If you don’t read the code, how will you find the backdoors? As for using libpurple to handle SMS passed over a D-Bus interface... I have concerns. Going up against the pinephone web renderer and jscript engines seems difficult, the radio interface layer is best bet for a good RCE, either Linux Bluetooth / WiFi or some telephony stack bug in handling SMS/MMS. The hardware decisions around the baseband make it more difficult to reach OS from the RIL, but libpurple? It’s more holy than the Pope.

Sign in to participate in the conversation

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!