View Single Post
Feathers McGraw's Avatar
Posts: 654 | Thanked: 2,368 times | Joined on Jul 2014 @ UK
#114
Originally Posted by rinigus View Post
cut the beginning of the quote, although it was spot on.
Thanks, nice to know I'm not the only one thinking it.

Now, if you sprinkle your concerns with the closed source components that happen to be dealing with your input (keyboard), communication with your accounts, I am not sure you need that much telemetry to get lots of data regarding the users. And that's a part where owners may play a decisive role.
Exactly. Also even for the open source components, as long as everyone is using packages and binaries built by Jolla, "Jolla has root". You really have to trust your distro maintainer.

There are some things I don't like about Purism's approach to the software for the librem5, but I expect basing their distro on Debian makes it much easier for third parties to build their OS starting from a trusted base provided by someone else, so you wouldn't have to build absolutely everything - you could conceivably build " just" the UI parts from source. Mer seems to be a bit of a clusterf*ck of old packages based on the GPLv2 vs GPLv3 thing, and where do you get a mer image from if you don't trust Jolla? Much shorter list.
 

The Following 7 Users Say Thank You to Feathers McGraw For This Useful Post: