Blackphone vs. FreedomPop's Privacy Phone: Security Showdown
Last summer, Edward Snowden transformed online security and privacy from a niche subject into a household concern. It's no coincidence, then, that less than a year later, two different tech companies are releasing so-called "private" phones.
The Freedom Privacy Phone, by Internet service and smartphone 4G provider FreedomPop, is available now. It comes preloaded with far more security and privacy features than just about any other phone.
The one exception may be Blackphone. Co-created by Maryland-based mobile-privacy software developer Silent Circle and Spanish hardware startup Geeksphone, Blackphone — which will begin shipping to customers in June — also promises usable and secure privacy.
How do these two phones work, and how do they stack up against each other? Here's what we know about the Privacy Phone and Blackphone.
Hardware and operating system
Like one of FreedomPop's "regular" phones, the Privacy Phone is a refurbished Samsung Galaxy S II running Android 4.1 Jelly Bean.
A three-year-old phone, the Galaxy S II is long in the tooth when it comes to specs. It has a small 4.3-inch (800 x 480-pixel screen), a 1.5-GHz dual-core CPU and an 8-MP camera. The device is 3G only.
When asked if using a three-year-old phone with an outdated operating system would create any potential security or privacy issues, FreedomPop Chief Operating Officer Steven Sesar said, "No."
Blackphone is a custom-designed handset by Geeksphone. It runs a modified version of Android, with added security features, called PrivatOS, that can nevertheless run apps from the Google Play store.
The Blackphone features a 2-GHz quad-core processor with 2GB of RAM, a 4.7-inch HD display and an 8-MP camera with flash. The handset supports LTE and 802.11n Wi-Fi.
Calling and texting
FreedomPop's $189 Privacy Phone doesn't use regular cellular voice and text channels; rather, calling and texting is done via VoIP (voice over IP) on the phone's Wi-Fi or 3G connection. That connection uses Sprint's Clearwire WiMAX service, available in 88 U.S. cites, as well as Sprint's regular 3G network.
Because of the VPN, Sesar said, "We're able to encrypt our data-delivered calls and texts."
Blackphone, on the other hand, is unlocked; it's up to the user to select a carrier.
"Blackphone is an unlocked GSM cellphone, so you can use it on any GSM-based cell carrier network, like T-Mobile or AT&T here in the U.S. — you just buy a data plan and go," explained Silent Circle spokesman Tom Resau. "Or, if you just wanted to run it off Wi-Fi networks, you could do that, too."
Blackphone comes preloaded with Silent Circle's own privacy apps, including Silent Phone and Silent Text, which are VoIP-based. A two-year subscription to both is included in the Blackphone's price of $629.
"In theory, a carrier could block VoIP, but there are so many mainstream VoIP tools now that it would likely not be a commercial success for them to do so," said Toby Weir-Jones, managing director at Blackphone. "Our goal is not to take you off the grid — it's to give you the wherewithal to decide what details to reveal, while keeping everything else private by default."
The downside to using Silent Phone and Silent Text is that, as with other secure communications apps, they can only be used to talk to other people who use the same apps. To mitigate that problem, Blackphone comes with three free one-year subscriptions to Silent Circle apps you can give to friends.
Blackphone also runs a specially modified version of Android called PrivatOS that promises to build in privacy right down to the root level. The Blackphone company will handle all operating-system updates.
Anonymity and Web browsing
FreedomPop's Sesar said all Web traffic to and from the Privacy Phone is anonymous because the "IP address is anonymous and [an] anonymous browser doesn't store personal information."
He explained that the Privacy Phone uses the commercial virtual private network (VPN) client Private WiFi to encrypt and anonymize all traffic on the phone. (Private WiFi provides anonymity by masking the phone's IP address with one of its own.)
Sesar said the VPN also lets the phone's Web browser "bypass any website restrictions and connect to any site online," meaning it can get around location-specific restrictions, but not paywalls.
When asked about the difference between privacy and anonymity, Sesar said the two concepts are interchangeable.
"I can navigate through the Internet anonymously, meaning no one can track that to my IP address," he said. "That gives me privacy about who I am, so people can't trace that back."
Blackphone, on the other hand, will use the Disconnect Secure Wireless mobile VPN client, not yet commercially available, to anonymize "all of Blackphone," Weir-Jones said. (Disconnect's website claims the mobile client will work on 3G and 4G cellular networks as well as Wi-Fi.)
"Disconnect Search and Secure Wireless are anonymous, as well as private, in the sense that Disconnect doesn't track any personal information," said Disconnect co-founder and co-CEO Casey Oppenheim. "These services also prevent companies from associating your browsing and searches with your IP address."
Anti-virus protection and other features
Privacy Phone uses the Kaspersky Internet Security for Android anti-virus app to keep the phone safe from malware and to block malicious websites. It also uses the Kaspersky app's built-in whitelist and blacklistfeatures to let users block unwanted calls and texts.
Blackphone, however, has no preloaded anti-virus software.
"We chose not to put one of the standard commercial anti-malware packages on Blackphone," Weir-Jones said. "They are all intrusive to some greater or lesser degree, and we had no transparency into exactly how they worked."
For example, Kaspersky Labs, maker of Kaspersky Internet Security, is based in Moscow and sometimes works closely with Russian authorities. It's unlikely that FreedomPop's Privacy Phone would be cleared for U.S. government use.
Weir-Jones said Blackphone doesn't need anti-virus software.
"The protections about rogue app installations and data leakage are already handled by the Blackphone Security Center," he said, "and, to date, there haven't been any stand-alone Android viruses anyway."
Blackphone's "Security Center" will also let users control what each installed app on the phone can do — an "à la carte" permissions menu that Android privacy experts have sought for years.
Regular Android has an "all or nothing" permissions menu. The user must either accept all of an app's requested permissions, or reject the app outright.
Because PrivatOS "roots" the Android OS, it lets users choose among an app's permissions. Other privacy apps, such as Lookout Mobile Security and Clueful by Bitdefender, can only show you which apps have access to which permissions.
The Privacy Phone's anti-theft features rely on Kaspersky Internet Protection, which can remotely lock, locate and wipe a missing phone. The phone can also be set to hide all call data, including contacts, calls, texts and logs.
Blackphone will come with remote-wipe and anti-theft features built into the phone's OS.
The Privacy Phone costs $189 up front, which includes three months of unlimited voice and texting and 500MB of monthly data. After that, the phone costs $10 per month. Alternatively, Privacy Phone can be purchased with bitcoins to further protect users' privacy.
MORE: What is Bitcoin?
Blackphone, on the other hand, will cost $629 up front before a carrier pay-as-you-go plan. The $629 includes subscription fees to a number of highly reputable and secure services, including two years of Silent Circle (normally $240). You also get three one-year Silent Circle subscriptions to give to your friends and family ($360), two years of secure encrypted cloud storage service SpiderOak ($120) and two years of Disconnect ($120).
Both FreedomPop and Silent Circle admit that their phones are not 100 percent secure. But then again, as both companies point out, nothing is.
"We do not make claims that the Privacy Phone is NSA-proof," Sesar said. "Rather, we're providing an additional layer of privacy protection and Internet security from third parties that other phones do not currently provide."
Blackphone's Weir-Jones added, "Bad guys wanting to talk to each other probably shouldn't be using a phone at all," he told TechCrunch.
After we looked at the phones' features and spoke with the developers, it seems that Blackphone has the more serious security chops, but we'll know more when we go hands-on with both devices.