GrapheneOS in the Press

Azert12

Lemonde press . mention graphene os first in list of degoogled os and speak " smartphone without google is possible and what user think " .

https://www.lemonde.fr/pixels/article/2022/11/12/un-smartphone-android-sans-google-c-est-possible-qu-en-pensent-les-utilisateurs_6149559_4408996.html

malatoi

A really good video in german on YouTube focussing on Graphene's main issues privacy and security:

https://www.youtube.com/watch?v=EwzOD1q3N3I

[deleted]

malatoi Awesome! Wish I had a translation haha! It seems good from the Graphics! Can anyone translate a TLDR?

buddy

A tech comedy channel SAMTIME has tried and decided to keep GrapheneOS. Congrats!
https://invidious.fdn.fr/watch?v=EHSbb_G7zVk

matchboxbananasynergy

Coverage regarding 2 high severity vulnerabilities reported by GrapheneOS

https://www.bleepingcomputer.com/news/security/google-fixes-two-pixel-zero-day-flaws-exploited-by-forensics-firms/

https://www.pcmag.com/news/new-zero-day-attacks-target-google-pixel-phones

https://thehackernews.com/2024/04/google-warns-android-zero-day-flaws-in.html?m=1

Context: https://discuss.grapheneos.org/d/11860-vulnerabilities-exploited-in-the-wild-fixed-based-on-grapheneos-reports

OfflinePuffin

matchboxbananasynergy

Can we make a tag for news topics on the fourm? I apologize if there is one already

boldsuck

GrapheneOS has been reported several times in the German IT security blog.

https://www.kuketz-blog.de/grapheneos-der-goldstandard-unter-den-android-roms-custom-roms-teil7/
Kuketz-Blog GrapheneOS

final

Additional coverage of the exploit disclosure affair:

https://www.tomsguide.com/phones/android-phones/google-just-fixed-two-major-pixel-security-flaws-update-your-android-phone-now

https://candid.technology/google-pixel-zero-day-patch-cve-2024-29748-cve-2024-29745/

maxsi

https://www.youtube.com/watch?v=tNU20zcQpLE

de0u

maxsi I guess I see where the "enable USB debugging to install" advice comes from. It is true that installing adb on one's system and authorizing USB debugging is one way to reboot into the bootloader, but it seems like a lot more work than just holding down the Volume-down button while powering the device on (as the GrapheneOS web installer instructions say to do).

matchboxbananasynergy

de0u A lot of unofficial install guides mention that, despite it not being mentioned in any of our official guides.

We've contacted 9to5Google to have that detail corrected for the written article, but they wouldn't be the first to make that mistake.

Pacienco

https://dustri.org/b/musings-on-cve-2023-6246-on-hardened_malloc.html & https://dustri.org/b/using-hardened_malloc-in-alpine-linux.html

de0u

Pacienco https://dustri.org/b/musings-on-cve-2023-6246-on-hardened_malloc.html & https://dustri.org/b/using-hardened_malloc-in-alpine-linux.html

Thanks for uncovering that and taking the time to post. While the analysis is first-cut, it is analysis, and it's nice to see factual claims that can be evaluated.

Pacienco

https://www.derstandard.at/story/3000000209683/grapheneos-android-fuer-alle-die-google-nicht-moegen-aber-ihre-privatsphaere-lieben

horde

https://cs.uwaterloo.ca/~m285xu/assets/publication/s2malloc-paper.pdf

Hardened_malloc is the default allocator of GrapheneOS, a privacy and security focused Android-based OS. Hardened malloc incorporates all security features discussed in §2.1 and focuses on UAF-write protections. Similar to other entropybased allocators, Hardened malloc suffers from reduced randomness. It also incurs increased overheads for larger blocks, which limits its use scenarios.

PaulDavis

NBTV on yt and other channels pushes for mobile privacy, and always points out the benefits of GOS, and how apps etc are failing us

« Previous Page