Talk:MaemoSecurity
(add question about end user availability) |
(→How does closed mode affect on-device debugging?: new section) |
||
| Line 36: | Line 36: | ||
* PIM data encryption ? | * PIM data encryption ? | ||
* encrypted/signed communications (phone, sms/mms, mails, IM) ? | * encrypted/signed communications (phone, sms/mms, mails, IM) ? | ||
| + | |||
| + | == How does closed mode affect on-device debugging? == | ||
| + | |||
| + | For example, will ptrace(2) still work (eg gdb, strace & ltrace)? Will we be able to produce code dumps? | ||
Revision as of 09:21, 12 October 2009
Suggested questions:
Is there a diagram showing the security framework and components?
There were some diagrams in the presentation - can we see them.
What is "Open Mode" and can it be revoked remotely?
Is that the right terminology? Essentially can Nokia reach out the the 2nd stage bootloader and tell it to stop running unsigned kernels. Maybe this should be 2 questions.
What does closed mode restrict you from doing? Terminal? Root?
How easy is it to switch between Open and Closed modes?
Can network operators restrict you switching to Open mode?
Like if a device is sim-locked to a particular network, does the device get locked down in closed DRM mode only too? Can you always switch to open mode?
How granular is the encryption?
If my app creates content in the closed mode can I see it in open mode?
Can open applications use the privilege mechanisms in the Open and Closed modes?
Can open applications use the DRM encryption mechanisms in the Open and Closed modes?
I can see that this could be useful. Maybe.
Will community extensions to the kernel (modules) be permitted in Open/Closed modes?
I can't see how - which leads to the question: How do community 'enhancements' to the kernel get adopted?
Is there any GPLv3 software impacted?
Please have a license discussion somewhere and let us know when you have consensus. What is Nokias position? Peter made a statement at the talk - can someone transcribe it and/or get Nokia to clarify.
What exactly is available to the end user?
- storage encryption ?
- PIM data encryption ?
- encrypted/signed communications (phone, sms/mms, mails, IM) ?
How does closed mode affect on-device debugging?
For example, will ptrace(2) still work (eg gdb, strace & ltrace)? Will we be able to produce code dumps?