strcat

79 ms·

691.
by strcat 7y ago
It is impacted, but patches being present in kernel/common doesn't imply that since all of the upstream changes from the LTS branches are merged.
692.
by strcat 7y ago
>This is only true in the most technical way possible. Yes, AOSP is open source -- but none of the standard applications on any stock version of Android use AOSP anymore. The calendar and other applications are all proprietary. The AOSP
693.
by strcat 7y ago
It's not implied that it's something completely new, although a dozen of the sub-projects are new projects rather than forks of existing ones. The overall project is not simply a fork of the Android Open Source Project with harden
694.
by strcat 7y ago
There are more devices supporting this than there used to be though. https://grapheneos.org/#device-support explains that it's going to support other devices. It doesn't support the Pixel 3a and Pixel 3a XL yet ei
695.
by strcat 7y ago
The business wasn't supposed to be entirely based around my open source project. It was a security consulting company.
696.
by strcat 7y ago
I'm not spreading FUD, and the conversation isn't about what you claim. Talking about the lack of basic security on existing operating systems based on monolithic kernels written in memory unsafe languages is hardly nitpicking. It
697.
by strcat 7y ago
Yes, that's true. I mean the Android Open Source Project, rather than Android as an OS family. For Android as a platform defined by the Compatibility Definition Document / Compatibility Test Suite, it doesn't have a specific
698.
by strcat 7y ago
> It's going to be a less secure system for casual users, but it'll allow power-users to more easily (you can do that on Android as well, but it's more difficult) secure their system as much as they want. No, it really won
699.
by strcat 7y ago
> but did rub off the rustlang community the wrong way? I find it interesting that people bring up my time contributing to Rust as a negative thing, largely due to my former business partner misrepresenting it and falsely claiming I was
700.
by strcat 7y ago
> with completely Open pieces AOSP is completely open source. Hardware and firmware is a much different story, but that applies to the device you're promoting just as much... > They're making good progress and I can't w
701.
by strcat 7y ago
Every US company has to comply with lawful US government orders if they're going to continue operating. I highly recommend reading carefully through the details on the page you linked. It doesn't only apply to a few companies. It&
702.
by strcat 7y ago
> Security focused and Android in the same sentence? The whole point behind it is working on a new mobile OS, while providing Android app compatibility by using the Android Open Source Project. As the page states, the long-term goal is t
703.
by strcat 7y ago
There's a far larger app ecosystem for Android without Play Services than any other mobile OS. It's very odd to try to claim that it doesn't have that problem. Android is truly a Linux distribution too, and is truly free soft
704.
by strcat 7y ago
See https://grapheneos.org/#device-support . The goal of the project is not to bring security to people's existing devices. It will have official releases with all the device-specific hardening for non-Pixel phones, but
705.
by strcat 7y ago
> It supports the Google Pixel range of phones only so far. See https://grapheneos.org/#early-stage-of-development and https://grapheneos.org/#device-support . There's barely any content on the site,
706.
by strcat 7y ago
Open source is a development model and doesn't have magical privacy and security properties. An iPhone is going to remain the best overall option for privacy and security for the near future, especially for users that aren't very
707.
by strcat 7y ago
Termite has been officially maintained by https://github.com/jelly for quite a while now though.
708.
by strcat 7y ago
Strengthening the security with virtualization is something that's in the early stage of experimentation and research and will be a long-term project. Over the long term though, the goal is moving away from having the Linux kernel comp
709.
by strcat 7y ago
> No, chain-of-trust only has one trick... it can check that what you're about to run is unaltered from what was signed to some degree of probability. This is only one of many privacy and security regressions from moving to a far le
710.
by strcat 7y ago
> that you cannot control network exfiltration from apps GrapheneOS has a Network permission toggle, which is one of the features already restored from the past work on the project. There are many other privacy and security features that
711.
by strcat 7y ago
> I believe there is a general lack of awareness of what AOSP is without Google services and add-ons on top of it. That lack of awareness seems to be your own. > In particular, I have personally had many issues with GPS location for t
712.
by strcat 7y ago
Librem 5 is not open hardware. I also don't understand why you're comparing hardware to an operating system that's perfectly capable of running on top of it with the strengths and weaknesses of the hardware underneath it. You
713.
by strcat 7y ago
The open source project was started before Copperhead existed and long before it was incorporated. The project was never directly owned or controlled by the company, as that was an explicit condition of the collaboration with the company. G
714.
by strcat 7y ago
Doing away with the Linux kernel is a much longer term aspiration. The intention is to use virtualization as a way of reinforcing the app sandbox and/or user profile isolation in the meantime. There has been successful experimentation
715.
by strcat 7y ago
The Android Open Source Project is the only viable starting point. I don't know what else you would suggest. It has solid privacy and security as a baseline already, unlike other mobile or desktop Linux-based operating systems. There&#
716.
by strcat 7y ago
The cellular, Wi-Fi / Bluetooth and NFC radios do receive firmware security updates. GrapheneOS isn't going to support devices without proper security support, which includes ongoing maintenance and security engineering / res
717.
by strcat 7y ago
A component being on the same die as the CPU doesn't mean that it isn't isolated. The SoC components in Snapdragon chips have IOMMU isolation. In modern computers, including smartphones, there are many components inside and outsid
718.
by strcat 8y ago
> CTO having zero regard for his customers and having the gall to tell us to install a new OS ourselves for our own safety after we paid him to offload the trouble of handling security for us, you get no more of my business. I continued
719.
by strcat 8y ago
What about it? I made a substantial positive impact on Rust, largely because I strongly pushed my ideas and consistently and strongly argued against taking it in directions that I disagreed with. I wasn't happy with the level of contro
720.
by strcat 8y ago
What other project do you think I was involved in where I was pushed out? Why are you spreading libel about me? It was a false claim propagated by James that I was pushed out Rust. I left of my own accord and then someone who followed &#x2F

More ›