Android: Details zu UnaOS
Daniel hat den Machern von UnaOS mal einen kleinen Fragebogen zugesandt. Hier sind die Fragen inklusive Antworten:
Q: Is the Bootloader unlockable?
A: The bootloader in not unlockable
Q: Is it possible to install Apps from FDroid?
A: No apps from FDroid or any other source are installable
Q: Is there any firewall in place for Blocking IP-Ranges?
A: A firewall is in place for additional IP managing
Q: Is there any Privacy Manager in Place like XPrivacy?
A: A security center with privacy manager is present
Q: Is the CPU a Mediathek Helios P10? If not which CPU are you using?
Cores and MHz alone doesn’t tell much
A: The SoC is a Mediathek Helios P10
Q: Are you splitting Lockscreen Password from the boot password and
additionally forcing the phone to shut down after X tries?
A: Lockscreen password and boot password are separated and after 5 wrong
unlock attempts the device wipe all the content
Q: Is there anything done in terms of baseband hardening, baseband
isolation or IMSI catcher detection?
A: The baseband is hardened and also isolated with a specifica „paranoid
mode“ system. IMSI, SS7 and silent SMS detection are in place
Q: Which Apps are you Shipping? Are all of them OpenSource?
A: All apps are open sorce, and modified by our developers, and per our
security and privacy requirements. A detailed list will be published
soon on out website.
Q: How long will you support the OS in terms of security updates?
A: The device will be supported and updated as long as possible.
Folgende Fragen wurden nicht beantwortet:
- Which Kernel Version are you using on the OS?
- What did you Guys do for Kernel Hardening? There are no technical
Details at all on your Page. Are you porting PAX and grsecurity to ARM? - What additional security tweaks will be implemented? There are no
technical Details on the Page! - Is the Device Encryption the Android Stock one or are you Guys
implementing something more secure for Storing the Encryption Key?
Zum Abschluss gab es noch folgende Antwort:
All the other questions will be answered in the near future, on the publication of our white papers, but after the scrutiny of our device by an independent and well known international Institute. Since your questions are quite specific, we would like to know more about you and your interest in those details. If you may present yourself it would be much appreciated.
Danke an Daniel!
Facebooks Daten-Blowouts: Eine Verständnisbrücke Teil1
Rückmeldung von Daniel Micay: GrapheneOS-Entwickler
Android: Security-Checkliste für sichere App-Entwicklung
Das in der Corona-Pandemie viel zitierte Beispiel Südkorea – eine Datenschutz-Analyse
