# German IT security expert Mike Kuketz has taken a closer look at the Pebble Time 2

**URL:** <https://forum.repebble.com/t/german-it-security-expert-mike-kuketz-has-taken-a-closer-look-at-the-pebble-time-2/1766>\
**Category:** Product Feedback\
**Created:** [October 1, 2026, 11:38pm UTC](https://forum.repebble.com/t/german-it-security-expert-mike-kuketz-has-taken-a-closer-look-at-the-pebble-time-2/1766 "2026-10-01T23:38:24Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![kortunoga](https://yyz1.discourse-cdn.com/flex033/user_avatar/forum.repebble.com/kortunoga/32/1183_2.png) [@kortunoga](https://forum.repebble.com/u/kortunoga)\
**Post date:** [October 1, 2026, 11:38pm UTC](https://forum.repebble.com/t/german-it-security-expert-mike-kuketz-has-taken-a-closer-look-at-the-pebble-time-2/1766/1 "2026-10-01T23:38:24Z")

</div>

Here is his very interesting review; unfortunately, it’s only available in German:  
[Pebble Time 2 im Alltag: Open Source, Gravel und eine Smartwatch ohne Cloud-Zwang](https://www.kuketz-blog.de/pebble-time-2-im-alltag-open-source-gravel-und-eine-smartwatch-ohne-cloud-zwang/ "Pebble Time 2 im Alltag: Open Source, Gravel und eine Smartwatch ohne Cloud-Zwang")

---

<div class="post-metadata">

**Author:** ![Flynn](https://yyz1.discourse-cdn.com/flex033/user_avatar/forum.repebble.com/flynn/32/73_2.png) [@Flynn](https://forum.repebble.com/u/Flynn)\
**Post date:** [October 2, 2026, 4:11am UTC](https://forum.repebble.com/t/german-it-security-expert-mike-kuketz-has-taken-a-closer-look-at-the-pebble-time-2/1766/3 "2026-10-02T04:11:00Z")

</div>

Reading it translated by Firefox.

> Especially with firmware and a companion app with access to notifications and other sensitive data, I see the use of coding agents critically. Language models can generate faulty, unnecessarily complex or security-relevant code without being able to reliably assess the consequences.

It’s interesting he says this but also uses Gravel

---

<div class="post-metadata">

**Author:** ![WitheringWallaby](https://avatars.discourse-cdn.com/v4/letter/w/cc9497/32.png) [@WitheringWallaby](https://forum.repebble.com/u/WitheringWallaby)\
**Post date:** [October 2, 2026, 7:17pm UTC](https://forum.repebble.com/t/german-it-security-expert-mike-kuketz-has-taken-a-closer-look-at-the-pebble-time-2/1766/4 "2026-10-02T19:17:31Z")

</div>

This is definitely a good read. I didn’t realize the watch faces had as many permissions as they do to do web requests beyond weather. Thankfully it’s not that hard to download the pbw file and take a peak to see what it’s doing though.

---

<div class="post-metadata">

**Author:** ![pbhgl](https://avatars.discourse-cdn.com/v4/letter/p/77aa72/32.png) [@pbhgl](https://forum.repebble.com/u/pbhgl)\
**Post date:** [October 3, 2026, 7:08pm UTC](https://forum.repebble.com/t/german-it-security-expert-mike-kuketz-has-taken-a-closer-look-at-the-pebble-time-2/1766/6 "2026-10-03T19:08:04Z")

</div>

> [@DracheMitch](#):
>
> His reasoning for Gravel is that the commits state when AI is used but there’s no way to know where AI was used in the Pebble app.

You can see that for the Pebble app, too. Look for the Claude icons in the [commits](https://github.com/coredevices/mobileapp/commits/master/), which are usually a bit hidden behind another icon:

 ![2](https://canada1.discourse-cdn.com/flex033/uploads/pebble1/original/2X/5/562c9dd5e4a339216042ebe37ddc66f1ef63c158.png)  
 ![1](https://canada1.discourse-cdn.com/flex033/uploads/pebble1/original/2X/c/c5a0f551d7db121558eae7d96409b2a543b0cbc4.png)