Proton Mail and Drive memory tagging error?

milklikecomputer

Murcielago I know that, but when I download it manually using my browser, I did download the latest version, I reorganized Obtainium but it shows up as the latest version, I think it could be a problem with the official website or with Obtainium, but either way it will make the update of the app unreliable.

lcalamar

milklikecomputer I run into a lot of issues around obtanium. While it is my first app install tool - I find that several of my apps are available for update - when the 'new' version matches the version I am already running... I just ignore them but a little wonky

milklikecomputer

lcalamar It's a fact that the web version has better usability (I'm not sure it can push notifications), but it's also a fact that the local app is more secure.

https://www.privacyguides.org/en/basics/common-threats/#privacy-from-service-providers

I think the article proves my point.

milklikecomputer

Proton Drive from Google Play also fails due to momory tagging, I will report the problem to Proton Security Team.

TrustExecutor

Proton Mail sometimes just crash upon startup. I suspect this is due to MTE. Restarting it again works fine. Never had this on my P6P without MTE.

tremble1256

TrustExecutor I have this exact same issue with proton and it has been happening for months. Same thing also happens in slack. I reported it to the slack team a month ago but even they couldn't triage, I'll probably email them again to try some other methods

mousetrapreplica

I just had "Memory tagging detected an error in Proton Mail" while scrolling the body of an email in the app.

Sent a report to the Proton security team email address linked above.

0xC0DED0D0

Bump with a related question: I have the full Proton suite installed, and noticed that Proton Drive (currently 2.32.0) has MTE enabled, whereas the others don't.

I have done no manual overrides on any apps, just happened to be checking out the exploit protection settings and stumbled upon this discovery.

Could Proton quietly been moving toward MTE compatibility, specifically with GrapheneOS in mind, and are able to tag this in an APK manifest (or similar)?

Or, is the GrapheneOS team keeping tabs on which applications are compatible and flag them in a config?

The explanatory underneath the setting only states that MTE is enabled for "third-party apps known to be compatible", so that would point to the latter. But then it also says "e.g. apps that don't have native code".

I figure Proton Drive pretty much has native code, though...? 🤨

So what actually determines compatibility?

fid03

0xC0DED0D0

https://source.android.com/docs/security/test/memory-safety/arm-mte#enable-mte-apps

https://github.com/ProtonDriveApps/android-drive/blob/97951ea7545c020ac2cb2a95136278571bf8e4ed/app/src/main/AndroidManifest.xml#L31

Yes, Proton Drive has opted in to MTE.

« Previous Page