maemo.org - Talk - [ANNOUNCE] Device-lock In Openmode for N9/N950 !!

maemo.org - Talk (https://talk.maemo.org/index.php)

- MeeGo / Harmattan (https://talk.maemo.org/forumdisplay.php?f=45)

- - [ANNOUNCE] Device-lock In Openmode for N9/N950 !! (https://talk.maemo.org/showthread.php?t=92465)

Yosh :D
More cool n elegan with Device-Lock :) :D

Re: [ANNOUNCE] Device-lock In Openmode for N9/N950 !!

Quote:

Originally Posted by HtheB (Post 1407641)

I would like to announce something that bothered me for a loooong time: No devicelock on openmode

This is now to the past :)
After some hard work, here it is guys!

How to install:

in open mode run as root (assuming you've put the deb file in MyDocs):

Code:

cd /home/user/MyDocs

AEGIS_FIXED_ORIGIN=com.nokia.maemo dpkg -i devicelock_0.8.5+0m7_armel.deb

(reboot after installtion)

Enjoy your lockable device! :)

Hi HtheB,

It look like many people asked you for source code (seem legit since we touch to security of the device here).

Reading all this thread, I don't see any answer from you.

Can you answer if you are able to get the source code of modifications or not ?

Regards,

A++

Re: [ANNOUNCE] Device-lock In Openmode for N9/N950 !!

Quote:

Originally Posted by colin.stephane (Post 1495378)

I really don't have the sources... :(
The truth is: I've got it from some forest cat... deeeeep deep inside the woods....
But the package is trustable if that concerns you

Re: [ANNOUNCE] Device-lock In Openmode for N9/N950 !!

Quote:

Originally Posted by HtheB (Post 1495397)

I really don't have the sources... :(
The truth is: I've got it from some forest cat... deeeeep deep inside the woods....
But the package is trustable if that concerns you

The fact remains; unfortunately you just cannot trust it unless some base conditions are fulfilled:

You more or less have to trust a security package if it comes from the original manufacturer. (means it is signed by Nokia)
Even in this case it just depends if you trust the manufacturer, as quite a few people don't...
You can almost certainly trust a package if the source code is available and you can compile it yourself.
Even in this case it is possible you have a breach, for example your compiler toolchain may be compromised...

When an important security related package comes "from some forest cat... deeeeep deep inside the woods" it most certainly cannot be trusted.

There are a high number of possibilities to go wrong;

the package might be compromised
the software might have exploitable bugs
the package might be incompatible with some firmware or installed software