N950/Aegis-notes - Revision history

nin101: Questions are now bold.

nin101 — Thu, 04 Aug 2011 10:53:42 GMT

Questions are now bold.

← Older revision		Revision as of 10:53, 4 August 2011
Line 8:		Line 8:

	==End Users==		==End Users==
-	Q: What limitations does it pose on software that developers can write for users for the N9.	+	'''Q: What limitations does it pose on software that developers can write for users for the N9. For example, if the developer wants to compile a new kernel with more iptables modules available, or to expose more hardware features, what are the implications?'''
-	For example, if the developer wants to compile a new kernel with more iptables modules available, or to expose more hardware features, what are the implications?	+

	A: Use open mode with own kernel image, just like it happened in case of the N900 device.		A: Use open mode with own kernel image, just like it happened in case of the N900 device.

-	Q: Can Aegis run at all in this environment?	+	'''Q: Can Aegis run at all in this environment? What are the implications if Aegis cannot run - what stops working? Is it just (for example) Angry Birds, or does this include Maps, and other software.'''
-	What are the implications if Aegis cannot run - what stops working?	+
-	Is it just (for example) Angry Birds, or does this include Maps, and other software.	+

	A: Aegis can run just fine with own kernel image on the userspace side as well. You can still use it with own kernel image to a certain extent. There are some aegis-validator difference for sure, but that does not make these applications non-working.		A: Aegis can run just fine with own kernel image on the userspace side as well. You can still use it with own kernel image to a certain extent. There are some aegis-validator difference for sure, but that does not make these applications non-working.
Line 22:		Line 19:
	While Aegis is a powerful platform for security, it raises issues for lower-level developers trying to understand the device, and trying to prototype code.		While Aegis is a powerful platform for security, it raises issues for lower-level developers trying to understand the device, and trying to prototype code.

-	For example, under what conditions does it lock down the platform, requiring a reflash, as mentioned [http://forum.meego.com/showpost.php?p=25529&postcount=94 in this post on TMO].	+	'''For example, under what conditions does it lock down the platform, requiring a reflash, as mentioned [http://forum.meego.com/showpost.php?p=25529&postcount=94 in this post on TMO].'''

	A: I cannot personally reproduce this issue. I have never been able to do that, any hint ? On the other hand, that command is not well-thought. It shows the lack of architecture understading as well. Even if I cannot cause any "damage" with that command on my developer device, it should not be used like that.		A: I cannot personally reproduce this issue. I have never been able to do that, any hint ? On the other hand, that command is not well-thought. It shows the lack of architecture understading as well. Even if I cannot cause any "damage" with that command on my developer device, it should not be used like that.
Line 28:		Line 25:
	In the absence of documentation on many of the closed components, 'poking around' can be a valuable method of exposing functionality of the closed parts of software. The interfaces then found can be integrated more normally into applications.		In the absence of documentation on many of the closed components, 'poking around' can be a valuable method of exposing functionality of the closed parts of software. The interfaces then found can be integrated more normally into applications.

-	Q: The lack of a way to turn aegis truly off, even if this requires a reflash to turn it back on impedes this.	+	'''Q: The lack of a way to turn aegis truly off, even if this requires a reflash to turn it back on impedes this. Some development work - for example - work on making USB host available on the device - is made considerably harder or impossible. '''
-	Some development work - for example - work on making USB host available on the device - is made considerably harder or impossible.	+

	A: Same question as above with the same answer: Use open mode (custom kernel, like in case of N900)		A: Same question as above with the same answer: Use open mode (custom kernel, like in case of N900)

djszapi: /* Developers */

djszapi — Tue, 02 Aug 2011 11:16:28 GMT

Developers

← Older revision		Revision as of 11:16, 2 August 2011
Line 24:		Line 24:
	For example, under what conditions does it lock down the platform, requiring a reflash, as mentioned [http://forum.meego.com/showpost.php?p=25529&postcount=94 in this post on TMO].		For example, under what conditions does it lock down the platform, requiring a reflash, as mentioned [http://forum.meego.com/showpost.php?p=25529&postcount=94 in this post on TMO].

