Scoop: I obtained the contract Samsung requires independent shops to sign to buy phone repair parts from them.
It requires:
- "Daily" dumps of customer data
- The "immediate destruction" of any phones a shop comes across that has third-party parts
Scoop: I obtained the contract Samsung requires independent shops to sign to buy phone repair parts from them.
It requires:
- "Daily" dumps of customer data
- The "immediate destruction" of any phones a shop comes across that has third-party parts
@jasonkoebler "Would a customer bring their phone in to be repaired only to have it destroyed?"
That's the stuff of a dark comedy dystopia right there
@jasonkoebler > People have a right to use third-party parts under the Magnuson Moss Warranty Act, for one thing, and it's hard to square this contact language with that basic consumer right.
It's not hard, it's impossible. The contract is not legally enforceable on its face. More corporate overreach where they believe contract is king.
@jasonkoebler that's so fucked up.
But also, how are phone repair shops able to collect such data? Do people not.get weirded out when a repair shop asks them for their home address?
No, most people will just accept it, they're probably used to it by now. And also, what choice do they have when all repair shops have to follow this policy...
@jasonkoebler thank you. definitely NOT buying any #samsung electronics anymore whenever i have a say in it.
I wouldnβt opt for a lawsuit when jamming the pieces up the ass of the destroyer offered more immediate satisfaction.
@jasonkoebler have they learned absolutely nothing from apple?
also, this will immediately be quashed in the EU
Great work, Jason.
@jasonkoebler Is "destroy" wording for disassembling (so meaning "render inoperational") or are they requiring damage to the parts too?
I guess when there are third-party components installed Samsung can't be sure their batteries will do the destruction by itself?
@Anibyl @jasonkoebler Most alternate mobile operating systems greatly reduce security including the security against data extraction from the device, remote attacks, apps, etc. GrapheneOS does the opposite.
We greatly improve the defenses against that attack vector, but in this case it sounds like users are providing their lock method. Samsung does have working always-enabled encryption but Cellebrite, etc. can bypass it unless the device is Before First Unlock with a strong passphrase.
@Anibyl @jasonkoebler See https://grapheneos.social/@GrapheneOS/112462758257739953 in our recent thread about how GrapheneOS and other devices are holding up against this attack vector. Nearly all other alternate operating systems are reducing security, not improving it, so your statement is overly general.
There's no evidence of backdoors in Samsung devices but rather they are simply a lot easier to exploit than GrapheneOS. They lack proper alternate OS support so another OS would be missing important security features.

Attached: 2 images Cellebrite's list of capabilities provided to customers in April 2024 shows they can successfully exploit every non-GrapheneOS Android device brand both BFU and AFU, but not GrapheneOS if patch level is past late 2022. It shows only Pixels stop brute force via the secure element.
@jasonkoebler: 'immediate destruction' is stretching it.
What'll happen is that the third-party parts get taken out and sent back to the distributor.
And then the service shop orders a 'compilant' replacement and charges the customer for it.
No destruction involved.
@jasonkoebler a contract of that kind would be illegal in most countries I can think of. To demand tampering with the private property and disclosure of private information of a 3rd party is at least void, if not considered to be incitement.
Do you know where that contract is used?
I called a repair shop near me which works officially with Samsung to confirm the sentiment and facts.
Sometimes, they have a customer who brings a phone with third-party hardware.
That customer would know that DISASSEMBLY, NOT DESTRUCTION is how things go. And then new parts are bought to replace it at a fee. They know what they're getting into.
The shop was also sceptical that I even had the contract open in the first place - it was never meant for public release.