|
11 posts total
 Unfortunately, Revolut has banned GrapheneOS users from logging into the app because of an incorrectly implemented device integrity check based on the anti-competitive Play Integrity API. Our users need to put pressure on apps like this to get them to whitelist GrapheneOS. iOS 18.1 added an implementation of the auto-reboot timer for locked devices we've been using in GrapheneOS since June 2021: https://chaos.social/@jiska/113447894119816217 This was one of our early generation protections against forensic data extraction. We added a lot more protections this year. iOS 18.1 was released on October 28, 2024. This has nothing to do with recent news coverage where cops are blaming imaginary features for devices not staying in After First Unlock state. Devices likely crashed due to one of many bugs which exist, including already patched ones. Our understanding is that there will be a stable release of Android 15 on October 15th. We fully ported all our changes to it by September 3rd after the early source code release in September. We'll aim to have a release out within 24h of the stable release being pushed to AOSP. Today, they published the Android Security Bulletin for October with the security patch backports to the initial releases of Android 12, 12L, 13 and 14. There should be a monthly release based on Android 14 QPR3 today or tomorrow. If not, we'll do a release with the backports. GmsCompatConfig (sandboxed Google Play compatibility layer configuration) version 137 released: https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-137 See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog. Forum discussion thread: https://discuss.grapheneos.org/d/15697-gmscompatconfig-version-137-released Our 4th release for the Pixel 9, Pixel 9 Pro and Pixel 9 Pro XL is now available. It adds two Bluetooth bug fixes missing from the temporary Android Open Source Project branch for 9th generation Pixels. One of those is a Bluetooth issue we reported. @GrapheneOS How secure is Bluetooth audio on grapheneOS? Will using a Bluetooth speaker open up attack surface? Telegram has full access to all of the content of group chats and regular one-to-one chats due to lack of end-to-end encryption. Their opt-in secret chats use homegrown end-to-end encryption with weaknesses. Deleting the content from the app likely won't remove all copies of it.
Show previous comments
Telegram has heavily participated in misinformation campaigns targeting actual private messaging apps with always enabled, properly implemented end-to-end encryption such as Signal. Should stop getting any advice from anyone who told you to use Telegram as a private messenger.  @GrapheneOS while there are actual security concerns about Telegram's way of handling data, there has been no known case of the messenger disclosing actual conversations, which means that they still respect the privacy of their users, even if it only stands on their word of honor. Also, claims about lack of moderation are also fake, Telegram is known for banning channels and users for various reasons. Overall, all of this is a test of a right for privacy, which Telegram actually was respecting Private Phone Shop LLC was selling end-of-life and near end-of-life devices with GrapheneOS to users while using our trademarks throughout their site. We asked them to stop selling devices older than Pixel 6. They ignored us, then blocked us and have been attacking us since then. They've been targeting our team members by spreading fabricated stories and spin aimed at directing harassment towards them. We strongly recommend refunding any purchases from them and buying the devices elsewhere, no matter how long ago it was you purchased a device from them. April release of the Pixel boot chain firmware includes fixes for 2 vulnerabilities reported by GrapheneOS which are being actively exploited in the wild by forensic companies: https://source.android.com/docs/security/bulletin/pixel/2024-04-01 These are assigned CVE-2024-29745 and CVE-2024-29748. CVE-2024-29745 refers to a vulnerability in the fastboot firmware used to support unlocking/flashing/locking. Forensic companies are rebooting devices in After First Unlock state into fastboot mode on Pixels and other devices to exploit vulnerabilities there and then dump memory. We'll be heavily prioritizing adding support for the Pixel 7a, Pixel Tablet and Pixel Fold. It has been years since we supported a tablet (Nexus 9) and there will likely be additional work to support the form factor properly. Pixel Fold is a new form factor and may be difficult. #grapheneos #privacy #security #pixel #pixel7a #pixeltablet #pixelfold Providing production quality support for all these new devices will take a substantial amount of development time. We need to balance it with our privacy and security work. We're still very early in the process of scaling up the development team via the GrapheneOS Foundation. Our privacy-focused Camera app now has over 500k downloads through the Play Store: https://play.google.com/store/apps/details?id=app.grapheneos.camera.play If the app succeeds at spreading awareness about GrapheneOS we'll be able to devote more resources to adding features like frame rate control and manual exposure controls. An anonymous person donated 39 ETH to GrapheneOS on February 12th. Value of ~$59k at the time and now almost $65k. Currently, all the developers we pay to work on GrapheneOS are directly funded with cryptocurrency donations. This donation will let us hire another full time dev. |
Gregory's Server
@GrapheneOS @stefano
Could we not use the term whitelist, which has racist connotations and origins
@GrapheneOS ok, I will close my Revolut account and tell them this is the reason