-
- 310
By the way I think a bigger leak would be another comment I made in ago CC forum. I won�t repeat but it addresses hyperviser.
Posted via CB1008-22-15 11:22 PMLike 0 -
- 1,503
-
- 559
Your grasping at straws rather than accepting the obvious. I hope Crackberry has grief counselors on staff when the slider is announced with android and a suite of BlackBerry apps pre-installed with no qnx kernel or HYPERVISOR to be found
Posted via CB1008-23-15 12:20 AMLike 4 -
- 1,503
-
- 5,368
-
- 4,068
This is what Google has to say about Android security and the security of the Linux kernel:
https://source.android.com/devices/t...-security.html
Why, in plain English, is Google wrong such that QNX would be an improvement?
Posted via CB1008-23-15 08:14 AMLike 0 -
- 5,368
Or more straight forward - why does a company (Google) that believes that it's product is superior make this change?This is what Google has to say about Android security and the security of the Linux kernel:
https://source.android.com/devices/t...-security.html
Why, in plain English, is Google wrong such that QNX would be an improvement?
Posted via CB10
Sent from my LG-D802 using Tapatalk08-23-15 08:22 AMLike 0 -
- 13
Interesting think piece.As you know, Android is made of Linux + Google userland (bionic + SurfaceFlinger + AudioFlinger + other things) + ART and sandbox + APPS. The MADA you love [...] has a laundry list of conditions that must be fulfilled by the manufacturer, like putting Google search front and center, installing some Google apps, passing the Android Compatibility Test and the f) letter in the 2.2 point, License Grant Restrictions: "(f) take any aclfons that may cause or result in the fragmentation of Android, including but not limited to the distribution by Company of a software development kit (SDK) derived from Android or derived from Android Compatible Devices and Company shall-not assist or encourage any third party to distribute a software development kit (SDK) derived from Android, or derived from Android Compatible Devices" (emphasis by me).
As you know, no mobile manufacturer who wants to run Android, not even the mighty Samsung, has a kernel. Citing only operating systems with Android runtimes:
- Tizen is Linux + Linux userland (glibc + Wayland + PulseAudio) + Enlightenment Foundation Libraries + Tizen apps + Android compatibility libraries.
- Sailfish is Linux + Linux userland (glibc + Wayland + PulseAudio) + Qt 5 + Sailfish apps + Android runtime.
As I said: no one has a kernel. No one, except BlackBerry.
There is nothing in the MADA that prevents BlackBerry from shipping this: QNX Neutrino + QNX userland and display engine + ART (ported to QNX userland) + Android Apps. If you want to comply with MADA you only have to a) put Google Apps front and center; b) comply with the Android Compatibility Tests.
Legally speaking, though, what is different about this QNX set-up from the Tizen en Sailfish examples? Both appear identical in the sense they are Android 'derivatives'. To clarify, is your argument that since it would "look like Android and act like Android", Google would let it pass because it would not "contribute to fragmentation"? Or am I missing the point?
Second question: where do Google Play Services live? Are they basically an app that lives on top of the OS (and it's "userland") and relies on ART, like all others? Or does it have deeper reach and special access to the kernel and/or the userland rendering machines (that would have no equivalent in the QNX set-up)?
I would assume that Google wouldn't like an faux-Android that cripples its services, since that's kind of in important element in their business model.08-23-15 10:33 AMLike 0 -
- 194
1. More than "look like Android and act like Android", it's about using the Google Launcher front and center, with some tweaks to accommodate peak, flow and the Hub. An Android APK. All relevant tweaks are hidden from view, in this scenario.Interesting think piece.
Legally speaking, though, what is different about this QNX set-up from the Tizen en Sailfish examples? Both appear identical in the sense they are Android 'derivatives'. To clarify, is your argument that since it would "look like Android and act like Android", Google would let it pass because it would not "contribute to fragmentation"? Or am I missing the point?
Second question: where do Google Play Services live? Are they basically an app that lives on top of the OS (and it's "userland") and relies on ART, like all others? Or does it have deeper reach and special access to the kernel and/or the userland rendering machines (that would have no equivalent in the QNX set-up)?
I would assume that Google wouldn't like an faux-Android that cripples its services, since that's kind of in important element in their business model.
This goes far beyond what Tizen or Sailfish developers are going to swallow.
Also, there's the political argument: Tizen was made because Samsung wants to relinquish control of its phones, *from* Google, so an agreement with Google in that scenario is anathema. In Sailfish the argument began political (all Sailfish devs are FOSS veterans and so they want to open up everything, except Silica and the Sailfish launcher [Silica is the UI library, think about Cascades in BB10] ), and now is GEOPOLITICAL (a month ago a deal was reached between Jolla and the Russian government, so Russia will promote and use Sailfish and the Yandex services; it's quite logical to see why Putin doesn't want to be close to Google)
2. GPS is an app. If you have a valid Android license, you can install Google Play in Android 2.3 or higher, and this is even possible through Android Market (when you upgrade Android Market to Google Play Store, the upgrade process can install Google Play Services as needed). It sits above the ART and inside the sandbox.
BTW, do not confuse the userland (libraries that are needed to run Android like bionic; the display engine SurfaceFlinger, the audio library AudioFlinger, and system daemons) with apps running inside the sandbox. If you see Android as a full operating system, you might confuse yourself. See Android as a gigantic program running inside the Google userland, that can run applets.
