• General
  • Is buying a Pixel 8 a wise move for privacy ?

  • [deleted]

  • Edited

[deleted] I can't see any reasons to get this phone for GrapheneOS.

The Pixel 8 has Arm Memory Tagging Extensions (MTE) which turns many memory safety exploit attempts into crashes instead of compromise with a high probability. It's a reason for at-risk people to get the 8.

https://source.android.com/docs/security/test/memory-safety/arm-mte

https://www.xda-developers.com/android-14-advanced-memory-protection/

    [deleted]

    Thanks for the MTE info !! Very, very nice security feature.
    Just watched a YT vid & I didn’t realize even when an iPhone is turned off your possibly broadcasting for those AirTags they have.
    Plan on getting rid of my XR for the Pixel 8, hopefully Pro. Would like the extra RAM since everything is sandboxed. The Tensor 3 is also an upgrade from the 7’s Tensor 2 from a year ago ( why they didn’t wait & put Tensor 3 in Pixel Tablet is beyond me, since only released 3 months ago ).
    Pixel 8 Pro Has 3 more cores and better graphics.
    The camera and video, especially in the Pro get a big boost. The Pixel 7 already did very, very well world wide in tests. Since iPhone 15 Pro & (?) came out Pixel 7 & Pro dropped some but Pixel 7 Pro still rated #7.
    Can’t imagine what Pixel 8 Pro camera will be rated at.
    https://www.dxomark.com/smartphones/
    ( can change to a spreadsheet format )
    Just waiting for a good trade in deal. Passing on that BestBuy iPhone XR & free Pixel 2 WiFi watch one though ( don’t want that watch & don’t want hassle of selling it for $200 to offset price ).

    • [deleted]

    • Edited

    [deleted] hardened_malloc, The default memory allocator for GrapheneOS, currently does not support MTE. However, hardened_malloc will still be more secure than the Scudo (AOSP) memory allocator despite Scudo having support for MTE.

      7 days later

      Hi. Sorry, I’m new here. I want to install GrapheneOS. Is there an eta for support in pixel 8?

        Zkart No specific dates and it will be done when it's done. But based on previous years and whispers in the wind—probably less than a month.

        maximus87 Thank you. I just saw the link. It is very informative. But is there any evidence? I mean: "you location (constantly), and it uploads it even after you turn every option off and disable everything possible, collects it even when you dont have internet, and uploads later." is a dangerous claim.

        Well i assure you I am not making it up. What i've said here is me actually quoting a television news report having investigated an android phone. I cant recall if it was by nbc or abc, but one of the american news channels. This video is still available on youtube, though unfortunately even though i actually downloaded the video to keep a copy for a day like this, i cant find it right now, nor the link to give you.

        This was a video from i think 2014, where they tested with two phones while putting one in airplane mode and having no google account logged in, and another phone in normal mode with a google account. Neither phone had internet. They took both phones for a joy ride for a few hours. Once back they connected them to a sophisticated "man-in-the-middle" investigative router suitcase. The box basically deciphered the encrypted communication to google so they could see what the actual communication contained. They then saw that the phone in airplane mode had collected every bit of information about every wifi device it had encountered with exact time stamps and it uploaded that to google. This basically gives your entire travel path away with exact timing.

        Now this was done in 2014. Do you think google has gotten better at respecting your privacy today? Or the other way around?

        You decide for yourself. My conclusion is clear for me!

        If i find the video i'll come back and post it here.

        Also, even aside from this, the way the gps works on regular phones constantly gives away your location as well to a different google server. This has been addressed in gos and thats why gos uses its own gps call up server. I forget whar its called.

          User2288 I believe you, no need to search for the video for me :) ! I also read a similar article.
          I hope I don´t come like I am defending a multi billion company... I don´t want to be that kind of person... But if I recall, the explanation was airplane mode doesn´t turn off location tracking. It needs to be specifically turned off, and the location history to also be turned off from account settings. Yes, I see the malicious intend in the design.

          User2288 Now this was done in 2014. Do you think google has gotten better at respecting your privacy today? Or the other way around?

          No, but I think they are more transparent and gave more control to users as these reports and analysis were released, and I hope the press and researchers keep releasing and exposing these bad practices!

          User2288

          Also, even aside from this, the way the gps works on regular phones constantly gives away your location as well to a different google server. This has been addressed in gos and thats why gos uses its own gps call up server. I forget whar its called.

          GrapheneOS doesn't use a network-based location service like iOS and Android. It still uses PSDS which simply downloads static databases and SUPL which downloads more dynamic databases. SUPL is normally used in a mode which doesn't leak much location information to the server beyond your carrier. We disable sending phone number and IMSI for SUPL which is part of authentication since the expectation was that carriers would provide it themselves and use mutual TLS authentication along with IMSI and phone number.

          This was a video from i think 2014, where they tested with two phones while putting one in airplane mode and having no google account logged in, and another phone in normal mode with a google account. Neither phone had internet. They took both phones for a joy ride for a few hours. Once back they connected them to a sophisticated "man-in-the-middle" investigative router suitcase. The box basically deciphered the encrypted communication to google so they could see what the actual communication contained. They then saw that the phone in airplane mode had collected every bit of information about every wifi device it had encountered with exact time stamps and it uploaded that to google. This basically gives your entire travel path away with exact timing.

          Network location service on the stock OS is optional and asks for consent. It has toggles for whether it can scan when Wi-Fi and Bluetooth are disabled. Airplane mode disables cellular and doesn't force Wi-Fi and Bluetooth to be disabled. None of that is unexpected if you allowed network location scanning in the stock OS setup wizard, which is on the same screen as choosing whether to send usage stats.

          7 months later

          DeletedUser115

          DeletedUser115 Any info on if/when hardened_malloc will support MTE?

          Is this saying GOS is not making full use of the MTE in 8 series?

          And to the other member asking if GOS allows completely disabling wifi scanning to avoid location tracking, is this also something GOS fully solves?

            CodexAG This thread is from October 2023, the month the Pixel 8 was released. It's not a good place to get information on it.

            And to the other member asking if GOS allows completely disabling wifi scanning to avoid location tracking, is this also something GOS fully solves?

            It's not an issue in the first place. Apps require the Location permission to get nearby Wi-Fi networks. There's no need for the Wi-Fi scanning toggle to be off. It does not give apps access to Wi-Fi scanning. That's not what the toggle does. The toggle is for choosing if apps with Location can temporarily enable the radio to do Wi-Fi scans when Wi-Fi is otherwise off.

              GrapheneOS the month the Pixel 8 was released.

              How about the 8a then, is MTE fully operational in GoS?

              Anything else still needs to be worked out in this model, having just been released?

                DeletedUser115 Regarding Wi-Fi scanning, yes, it can be fully disabled.

                From Pixel TOS: “Allow apps and services to scan for Wi-Fi networks and nearby devices at any time, even when Wi-Fi or Bluetooth is off.”

                1) Even when toggled off...this is concerning. Does GoS eliminate this type of scanning?

                2) Also I've heard GoS prevents apps from toggling settings. For example, going in to stock settings only to find sometimes the toggle option got turned on for location/audio recording even though had it turned off a couple days ago.

                Would be good if Graphene confirms the two above items are prevented/secured in GoS.