We have moved to a new Sailfish OS Forum. Please start new discussions there.
1 | initial version | posted 2014-05-04 22:53:34 +0200 |
Dear Jolla team,
these were the reasons when deciding to buy a and support Jolla – at least based on the history (N900, N9) I hoped, Jolla would aim for these. Unfortunately, you failed on all 3 topics.
Privacy
Just as examples:
I do not want to be tracked/trackable. Do not gather any more data than absolutely necessary for the current task.
Security
There is a known security hole (plain text password accessible by apps that may phone home).
https://together.jolla.com/question/39495/security-risk-with-sqlite-db-in-jolla-passwords-in-plain-text-in-user-space/
While such basic mistake (plain text password accessible by applications) should not happen in the first place, I had expected a hot fix as soon as possible – no action yet (for almost 3 weeks). Personally, I regard this security hole as important. I limited my use of the Jolly handset to minimize the risk of exposing my passwords to 3rd parties.
There seems to be another password issue, publicized Saturday morning (it is 32 hours later now), I wonder what you will do about this – ignore it again? https://together.jolla.com/question/41642/e-mail-smtp-sending-out-password-in-certain-circumstances/
Usability
These are only the main issues rendering the Jolla handset as unusable for deployment as the only/main mobile phone in private as well as in business environments.
What does Jolla?
Instead of solving the issues above, you provide a hot fix for MMS functionality (https://together.jolla.com/question/40658/hotfix-mms-changes-for-paarlampi-10519/). In my eyes: Features are the wrong focus as long as the basics are not solved.
While I used to use the Jolla as the only mobile phone since January, now I am starting to look for another smart-phone that ensures privacy, is secure and can reliably be used as mobile phone.
2 | No.2 Revision |
Dear Jolla team,
these were the reasons when deciding to buy a and support Jolla – at least based on the history (N900, N9) I hoped, Jolla would aim for these. Unfortunately, you failed on all 3 topics.
Privacy
Just as examples:
I do not want to be tracked/trackable. Do not gather any more data than absolutely necessary for the current task.
Security
There is a known security hole (plain text password accessible by apps that may phone home).
https://together.jolla.com/question/39495/security-risk-with-sqlite-db-in-jolla-passwords-in-plain-text-in-user-space/
While such basic mistake (plain text password accessible by applications) should not happen in the first place, I had expected a hot fix as soon as possible – no action yet (for almost 3 weeks). Personally, I regard this security hole as important. I limited my use of the Jolly handset to minimize the risk of exposing my passwords to 3rd parties.
There seems to be another password issue, publicized Saturday morning (it is 32 hours later now), I wonder what you will do about this – ignore it again? https://together.jolla.com/question/41642/e-mail-smtp-sending-out-password-in-certain-circumstances/
Usability
These are only the main issues rendering the Jolla handset as unusable for deployment as the only/main mobile phone in private as well as in business environments.
What does Jolla?
Instead of solving the issues above, you provide a hot fix for MMS functionality (https://together.jolla.com/question/40658/hotfix-mms-changes-for-paarlampi-10519/). In my eyes: Features are the wrong focus as long as the basics are not solved.
While I used to use the Jolla as the only mobile phone since January, now I am starting to look for another smart-phone that ensures privacy, is secure and can reliably be used as mobile phone.
3 | No.3 Revision |
Dear Jolla team,
these were the reasons when deciding to buy a and support Jolla – at least I hoped, Jolla would aim for these. Unfortunately, you failed on all 3 topics.
Privacy
Just as examples:
I do not want to be tracked/trackable. Do not gather any more data than absolutely necessary for the current task.
Security
There is a known security hole (plain text password accessible by apps that may phone home).
https://together.jolla.com/question/39495/security-risk-with-sqlite-db-in-jolla-passwords-in-plain-text-in-user-space/
While such basic mistake (plain text password accessible by applications) should not happen in the first place, I had expected a hot fix as soon as possible – no action yet (for almost 3 weeks). Personally, I regard this security hole as important. I limited my use of the Jolly handset to minimize the risk of exposing my passwords to 3rd parties.
