My (mostly FOSS) Mudita Kompakt Setup

[kohjakob]

There’s are these topic in the forum:

• Security Updates
• Call for Transparency - Critical Security and Bug Tracker

The answers by the developers to security requests are a little vague, e.g.:

@urszula

As for the OS: while the phone is based on AOSP 12, it’s not a standard Android smartphone. It doesn’t have a web browser, an email app, or access to app stores, unless you start sideloading there’s really no internet-facing software at all, other than the weather. This dramatically reduces the attack surface and makes common exploits via compromised ads, rogue emails, or browser-based vulnerabilities impossible, simply because those functionalities don’t exist on the device.

@michalstasiuk

I think it is fair to say we started with AOSP 12, but it is not AOSP anymore. It is a separate entity at this point. So we’re not planning to upgrade it to AOSP 13 or 14, but rather to Mudita OS K 2.0, 3.0, and so on.

The list of attack vectors is different for our OS than for the baseline AOSP because of a different set of functions.

To me these rather vague answers sadly point towards the team planning to prioritize their own Mudita OS K security updates (Mudita OS K 2.0, Mudita OS K 3.0, …), only providing security for default device configuration. For now i am waiting for any updates in Security Updates topic.

---

I removed credit-card, banking and PayPal info from the Bitwarden vault for now. In my country cash payment still works almost anywhere. Losing other credentials would be painful but not detrimental. For now I use 2FA authenticaton on my old secure device and keep it in my drawer. > I uninstalled Bitwarden for now.