2026-04-29T19:31:19+02:00 https://nostr.ae GrapheneOS https://nostr.ae/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj https://grapheneos.social/system/accounts/avatars/109/415/078/265/909/169/original/c74b93c7870e37a0.png https://grapheneos.social/system/accounts/avatars/109/415/078/265/909/169/original/c74b93c7870e37a0.png https://nostr.ae/nevent1qqs9cefzd9qdpuawuwuljfyqwyxnvrux53jjkg6jptunec22qlelgqgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljw68pcv In reply to <a href='/nevent1qqsx0vzff76f7yuk62wghka0xf2eefq4qvt2nypsldsqclkenf8n77gh9a32y'>nevent1q…a32y</a><br/>_________________________<br/><br/>When are they going to correct their claims that GrapheneOS isn&#39;t a privacy project, doesn&#39;t do much for privacy, isn&#39;t intended for regular people, isn&#39;t usable by regular people and much more? Why do they support a company and project which repeatedly claim providing decent privacy and security protections primarily helps criminals and spies? What kind of privacy advocates support that and stand behind those egregious inaccuracies about GrapheneOS? 2026-04-14T19:17:04+02:00 https://nostr.ae/nevent1qqsgachntqqtt0wzuzdptnl0gkezx524c6vw0q3rjmn0p3mu4p8xf7szyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj8cj8j5 In reply to <a href='/nevent1qqs8jt3jt0eyzjp82kut6yn869tnve2l958uvhz69ew9aypzf7t5l3crwrq0u'>nevent1q…rq0u</a><br/>_________________________<br/><br/>We have a lot of experience with our users asking about this and needing to have their misconceptions addressed. Many people are using this as a major factor in how they choose apps where they believe apps being listed as having 0 trackers means those apps aren&#39;t privacy invasive. Similarly, people are interpreting the permission count as meaning something it doesn&#39;t. An app which doesn&#39;t require granting anything invasive to use it is often shown as very invasive there. 2026-04-14T11:33:38+02:00 https://nostr.ae/nevent1qqs09ak5nxgvehygufn5d3zmp5y3qwh4fjr6n3tt6cmcljupq82mvzszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj3wrcpa In reply to <a href='/nevent1qqs8ls2jrcufg4sfllmt3tf36aqk3mdv9hw4p0f8ss5v056yspfw3cqm5lx3s'>nevent1q…lx3s</a><br/>_________________________<br/><br/>Ads, analytics, telemetry, crash reporting and similar things done on the client side with connections to dedicated domains are not the most privacy invasive behavior done by apps. There are certain types of client side SDKs which are quite invasive but those things are nowhere close. This definition of trackers and interpretation of what matters is something we&#39;ve been educating our users about for years. A large portion of people exposed to this are misled by it. 2026-04-14T11:27:05+02:00 https://nostr.ae/nevent1qqsyefa5hy8vjys2lrm7efzczqj0n6s3gxwvdhvfe39ed5s847ngu0qzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljcs0kr8 In reply to <a href='/nevent1qqs9djerrcqsk7gz0w8r0plr254razch8w3lhaaqdx3dajm76c2alpce82arg'>nevent1q…2arg</a><br/>_________________________<br/><br/>Here&#39;s Gaël Duval linking to harassment content on a neo-nazi conspiracy website targeting our founder with fabricated stories:<br/><br/><a href="https://archive.is/SWXPJ">https://archive.is/SWXPJ</a><br/><a href="https://archive.is/n4yTO">https://archive.is/n4yTO</a><br/><br/>This content is based around existing harassment content from another company attacking us (Copperhead). Copperhead lost their war on GrapheneOS and we&#39;re wrapping up their legal defeat, but the lies and harassment they started is still ongoing and Duval engages in it. 2026-04-10T21:35:10+02:00 https://nostr.ae/nevent1qqsqpxfm2uru80k0l3ps905rxqqgyg7x2vnxz6c6ekyk3vj5kthvm6gzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljulaxps In reply to <a href='/nevent1qqsph5nuf6y8rax58870qkcgnmjaxja6859zkp7nmc64j7ndndya4dgthwwfq'>nevent1q…wwfq</a><br/>_________________________<br/><br/>The