-	A: I cannot personally reproduce this issue. I have never been able to do that, any hint ? On the other hand, that command is not well-thought. It shows the lack of ~~understanding the~~ architecture as well. Even if I cannot cause any "damage" with that command on my developer device, it should not be used like that.	+	A: I cannot personally reproduce this issue. I have never been able to do that, any hint ? On the other hand, that command is not well-thought. It shows the lack of architecture understading as well. Even if I cannot cause any "damage" with that command on my developer device, it should not be used like that.

	In the absence of documentation on many of the closed components, 'poking around' can be a valuable method of exposing functionality of the closed parts of software. The interfaces then found can be integrated more normally into applications.		In the absence of documentation on many of the closed components, 'poking around' can be a valuable method of exposing functionality of the closed parts of software. The interfaces then found can be integrated more normally into applications.

djszapi: /* End Users */

djszapi — Tue, 02 Aug 2011 11:14:46 GMT

End Users

← Older revision		Revision as of 11:14, 2 August 2011
Line 17:		Line 17:
	Is it just (for example) Angry Birds, or does this include Maps, and other software.		Is it just (for example) Angry Birds, or does this include Maps, and other software.

-	A: Aegis can run just fine with own kernel image on the userspace side as well. You can still use it with own kernel image to a certain extent. There are some aegis-validator difference for sure, but that does not make these ~~application~~ non-working.	+	A: Aegis can run just fine with own kernel image on the userspace side as well. You can still use it with own kernel image to a certain extent. There are some aegis-validator difference for sure, but that does not make these applications non-working.

	==Developers==		==Developers==

djszapi: /* Developers */

djszapi — Tue, 02 Aug 2011 11:14:03 GMT

Developers

← Older revision		Revision as of 11:14, 2 August 2011
Line 31:		Line 31:
	Some development work - for example - work on making USB host available on the device - is made considerably harder or impossible.		Some development work - for example - work on making USB host available on the device - is made considerably harder or impossible.

-	A: Same question as above with the same answer: Use open mode (custom kernel, ~~just~~ in case of N900)	+	A: Same question as above with the same answer: Use open mode (custom kernel, like in case of N900)

	==End of Life/Meego==		==End of Life/Meego==

djszapi: /* End of Life/Meego */

djszapi — Tue, 02 Aug 2011 11:13:34 GMT

End of Life/Meego

← Older revision		Revision as of 11:13, 2 August 2011
Line 47:		Line 47:

	Part of this is addressed by the earlier questions about 'can I run another kernel'.		Part of this is addressed by the earlier questions about 'can I run another kernel'.
		+
		+	A: Yeah, well the same question again. Yes, you can use open mode with custom image as it happened with N900.

djszapi: /* Developers */

djszapi — Tue, 02 Aug 2011 11:11:19 GMT

Developers

← Older revision		Revision as of 11:11, 2 August 2011
Line 23:		Line 23:

	For example, under what conditions does it lock down the platform, requiring a reflash, as mentioned [http://forum.meego.com/showpost.php?p=25529&postcount=94 in this post on TMO].		For example, under what conditions does it lock down the platform, requiring a reflash, as mentioned [http://forum.meego.com/showpost.php?p=25529&postcount=94 in this post on TMO].
		+
		+	A: I cannot personally reproduce this issue. I have never been able to do that, any hint ? On the other hand, that command is not well-thought. It shows the lack of understanding the architecture as well. Even if I cannot cause any "damage" with that command on my developer device, it should not be used like that.

	In the absence of documentation on many of the closed components, 'poking around' can be a valuable method of exposing functionality of the closed parts of software. The interfaces then found can be integrated more normally into applications.		In the absence of documentation on many of the closed components, 'poking around' can be a valuable method of exposing functionality of the closed parts of software. The interfaces then found can be integrated more normally into applications.

