PIN can be presented as a first step towards being secure, not as a final solution. Boot problem is sidestepped by acknowledging the issue.
Let’s say the bootloader gets locked down. Just make that optional. Won’t be more annoying to mess with for most people.
Again, just make it optional.
That doesn’t mean people can’t wish it did more.
Where?
Weird that people are getting up in arms over the request for more security.
The bootloader could be locked? You mean like every Android device? Fine! Let the user lock it themselves. Leave yours unlocked if you love having no security so much, I’m not telling you what to do, no one is! Just give those of us who want privacy and security the option to enable it.
No one’s asking to change the DNA of Pebble. Everyone’s just asking for the option to make their watch as secure as their phone seeing as it holds the same data.
Also, radio silence on this request for weeks and then a bunch in a day. What happened?
To be fair the way Android does it is almost purely to keep people from using better software.
For sure. But if it’s the user who can lock/unlock it with their own pin, I don’t see what the big deal is. A system that blocks notifications, allows you to clear them, or even has encryption. Anything is better than nothing.
Agreed
Could it also just have an “away mode” toggle where the watch clears the notifications and disconnects from the phone until it’s reconnected to inside the Pebble App? A little notification can pop up where you just need to tap to reconnect.
I don’t think it has a sensor to tell if it’s on anyone’s wrist so it’s something that would have to be manually triggered anyway.
As I have said optional is fine. If they can make it work without affecting what the watch is all about. And I think anything they do will affect it.
I am not saying we should not have security, but I am saying with the hardware it has, and the goal of the product, it is not designed around security. I know they did mention about implementing a permissions system at some point.
But again, I hope they can it in a way that satisfies people but without losing sight of what it is.
You asked about what warnings, I mean it’s everywhere. You have to check a box.
When they said it’s exactly like the old pebbles and how you remembered it. The old pebbles had no security stuff whatsoever.
Bottom of this page:
This page:
I mean it was clearly told to you it’s a pebble…just like from long ago.
They tell you this watch isn’t for everyone. Straight up says that. If you know what pebble is all about and you want one, order one. Don’t order one if you think your not interested. Don’t know how more up front you could possibly be with that.
But if you walk in expecting more than what it was, you are buying the product for what you wanted it to be, not what it is. Just because it can be updated and they made a new app or whatever is not what you should be buying it for.
I bought a pebble.
How would a completely optional feature break the Pebble experience for you? How does other people getting the secure device they want hurt you?
You may have come to the wrong place. See, people discuss changes, bugs, and improvements here. This is a requested improvement. Yes, people bought a Pebble, and updated Pebble that introduces a new form factor and touch screen, but no security. People are asking for that security.
Again, what is the big deal about asking for options? Asking for security? How does it wound you so?
Okay cool so why are you all up in arms? I don’t think anyone here (other than you) has suggested making it mandatory for all Pebbles. You’re arguing against figments of your imagination here, buddy
Except it’s not. Old Pebbles didn’t have 30 days of battery. Old Pebbles didn’t have a touchscreen. Old Pebbles don’t have a new weather app, more settings, and more app icons.
Again, no one’s arguing against this lmao
I am concerned that by locking down the watch in the way people are asking, makes it a product for the masses instead of for the people who bought it for what they wanted and what it was intended to be.
And that on top of that, as I explained before, it ruins and makes the watch worse. Performance, battery, etc etc. All because someone is scared that someone could control music and that a past notification can be seen.
Not an attack, I get your concerns, (not really but I get the spirit of wanting security) but I just dont want this product to be made worse. And I really think the hardware here is not up to the task. Feature creep.
I suggest you read what’s being said. Because, again, no one’s requesting that this be made mandatory for all Pebbles. Even WearOS doesn’t make a having PIN mandatory. This is such a non-issue.
Sigh.
I know that. It does not matter if it is optional, it being part of the firmware , os etc changes things whether it is enabled or not.
Also if something like this is going to be implemented you would need to do it correctly. Meaning more money for verification, more testing etc etc.
It’s a 5 person team. I really dont want to see security patches being the main theme of release notes because someone found a way around something again…
What part changes if everything’s disabled?
If it’s disabled:
patching the OS has a lot more risk and complexity depending on the on and off state.
Bug testing is way more involved.
Rom Size
If it’s enabled:
User forgets pin, leading to more support cases for a very small team that one as far as I know one guy handles support requests for. (See them using google login and other established accounts to prevent risk, password resets, and support tickets.)
Performance slowdown
Battery life being worse.
But hey maybe they will figure it out and everyone can be happy
How so?
Bug testing already is minimal. That’s not going to change.
ROM size is way less constrained on the new hardware. Doesn’t really matter.
The only part here that’s relevant to you is maaaybe the support cases. Everything else is completely irrelevant to you as someone who has it disabled. Therefore it’s a non-issue.
To resolve a lost PIN, do it like Android where unlocking the bootloader wipes everything. Problem solved.