Re: Sailfish OS (officially) on Sony Xperia devices
 

It's a 32GB card, cannot even remember the make. Probably a SanDisk or somesuch cheapie ubiquous card.
I did no magic tricks, just stuck the chip in the device. I think I formatted it as ext4 years ago on my Jolla sbj1 device.

Re: Sailfish OS (officially) on Sony Xperia devices
 

yeah I heared is working under 32GB mine sd card is 64GB.

Re: Sailfish OS (officially) on Sony Xperia devices
 

The card size should not matter a bit, if you can get it working with some filesystem (exfat?) it just has to work with others too.
Do you get any funny loggings to dmesg or journal when you try to access your card?

Re: Sailfish OS (officially) on Sony Xperia devices
 

I know the size not matter ither the brand. I will investigate I little bit more on it

Re: Sailfish OS (officially) on Sony Xperia devices
 

To live up to my reputation, I have to admit that I have no idea, because the original issue reported was about the SFOS UI:
But ext4 is supported in the kernel of all SFOS devices (see cat /proc/filesystems).
Hence my guide applies to SD-cards on the Xperia X, too.

Mind that the device driver for the SD-card controller in kernel 3.10 (currently used as of SFOS 2.2.0) for the Xperia X ("loire") seems to cause issues with some SD-cards (there are a couple of threads on TJC about that).

Re: Sailfish OS (officially) on Sony Xperia devices
 

ext4 only work in usb host, but not work inserted the sd card on device.

Re: Sailfish OS (officially) on Sony Xperia devices
 

I am sorry I have to say I don't understand what is the meaning of the pictures, I don't know the language.
The lefthand picture shows that ext4 is in use, so what is the problem?

Did you try to format the sdcard as ext4, form the console like it should be done, "mkfs.ext4 /dev/mmcblk1p1" or similar?

Re: Sailfish OS (officially) on Sony Xperia devices
 

well the sd card is already formatted to ext4 with kde tools. the (left picture) show is mounted but only with usb host,but not work inserting the card on device(righthand picture). so only mount in external usb host.

Re: Sailfish OS (officially) on Sony Xperia devices
 

of course I should have mentioned that there is a trick to make it work but not officially supported. There is a post from @spiroin (sailor) on together.jolla that explains a bit more. Personally I prefer to stick to official if I do not understand what is the problem, and I usually never understand anything :D

Re: Sailfish OS (officially) on Sony Xperia devices
 

I do not get the problem you have with sd card. I formatted the card within SFOS and from the GUI. Ok I should probably mention that it was first not working with Xperia X (not recognized) and eventually did it with Jolla C. I do not remember all the details now. But once formatted the card is working nicely with Xperia X. EXT4 is ok as other formats, incl proprietary windows if you install additional package from openrepos...

Re: Sailfish OS (officially) on Sony Xperia devices
 

There appears to be a pattern emerging. Both P@t and juiceme formatted the card elsewhere. Curious.

Re: Sailfish OS (officially) on Sony Xperia devices
 

If I undestood correctly, @karlos_devel can mount the card correctly when it is inserted to the USB socket but not when it is inserted to the SD socket.
(I assume it is put into some kind of adapter when inserted into USB socket, right?)

There is difference with USB and microSD, the adapter is not just a dummy piece with wires inside, it is a fullblown microcontroller that adapts the signals from one type of bus into another, handles timing, caching, access selection, etc...
Hence this only proves that the card works correctly.

Now, there are tons of reasons why it might not work in the microsd-slot.

• it might not connect electrically correctly (have you tried other cards? The same card with different filesystem, like exfat?)
• the filesystem might be somehow corrupted or aligned differently, in such way that the USB hostcontroller in the adapter recognizes it but the phone doesn't

Is the card recognized at all when it is in the slot? Do you get anything about mmcbl1 in dmesg or journal?

Re: Sailfish OS (officially) on Sony Xperia devices
 

Yeah...about that contact thing. You might try cleaning the contacts. Simply take the card out and rub the contacts with a rubber eraser. I fixed quite a few PC cards that way back in the day.

Re: Sailfish OS (officially) on Sony Xperia devices
 

No need for swipes, just press Power button once to powerup the phone, lift finger and place finger back to button again firmly (but not too hard to poweroff) and phone unlocks and is ready for use...

For me it works pretty much all the time perfectly, rare occasion needs to lift finger and place again for second "read". When I trained the fingerprint, I placed it in different angles, all around finger for good data.

