awesome. i discuss graphene and other infosec opsec tools quite a bit here. lmk if i can help with anything 🤙🏻🔥

I understood from the article that the attack was at the hardware level, if so how can you help prevent this use on a GrapheneOS device?

check his out first and lmk if you still have questions

Frequently Asked Questions | GrapheneOS

Tnk

ofc

I wish the Apple Secure Enclave had an implementation of EEC secp256k1 🤓. Interesting version of the seL4 Microkernel. Regarding the manufacturing supply chain, the Apple Secure Enclave chip is not publicly disclosed by Apple. This component, in particular, is probably not made in China.

Apple Support

Secure Enclave

The Secure Enclave is a dedicated secure subsystem in the latest versions of iPhone, iPad, Mac, Apple TV, Apple Watch, Apple Vision Pro and HomePod.

This has been on my radar previously.... need to get familiar with it more. If youd humor me.... What's the one thing that graphene needs to improve on or that is holding it back atm from further adoption? I mean in terms of its functionality or features not awareness of it as an option.

True, but I would pick something else after seeing the kind of people behind graphene os… check Louis Rossmann video about it

Yes, GOS is great, but hardened android forks aren't immune to similar 0click vulns used to target those iPhones. I'd be interested to know how Lockdown Mode would have faired if it had been enabled, considering the payload was pushed through iMessage.

As far as I know it is only available for google pixel phones and that makes it suspect enough to me.

Security social influencers don't understand that.

Louis Rossmann took issue with Daniel Micay who has since stepped down from #grapheneos as lead developer. " I've stepped down as lead developer of GrapheneOS and will be replaced as a GrapheneOS Foundation director. I'll be ending my use of public social media. I'm unable to handle the escalating level of harassment including recent swatting attacks. There will be a smooth migration. I'm confident the project will be in good hands with the rest of the development team. I'll be training them to handle everything I used to do myself. I haven't been a particularly active developer for a while now and there will be little impact on ongoing feature development. One of our veteran developers will be taking over administration of the server infrastructure. Local infrastructure for official builds, signing and testing will be replicated in multiple locations and verified against each other to reduce trust in any particular location. I'm going to focus on recovery from everything that has transpired since 2018. I have not been doing well, particularly in the past few weeks, but there has been no break from it since 2018. The police know about the swatting situation and are preventing it happening again."

Micay is still active in social media.:(

It’s a very sophisticated attack based on a hardware vulnerability, how can you be sure it’s not happening in Android for certain phone models? We possibly have not discovered those yet..