ml !fossdroid@social.fossware.space !fdroid@lemmy.ml
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
You're right that it's pure speculation just based on technical possibilities and I hope you're right to think it should be dismissed.
But with the way microchip design (it wouldn't be at the PCB level, it would be hidden inside the SoC) and manufacturing work, I think it's possible for a small number of people to make this happen, maybe even a single technical actor on the right team. Chips are typically designed with a lot of diagnostic circuitry that could be used to access arbitrary data on the chip, where the only secret part is, say, a bridge from the cell signal to that diagnostic bus. The rest would be designed and validated by teams thinking it's perfectly normal (and it is, other than leaving an open pathway to it).
Then if you have access to arbitrary registers or memory on the chip, you can use that to write arbitrary firmware for one of the many microprocessors on the SoC (which isn't just the main CPU cores someone might notice has woken up and is running code that came from nowhere), and then write to its program counter to make it run that code, which can then do whatever that MP is capable of.
I don't think it would be feasible for mass surveillance, because that would take infrastructure that would require a team that understands what's going on to build, run, and maintain.
But it could be used for smaller scale surveillance, like targeted at specific individuals.
But yeah, this is just speculation based on what's technically possible and the only reason I'm giving it serious thought is because I once thought that it was technically possible for apps to listen in on your mic, feed it into a text to speech algorithm, and send it back home, hidden among other normal packets, but they probably aren't doing it. But then I'd hear so many stories about uncanny ads that pop up about a discussion in the presence of the phone and more recently it came out that FB was doing that. So I wouldn't put it past them to actually do something like this.
Why would this only be present in Pixels then? Google isn't interested in specific people. Intelligence agencies are. This would mean, that every phone in the world needs to be compromised using this sophisticated, stealthy technology, which is even more unlikely.
If it is present there, it doesn't imply it's only present there.
And we really have no idea how close of a relationship Google, or any other corp for that matter, has with various intelligence agencies. Same thing with infiltrations by intelligence agencies.
And no, it doesn't mean that every phone in the world is compromised with this, which wouldn't be that sophisticated, just stealthy. The sophisticated part would be part of the normal design process, it's called DFT or design for test if you want to read about it, used legitimately to determine what parts of the chip have manufacturing flaws for chip binning.
Most phones don't have an unlocked bootloader, and this post is about the data Google is pulling on factory pixels.
Why would they do all the work on the software side and then themselves offer a device that allows you to remove their software entirely? And if it's worth it just from the "make more money from people who only want unlocked phones", why isn't it more common?
Mind you, my next phone might still be a pixel. Even if this stuff is actually there, I wouldn't expect to be targeted. I can't help but wonder about it, though, like just how deep does the surveillance or surveillance potential go?
Ok let's assume this is true, and US intelligence agencies have actually backdoored all US phone manufacturers. What about foreign phones? If this was true, someone the NSA is interested in could just defend themselves by e.g. buying a Chinese phone. All this effort, just to be defeated by foreign phone manufacturers? It wouldn't be worth it, which is why it's so highly unlikely.
This argument assumes that they'd only do something if they could get perfect coverage, which isn't very compelling for me. IMO the question should be "would it give enough access to more information to be worth it", not "it's only worth it if it gives access to all information".
And, as the other commenter mentioned, it is difficult to get some Chinese phones, though not impossible and if this whole line of thought plays into that, the reasoning is probably as much about cutting off their access to this kind of thing as it would be about making it harder to avoid western agencies doing this. They've said the first one out loud (they being politicians justifying blocking Huawei), and wouldn't have said the second part either way.
Doing this and not covering like half of the phones out there would be even dumber, and way too risky. It's not just about Chinese phones, the most popular smartphone vendor, Samsung, is from South Korea. Yeah, South Korea is a US ally, and the NSA might have some kind of crazy deal in place with them to backdoor their phones, but that would exponentially increase the risk, as not only would the NSA and all the US phone manufacturers have to keep this a secret, the South Korean government as well as Samsung, which is a massive corporation with hundreds of thousands of employees, would also have to make sure that none of this gets leaked to the public. This is way too unrealistic, and can easily be dismissed as a conspiracy theory.
I think you're greatly overestimating the number of people who would need to be involved. It could be done by one person in the right RTL design position. ASIC validation doesn't involve exhaustively searching for any backdoors that bridge between something accessible with low privileges to something that is supposed to require higher privileges.
And if someone else did notice that, there's a good chance it would just be a "thanks for reporting that, I'll fix it" without a root cause investigation about how it got there, especially if it gets reported to the one who put it there in the first place.
Well to this point (I don't 100% believe this flavor of state surveillance theory but) you cannot buy phones made my foreign manufacturers ~~and have them work in the US. For example, Oppo, Huawei, Xiaomi, all do not work on USA cell networks, and~~ you can't buy them unless you go through an import process. Just to name a few of the many. But granted, those are all Chinese manufacturers. EDIT** I was wrong, apparently with the right settings you can get most phones to work on US cell networks
Wait what? Is that actually true? What if you are a foreigner visiting the US and bring your e.g. Oppo phone with you? You can't use it? Even with a foreign SIM?