It’s interesting that fitbit did so poorly. I recently picked one up and it seems to track pretty well when I’m weightlifting. The numbers are close to what I was getting when calculating by hand prior to getting the tracker.

Agreed, and same with scales. I dont trust the number on my bathroom scale 100%, but as long as it reads consistently so I can track patterns that is what matters, even if the number itself isn’t perfectly accurate. Same goes for calorie tracking via a nutrition app. The aggregate of all this information has a nice intersection that I can treat as a generally reliable idea of how I’m doing.

100% agree with you, for who I am and what I do I know that I need a device that is as tamper resistant as possible with the smallest attack surface feasible. That goes for remote execution as much as the evil maid scenario. But this is entirely catered to my threat model and risk tolerance. And sure there is the possibility of the rubber hose cryptanalysis but that doesn’t mean we should give up on securing as much as possible on the device side. It’s the swiss cheese model and we’re plugging a hole at a time lol

I advocate for everybody to use as secure a device as practical, and for these mitigations to be the default, but I’m fundamentally speaking for myself in this thread with my stance on fairphone and /e/OS right now. I want to support repairability and ethical supply chains too without compromising on my more core tech needs

I get the sense this is sarcastic lol. In my opinion though, privacy without security isn’t very useful. Yes I can avoid corporate or government spying when I’m in physical control of a device like this, but what if I get arrested on some false pretenses and they use cellebrite to gain access? Or the same at an airport when traveling? If you’re any form of political dissident, activist, or a member of a marginalized group, being targeted this way is a very real possibility. And as soon as that insecure but “private” device is out of your hands, all that data is free game for the govt.

I want to love this but I can’t compromise my security for this device. If y’all ever add MTE and the other features required by Graphene I’ll be the first in line

Source: made it the fuck up

I use Instagram to keep up with some friends and family on GrapheneOS AMA

Threat modeling and compartmentalization are a thing

Anecdotally I bought a used pixel 9a last year for ~$350, could be regional or due to ongoing inflation though