We're planning on shipping our port of 10th generation Pixels to Linux 6.18 in our next official release. We'll see how that goes with much broader testing in our Alpha and Beta channels. We'll finish the port for the earlier Pixels once that's done and then we'll get everything moved over to 6.18.
Public testing via our experimental releases has been ongoing for several days now. Only a single regression has been discovered so far which was DisplayPort alternate mode no longer working and it was quickly fixed and made available in a new experimental release. It's ready for Alpha testing soon.
Final
final@stacker.news
npub1hxx7...g75y
Community & Support @ GrapheneOS Foundation.
Posts my own and not endorsed by my employer. AI slop and Nostr DMs ignored.
Email: final@grapheneos.org
Matrix: f1nal:grapheneos.org
Had a discussion with the @White Noise team about how they could improve especially in a security and privacy standpoint. The post and article below discuss a small part of the efforts made. These provide substantial security improvements while having no added overhead or friction to the user.
If your application handles media, it's important that functionality is sandboxed and designed in a memory safe language. White Noise currently isolates image decoding in this way but now this has also been expanded to animated images as well. You can find out more below.
Memory tagging (MTE), a ARM hardware exploit protection used heavily by GrapheneOS and latest generation iPhones are now opted in the app manifest. This makes it unable to be disabled in GrapheneOS and also enables it for capable phones enrolled in Android's Advanced Protection.
The issue tracker also now tracks working on a few improvements, including adding this sandbox for other types of attachments too. I've also discussed on a improving accessibility features.
View quoted note →
Another win for our hardware USB-C port control feature. In the highest setting, the device cannot charge unless it is powered off.
From Anthropic: "Claude wrote an exploit that let an attacker extract photos and other personal information from a stolen Android phone without unlocking it"


Discovering and exploiting vulnerabilities in critical, real-world software with Claude
Over the past few months, we’ve used an unreleased, internal research model to find critical vulnerabilities in some of the world’s most widely...
I hate talking about general security and privacy advice on social media. It's a common tactic by charlatans to make them appear trustworthy for saying basic things. But, this has to be said.
An often overlooked detail of wallet company data breaches is the collateral damage to the customer. Your compromised information can be used to target you in additional breaches, such as for phishing emails or even credential stuffing.
Everyone talks about the risk of real world harm but it's also your cyber health at stake. Never reuse your credentials and keep information you provide non-attributable where there is no consequence to do so.
If you are running a business involved in decentralised finance, whether it be as a product or accepting a mode of payment, you must understand you will have a target on your back, all the time, with threat actors who work more hours than you do and also more likely to be held unaccountable should they succeed with their goals. You have to assume you WILL get a data breach eventually. No organisation is perfect. If you aren't ready to continuously put in an effort to security, quit while you can to protect your customers.
Basic mistakes are the most overlooked, and often the most dangerous. There is never a wrong time to review your posture. Don't let your impacts be amplified by technical failures you only were able to discover after the breach happened.
0 days without a wallet company data breach.
View quoted note →
0 days without a wallet company data breach.
Even Wikipedia appeared to get this wrong...
> accused a man of destruction of evidence after he gave his screen lock duress pin to an officer during a border search.
Was not evidence, rather destruction of property to prevent seizure.
View quoted note →
GrapheneOS - Wikipedia
@White Noise committed memory tagging (MTE) enabled in their app manifest. This means in a future version of the app, you get MTE used in a very limited scope of non-GrapheneOS Android devices. For #GrapheneOS it means the exploit protections cannot be disabled.

GitHub
Request native heap memory tagging (#3399) · marmot-protocol/whitenoise-android@9f39a21
* Request native heap memory tagging
* Document memory-tagging policy regression checks
I was right.
DHS Said They Searched Man Who Wiped #GrapheneOS Phone for Child Abuse Material. **They Lied.**
View quoted note →

404 Media
DHS Said They Searched Man Who Wiped GrapheneOS Phone for Child Abuse Material. They Lied
Officials said they wanted to search the phone of Samuel Tunick, a Stop Cop City activist, for child abuse material. It was actually because he was...
I was sent this article showing what appears to be a document by Cellebrite that was marked as confidential describing a recent Advanced Unlocks capability. The document is a few months old. This capability allegedly uses a dedicated appliance with a stated range of about 8 metres. Given the range they suspect it is to do with Bluetooth.
There is no mention of iPhones with MIE (hardware memory tagging, iPhone 17, Air and later) and it is not on the latest iOS version, which could suggest a patch.
Take a look for yourself:
It would make sense that Cellebrite would choose to have capabilities like this one under development. When devices increase their security against physical attacks, the exploit developers will move towards a path of least resistance to exploit other components or circumvent the security measures that prevent the extraction, as we see with their automatic reboot cancelling exploits for iPhones. Since forensics labs contain devices in isolation to prevent network access and remote wiping, it is possible to make simulated / dummy network environments inside those containers where advanced labs can attempt exploit delivery without the risks.
The full document is available on request so it needs to be looked at further. While I do not intend to make discussion threads on this site regularly I think this is in a public interest.
✍️ Is Cellebrite sitting on an iPhone radio 0day? · justin.sh
It would make sense that Cellebrite would choose to have capabilities like this one under development. When devices increase their security against physical attacks, the exploit developers will move towards a path of least resistance to exploit other components or circumvent the security measures that prevent the extraction, as we see with their automatic reboot cancelling exploits for iPhones. Since forensics labs contain devices in isolation to prevent network access and remote wiping, it is possible to make simulated / dummy network environments inside those containers where advanced labs can attempt exploit delivery without the risks.
The full document is available on request so it needs to be looked at further. While I do not intend to make discussion threads on this site regularly I think this is in a public interest.Latest #GrapheneOS update moves the launcher grid options and icon sizes to the Stock OS. You should have an extra row for the apps at the top you didn't have before.
This is the new #GrapheneOS boot animation in the latest release available now. It's generated frame-by-frame using a script. It has a minimum 3.5s total runtime for the intro including a small pause. The rest of the animation gets interrupted once the device is booted to avoid any delay so there can't be an outro.
Interesting new software from the Ibis Paint guys. Extremely fast office suite.

GitHub
GitHub - ibisjp/ibis-office: The next-gen Office suite built with Rust & GPUI. Blazing-fast, memory-safe, and highly accurate editing for DOCX, XLSX, and PPTX with pixel-perfect rendering. Powered by DirectX, Metal, Vulkan & WebGPU for peak performance across Windows, macOS, Linux, and Web (Wasm).
The next-gen Office suite built with Rust & GPUI. Blazing-fast, memory-safe, and highly accurate editing for DOCX, XLSX, and PPTX with pixel-pe...
Updaters: have you noticed it? 👀
View quoted note →
You should see an OS performance increase in our latest update. In upcoming releases there will be much more too including a way to possibly decrease memory usage from our secure app spawning feature.
View quoted note →
Well it looks like I have Mythos 5.1 now. Sweet.