only way you&#39;re going to convince us to post less about it is putting in work to address it yourself and getting others to do that too. The only thing you&#39;ll achieve posting replies saying we shouldn&#39;t respond to these attempts to mislead people about GrapheneOS is us posting more about it as we&#39;re doing right here. You aren&#39;t going to get the result you want this way. There&#39;s a way for you to get the result you want by helping so we don&#39;t have to do as much. 2026-04-10T20:01:17+02:00 https://nostr.ae/nevent1qqsph5nuf6y8rax58870qkcgnmjaxja6859zkp7nmc64j7ndndya4dgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj7nnytf In reply to <a href='/nevent1qqsqsv48q5srv8crqmjwnv8m32cge9jm8p88cteqxfn3tvkh5fdgxschw6ysq'>nevent1q…6ysq</a><br/>_________________________<br/><br/>GrapheneOS will succeed based on merit. Our focus is making GrapheneOS better as it has always been. If we were left alone to do our work in peace then we wouldn&#39;t post threads debunking the attacks and would post more about other things including a lot more posts about our ongoing work. If people want that then they can help debunk the attacks so we feel much less need to do it because it&#39;s already being heavily done by others. Otherwise, we&#39;ll continue doing it. 2026-04-10T19:59:34+02:00 https://nostr.ae/nevent1qqszu6uxfnv5ulgekfd5g57qnr56ervnlju8g7aylw7htu9tu3wkr2szyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljnnxc7n In reply to <a href='/nevent1qqsfaer5q5ef66gnamcpkyvg8pyd37hrnyhwqnd42mf5dsgc8e95eggd0wsdg'>nevent1q…wsdg</a><br/>_________________________<br/><br/>GrapheneOS has been enormously harmed by years of companies misleading people about it. There&#39;s a concerted effort by /e/, Murena and their supporters to mislead people into believing GrapheneOS isn&#39;t a privacy project and that they wouldn&#39;t benefit from the major privacy and security improvements it provides. <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub15r7un2qsdswpyfxqhcxw27c2e2c3x24kfextxar95pxsd2vlj70qwc62av" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Fla</span> (<span class="italic">npub15r7…62av</span>)</a></span> is directly peddling talking points from Gaël Duval aimed at steering people away from GrapheneOS to insecure Murena products. This isn&#39;t a minor issue. 2026-04-10T19:49:30+02:00 https://nostr.ae/nevent1qqsv25hehs8g276d40s8wmek2vm6yg4zm8mvphd3ktrmr47zch5h89czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljctwth2 In reply to <a href='/nevent1qqsq2xfg8k02kgmr30mcja336gxge6ux3glahg86g0c6h36e2epd5pqrzltx6'>nevent1q…ltx6</a><br/>_________________________<br/><br/>We aren&#39;t finished responding to it with this thread. We&#39;re going to be posting it on our forum and other social media platforms too. We&#39;re going to be responding beyond what we&#39;re already posted. We&#39;ve been actively finding and archiving more cases of /e/, Murena and Gaël Duval attacking GrapheneOS by claiming it&#39;s only useful to criminals and spies which they&#39;ve said directly multiple times along with often alluding to it. We have a lot more than that one video clip to use. 2026-04-10T19:35:47+02:00 https://nostr.ae/nevent1qqsq2xfg8k02kgmr30mcja336gxge6ux3glahg86g0c6h36e2epd5pqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj6fp6yp In reply to <a href='/nevent1qqsyxkujyrfgmlfww5k3epgfrfvzt257rytj5m2tv6k4vr895xvmypsjdn8kd'>nevent1q…n8kd</a><br/>_________________________<br/><br/>You&#39;ve likely already read our previous thread where we directly addressed these inaccurate claims. Here&#39;s the relevant part of the thread:<br/><br/><a href="https://grapheneos.social/@GrapheneOS/116354014750484314">https://grapheneos.social/@GrapheneOS/116354014750484314</a><br/><br/>We&#39;re repeatedly published content addressing people inaccurately claiming GrapheneOS is a security project rather than a privacy project. He has read multiple of these threads and knows what we&#39;ve said. He&#39;s saying what he did in the interview despite that. This isn&#39;t about getting any technical details wrong.