Re: Sailfish OS (officially) on Sony Xperia devices
 

At first I thought this method worked for me, then I noticed my phone wasn't locked anyway. When I put the code, using fingerprint tap doesn't bypass the lock code screen.
The fingerprint sensor only worked to the point where I put in 2 fingerprint profiles, after that no more unlocking, no more adding fingerprints.
Probably a hardware part that is intermittent?

Re: Sailfish OS (officially) on Sony Xperia devices
 

About the unlock of Sailfish X by means of fingerprint:

Now I understand the behavior better.

First: to use fingerprint unlock you first have to apply a lock code to protect your phone before you can use the fingerprint feature (so it will always be possible to unlock by entering the code on the touch screen in case finger print sensor doesn't work)

Second, unlocking a locked phone: When presented with the lock code sceen it is possible to unlock the device by fingerpint scanner (double function of the power on / off button)

This seems to work with my device only if I patiently and slowly put my finger on the sensor and if nothing happens the first time (as is mostly the case) lift it and put it down on the sensor again, as widely covering the sensor as possible.

Impossible to use efficiently in stress situations and all weather circumstances I can imagine..

Also the placement of the fingerprint sensor of the Xperia X is not helping efficiency, especially when a case is used to protect the phone as the button is laying even deeper.

EDIT: immediately after practicing with unlocking by finger print, I went on trying to input another 3rd fingerprint. This doesn't work. After trial unlocking the phone by fingerprint doesn't work anymore but after the 10th or so time. A messag pops up above the code input: Locked, adjust your grip. I am holding it wrong :rolleyes:

Re: Sailfish OS (officially) on Sony Xperia devices
 

I have 4 fingerprints memorized on my Xperia X without issues, and even if I do sometimes have to try a couple of times before the fingerprint reading actually unlocks the phone ("adjust your grip", "fingerprint not recognized" etc.) I have now learned how to use it so that it unlocks the vast majority of times at the first try. I even have a pretty thick hard plastic case from Caseable on my phone. I guess I'm just lucky :)

Re: Sailfish OS (officially) on Sony Xperia devices
 

There are 2 major problems with the fingerprint unlock that I see;

1.) I've got a plastic "skin" cover on my device which has a hole throuhg to access the power button. For some reason the case affects the finger just so that fingerprint scanning is very erratic. Without the case it works well enough.

2.) The more important thing is the fact that fingerprint is not a password, fingerprint is an user ID.
I'd be very confident using fingerprint in a multiuser environment to identify myself, but never in a million years to authenticate myself.

These two basic security concepts get confused all the time. No wonder people get hacked... :(

Re: Sailfish OS (officially) on Sony Xperia devices
 

Iam not going to argue regarding terms @juiceme. But I feel more confident in using a fingerprint for identification/authorization than typing a PIN code. For the very reason that it prevents evesdropping when typing code.

Re: Sailfish OS (officially) on Sony Xperia devices
 

Yes, there are solutions for that too, the random keyplacement lockscreen, picture lock, etc...

The problem of fingerprint is that it has been verified that one can create an "artifical finger" from gelatin and a fingermark left into glass or similar surface.

Re: Sailfish OS (officially) on Sony Xperia devices
 

For me, fingerprint is useful in that it's more secure than "no passcode", which is usually my default given how often I unlock the phone and how inconvenient other unlock types are (for instance, you have to be looking at the phone to type a passcode).

Re: Sailfish OS (officially) on Sony Xperia devices
 

You are right and you are also right that people get confused about the distinction but (IMO) not quite in the way you think.

All access verification methods are about whether you have an access to some resource, be it a broom cupboard or a nuclear launch button. User identification is only secondary, on the principle that since juiceme is on the list of users who can enter the broom cupboard, once you identify a user as juiceme you can grant him the access.

There are three methods of access verification, based on something that you, in a decreasing level of security,

1. are (the guard at the secret vault door recognizes you as the king, so he lets you in)
2. have (a passport, an ID card, a key...)
3. know (some piece of information that only select few know, e.g. a password or a pass phrase)

In the electronic age, various biometric entry methods (fingerprint, iris scan, facial recognition) fall under #1. A key card, microchip etc. would be #2. And finally, a password is of course #3.

There is nothing special about passwords. They are nothing but a way of checking that someone who claims to be juiceme really is juiceme, by prompting for a piece of information that (hopefully) only juiceme knows. But passwords are easy to share and thus are the most convenient for when you need to give access to many people simultaneously, including when that select group changes dynamically. But for the same reason, passwords are by far the least secure authentication method.

Passports, ID cards and keys are more secure for the simple reason that they are more difficult to copy. Not impossible and they can be lost or stolen but still less easy than passwords. But they are not very practical for granting access to resources that are a similar size to the key itself, such as a mobile phone.

