maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   SailfishOS (https://talk.maemo.org/forumdisplay.php?f=52)
-   -   Sailfish on Turing Phones? (https://talk.maemo.org/showthread.php?t=96413)

juiceme 2016-02-10 16:57

Re: Sailfish on Turing Phones?
 
Quote:

Originally Posted by gaelic (Post 1498413)

Ah well, @r0kk3rz beat me to it.
If you had managed to read thru the aforementioned article you'd seen that to get to the recovery console you need to input the device PIN.

Granted, you are probably able to brute-force it, given there are probably just 00000...99999 -> 100k combinations there. (I don't remember if it allows use of longer lock code...)

So, assuming you build a small HW adapter that you can use to power-down/power-up the device automatically when it halts due to 3 wrong try's, and hook it up to a script trying to force it.
Let's say you will discover it on average by the 50000's try;
If it takes about 30 seconds to boot, and you can try 3 numbers per round, you will hit the right combo in 30/3*50000 seconds, that is actually a little more than 5 days and 18 hours.

So, yes, it is breakable if you want to invest a bit into it :D

MikeHG 2016-02-10 17:06

Re: Sailfish on Turing Phones?
 
Quote:

Originally Posted by endsormeans (Post 1498412)
Yes it does ...
In fact I love this cartoon...
explains things best nowadays..
but ...
from "the Christian Science Monitor" ?!?!?!
:D

CSM are actually highly respected. 7 Pulitzer prizes isn't to be sniffed at...

https://en.wikipedia.org/wiki/The_Ch...cience_Monitor

pichlo 2016-02-10 18:02

Re: Sailfish on Turing Phones?
 
Quote:

Originally Posted by javispedro (Post 1498395)
How many "mortal person" security issues are exactly prevented with full device encryption? Virtually the only ones I can think of are the of the "government employee with nation-wide secrets" variety, where the attackers care enough to actually desolder eMMC chips. But for those you have to take into consideration how probable it is for a government-level agency to be able to break any crypto you throw at them...

http://imgs.xkcd.com/comics/security.png

Quote:

This is the reason most known "privacy-unfriendly" (*cough*) are quite happy to offer full device encryption. It thwarts almost no one.
By the same reasoning, what's the point of locking my car. Or my front door. It thwarts almost no one.

hhbbap 2016-02-10 18:52

Re: Sailfish on Turing Phones?
 
Quote:

Originally Posted by JulmaHerra (Post 1497842)
At least this part:

Additionally, I have come into possession of a Facebook post shared with what I assume are prospective corporate customers, in which Turing's CEO claims the company has bought a manufacturing facility ("ex-Microsoft ex-Nokia") in Finland to produce its devices.

I'm not aware of any such facility been bought or sold here. Nokia's manufacturing facilities were shut down years ago and with it went big part of contractors supplying that factory. I'm not aware of any other facility here that would be ready to build such devices in mass.

BTW: Puzzlephone also state they will manufacture in Finland.

gerbick 2016-02-10 18:55

Re: Sailfish on Turing Phones?
 
Quote:

Originally Posted by hhbbap (Post 1498443)
BTW: Puzzlephone also state they will manufacture in Finland.

Forgive the potentially ignorant question; but I thought the crowdfunding endeavor failed? Did they secure funding elsewhere?

juiceme 2016-02-10 19:07

Re: Sailfish on Turing Phones?
 
Quote:

Originally Posted by juiceme (Post 1498431)
Ah well, @r0kk3rz beat me to it.
If you had managed to read thru the aforementioned article you'd seen that to get to the recovery console you need to input the device PIN.

Granted, you are probably able to brute-force it, given there are probably just 00000...99999 -> 100k combinations there. (I don't remember if it allows use of longer lock code...)

So, assuming you build a small HW adapter that you can use to power-down/power-up the device automatically when it halts due to 3 wrong try's, and hook it up to a script trying to force it.
Let's say you will discover it on average by the 50000's try;
If it takes about 30 seconds to boot, and you can try 3 numbers per round, you will hit the right combo in 30/3*50000 seconds, that is actually a little more than 5 days and 18 hours.

So, yes, it is breakable if you want to invest a bit into it :D

What I forgot to mention, the same procedure works also on an iPhone that has full memory encryption enabled;
http://blog.mdsec.co.uk/2015/03/brut...nlock.html?m=1

So that much for security. huh...

HtheB 2016-02-10 19:23

Re: Sailfish on Turing Phones?
 
Seriously guys... forget about all the security and encryption stuff...

Why can't be just be happy that a company actually choose Sailfish OS instead of Android?

It's the first licensed High end device using Sailfish OS.

JulmaHerra 2016-02-10 19:57

Re: Sailfish on Turing Phones?
 
Quote:

Originally Posted by gerbick (Post 1498444)
Forgive the potentially ignorant question; but I thought the crowdfunding endeavor failed? Did they secure funding elsewhere?

They have received funding from European Union and Tekes

JulmaHerra 2016-02-10 20:04

Re: Sailfish on Turing Phones?
 
Quote:

Originally Posted by hhbbap (Post 1498443)
BTW: Puzzlephone also state they will manufacture in Finland.

Yes, I noticed that. Tried to look up where that plant would be, there is also conflicting statement in their web page about it - in one page they say made in Finland, but on the other page it's designed in Finland and made in Europe. So I really don't know, however, there has been no information about changes in ownership of manufacturing plants. Perhaps if/when volumes are very small, they can be manufactured here in some of the smaller factories.

gerbick 2016-02-10 20:10

Re: Sailfish on Turing Phones?
 
Quote:

Originally Posted by JulmaHerra (Post 1498453)
They have received funding from European Union and Tekes

Thank you. Totally missed this somehow.


All times are GMT. The time now is 16:54.

vBulletin® Version 3.8.8