Extremely Weird Updates after new GOS Update

WeirdUpdate

I'm on build 2025112101

Google Pixel 9 Pro XL

WeirdUpdate

I need to know if I should hurry up and airplane mode my device and change my crypto wallets I'm holding a lot please let me know thanks

WeirdUpdate

It also updated:

Ente Photos

At the same 4:07 time

Novalissoide

WeirdUpdate Check your device integrity with the Auditor app.
https://attestation.app/tutorial

Check your apps with Appverifier.
Get it from Accrescent appstore, or
https://github.com/soupslurpr/AppVerifier/releases

WeirdUpdate

Unfortunately I don't have another Android device to use the Auditor app my only other device is a iPhone but I downloaded AppVerifier here is the results

All say unknown in the database besides Mullvad says verified

com.cakewallet.cake_wallet
09:C7:C4:F9:6B:5F:3A:75:99:8E:CF:53:78:E6:39:19:0E:02:3E:26:75:02:6D:26:21:E4:AC:78:1C:94:88:FC

io.ente.photos
37:D4:0B:10:3B:BF:86:43:EB:AE:23:B3:BB:73:F8:65:B4:E9:3A:BF:65:45:EF:37:12:8A:4C:EA:5B:C2:7E:2E

net.mullvad.mullvadvpn
D7:4C:E0:E0:B2:9F:4D:1D:57:AB:F5:EF:7F:9A:37:57:E7:87:CC:A7:A6:25:9B:9C:32:BB:5B:B1:8E:34:63:BD

com.monero.app
EA:C7:62:C6:D4:E9:7D:5A:BB:5F:0D:02:36:EA:32:CE:C4:B1:67:1F:9E:AA:FB:D1:25:5F:36:B4:D3:97:20:A9

org.sufficientlysecure.keychain
59:AA:11:A4:BF:97:58:34:FF:06:2D:40:8F:EE:25:23:C2:26:0C:BB:2C:C8:C0:1F:CD:A0:3E:AD:21:8A:90:7D
81:EA:CA:46:84:F2:73:D8:97:E9:6E:6E:89:4A:B7:73:46:8C:FA:B0:0A:25:AA:0A:2C:AF:0E:5F:01:D5:A5:00

Please anyone help why does OpenKeychain have two?

Novalissoide

WeirdUpdate your readouts for;
Cake Wallet
Monero
Openkeychain
-corresponds with what I just got from testing installing them.
Proceeding with the others now.

Novalissoide

WeirdUpdate MullvadVPN checks out.

Novalissoide

WeirdUpdate Ente Photos checks out.

Novalissoide

https://grapheneos.org/install/web#verified-boot-key-hash

You may pause first bootscreen and check if your device corresponds with the official bootkeyhash. That is for Pixel 9 Pro XL: 55d3c2323db91bb91f20d38d015e85112d038f6b6b5738fe352c1a80dba57023

WeirdUpdate

Novalissoide thanks for being so helpful and yes the boothash matched so I'm really puzzled here

But the apps says last updated today and its very weird about the OpenKeychain since it hasn't had an update since 2024 according to google play and github.

So what's going on?

Novalissoide

How's it going?

domnru

WeirdUpdate Since GrapheneOS compiles apks ahead of time as far as I know, maybe it got "updated" after the update because of app optimizaton.

Novalissoide

WeirdUpdate I don't know, maybe someone else recognise this?
It correlated time-vise with device finishing its update, and maybe this have something to do with the android post update-optimization of the apps, but that is just a guess.

Novalissoide

WeirdUpdate but be adviced: Auditor does more than just that bootkeyhashcheck, so you should get another device (not required that it is another Gos)
and make the whole checkup. Or you could setup Remote Attestation.

Novalissoide

I just tested 'installing' my gallery app using the extracted apk from it and yes, now it is 'updated' with timestamp today.

fernlike

https://support.google.com/googleplay/work/answer/9350374?hl=en

Default update behavior

By default, apps are updated automatically when the following constraints are met:

The device is connected to a Wi-Fi network.

The device is charging.

The device is idle (not actively used).

The app to be updated is not running in the foreground.

Google Play typically checks for app updates once a day, so it can take up to 24 hours before an app update is added to the update queue. After an app is added to the queue, it will be automatically updated the next time the constraints above are met.

https://developer.android.com/google/play/app-updates

Note that there are other times when Google Play downloads app content or performs maintenance on app binaries on developers' behalf without changing the Android version code—for example, when completing partial downloads or downloading on-demand splits.