about: Questions about safe data and communications

Signed-off-by: Paul Kocialkowski <contact@paulk.fr>

1 files changed, 10 insertions, 0 deletions

diff --git a/about.php b/about.php
index d33f39d..3d26e28 100644
--- a/about.php
+++ b/about.php
@@ -24,6 +24,14 @@
 				<div class="panel-heading"><h3 class="panel-title">My device is not listed as supported, can I still install Replicant?</h3></div>
 				<div class="panel-body"><p>Replicant only runs on the listed supported devices. Other devices have to be explicitly ported to Replicant: specific drivers and configurations have to be written so that Replicant can handle the device properly. It is not a good idea to try installing an image for a device that has a similar name: it will fail and may damage the device.<br />You are welcome to get in touch with us and start evaluating your device as a next target for Replicant!</p></div>
 			</div>
+			<div class="panel panel-default" id="safe-data">
+				<div class="panel-heading"><h3 class="panel-title">Is my data safe when stored on a device running Replicant?</h3></div>
+				<div class="panel-body"><p>While Replicant is a fully free system, some proprietary components that are not part of the system, such as bootloaders, may still be executed (the situation depends on each device). These proprietary pieces have access to the data stored on the device. Hence, they represent a risk for security.<br />On telephony-enabled devices, if the modem is poorly isolated from the rest of the device, it may also be able to compromise the data stored on the device and apply software changes.<br />Despite being fully free, Replicant may also be exposed to security issues that were not disclosed and/or fixed yet, like any operating system. Just as well, installing third party applications may bring security issues, especially if they come from untrusted sources. Of course, installing any proprietary application creates a risk for security.</p></div>
+			</div>
+			<div class="panel panel-default" id="safe-communications">
+				<div class="panel-heading"><h3 class="panel-title">Are my communications safe when using a device running Replicant?</h3></div>
+				<div class="panel-body"><p>Communications made using the public mobile telephony network should be considered unsafe by nature, as the mobile telephony operator is always able to record and track these communications and is often legally allowed to do so. In addition, it was shown that in some cases, these can be intercepted as a result of the weak encryption in use. Safe communications can be achieved using encryption over the Internet (e.g. through mobile data networks).<br />However on telephony-enabled devices, if the modem is poorly isolated from the rest of the device, it may be able to access the microphone of the device or access the communications data unencrypted, making any kind of communication unsafe.</p></div>
+			</div>
 			<div class="panel panel-default" id="missing-hardware-features">
 				<div class="panel-heading"><h3 class="panel-title">Why are some hardware features missing on Replicant?</h3></div>
 				<div class="panel-body"><p>Most of the time, hardware features are driven by proprietary software in CyanogenMod. While Replicant is fully free, these proprietary parts are either replaced or avoided in Replicant. Such parts being avoided instead of replaced is the result of missing free software support for that hardware. It happens because developers failed to write free software support for that hardware, as a result of incomplete or missing documentation from the manufacturer, lack of time to perform reverse engineering or generally speaking, lack of proper resources.<br />Keep in mind that writing free software replacements is a technically complex task that does not always succeed, especially when the manufacturer doesn't communicate how to use the hardware.</p></div>
@@ -50,6 +58,8 @@
 				<a href="#faq" class="list-group-item active"><span class="glyphicon glyphicon-question-sign"></span> Frequently asked questions</a>
 				<a href="#only-free-software" class="list-group-item">Is my device only running free software after I install Replicant?</a>
 				<a href="#not-listed-install" class="list-group-item">My device is not listed as supported, can I still install Replicant?</a>
+				<a href="#safe-data" class="list-group-item">Is my data safe when stored on a device running Replicant?</a>
+				<a href="#safe-communications" class="list-group-item">Are my communications safe when using a device running Replicant?</a>
 				<a href="#missing-hardware-features" class="list-group-item">Why are some hardware features missing on Replicant?</a>
 				<a href="#replicant-different-cyanogenmod" class="list-group-item">How exactly is Replicant different from CyanogenMod?</a>
 				<a href="#replicant-based-omnirom" class="list-group-item">Why is Replicant based on CyanogenMod instead of OmniROM?</a>