Biometric identification has the potential to be the most secure. The guard letting only the king in would not be easily fooled and really only let the king in. And so it is with fingerprint, iris or facial recognition - at least in theory. But unfortunately the technology available to the likes of you and I still has some way to go, as you correctly point out. So, at least for the time being, the least secure method (the password) remains, ironically, the most secure. Hopefully not for long.

Re: Sailfish OS (officially) on Sony Xperia devices
 

Thank you @pichlo for summing this up in such an excellent way!

You are correct that the 1st kind of authentication method is the most secure in theory, but fingerprint is unfortunately one of the least secure ways to do it; the simple fact is that we are all the time leaving the damn things around for anybody to take!

I'd say something like an iris scan would be acceptable (or even better, a retinal scan since iris patterns can be copied off hi-resolution photos) provided the sensor could make a difffernce between a real living eye and a picture on an eye.
Or maybe an eeg-scan; provided that brain patterns of people are different enough?
Anything based on stuff we leave lying around like fingermarks or DNA is useless IMHO.

The 2nd kind of authentication is a fairly good compromise, but it has this problem of being the kind that can be lost, damaged, stolen, given away,... etc.

As for passphrases/PIN's; those are actually fairly secure since they are stored in the mind only. Losing those accidentally is much more difficult, provided of course people are not so stupid as writing 'em down on pieces of paper...

All in all, the best thing of course is to have access granted on a combination of two or more types of authentication; hence nowdays the trend of having 2-factor auth in many online systems. If done correctly it is mostly usable and secure enough.

And for the grand finale, a small tale on how this can easily go wrong.

Once upon a time there was a company that implemented remote connection security by a system where there were RSA tokens that generate a OTP code that one needed to salt with a PIN to get the access verification code.
This is fairly secure since the code was generated in a sealed box containing the algorithms and the pin was memorized in users mind; you needed both something-you-have and something-you-know

However this scheme has drawbacks; the token fobs cost money, the battery needs to be replaces every few years and there needs to be a whole support infrastructure and logistics for it.
Now the clever guys in some pennypinching department decided that it is important to save money, and they changed the system so that you need a software RSA token generator which can be run in a windoze PC or mobile phone, and that combined with the PIN provides the access code.

Now what's wrong with this thing? A plenty whole lotta!
What they had done is replace something-you-have & something-you-know with something-you-know & something-you-know!

A software solution is definitely not something-you-have. It can be copied to another system, given away, stolen without one ever knowing, etc...
Even though the RSA software is using a supposedly-unique-identifier of a windoze system-ID or cellphone IMEI, it's no protection since any child can write a wrapper/emulator around it to feed the application the data it expects... :eek:

Re: Sailfish OS (officially) on Sony Xperia devices
 

But, juiceme, you could say the same about the RSA tokens. They are also a software silution, however disguised as a piece of hardware. Just like any other key, they are the "security through obscurity" type, relying on the key being difficult to copy. Done right, any other software solution could be no worse han that.

FWIW, our company also replaced RSA tokens with a mobile "app" for the second level authentication. I believe the "app" is one of those that are a mere front-end to a server solution but I do not really know or care. Luckily they have a backup for the few Luddities like me who do not have (in my case by choice) an Android or iOS phone: the system sends me an SMS with the unlock OTP. The disadvantage is that I had to tell the company my mobile phone number. You just can't win, they always find a way to get you in the end.

The system is far from perfect and is actually quite annoying. I understand that they want to guard the entry to sensitive areas like git and Jira but come on, you really do not have to bother me with authentication when I have already authenticated once to enter the network - either by logging in to the company network (where only authenticated devices are allowed entry) or to VPN (with another two-stage authentication). So I end up with SMS OTP several times for each operation. The word paranoia does not start to cover it :)

Re: Sailfish OS (officially) on Sony Xperia devices
 

@pichlo Luddites at TMO? :) : ) I Suppose there is a modern definition for TMO luddite. ???

ps. My bank wants to use app for access codes, but it's not running on sailfish. So I got a small device. ---> makes me a fellow Luddite . :)

Re: Sailfish OS (officially) on Sony Xperia devices
 

As far as I can remember RSA tokens is even more f**d up as they stored the seeds of their customers on their server somewhere. They weren't supposed to do that at all and they had promised their customers not to do so.
I wouldn't trust them any security token or softwarewise.

