Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper investigates the cybersecurity implications of repurposing mobile devices, specifically focusing on the PinePhone, an open-hardware smartphone. The authors analyze three core security aspects—boot chain integrity, Trusted Execution Environment isolation, and hardware-bound secret protection—through experiments that simulate realistic repurposing scenarios. Findings reveal that vendor-locked security mechanisms significantly complicate the secure reuse of discarded devices, highlighting the need for new strategies to enhance their lifecycle and reduce electronic waste.
Vendor-locked security mechanisms could thwart efforts to securely repurpose billions of discarded mobile devices, posing a significant barrier to ecological sustainability.
An estimated 5.3 billion mobile phones became electronic waste in 2022. Many of these devices can be repurposed and used in different contexts to extend their lifetime and to reduce ecological impacts. An often overlooked aspect of smartphone reuse is cybersecurity: these devices embed hardware-backed security mechanisms that rely on vendor-controlled provisioning and are designed for a fixed device lifecycle. In this paper, we investigate whether security mechanisms and guarantees remain effective when devices are repurposed outside their original ecosystem. We explore security features in a PinePhone, an open-hardware smartphone, and focus on three core security aspects: boot chain integrity, isolation provided by the Trusted Execution Environment, and the protection of hardware-bound secrets. Our experiments simulate realistic repurposing scenarios and highlight the complexity of reconstructing trust anchors. We generalize our observations to infer requirements for secure repurposing and illustrate how vendor locked mechanisms hinder the repurposing of a majority of discarded devices.