Wide vision, from Chile.Last edited by Alejandro Nova; 08-23-15 at 01:11 PM.
SirQ likes this.08-23-15 01:00 PMLike 1 -
- 194
-
- 1,503
Tizen and sailfish both use the Linux kernel.Interesting think piece.
Legally speaking, though, what is different about this QNX set-up from the Tizen en Sailfish examples? Both appear identical in the sense they are Android 'derivatives'. To clarify, is your argument that since it would "look like Android and act like Android", Google would let it pass because it would not "contribute to fragmentation"? Or am I missing the point?
Second question: where do Google Play Services live? Are they basically an app that lives on top of the OS (and it's "userland") and relies on ART, like all others? Or does it have deeper reach and special access to the kernel and/or the userland rendering machines (that would have no equivalent in the QNX set-up)?
I would assume that Google wouldn't like an faux-Android that cripples its services, since that's kind of in important element in their business model.
QNX is a proprietary kernel that blackberry controls and signs with their own signing key. The Linux kernel is open source, making it possible to find privilege escalation exploits that allow you to gain root access to the device.
GPS is a service meaning it runs headless in the background and is essentially an API that applications can tap into and utilize in order to make things that would typically be very complex and require lots of coding as simple as a 1 line API call.
Posted via BlackBerry Passport Silver Editiongvs1341 likes this.08-23-15 08:02 PMLike 1 -
- 194
Linux is MORE secure because of its open source nature, not less. Security through obscurity is the biggest lie on Earth, and closed source software get compromised more than open source software (just look at Windows!). It's just the Google sandbox system is unsafe. S**t like this shouldn't be able to even RUN on a properly configured sandbox, and the fact it runs (no, forbidding it in the Google Play Store isn't a solution) is quite troubling.Tizen and sailfish both use the Linux kernel.
QNX is a proprietary kernel that blackberry controls and signs with their own signing key. The Linux kernel is open source, making it possible to find privilege escalation exploits that allow you to gain root access to the device.
Posted via BlackBerry Passport Silver Edition
SELinux Mode Changer APK (1.5M) - Download SELinux Mode Changer 1.2 APK for Android
It looks like (I'm going full speculation) BlackBerry has used hardware to protect its boot sequence from START TO END, something nobody else does, you know, for cost reasons. When you turn on your BlackBerry, your device key (I'm again speculating) decrypts the boot loader. Your device key is a hardware key, unique, stored in your TPM chip, validated by BlackBerry before your phone reaches your hands, and linked to your PIN number. The decrypted boot loader contains the BlackBerry key used to decrypt on the fly all your system images. Your BlackBerry has a slow boot because it doesn't load the operating system, it decrypts all of it on the fly and leaves all of it in memory. This is a SOUND design, and nothing can beat a good design.
The only way to crack this, is to get an electronic microscope and watch the 1s and 0s in your TPM chip. And, if you root one BlackBerry, you will have to endure the same pain to root your second BlackBerry, and your third one. Just don't expect "One-Click Root" buttons.
Do you REALLY believe any Android manufacturer wants to do something like this to protect a boot sequence? They a) have the keys stored in software, b) don't really encrypt anything in the boot process, c) don't have enough RAM to fully store Android on memory and so, don't encrypt their images for performance and cost reasons, d) have massive holes in their firmware, or e) a combination of the above. They don't care. They sold you the phone, they have your money, and the only people who really are interested in securing your phone are the phone carriers who want to restrict you and to force feed you load after load of bloatware. So there you have the need to become root, and even the right to become root. Systems like Knox, who focu on punishing users instead of really facing the problem, don't work and can't work either.08-23-15 08:55 PMLike 4 -
- 23,656
-
- 23,656
08-23-15 09:38 PMLike 1 -
- 15
-
- 194
Specifically that phone: Android 5.1, stock, no addons, with Linux kernel and nothing else. However, that doesn't say much: the guy clearly states there are only 4 prototypes in the world with this setup, that he got this phone from Canada, and he *hopes* to see BlackBerry with Android.
After the images I saw of the N9 and Lumia 800 running Jelly Bean stock, nothing amazes me.08-24-15 12:03 AMLike 0
- Forum
- Android BlackBerry Phones & OS
- BlackBerry Priv
Another theory.
« BlackBerry Android device
|
BlackBerry Venice - For sale in China from Taobo.com - Pricepoint 686$ - 764$ »
Similar Threads
-
A Conspiracy Theory Group
By PWY888 in forum Discover BBM GroupsReplies: 36Last Post: 05-14-16, 09:03 PM -
Can I set up more than one BlackBerry ID and still own BBW appps purchased with another ID?
By bhoqeem in forum BlackBerry WorldReplies: 10Last Post: 08-21-15, 07:00 AM -
Is it okay to buy another BlackBerry?
By dreamz_gaurav in forum Ask a QuestionReplies: 16Last Post: 08-18-15, 07:25 PM -
Microphone being used by another app ??
By Mr Bigs in forum BlackBerry PassportReplies: 3Last Post: 08-17-15, 11:00 PM -
Another Happy Blackberry Ending
By HereticHermit in forum BlackBerry PassportReplies: 5Last Post: 08-16-15, 01:07 AM
LINK TO POST COPIED TO CLIPBOARD