Can't find the security advisory from their CEO anymore, the former link ends dead. They probably moved it to "can't be found easily". I can find only this German link: https://heise.de/-1210245

That makes "something-you-have" obsolete in this case ;)

EDIT: Sorry, forgot to mention: They did not only store the seeds, they also got them copied by some intruder (=stolen). :rolleyes:

Re: Sailfish OS (officially) on Sony Xperia devices
 

I don't know what you guys have on your phone, but my reason for locking my device is not because I think someone will access my nuclear launch codes, but because I don't want my son to play on my phone. I feel fairly confidant that he won't be molding any artificial fingers any time soon.

Re: Sailfish OS (officially) on Sony Xperia devices
 

I prefer they cut my finger, rather than my Iris ��

Re: Sailfish OS (officially) on Sony Xperia devices
 

What is there in phones, hmm?

• PKI keys to everything from jenkins servers to github accounts and between
• email correspondance, both professional and private
• sms/mms correspondance, both professional and private
• contact details for famous and infamous people
• compromising pictures that could get you blackmailed
• compromising pictures used for blackmail
• cryptocurrencies
• passwords for ebay, paypal, amex, visa, various banks, national lottery, car rental companies, airline accounts, etc...
• personal documentation, medical information, electronic medicine receipts
• GPS traces and tracks, coordinates for caches of drugs and precious metals

Getting access to someone's phone is the best way to hack that person, to totally steal identity.
Even if there is no special information in the device itself; just about every online account you have has 2-factor-auth based on your phone number. And the email client in the phone most probably already remembers your mail password... Need I spell it out for you?

Re: Sailfish OS (officially) on Sony Xperia devices
 

Needless to point out. Without fulldisk encryption, all of that is easily available, nevermind type of passcode, fingerprint, iris or bloodtest.

Re: Sailfish OS (officially) on Sony Xperia devices
 

Even without any of the things on juiceme's list, anyone finding your phone and using it to call some premium-rate chat-up line can easily rack up a multi-thousand phone bill for you before you can spell supercalifragilisticexpialidocious.

Re: Sailfish OS (officially) on Sony Xperia devices
 

The problem there would be trying to unlock my phone on a Monday morning

Re: Sailfish OS (officially) on Sony Xperia devices
 

I have a problem with setting the correct permissions. I have an sdcard partition 1 with fat32 and the second with ext4. Maybe I have done something wrong when formatting it. It get's mounted rw, but it is owned by root:root, and I can't put any files or mkdir on it on my X.

What do I need to change? I guess setting owner to nemo won't help, if I put that card into a notebook?

Re: Sailfish OS (officially) on Sony Xperia devices
 

First xperia x still buggy, something ok ,could not work.
Both partitions(ex4,fat32) is being recognize by xperia x?
"cd /media/nemo/??????# chmod a+w ." #####could fix#####

Re: Sailfish OS (officially) on Sony Xperia devices
 

First of all, fat32 cant handle permissions.
Since only root user can mount partitions, they will be owned by root. It can be solved by adding entries to fstab.
Or, from commandline (which I assume is what you tried)

mount -t vfat -o user /dev/something /some/mountpoint

notice the -o parameter. If you want it avail for every user, that parameter should be -"o users" instead

Re: Sailfish OS (officially) on Sony Xperia devices
 

@karlos devel, in addition to @nieldk's remarks:

• Mounted "rw" (i.e. read and write)" automatically?
  This is automatically handled be SailfishOS (and O.K. since long ago).
  Take a look with mount | grep mmcblk1 to see, if the partitions mmcblk1p1 and mmcblk1p2 are mounted with the option "rw" on your device, too (it is on all of mine).
  
• Setting access rights, so user nemo can access the partitions:
  See section 5. Finishing up of my guide. Mind that the path has become /run/media/nemo with SFOS 2.2.0.

Re: Sailfish OS (officially) on Sony Xperia devices
 

Do you think we'll see official support for the XA2 Plus (18:9 screen)?

For that matter, does official support already cover the XA2 Ultra?

Re: Sailfish OS (officially) on Sony Xperia devices
 

Officially I don't think so... Even Xperia X Compact that has almost the same hardware of Xperia X is not officially supported... About the XA2 and XA2 Ultra, there are some testing with some android Roms that works for both models (probably some bugs but bootable)

Enviado desde mi H3123 mediante Tapatalk

Re: Sailfish OS (officially) on Sony Xperia devices
 

Yeah, I'm still working on it.
However currently it is not really the most user-friendly thing since you need to manually convert your filesystems to encrypted.

Re: Sailfish OS (officially) on Sony Xperia devices
 

Again, I was solely speaking for myself. I have no worries about people getting access to my phone (or accounts connected to my phone).

I now see that you are far more important than I, in which case maybe worrying that someone will take a mold of your finger to access your phone is warranted.