Final's avatar
Final
final@stacker.news
npub1hxx7...g75y
Community & Support @ GrapheneOS Foundation. Posts my own and not endorsed by my employer. AI slop and Nostr DMs ignored. Email: final@grapheneos.org Matrix: f1nal:grapheneos.org
Final's avatar
AmberFinal 22 hours ago
We're planning on shipping our port of 10th generation Pixels to Linux 6.18 in our next official release. We'll see how that goes with much broader testing in our Alpha and Beta channels. We'll finish the port for the earlier Pixels once that's done and then we'll get everything moved over to 6.18. Public testing via our experimental releases has been ongoing for several days now. Only a single regression has been discovered so far which was DisplayPort alternate mode no longer working and it was quickly fixed and made available in a new experimental release. It's ready for Alpha testing soon.
Final's avatar
AmberFinal 2 days ago
Had a discussion with the @White Noise team about how they could improve especially in a security and privacy standpoint. The post and article below discuss a small part of the efforts made. These provide substantial security improvements while having no added overhead or friction to the user. If your application handles media, it's important that functionality is sandboxed and designed in a memory safe language. White Noise currently isolates image decoding in this way but now this has also been expanded to animated images as well. You can find out more below. Memory tagging (MTE), a ARM hardware exploit protection used heavily by GrapheneOS and latest generation iPhones are now opted in the app manifest. This makes it unable to be disabled in GrapheneOS and also enables it for capable phones enrolled in Android's Advanced Protection. The issue tracker also now tracks working on a few improvements, including adding this sandbox for other types of attachments too. I've also discussed on a improving accessibility features. View quoted note →
Final's avatar
AmberFinal 2 days ago
Another win for our hardware USB-C port control feature. In the highest setting, the device cannot charge unless it is powered off. From Anthropic: "Claude wrote an exploit that let an attacker extract photos and other personal information from a stolen Android phone without unlocking it"
Final's avatar
AmberFinal 3 days ago
I hate talking about general security and privacy advice on social media. It's a common tactic by charlatans to make them appear trustworthy for saying basic things. But, this has to be said. An often overlooked detail of wallet company data breaches is the collateral damage to the customer. Your compromised information can be used to target you in additional breaches, such as for phishing emails or even credential stuffing. Everyone talks about the risk of real world harm but it's also your cyber health at stake. Never reuse your credentials and keep information you provide non-attributable where there is no consequence to do so. If you are running a business involved in decentralised finance, whether it be as a product or accepting a mode of payment, you must understand you will have a target on your back, all the time, with threat actors who work more hours than you do and also more likely to be held unaccountable should they succeed with their goals. You have to assume you WILL get a data breach eventually. No organisation is perfect. If you aren't ready to continuously put in an effort to security, quit while you can to protect your customers. Basic mistakes are the most overlooked, and often the most dangerous. There is never a wrong time to review your posture. Don't let your impacts be amplified by technical failures you only were able to discover after the breach happened.
Final's avatar
AmberFinal 5 days ago
0 days without a wallet company data breach.
Final's avatar
AmberFinal 5 days ago
Even Wikipedia appeared to get this wrong... > accused a man of destruction of evidence after he gave his screen lock duress pin to an officer during a border search. Was not evidence, rather destruction of property to prevent seizure. View quoted note →
Final's avatar
AmberFinal 1 week ago
I was sent this article showing what appears to be a document by Cellebrite that was marked as confidential describing a recent Advanced Unlocks capability. The document is a few months old. This capability allegedly uses a dedicated appliance with a stated range of about 8 metres. Given the range they suspect it is to do with Bluetooth. There is no mention of iPhones with MIE (hardware memory tagging, iPhone 17, Air and later) and it is not on the latest iOS version, which could suggest a patch. Take a look for yourself: image It would make sense that Cellebrite would choose to have capabilities like this one under development. When devices increase their security against physical attacks, the exploit developers will move towards a path of least resistance to exploit other components or circumvent the security measures that prevent the extraction, as we see with their automatic reboot cancelling exploits for iPhones. Since forensics labs contain devices in isolation to prevent network access and remote wiping, it is possible to make simulated / dummy network environments inside those containers where advanced labs can attempt exploit delivery without the risks. The full document is available on request so it needs to be looked at further. While I do not intend to make discussion threads on this site regularly I think this is in a public interest.
Final's avatar
AmberFinal 1 week ago
Latest #GrapheneOS update moves the launcher grid options and icon sizes to the Stock OS. You should have an extra row for the apps at the top you didn't have before.
Final's avatar
AmberFinal 1 week ago
This is the new #GrapheneOS boot animation in the latest release available now. It's generated frame-by-frame using a script. It has a minimum 3.5s total runtime for the intro including a small pause. The rest of the animation gets interrupted once the device is booted to avoid any delay so there can't be an outro.
Final's avatar
AmberFinal 2 weeks ago
Final's avatar
AmberFinal 3 weeks ago
You should see an OS performance increase in our latest update. In upcoming releases there will be much more too including a way to possibly decrease memory usage from our secure app spawning feature. View quoted note →
Final's avatar
AmberFinal 3 weeks ago
Well it looks like I have Mythos 5.1 now. Sweet.
↑