strcat

47 ms·

541.
by strcat 2y ago
If you do get ADB access, a filesystem write vulnerability or exploit the device to get code execution then this app is irrelevant since you already have more access. A real attack vector has not been presented, which is why Google determin
542.
by strcat 2y ago
The Verizon retail demo mode doesn't become active if the package is enabled and regardless they haven't actually demonstrated enabling any of the Verizon apps on Pixels through the Play Store. Enabling the retail demo app doesn&#
543.
by strcat 2y ago
Enabling the package doesn't mean the app is active. You also haven't actually demonstrated enabling any of the non-Verizon apps on a non-Verizon SIM with this. You're presenting it as contradicting what we've said but y
544.
by strcat 2y ago
A response from GrapheneOS: Enabling the package doesn't turn it into a remote security vulnerability. It's still not active. The overall Verizon carrier support apps get enabled when you have an active Verizon SIM and disabled wh
545.
by strcat 2y ago
In some regions, banks stopped supporting their own tap-to-pay systems or they never even got widely adopted in the first place. It's much better in the EU than the US, where most banks still have their own tap-to-pay.
546.
by strcat 2y ago
The official Android Auto app works on GrapheneOS as an extension to sandboxed Google Play. We don't have our own implementation yet and it's not planned in the near term but it is available. Google Pay doesn't allow alternat
547.
by strcat 2y ago
> Interesting, didn't know that. Maybe I should file an issue with the official WireGuard app asking them to support this. It would be nice if "multiple VPNs" was provided as an OS feature. Apps have to implement it unless
548.
by strcat 2y ago
NetGuard doesn't support the standard OS leak blocking like Mullvad and doesn't try to filter DNS so it inherently has leaks. There are no known remote leaks on Android 14 when a VPN app supporting is already active or when it&#x2
549.
by strcat 2y ago
It's app accessible root with a massive portion of the OS trusted with giving out access to it that's a huge problem and massively rolls back OS security against compromise. It also means an accessibility service can trivially esc
550.
by strcat 2y ago
Making userdebug builds with ro.adb.secure=1 to have root access via ADB with the rest of the security model intact is officially supported by GrapheneOS. Using Magisk massively rolls back the OS security model and is strongly discouraged.
551.
by strcat 2y ago
It's worth noting that the built-in VPN support doesn't have these leaks. We don't agree with how Mullvad is presenting this because it is not yet clear if the leaks with their app and other apps are because of bugs in these
552.
by strcat 2y ago
No, it's not compatible with receiving official over-the-air updates. Similarly to if you build and signed the OS properly, you'll need to make each of the updates yourself. Unlike building and signing the OS properly, you will no
553.
by strcat 2y ago
This doesn't work with GrapheneOS but rather you can create a derivative of GrapheneOS without the core security model intact. Instead of a tiny core portion of the OS being trusted with root access, a massive portion of the OS is trus
554.
by strcat 3y ago
Pixel Camera works fine. It doesn't require Google Play, but the functionality dependent on Google Play and AR Services does work fine on GrapheneOS via sandboxed Google Play. You can install it via the sandboxed Play Store. Trying to
555.
by strcat 3y ago
> GOS's limited device support is disappointing, but I understand their reasoning. Our specific hardware requirements are listed at https://grapheneos.org/faq#future-devices . It's a very concrete list of requir
556.
by strcat 3y ago
HWAsan is semi-hardware-accelerated memory tagging usable on most arm64 devices. MTE makes it much lower overhead for the debugging-oriented synchronous mode but also provides the asynchronous/asymmetric modes aimed at production usage
557.
by strcat 3y ago
The person who made the mistake leading to the Bluetooth memory corruption bug we found is not at all at fault and neither is whoever reviewed it. It's a hard to spot race conditions leading to use-after-free. It was not immediately ob
558.
by strcat 3y ago
> (not on the team) I believe the project are open to supporting other devices that meet the criteria, or collaborating with hardware partners to that effect. Yes, we want GrapheneOS devices meeting the same security standards we've
559.
by strcat 3y ago
Our work on security is entirely in service of privacy. Security is not the main goal of GrapheneOS. Highly usable privacy is the main goal of GrapheneOS and security is part of providing it. The goal of GrapheneOS is providing a highly pri
560.
by strcat 3y ago
Pixels largely use open source code for the parts specific to Pixels (TEE, secure core, secure element, boot chain) but unfortunately they don't publish all the Pixel specific changes yet. They committed to publishing the firmware and
561.
by strcat 3y ago
Yes, we provide extended support for end-of-life devices which had less than 5 years of proper support. We provide that for at least 1 year and no more than 2 years. However, unlike other alternate operating systems, we're completely h
562.
by strcat 3y ago
They have this completely backwards. GrapheneOS provides much better privacy than CalyxOS including features like Contact Scopes, Storage Scopes, per-app Sensors toggle, Network toggle instead of the leaky LineageOS approach, per-connection
563.
by strcat 3y ago
You have this completely backwards. GrapheneOS provides much better privacy than CalyxOS including features like Contact Scopes, Storage Scopes, per-app Sensors toggle, Network toggle instead of the leaky LineageOS approach, per-connection
564.
by strcat 3y ago
You have this completely backwards. GrapheneOS provides much better privacy than CalyxOS including features like Contact Scopes, Storage Scopes, per-app Sensors toggle, Network toggle instead of the leaky LineageOS approach, per-connection
565.
by strcat 3y ago
We have active communication with many people at Google about the areas we're heavily working on such as this and are not basing this on assumptions. You're talking about what you think happened based on your assumptions about it
566.
by strcat 3y ago
Regressions in Android because they aren't doing enough real world testing with MTE or HWASan builds. They're clearly testing them via CI and fixing those issues but in real world usage more issues are uncovered which often slip i
567.
by strcat 3y ago
You can use Netflix on GrapheneOS. They incorrectly configured their Play Store listing for the app as needing a Google certified OS but in reality the app doesn't currently check the Play Integrity API. You can install it another way
568.
by strcat 3y ago
Any Chromium-based browser works including Edge included with Windows, Brave or our own Vanadium browser. Firefox may be gradually changing their mind about WebUSB. They added similar features they said they wouldn't such as MIDI. We w
569.
by strcat 3y ago
You can backup more via the OS backup system using the device-to-device toggle. This should really be the default and perhaps the only way to do it. We have a new backup app planned with initial research work into that started. > and set
570.
by strcat 3y ago
We simply have far bigger priorities than dedicated the enormous resources to having a whole separate set of releases with userdebug features and an on-device root terminal which requires a special boot mode and isn't persistent. It&#x

More ›