Navigation

    UBports Robot Logo

    UBports Forum

    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Search

    Let's talk about security

    General
    2
    3
    752
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • advocatux
      advocatux last edited by

      Does anyone know where I can find a UBports security roadmap?

      For example, when people download something (like images) there isn't a way to check the integrity of the software. Is there any plan to implement checksums?

      Or asking in a more general way, what's the plan to keep UBports phone secure?

      1 Reply Last reply Reply Quote 0
      • U
        UniSuperBox last edited by

        We actually inherited a lot of image verification from Canonical by setting up system-image.

        You can read about the GPG validation chain here: https://wiki.ubuntu.com/ImageBasedUpgrades/GPG

        advocatux 1 Reply Last reply Reply Quote 0
        • advocatux
          advocatux @UniSuperBox last edited by

          @UniSuperBox, thank you for the reply.

          Yes, I know about the GPG validation chain, and I'm confident about the communication phone-server and vice versa for the official issues, so to speak.

          I'm more interested in how to check integrity when downloading one of these images [0] directly, or in the security check of all those apps people are developing and uploading to the openstore, and things like that [1]. That's why I asked about the plan to keep UBports secure.

          [0] http://cdimage.ubports.com/devices/
          [1] Some people already tried to sneak malicious apps into the "old" Ubuntu Store.
          https://insights.ubuntu.com/2015/10/15/update-on-ubuntu-phone-security-issue/

          1 Reply Last reply Reply Quote 0
          • First post
            Last post