There seems to be another password issue, publicized Saturday morning (it is 32 hours later now), I wonder what you will do about this – ignore it again? https://together.jolla.com/question/41642/e-mail-smtp-sending-out-password-in-certain-circumstances/
Usability
These are only the main issues rendering the Jolla handset as unusable for deployment as the only/main mobile phone in private as well as in business environments.
What does Jolla?
Instead of solving the issues above, you provide a hot fix for MMS functionality (https://together.jolla.com/question/40658/hotfix-mms-changes-for-paarlampi-10519/). In my eyes: Features are the wrong focus as long as the basics are not solved.
While I used to use the Jolla as the only mobile phone since January, now I am starting to look for another smart-phone that ensures privacy, is secure and can reliably be used as mobile phone.
4 | No.4 Revision |
Dear Jolla team,
these were the reasons when deciding to buy a and support Jolla – at least I hoped, Jolla would aim for these. Unfortunately, you failed on all 3 topics.
Edit (2014-05-05): Please note also the Answer below by Aard. It contains details in particular to the Privacy topic but covers the other topics as well.
Privacy
Just as examples:
I do not want to be tracked/trackable. Do not gather any more data than absolutely necessary for the current task.
Security
There is a known security hole (plain text password accessible by apps that may phone home).
https://together.jolla.com/question/39495/security-risk-with-sqlite-db-in-jolla-passwords-in-plain-text-in-user-space/
While such basic mistake (plain text password accessible by applications) should not happen in the first place, I had expected a hot fix as soon as possible – no action yet (for almost 3 weeks). Personally, I regard this security hole as important. I limited my use of the Jolly handset to minimize the risk of exposing my passwords to 3rd parties.
There seems to be another password issue, publicized Saturday morning (it is 32 hours later now), I wonder what you will do about this – ignore it again? https://together.jolla.com/question/41642/e-mail-smtp-sending-out-password-in-certain-circumstances/
Usability
These are only the main issues rendering the Jolla handset as unusable for deployment as the only/main mobile phone in private as well as in business environments.
What does Jolla?
Instead of solving the issues above, you provide a hot fix for MMS functionality (https://together.jolla.com/question/40658/hotfix-mms-changes-for-paarlampi-10519/). In my eyes: Features are the wrong focus as long as the basics are not solved.
While I used to use the Jolla as the only mobile phone since January, now I am starting to look for another smart-phone that ensures privacy, is secure and can reliably be used as mobile phone.
5 | No.5 Revision |
Dear Jolla team,
these were the reasons when deciding to buy a and support Jolla – at least I hoped, Jolla would aim for these. Unfortunately, so far you failed on all 3 topics.
Edit (2014-05-05): Please note also the Answer below by Aard. It contains details in particular to the Privacy topic but covers the other topics as well.
Privacy
Just as examples:
I do not want to be tracked/trackable. Do not gather any more data than absolutely necessary for the current task.
Security
There is a known security hole (plain text password accessible by apps that may phone home).
https://together.jolla.com/question/39495/security-risk-with-sqlite-db-in-jolla-passwords-in-plain-text-in-user-space/
While such basic mistake (plain text password accessible by applications) should not happen in the first place, I had expected a hot fix as soon as possible – no action yet (for almost 3 weeks). Personally, I regard this security hole as important. I limited my use of the Jolly handset to minimize the risk of exposing my passwords to 3rd parties.
There seems to be another password issue, publicized Saturday morning (it is 32 hours later now), I wonder what you will do about this – ignore it again? https://together.jolla.com/question/41642/e-mail-smtp-sending-out-password-in-certain-circumstances/
Usability
These are only the main issues rendering the Jolla handset as unusable for deployment as the only/main mobile phone in private as well as in business environments.
What does Jolla?
Instead of solving the issues above, you provide a hot fix for MMS functionality (https://together.jolla.com/question/40658/hotfix-mms-changes-for-paarlampi-10519/). In my eyes: Features are the wrong focus as long as the basics are not solved.
While I used to use the Jolla as the only mobile phone since January, now I am starting to look for another smart-phone that ensures privacy, is secure and can reliably be used as mobile phone.