4 ms·

> may i ask how you obtain the source? Are you registered as an OEM at Google? Same question, how does Graphene get patches?

by komali2 11mo ago

AlgebraFox 11mo ago
Yes. They've parterned with an OEM. In fact, they are making an official GOS phone with that OEM.
- styanax 11mo ago
  Here's the discussion forum post going over it: https://discuss.grapheneos.org/d/27068-grapheneos-security-preview-releases https://discuss.grapheneos.org/d/27068-grapheneos-security-p...
- throawayonthe 11mo ago
  afaict it's more like "making sure <OEM>'s next flagship supports graphene"
subscribed 11mo ago
They have partnership an OEM who provides them with sources. Currently they're only permitted to release binaries of the patches due to the embargo, this is why these patches are in the parallel stream/optional (so people unhappy with being unable to see the sources won't have them shoved down their throats). I don't have URLs at hand at the moment but all these questions have been asked many times and explained extensively on their discussion forum. I, for one, feel safe. I was patched since late October (IIRC) for the vulnerabilities that Android-related outlets were warning about in early December. It's quite surreal how unsafe the standard Android is. And how Google and the big companies pretend old devices (these running Android 11, 12, 13, not updated for several years) are safe and secure. While all it takes is the user stumbling upon one malicious we page or getting a WhatsApp message they won't even see.
- yaro330 11mo ago
  > It's quite surreal how unsafe the standard Android Well that's untrue. I'd even venture to say that with how many OEMs there are it's insane how safe Android is. Google for one updates their devices for 7 years since Pixel 6, they can't control OEMs who might have ~10 people working on their devices.
  - thegeekpirate 11mo ago
    > Google for one updates their devices for 7 years since Pixel 6 Pixel 8 https://endoflife.date/pixel https://endoflife.date/pixel
    - kernal 11mo ago
      Pixel 8 updates end in 2030. Or did you think the 7 years of updates didn't apply to it?
      - thegeekpirate 11mo ago
        I replied to a poster who said the seven years of updates began with the Pixel 6 with "Pixel 8" and a link which showed when support expires on these devices, because... it began with the Pixel 8, not 6.
    - jasonvorhe 11mo ago
      If I don't misunderstand you, you're suggesting the Pixel 8 line is shown red/discontinued? If that's it, you're probably on a mobile browser which might cut off right after the Discontinued column. The table goes on next to that where you'll see that all Pixels since 6 are currently still supported. Pixel 8 line: > Ends in 4 years and 10 months (01 Oct 2030)
      - bentley 11mo ago
        You misunderstood. He’s saying that Google provides 7 years of device updates only for the Pixel 8 and later. That’s true: Pixel 6 and Pixel 7 only get 5 years of updates. Pixel 7: > Ends in 1 year and 10 months (01 Oct 2027) Pixel 6: > Ends in 10 months (01 Oct 2026)

> may i ask how you obtain the source? Are you registered as an OEM at Google? Same question, how does Graphene get patches?

by komali2 11mo ago

> may i ask how you obtain the source? Are you registered as an OEM at Google? Same question, how does Graphene get patches?

AlgebraFox 11mo ago

Yes. They've parterned with an OEM. In fact, they are making an official GOS phone with that OEM.

styanax 11mo ago
Here's the discussion forum post going over it: https://discuss.grapheneos.org/d/27068-grapheneos-security-preview-releases https://discuss.grapheneos.org/d/27068-grapheneos-security-p...
throawayonthe 11mo ago
afaict it's more like "making sure <OEM>'s next flagship supports graphene"

subscribed 11mo ago

They have partnership an OEM who provides them with sources. Currently they're only permitted to release binaries of the patches due to the embargo, this is why these patches are in the parallel stream/optional (so people unhappy with being unable to see the sources won't have them shoved down their throats). I don't have URLs at hand at the moment but all these questions have been asked many times and explained extensively on their discussion forum. I, for one, feel safe. I was patched since late October (IIRC) for the vulnerabilities that Android-related outlets were warning about in early December. It's quite surreal how unsafe the standard Android is. And how Google and the big companies pretend old devices (these running Android 11, 12, 13, not updated for several years) are safe and secure. While all it takes is the user stumbling upon one malicious we page or getting a WhatsApp message they won't even see.

yaro330 11mo ago
> It's quite surreal how unsafe the standard Android Well that's untrue. I'd even venture to say that with how many OEMs there are it's insane how safe Android is. Google for one updates their devices for 7 years since Pixel 6, they can't control OEMs who might have ~10 people working on their devices.
- thegeekpirate 11mo ago
  > Google for one updates their devices for 7 years since Pixel 6 Pixel 8 https://endoflife.date/pixel https://endoflife.date/pixel
  - kernal 11mo ago
    Pixel 8 updates end in 2030. Or did you think the 7 years of updates didn't apply to it?
    - thegeekpirate 11mo ago
      I replied to a poster who said the seven years of updates began with the Pixel 6 with "Pixel 8" and a link which showed when support expires on these devices, because... it began with the Pixel 8, not 6.
  - jasonvorhe 11mo ago
    If I don't misunderstand you, you're suggesting the Pixel 8 line is shown red/discontinued? If that's it, you're probably on a mobile browser which might cut off right after the Discontinued column. The table goes on next to that where you'll see that all Pixels since 6 are currently still supported. Pixel 8 line: > Ends in 4 years and 10 months (01 Oct 2030)
    - bentley 11mo ago
      You misunderstood. He’s saying that Google provides 7 years of device updates only for the Pixel 8 and later. That’s true: Pixel 6 and Pixel 7 only get 5 years of updates. Pixel 7: > Ends in 1 year and 10 months (01 Oct 2027) Pixel 6: > Ends in 10 months (01 Oct 2026)