Thoughts on stellarsecurity.com

exodus

hello all, i just came along to this website. the service that they offer seems nice and cool but im concerned if such services are trusted and legitmate. have anybody used such serice or any other alternative to this ? thanks in advance

Dumdum

exodus the service that they offer seems nice and cool but im concerned if such services are trusted and legitmate

Absolutely not. By the looks of it, they are still advertising as open source while not showing the code anywhere.

I recall that the Graphene team recommends against Stellar and have removed attempts to promote the product/service in the past.

de0u

exodus The web site says "open source" all over it... but where is the source code?

Xtreix

exodus It's just another marketing scam, do not promote it here.

StellarSecurity-martin

exodus

Hello,

Thanks for asking the question.

There is a lot of inaccurate information here.

We’re not a scam company. Our services are out to the public (Google play, Aurora store and Aptoide) and we’re working on new software solutions for desktop and mobile devices. Google carefully tests each of our app before they get approved on the Play-store.

We’re working towards getting accepted by Microsoft and Apple Developer as well, where we will launch apps such as VPN and Antivirus. This is not an easy process, as Microsoft for example requires our antivirus app to be accepted in a MVI-program. This takes some time: https://learn.microsoft.com/en-us/defender-xdr/virus-initiative-criteria

We even had a agreement with KasperSKY that allowed us to use their SDK for some of our products, but we decided to go another way.

We just launched a new website, which should make it more clear on what our products are capable of.

To clear any thoughts of any minds in here, we can provide any license for our software for free (3 months, if its a subscription software product).

I hope this answers your question, as the information in this topic is inaccurate.

For any questions you can always contact us through our website or send me a DM here (if thats possible).

exodus

Dumdum 1. yes, they say open source but nothing and their excuse us "cooming soon". 2. so, this so called stellar security has been discussed before ?

exodus

de0u same thoghts . im just trying to find a service like this one, its very benefical to me to wipe phone remotely via web interface since im in charge for protecting the data of some pharmacy bussines and the data is very sensitive

exodus

Xtreix who is promoting what ? i just wanted an opinion before trying it. im always against false services and scams which may harm or abuse online security and communcation

de0u

exodus I recommend engaging a professional security consultant. If you have no idea where to start, you could do worse than finding somebody with a CISSP certification.

Most real security consultants provide real contact information.

matchboxbananasynergy

StellarSecurity-martin Judging from the screenshots on your website for the "Stellar Phone", you're also selling devices with a fork of GrapheneOS for large sums of money.

While that is fine, and permitted by the license, we would appreciate it if you didn't come here to promote your products. This is a community forum for the GrapheneOS community, and not an advertising board.

This is not the first time that people from your company have ended up on the forum (which makes sense, since it seems like you're basing at least one of your products on GrapheneOS' work) to try and stir up interest in your product.

This approach to marketing is not allowed in this community, and we would prefer it if it stopped.

de0u

StellarSecurity-martin There is a lot of inaccurate information here. [...] We just launched a new website, which should make it more clear on what our products are capable of.

The new web site differs from the old one in one interesting fashion, which is that the term "open source" appears to be missing. If the products are indeed not open source, then earlier comments here based on the earlier web site might be inaccurate only because the earlier web site might have been inaccurate.

Meanwhile, if, hypothetically speaking, the kernel shipped on Stellar Phone is GPL'd software, perhaps it might be good to consult with an attorney as to which obligations that might imply for the Stellar Security enterprise.

StellarSecurity-martin

matchboxbananasynergy

Hi,

GrapheneOS is a really great OS, it solves a lot of problems in terms of security and privacy. We like it and we’re following a lot in the project. We even donate to it through Crypto.

Our OS is not just GrapheneOS. We have been analyzing the best parts of each open-source OS that's available and merged those into our own. It’s some really technical stuff, which I don't wanna go in depth here.

I would never have posted here, if there was not so much inaccurate info as the replies were. One of our customers reached out to us and sent us a link to this topic.

So we had to react. Which I truly hope you understand.

