3 ms·

Given that Google has said they'll be delaying source code release for Android to every X months intervals (iirc), how is GrapheneOS planning to handle security

Given that Google has said they'll be delaying source code release for Android to every X months intervals (iirc), how is GrapheneOS planning to handle security updates? Will they just be Google's binary blobs?

zeech 7mo ago
Graphene already uses binary blobs (though one can disable them if they want). Info at [0]. [0] https://discuss.grapheneos.org/d/27068-grapheneos-security-preview-releases https://discuss.grapheneos.org/d/27068-grapheneos-security-p...
- khimaros 7mo ago
  this isn't quite right. the blobs are produced by GrapheneOS and are reproducible once the source code embargo lifts.
  - zeech 7mo ago
    Whoops, nice catch - comment edited.
izacus 7mo ago
Motorola is a partner that has access to Android source sooner.
Aachen 7mo ago
Isn't that about feature releases? My understanding was that security patches are separate from this edit: looked up the announcement https://www.androidauthority.com/google-android-development-aosp-3538503/ https://www.androidauthority.com/google-android-development-... but it doesn't even mention the word security. I don't know enough about the manufacturer side of things to say whether this means there's also no security updates while they work on new features