Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped

wizoatk

Foggy the GOS team can't release until it is in official release firmware

Minor niggle. It's not that GOS can't, but that they've chosen not to release support for Pixel 11 series until there is at least some positive sign from Google that Google will provide support for MTE for Pixel 11 series going forward.

micber

looking forward to Motorola sig 27 since I have always hated pixel hardware but loved my moto edge + 2023. that was an amazing phone!

grzecel

Reboot GrapheneOS told that they could support Pixel 11 anyway without MTE

Where did you get that from!? 🙄🤔

Reboot

grzecel Hacker News.
I think they also said it on social media.

They can support it but would recommend against it, even a Pixel 8 is more secure than Pixe 11 (without MTE).

wizoatk

Reboot

Perhaps this?

https://news.ycombinator.com/item?id=49494493

grapheneos 31 days ago
We don't plan to make official GrapheneOS releases for any more devices without MTE. If we decided to provide support for the Pixel 11 series, it likely won't be branded as GrapheneOS to make it clear it isn't on the same level.
It would be inconsistent to require Motorola to provide MTE support and then to support the Pixel 11 without it.

There are no phones directly supported by AOSP. Motorola is helping us support their devices and port our features to them. We have to do an immense amount of work on it ourselves for Pixels and already did a lot of it for the Pixel 11 devices. Other devices are missing more than MTE.

Context: I believe this was when we believed that MTE was fully missing/broken.

Reboot

wizoatk
It was this:

Pixel 10 has 6 years of support remaining and the more recently launched Pixel 10a has even more of the support time remaining. We're hoping the Pixel 12 series brings back MTE so that it's only 1 generation not meeting our requirements. We could support the Pixel 11 series if we wanted but we'd have to heavily recommend against it. We haven't fully decided on how to handle it yet.

https://news.ycombinator.com/item?id=49492118

userofgos

It was also mentioned here: GrapheneOS

GrapheneOS

We're not going to add support for the Pixel 11 series unless it ships MTE support. It has hardware level support for MTE but it shipped without firmware support for it. It's unknown why that's the case and it could be due to flaws in the hardware implementation which have to be worked around. It isn't yet clear if it's going to support MTE but we've decided we won't support it unless it ships. Android 17 QPR2 Beta launched for the Pixel 11 after we made our initial posts about this and added preliminary firmware support for MTE while keeping it fully disabled for the OS even as a developer option. It isn't clear if something is severely wrong with it or not yet so we can't make any commitment to supporting the Pixel 11 series.

VAULT

GrapheneOS Thx for the clarity!

phone-company

grzecel mte is ON and it will be ON in December ;)

grzecel

phone-company You must have not read or fully understood what GrapheneOS just said... 🙄

negrutul

GrapheneOS Thanks for the follow up. I have already returned the 11 pro and got the 10 pro 1TB where i already put graphene. It will most certain do the job.

Wynnded

grzecel I think that someone's just being extraordinarily optimistic.

TheDumbQuestioner

GrapheneOS Thanks, may as well go for the Motorola Signature 27 this time :).

pixelate

Man, I got so lucky. Bought a Pixel 8 on eBay direct from first owner. GrapheneOS rates the battery 100% with 297 cycles. Screen is flawless. Case makes everything look brand new.

Motorola Signature 27 might be down the road a ways, but the Pixel 10a is a much shorter trip.

phone-company

grzecel or maybe i know a little more about coming Google Pixel-Updates. WHO knows

Eris

GrapheneOS
Mind I ask for some clarity on this? What would be the difference between MTE being enable and accessible let's say after an update vs it shipping with it? Why would it not be supported for Graphene if the former were the case , and if the option is still ultimately there and enabled post update?

Foggy

Eris Not speaking for the GOS team, but I expect they want some certainty that it's a supported feature going forward. Otherwise it could be enabled in one version of the firmware and then removed in the next. Then they would either have to disable it retrospectively, or be unable to ship more recent firmware with security updates.

missing-root

GrapheneOS can people contribute to that database? Nearly all my apps run fine with MTE

GrapheneOS

Eris If it doesn't end up getting MTE support then we're not going to be supporting it. We aren't going to assume it will get MTE support, add preliminary support for it and then have to drop support for the device in December 2026 if it doesn't end up shipping. We're not going to support a new device without MTE for around 7 years. That would mean around 6 extra years of supporting devices without MTE. We're not going to finish adding support for it until we know we can support it. We're definitely not going to prematurely publish support for a device we end up being unable to support. It would be a disaster to do that and have a bunch of people buy it who then have to return it, sell it or switch back to the stock OS. Why would we take that huge risk?

« Previous Page