-	The lack of a way to turn aegis truly off, even if this requires a reflash to turn it back on impedes this.	+	Q: The lack of a way to turn aegis truly off, even if this requires a reflash to turn it back on impedes this.
	Some development work - for example - work on making USB host available on the device - is made considerably harder or impossible.		Some development work - for example - work on making USB host available on the device - is made considerably harder or impossible.
		+
		+	A: Same question as above with the same answer: Use open mode (custom kernel, just in case of N900)

	==End of Life/Meego==		==End of Life/Meego==

djszapi: /* End Users */

djszapi — Tue, 02 Aug 2011 11:07:15 GMT

End Users

← Older revision		Revision as of 11:07, 2 August 2011
Line 8:		Line 8:

	==End Users==		==End Users==
-	What limitations does it pose on software that developers can write for users for the N9.	+	Q: What limitations does it pose on software that developers can write for users for the N9.
-		+
	For example, if the developer wants to compile a new kernel with more iptables modules available, or to expose more hardware features, what are the implications?		For example, if the developer wants to compile a new kernel with more iptables modules available, or to expose more hardware features, what are the implications?

-	Can Aegis run at all in this environment?	+	A: Use open mode with own kernel image, just like it happened in case of the N900 device.
		+
		+	Q: Can Aegis run at all in this environment?
	What are the implications if Aegis cannot run - what stops working?		What are the implications if Aegis cannot run - what stops working?
-	Is it just (for example) Angry Birds, or does this include Maps, and other software.	+	Is it just (for example) Angry Birds, or does this include Maps, and other software.
		+
		+	A: Aegis can run just fine with own kernel image on the userspace side as well. You can still use it with own kernel image to a certain extent. There are some aegis-validator difference for sure, but that does not make these application non-working.

	==Developers==		==Developers==

speedevil: /* End of Life/Meego */

speedevil — Tue, 02 Aug 2011 10:40:42 GMT

End of Life/Meego

← Older revision		Revision as of 10:40, 2 August 2011
Line 27:		Line 27:

	==End of Life/Meego==		==End of Life/Meego==
		+
	At some point Nokia will stop signing packages.		At some point Nokia will stop signing packages.
	Exactly when this might be is hard to predict with the changing mobile space.		Exactly when this might be is hard to predict with the changing mobile space.
Line 32:		Line 33:

	At this point - what happens?		At this point - what happens?
		+
		+	Without a security system, devices have no clear end date.
		+	They may continue to work well for years, with a diminishing pool of developers and users.
		+
		+	With a security system - one day no development can be done.
		+
		+	Part of this is addressed by the earlier questions about 'can I run another kernel'.

speedevil: /* Developers */

speedevil — Tue, 02 Aug 2011 10:31:25 GMT

Developers

← Older revision		Revision as of 10:31, 2 August 2011
Line 24:		Line 24:

	The lack of a way to turn aegis truly off, even if this requires a reflash to turn it back on impedes this.		The lack of a way to turn aegis truly off, even if this requires a reflash to turn it back on impedes this.
-	Some development work - for example - work on making USB host available on the device - is made considerably harder.	+	Some development work - for example - work on making USB host available on the device - is made considerably harder or impossible.

	==End of Life/Meego==		==End of Life/Meego==

speedevil: /* Developers */

speedevil — Tue, 02 Aug 2011 10:29:21 GMT

Developers

← Older revision		Revision as of 10:29, 2 August 2011
Line 20:		Line 20:

	For example, under what conditions does it lock down the platform, requiring a reflash, as mentioned [http://forum.meego.com/showpost.php?p=25529&postcount=94 in this post on TMO].		For example, under what conditions does it lock down the platform, requiring a reflash, as mentioned [http://forum.meego.com/showpost.php?p=25529&postcount=94 in this post on TMO].
		+
		+	In the absence of documentation on many of the closed components, 'poking around' can be a valuable method of exposing functionality of the closed parts of software. The interfaces then found can be integrated more normally into applications.
		+
		+	The lack of a way to turn aegis truly off, even if this requires a reflash to turn it back on impedes this.
		+	Some development work - for example - work on making USB host available on the device - is made considerably harder.

	==End of Life/Meego==		==End of Life/Meego==