6 ms·

Something to be aware of when considering a purchase of this device, is the fact that Google will stop providing security updates after August of 2023. Graphene

Something to be aware of when considering a purchase of this device, is the fact that Google will stop providing security updates after August of 2023. GrapheneOS will also stop doing so after that date. This means you'll get a maximum of 2 years of usage out of this phone.

raman162 5y ago
Thanks! I was searching for this information but it wasn't immediately available on their site.
fsflover 5y ago
Confirmed by them: https://social.nitrokey.com/@nitrokey/106861543800696270 https://social.nitrokey.com/@nitrokey/106861543800696270.
bogwog 5y ago
Well that's a complete deal breaker.
oftenwrong 5y ago
The short lifetime of smartphone security updates makes me want to switch to a linux phone. It's just sad that I have to buy a new device due to software when I am perfectly happy with my current device hardware. I have computers that I have had for over 10 years, and they still get security updates because I keep them on the latest Debian stable. Why can't my phone be like that?
- depingus 5y ago
  Because chip manufacturers like Qualcomm don't support their hardware beyond a handful of years.
  - fsflover 5y ago
    No, it's because Qualcomm and co. don't provide specs and source code for the drivers/firmware.
    - joemazerino 5y ago
      Not true. Qualcomm source code is available... For a cost ;)
      - fsflover 5y ago
        And with NDA.
  - anon19238481 5y ago
    I remember hearing that there's a "three year deal" between Qualcomm and OEM's. If they only support the device for three years, they get a mass discount on chips.
- jmnicolas 5y ago
  But a Linux phone is much less secure than an Android one, especially GrapheneOS. Of course once support runs out it's another matter.
DanAtC 5y ago
I never realized how bad Google is with their own device support: https://support.google.com/pixelphone/answer/4457705 https://support.google.com/pixelphone/answer/4457705 3 years from the date of release is horrible. My iPhone 6S is coming up on 6 years of OS updates and will get at least 1 more with iOS 15.
- kevincox 5y ago
  I remember hearing that a large part of this is that Qualcomm doesn't provide security updates for more than this long so they can't really promise anything more since they may be unable to fix CPU-level flaws. That being said it would be nice if they could provide support until a CPU-level vulnerability is found. (Or is there a decent chance that they wouldn't be informed?) On the upside I believe that the Pixel 5 has a Google-"made" SoC so that excuse is gone now. I would love to see a nice long promise of updates. The amount of eWaste generated by a phone every 2 years is awful. For context Apple promises 5 years from the last sale and in practice supports devices even longer https://support.apple.com/en-gb/HT201624 https://support.apple.com/en-gb/HT201624
  - est31 5y ago
    Qualcomm supplies the entire SoC and this includes drivers and firmware for way more than just the CPU. You can get Lineage OS onto Pixel phones outside of Google's support, but that only includes the OS layer and not the driver/firmware/baseband layer. I don't think Google can change anything about this really. Qualcomm is the only non vertically integrated vendor of SoCs with the wanted features and quality Google needs (apple is vertically integrated). They don't have any buying power towards Qualcomm. In the hardware business, they are a niche provider. 2% market share in North America, world wide even less.
    - depingus 5y ago
      With the Pixel 6 Google is introducing their own SoC called Tensor. https://blog.google/products/pixel/google-tensor-debuts-new-pixel-6-fall/ https://blog.google/products/pixel/google-tensor-debuts-new-...
Spellman 5y ago
Somewhat related, any suggestions on how to keep an older Pixel secure? Have a Pixel 3 that's about to run out of security updates from Google. Seems like Graphene only provides legacy support once Google drops support.

raman162 5y ago

Thanks! I was searching for this information but it wasn't immediately available on their site.

fsflover 5y ago

Confirmed by them: https://social.nitrokey.com/@nitrokey/106861543800696270 https://social.nitrokey.com/@nitrokey/106861543800696270.

bogwog 5y ago

Well that's a complete deal breaker.

oftenwrong 5y ago

The short lifetime of smartphone security updates makes me want to switch to a linux phone. It's just sad that I have to buy a new device due to software when I am perfectly happy with my current device hardware. I have computers that I have had for over 10 years, and they still get security updates because I keep them on the latest Debian stable. Why can't my phone be like that?

depingus 5y ago
Because chip manufacturers like Qualcomm don't support their hardware beyond a handful of years.
- fsflover 5y ago
  No, it's because Qualcomm and co. don't provide specs and source code for the drivers/firmware.
  - joemazerino 5y ago
    Not true. Qualcomm source code is available... For a cost ;)
    - fsflover 5y ago
      And with NDA.
- anon19238481 5y ago
  I remember hearing that there's a "three year deal" between Qualcomm and OEM's. If they only support the device for three years, they get a mass discount on chips.
jmnicolas 5y ago
But a Linux phone is much less secure than an Android one, especially GrapheneOS. Of course once support runs out it's another matter.

DanAtC 5y ago

I never realized how bad Google is with their own device support: https://support.google.com/pixelphone/answer/4457705 https://support.google.com/pixelphone/answer/4457705 3 years from the date of release is horrible. My iPhone 6S is coming up on 6 years of OS updates and will get at least 1 more with iOS 15.

kevincox 5y ago
I remember hearing that a large part of this is that Qualcomm doesn't provide security updates for more than this long so they can't really promise anything more since they may be unable to fix CPU-level flaws. That being said it would be nice if they could provide support until a CPU-level vulnerability is found. (Or is there a decent chance that they wouldn't be informed?) On the upside I believe that the Pixel 5 has a Google-"made" SoC so that excuse is gone now. I would love to see a nice long promise of updates. The amount of eWaste generated by a phone every 2 years is awful. For context Apple promises 5 years from the last sale and in practice supports devices even longer https://support.apple.com/en-gb/HT201624 https://support.apple.com/en-gb/HT201624
- est31 5y ago
  Qualcomm supplies the entire SoC and this includes drivers and firmware for way more than just the CPU. You can get Lineage OS onto Pixel phones outside of Google's support, but that only includes the OS layer and not the driver/firmware/baseband layer. I don't think Google can change anything about this really. Qualcomm is the only non vertically integrated vendor of SoCs with the wanted features and quality Google needs (apple is vertically integrated). They don't have any buying power towards Qualcomm. In the hardware business, they are a niche provider. 2% market share in North America, world wide even less.
  - depingus 5y ago
    With the Pixel 6 Google is introducing their own SoC called Tensor. https://blog.google/products/pixel/google-tensor-debuts-new-pixel-6-fall/ https://blog.google/products/pixel/google-tensor-debuts-new-...

Spellman 5y ago

Somewhat related, any suggestions on how to keep an older Pixel secure? Have a Pixel 3 that's about to run out of security updates from Google. Seems like Graphene only provides legacy support once Google drops support.