The Evolution of Smartphone Security
Randy Siegel
Latest posts by Randy Siegel (see all)
- Flipping the Script: Exploring New Paradigms in Secure Mobile Computing - August 22, 2024
- Phone Kernel Development at Purism - August 19, 2024
- The Evolution of Smartphone Security - August 7, 2024
When smartphones first emerged in the early 2000s, the attack surface was relatively small. Devices were primarily used for Personal Information Management (PIM) such as calls, texts, email, calendaring, and basic internet browsing.
However, the landscape changed dramatically with the introduction of the iPhone and Android platforms in 2007. These devices brought about a revolution in mobile computing but also introduced significant privacy and security concerns.
Modern smartphones are essentially data collection machines. They continuously gather and transmit data, often without the user’s explicit consent. This data includes everything from location information to personal communications, making smartphones a prime target for malicious actors. Software-based security measures, while essential, are not foolproof. They can be bypassed or exploited, leaving users vulnerable.
The Case for Hardware-Based Kill Switches
Hardware-based kill switches offer a robust solution to these security challenges. Unlike software toggles, which can be overridden or manipulated, hardware kill switches physically disconnect the power to specific components, such as the cellular modem, camera, microphone, Wi-Fi, and Bluetooth.
At Purism, we integrate these switches in hardware and make it easy to physically separate components of our devices. This helps to ensure that these components cannot be activated without the user’s knowledge or consent.
For instance, Purism’s Librem 5 smartphone features three hardware kill switches that allow users to disable the camera, microphone, and network connectivity entirely. This level of control is crucial for maintaining privacy and security, especially in sensitive environments.
Benefits of Hardware Security with a US Based ODM/OEM
Hardware security is helpful for the general society and critical for government employees including members of the intelligence community whom often handle sensitive information that, if compromised, could have severe consequences. At Purism, we manufacture devices to our own specifications using our own schematics – meaning we are both the ODM and OEM (Original Design Manufacturer/Original Equipment Manufacturer). Our Liberty phone leverages made-in-the-USA electronics components, and the supply chain is entirely under our control as compared to most “contract” manufacturers (who are often totally reliant on overseas fabrication).
As CNBC properly states it, Purism is the only US Phone manufacturer.
At Purism, the term commercial off-the-shelf (COTS) is a bit misleading in that we design both our off the shelf devices and our more tailored/composed devices alike with security and privacy as a primary focus from design to fabrication. What might be considered “custom” to most manufacturers is built-in to Purism devices. Security is not an afterthought with Purism… It’s designed and built in from the ground up!
Since Purism’s goals as a social purpose company are to increase security, privacy and freedom, it is typically at odds with the big tech controlled, “mass-market” approach to producing low-cost devices. The latter is essentially “selling razor blades rather than razors” in that their business model is more about selling applications from “app” or “play” stores. This model is famously associated with King Gillette, who sold razors at a low price to drive sales of the more profitable razor blades.
The primary product (smartphones) hooks the customer, while the consumables (applications/services) ensure a steady stream of revenue.
For virtually all other smartphone ODMs and/or OEMs, the amount of forethought that Purism puts in at the very beginning is more than they care to contemplate, much less execute. They are principally and perhaps solely motivated to produce mass market devices. Since when was a mass market device particularly concerned with security, privacy and freedom? It can be argued that the mass market, big-tech sponsored ODM/OEMs have a vested interest in not protecting individual rights such as privacy. After all, this is one way that they monetize consumers of their devices and associated platform ecosystems.
Additional Layers of Security
Hardware-based kill switches, hardware security tokens, and hardware isolation—all built-in to the Purism Liberty Phone—provide additional layers of security that are essential for all secure environments.
Enhancing User Trust and Control
Beyond the technical benefits, hardware kill switches also enhance user trust and control. In an era where data breaches and privacy violations are increasingly common, giving users the ability to physically control their device’s components is empowering. It reassures them that their privacy is protected, even in the face of potential software vulnerabilities.
Moreover, hardware kill switches align with the broader philosophy of user freedom and control that companies like Purism advocate. By prioritizing privacy and security, we can build devices that respect user autonomy and foster a more secure digital ecosystem.
As we continue to navigate the complexities of the digital age, the importance of robust security measures cannot be overstated. Hardware-based kill switches represent a critical advancement in smartphone security, offering unparalleled protection for both individual users and organizations. By integrating these features into our devices, we can ensure that privacy and security remain at the forefront of mobile technology.
Purism Products and Availability Chart
| Model | Status | Lead Time | ||
|---|---|---|---|---|
 | Librem Key (Made in USA) | In Stock ($59+) | 10 business days | |
 | Librem 5 | In Stock ($699+) 3GB/32GB | 10 business days | |
| Librem 5 COMSEC Bundle | In Stock ($1299+) Qty 2; 3GB/32GB | 10 business days | |
| Liberty Phone (Made in USA Electronics) | Backorder ($1,999+) 4GB/128GB | Estimated delivery date pending | |
| Librem 5 + SIMple (3 GB Data) | In Stock ($99/mo) | 10 business days | |
| Librem 5 + SIMple Plus (5 GB Data) | In Stock ($129/mo) | 10 business days | |
| Librem 5 + AweSIM (Unlimited Data) | In Stock ($169/mo) | 10 business days | |
 | Librem 11 | In Stock ($999+) 8GB/1TB | 10 business days | |
 | Librem 14 | Backorder ($1,370+) | Estimated delivery date pending | |
 | Librem Mini | Backorder ($799+) | Estimated delivery mid-October | |
 | Librem Server | In Stock ($2,999+) | 45 business days |
Recent Posts
Related Content
- Flipping the Script: Exploring New Paradigms in Secure Mobile Computing
- Phone Kernel Development at Purism
- The Evolution of Smartphone Security
- PureOS Crimson Development Report: July 2024
- Hardware Based Security For Government
