strcat

44 ms·

511.
by strcat 2y ago
> I feel like GrapheneOS shot itself in the foot, being exclusive to Pixel phones. Pixels are the only available smartphones meeting our hardware security requirements while permitting us to use the hardware-based security features. Our
512.
by strcat 2y ago
Many apps won't work in the Android emulator. Banking apps, etc. will detect it and ban it. Far more apps will ban the emulator than will ban GrapheneOS. We aren't aware of an app which would work in the Android emulator with a st
513.
by strcat 2y ago
Linux 6.12 is not better for security than Linux 6.1 or Linux 6.6. It doesn't work that way. Newer kernels have substantially more attack surface and complexity. They also have tons of new bugs. Bug density is far higher in new or rece
514.
by strcat 2y ago
GrapheneOS has various features requiring hardware integration. Our hardening features also uncover bugs across the code especially in drivers, especially the hardware memory tagging integration in our hardened_malloc project and the standa
515.
by strcat 2y ago
In many countries, there are tap-to-pay options permitting using GrapheneOS including Curve Pay and also the standard used by many European banks. US lacks an option but will hopefully get Curve Pay soon. Garmin Pay and Android Pay can be u
516.
by strcat 2y ago
There are some huge drivers from companies like Broadcom and Qualcomm. There's still a massive amount of kernel driver code along with the massive amount of core kernel code. Android is the main driving force behind the push for Rust f
517.
by strcat 2y ago
No, it's not at all normal. Here's a poll someone did on Mastodon with 124 anonymous responses from our community: https://23.social/@mj1982/114210416377875387 54% Battery consumption is lower under GrapheneO
518.
by strcat 2y ago
> But they're drivers that are not upstreamed and which therefore make it hard to move to a newer kernel, right? It's no harder than it would be dealing with them if they were upstream. Google ports all the Pixel drivers to new
519.
by strcat 2y ago
All Android devices support running the Android Open Source Project via Treble and we could quickly add support for non-Pixel devices doing things in a reasonable way too. Those devices don't meet our hardware security requirements ( h
520.
by strcat 2y ago
Android Open Source Project and operating systems based on it like GrapheneOS are Linux distributions. The kernel drivers are Linux kernel drivers. The userspace drivers are part of Android's Treble hardware abstraction layer providing
521.
by strcat 2y ago
GrapheneOS does support E911, but not the recently added Android Emergency Location service which is not standard and not required for this. See https://news.ycombinator.com/item?id=43669766 . Triangulation via the cellular
522.
by strcat 2y ago
You probably don't have network-based location enabled. Satellite-based location doesn't work well indoors and takes a while to get a lock. Network-based location support was recently added to GrapheneOS and is opt-in. See https:
523.
by strcat 2y ago
GrapheneOS does support E911, but not the recently added Android Emergency Location service which is not standard and not required for this. See https://news.ycombinator.com/item?id=43669766 . Triangulation via the cellular
524.
by strcat 2y ago
GrapheneOS has the standard support for E911 that's triggered when the user makes an emergency call. It enables location services in a special way automatically as it does in the stock OS. What we don't currently do is overriding
525.
by strcat 2y ago
That's not at all normal. Sandboxed Google Play doesn't consume more batter than privileged Google Play in a standard Google Mobiles Services device. It indicates something is very wrong with your setup.
526.
by strcat 2y ago
I responded to two posts directly about GrapheneOS. I tried to give helpful information on the correct way to do what they want to do and addressed the idea that we're doing anything anti-user. The linked content is misleading and it&#
527.
by strcat 2y ago
> First off, thanks for all your work on graphene! I run cyber security for a company in the defense space, with data-sovereignty requirements, and you guys are the only serious project around. You should think about selling support cont
528.
by strcat 2y ago
See https://news.ycombinator.com/item?id=42536302 for an official response to the claims in that repository. Many of the features listed there are officially planned features, although not necessarily in the way they imagin
529.
by strcat 2y ago
GrapheneOS doesn't implement or keep anti-user features. The way the linked repository is portrays things is not accurate. It gets the technical details wrong and also misrepresents the GrapheneOS decision making including portraying o
530.
by strcat 2y ago
The camera app can choose how this works. GrapheneOS Camera app supports HDR+ and Night mode on Pixels along with having comparable video processing including the HDR+ style merging of data across the low-level frames and EIS. Can use Pixel
531.
by strcat 2y ago
> 1. The Zoom slider: You can't select the different lenses easily (I'd need to set the zoom slider to exactly 5x to get the zoom lens without digital zoom, which is not that easy) and there is no way to quickly reset it to 1x.
532.
by strcat 2y ago
We had to go through each of these apps years ago to figure out what we would be missing from excluding them. We knew Showcase was disabled at another layer and we're very aware of the CarrierSettings system for distributing APN and ot
533.
by strcat 2y ago
Search for the app id (com.customermobile.preload.vzw) and you'll see people have been looking at it for years including figuring out what conditions were required to enable it even without the package disabled. GrapheneOS has repeated
534.
by strcat 2y ago
The Verizon packages are only enabled when using a Verizon / Verizon MVNO SIM. They're equivalent to uninstalled when not using one. This is a requirement from Verizon for all Android devices to fully use their network features. G
535.
by strcat 2y ago
It's there on Pixels with the stock OS and other devices with Verizon support because it's one of the apps that are part of the standard suite for fully supporting Verizon's network. Verizon doesn't do things in standard
536.
by strcat 2y ago
The Verizon apps are disabled (equivalent to uninstalled) unless you have a Verizon SIM. If you do have a Verizon SIM, this app's functionality is still disabled unless the demo mode is enabled, implying having largely equivalent or gr
537.
by strcat 2y ago
We don't include these carrier apps in GrapheneOS. However, this particular claimed vulnerability isn't a real security issue. The other Verizon apps do add significant attack surface and give them control they shouldn't real
538.
by strcat 2y ago
You can use most of the AI features if you install the relevant apps. Certain things can't work without privileged access we don't provide, but we do allow Google apps to use non-standard TPU acceleration by default with a toggle
539.
by strcat 2y ago
> I never got to try GrapheneOS because a single unresolved doubt: does its Camera app benefit from the same image improvement features that the stock camera has? Our Camera app has hardware-accelerated HDR+ and Night mode on current Pix
540.
by strcat 2y ago
> Apple has made significant progress in terms of developing evil-maid-resistant systems. Definitely, but a couple of the high end forensic data extraction companies have largely kept up with them. It's no longer something which can

More ›