maemo.org - Talk
Page 2 of 7 1 2 34 Last »
Show 40 post(s) from this thread on one page

maemo.org - Talk (https://talk.maemo.org/index.php)
-   MeeGo / Harmattan (https://talk.maemo.org/forumdisplay.php?f=45)
-   -   What is aegis [MSSF] and how does it affect Free Software development? (https://talk.maemo.org/showthread.php?t=76635)

momcilo 2011-09-13 09:16
Re: What is aegis and how does it affect Free Software development?
 
Quote:
Originally Posted by javispedro (Post 1087352)
Sadly, the problem with Aegis comes with its policy; currently, you are still to see <sarcasm> "the best of it" </sarcasm> :): its current policy is rather allowing to applications from the unknown source (aka unsigned applications).

How this policy will be in later firmwares is something I don't know. The hints that are in the current firmware's restok.conf file do not look good, but for the time being, I am giving them the benefit of the doubt.
Is it possible to post restok.conf?

So far I've got the feeling that this would allow Nokia (or third party such as ISP) to deny access to certain applications at later time.

That would be so Apple-like.

javispedro 2011-09-13 09:50
Re: What is aegis and how does it affect Free Software development?
 
Quote:
Originally Posted by momcilo (Post 1087358)
Is it possible to post restok.conf?
Posting the full file is probably not Ok, but I posted the interesting fragment here

Quote:
Originally Posted by momcilo (Post 1087358)
So far I've got the feeling that this would allow Nokia (or third party such as ISP) to deny access to certain applications at later time.
That would only work if we were able to sign our own applications -- we are all assuming we are not going to (unless you planned to target Ovi). They do not have any way to identify an unsigned application exclusively, so they can't do that.

Therefore, the only source of nuisance for a free software developer is what is allowed for unsigned applications. So far, even disabling Aegis itself is allowed. But let's see what they have in store.

momcilo 2011-09-13 09:53
Re: What is aegis and how does it affect Free Software development?
 
Quote:
Originally Posted by javispedro (Post 1087380)
Posting the full file is probably not Ok, but I posted the interesting fragment here3


That would only work if we were able to sign our own applications -- we are all assuming we are not going to (unless you planned to target Ovi). They do not have any way to identify an unsigned application exclusively, so they can't do that.
If you refer to http://pastebin.com/KPX88Sgh, that is unavailable.

javispedro 2011-09-13 09:55
Re: What is aegis and how does it affect Free Software development?
 
Quote:
Originally Posted by momcilo (Post 1087381)
If you refer to http://pastebin.com/KPX88Sgh, that is unavailable.
Aw, you'll have to wait until tonight then. But that's not that important, it's just a list of tokens and most probably you'll have no idea what they mean unless you're familiar with Harmattan.

momcilo 2011-09-14 08:12
Re: What is aegis and how does it affect Free Software development?
 
Quote:
Originally Posted by javispedro (Post 1087384)
Aw, you'll have to wait until tonight then. But that's not that important, it's just a list of tokens and most probably you'll have no idea what they mean unless you're familiar with Harmattan.
The more I read about Harmattan and Mobile Simplified Security Framework, the less I like it.

So far I have confirmed that it is true TPM platform, and it seems to be similar to what Motorola did in past.

momcilo 2011-09-14 09:32
Re: What is aegis [MSSF] and how does it affect Free Software development?
 
I've found the most comprehensive overview of goals and security features of MSSF at:

Mobile Simplified Security Framework MSSFv2, by Dmitry Kasatkin, MeeGo Computers, Nokia, at MeeGo Conf, Moscow, Russia, 11.03.2011


Security goals:

Protection of the user
1.1 Disallow loss/stealing of owner's personal data
• E.g mallware sending user's contacts
1.2. Miss-use of the device (unexpected costs)
• E.g mallware sending sms to pay numbers
Protection of the Device
2.1 Must meet regulatory requirements and specification
• Identity protection
2.2 Disallow changing of RF, EM or WiFi tuning values

Protection of the Business
3.1 Disallow braking of the SIM/Subsidy Lock
• Lose of business
3.2 Limit what can be installed on the device
• AT&T variant needs to stay AT&T variant
3.4 To reduce fraud against Business
• False service bills, Device cloning, back-door manufacturing
Enable new services
4.1 Allow services such as Music store or App Store and support copy protection
• Mobile payments and Billing

debernardis 2011-09-14 10:13
Re: What is aegis [MSSF] and how does it affect Free Software development?
 
Thank you very much but I don't want this sort of thing.

danramos 2011-09-14 12:00
Re: What is aegis [MSSF] and how does it affect Free Software development?
 
TC is controversial because it is technically possible not just to secure the hardware for its owner, but also to secure against its owner. Such controversy has led opponents of trusted computing, such as Richard Stallman, to refer to it instead as treacherous computing, and some academic opponents have begun to place quotation marks around "trusted computing" in scholarly texts.[2][3]

The trusted computing platform need not be used to secure the system against the owner. It is possible to leave to the owner rights of authorization and have no centralized authority. It is also possible to build open source stack of trusted modules, leaving for the security chip only the task to guard against unauthorized modifications. Open source Linux drivers exist [4] to access and use the trusted computing chip. However, uncooperative operating systems can misuse security features to prevent legitimate data exchange.

Source: http://en.wikipedia.org/wiki/Trusted_Computing

smegheadz 2011-09-14 13:34
Re: What is aegis [MSSF] and how does it affect Free Software development?
 
Seems like it's more like the current mobile OS's out there. The price to pay for the Service providers to accept it considering how the n900 was easily unlocked from restrictions for example by vodafone. Will wait and see how this develops.

momcilo 2011-09-14 14:14
Re: What is aegis [MSSF] and how does it affect Free Software development?
 
Quote:
Originally Posted by smegheadz (Post 1088188)
Seems like it's more like the current mobile OS's out there. The price to pay for the Service providers to accept it considering how the n900 was easily unlocked from restrictions for example by vodafone. Will wait and see how this develops.
Based on this diagram it looks like the Service provider can completely disable Open Mode (developer mode, which is restricted btw). I think people should be aware of this before buying this phone.

http://i1208.photobucket.com/albums/...ot_process.png


All times are GMT. The time now is 12:24.
Page 2 of 7 1 2 34 Last »
Show 40 post(s) from this thread on one page

vBulletin® Version 3.8.8