Our goal is not to come here and to do marketing in any way. So I am sorry, if that's how you felt. I just replied to the topic-starter declining that we’re not a ‘scam’ or ‘marketing’ company.

matchboxbananasynergy

StellarSecurity-martin Employees from your company have come here to create threads about "Here's this thing I found called Stellar Security" and then, using the same account, asking developer-related questions and providing logs that make it obvious they're working for your company, so yes, your company has repeatedly made multiple accounts here and tried to market this product dishonestly.

Despite that, we have chosen to not speak out about that. We are simply asking that you do not try to use our community as a way to market your paid, proprietary product. I hope that this can be respected.

matchboxbananasynergy

StellarSecurity-martin I appreciate that. What I don't appreciate is you saying that this was "never your purpose to do marketing here." Your company should at least acknowledge the fact that at least on one occasion, they have made an account that's trying to promote your product while posing as an interested customer, only to then use the same account to ask questions and provide logs that make it obvious that they were indeed a developer for Stellar Security, and not a regular user that was interested in that product, as they had initially claimed. They were also repeatedly rude despite multiple attempts on our end to provide assistance regardless. On top of all of that, after they were suspended for their behavior, they made a new account to ban evade while still trying to solicit help from our team despite treating us poorly before. That is far from an ideal way to treat a project you "like'.

If you can confirm that (we can provide proof if needed), then I think people can make up their own minds from there, and make an educated decision about the product/company.

If you cannot confirm that because you're not aware that what I'm mentioning about has occurred, then I would ask you to please consult with other employees at your company, make sure you're fully aware of your company's employees on our discussion forum and related community spaces, and realize that we're being very reasonable here.

StellarSecurity-martin Our OS is not just GrapheneOS. We have been analyzing the best parts of each open-source OS that's available and merged those into our own. It’s some really technical stuff, which I don't wanna go in depth here.

Something to keep in mind, your own developers can be found on this very forum saying that their workflow is building GrapheneOS and then applying their changes on top of it. So yes, it is not "just" GrapheneOS. It's GrapheneOS with your changes on top.

StellarSecurity-martin

de0u Hello,

You’re right, there are a lot of things that need to be validated and verified. I completely agree with you.

I don't wanna go into details on what we have done to make sure everything are al-right. I agree with matchboxbananasynergy to not do any marketing here.

Again, I am sorry, if anybody felt if our purpose was to do any marketing here. It was not and it will never be.

StellarSecurity-martin

matchboxbananasynergy

Everytime a reply is made to this thread it gets ‘bumped’. Which is a contradiction to what I and you earlier wrote, we don't want marketing done here on this forum.

A workflow does not define the end-product. It is simply just a work-flow. It does not define the total definition of every single work-process which ends up building our OS or any end-product.

We never said that we don't use GrapheneOS, but it is not the only code we use.

GrapheneOS is a really strong and great OS, which has impacted a lot of things – in a good way. A lot of vulnerabilities have been reported to Google by the GrapheneOS team which have impacted millions of devices that bring them forward into a more secure world.

Every single OS has their negative and positive sides, which there is no doubt about. This is why in an earlier reply as I wrote, we use the best parts of each OS that we truly believe in, into our. Again, I don't want to go into the technical things here.

There is no reason for me to talk about our employees here, which I hope you respect.

With the end of this,

I wish you a good day as well.

exodus

StellarSecurity-martin

I don't know but you hide smth. Make it open source then so you don't need to defend yourself through these comments. And, if you really make some really good secure software, why you didn't existed before grapheneos? Every single software out there is build on top of gos

matchboxbananasynergy

exodus You will notice that not once has there been an admission that their own employees joined the forum posing as "potential customers" to try and drum up interest for this product. Again, we can prove this, which I think they now realize, which is why they're trying to kill the same conversation they themselves started.

The team at GrapheneOS has specifically not spoken out about this yet since we did not see a reason to, and since we assumed that since these people were caught doing that, they would stop, but if they're going to keep coming to our own community spaces trying to promote this product or deny that their own people were here trying to market it to our users, we can talk about it and provide proof of that. We would still rather not do that, however, as it's wasted energy for everyone involved.

matchboxbananasynergy

We'll be locking this thread in order to avoid this becoming a long back-and-forth, and because we believe that both sides have adequately explained where they're coming from.