<br/>nostr:note1ws9dxuuyl5dpw0seg3amju8lht758zsl5zuqlfu8jwtgsq8vypmqrp4x6l<br/> 2026-04-10T19:30:26+02:00 https://nostr.ae/nevent1qqsyxkujyrfgmlfww5k3epgfrfvzt257rytj5m2tv6k4vr895xvmypszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj46puca In reply to <a href='/nevent1qqsdxpdk7yffphm5fq7wytpv6axltrjr44n54y9ykk2779tzdlgrepsl6uh7f'>nevent1q…uh7f</a><br/>_________________________<br/><br/>He directly responded to the thread we published 4 days ago addressing Murena once again claiming the kind of privacy and security hardening work done by GrapheneOS and iPhones is only useful to criminals and spies. In that thread, we directly addressed these repeated inaccurate claims about the purpose, goals and approach of GrapheneOS which wrongly portray it as a security project rather than a privacy project. His claims in the interview are more than egregiously inaccurate. 2026-04-10T19:27:28+02:00 https://nostr.ae/nevent1qqswefv0hmacfdj5prxyxck6fr7hwj94ydkzv29w5xqwcu5xsxj45rgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljkck9qy In reply to <a href='/nevent1qqs8rja5vwh4x5gz9lr87vdhz6wcdlrq5vr6dfxtjwjpqae8dtdgxgc0n3fnk'>nevent1q…3fnk</a><br/>_________________________<br/><br/>Exodus Privacy uses a very similar approach to label apps as having trackers based on whether they include a library from a small list they&#39;ve decided as trackers. Many of those decisions are dubious and it misses that the most privacy invasive behavior by apps isn&#39;t done that way. It also has extremely inaccurate labelling of permissions misleading users about how that works. Here&#39;s a great example of both with Facebook Lite:<br/><br/><a href="https://reports.exodus-privacy.eu.org/en/reports/com.facebook.lite/latest/">https://reports.exodus-privacy.eu.org/en/reports/com.facebook.lite/latest/</a> 2026-04-10T16:27:42+02:00 https://nostr.ae/nevent1qqsv0nrgwzw4pt299ffyfy768fx3pg06ra04kl6dz2xzc8d2hvvy4uqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljwc6d0r The claims made about GrapheneOS in this interview are extremely inaccurate. It heavily misrepresents the purpose of GrapheneOS and what we&#39;ve worked on for years. The claim GrapheneOS is a security project rather than a privacy project is misinformation. Contacts are specifically brought up and yet our Contact Scopes feature is ignored. @fla knows GrapheneOS is a privacy project. He replied to a thread with our response to this misinformation only 4 days ago...<br/><br/><a href="https://piaille.fr/@projetslibres_podcast/116379561169492214">https://piaille.fr/@projetslibres_podcast/116379561169492214</a><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1dg3ktw75tc8tg92p0gthkxp42ht2vjcxuv59e67yqvn9lkkqj3gsvatqhl" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1dg3…tqhl</a></span><br/> </div> New podcast episode: Put some privacy in your smartphone! 📣 🎧<br/><br/>How can you use an Android smartphone while protecting your privacy? Who should you turn to for more privacy-friendly Android alternatives?<br/>Can you install Linux on your phone?<br/><br/>With <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub15r7un2qsdswpyfxqhcxw27c2e2c3x24kfextxar95pxsd2vlj70qwc62av" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Fla</span> (<span class="italic">npub15r7…62av</span>)</a></span> from <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub12k0pgpwq4axaxe86xkestt6czawktqytn9sxj2mmqdzw245lrqxsrwe2sz" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Framasoft</span> (<span class="italic">npub12k0…e2sz</span>)</a></span> , we answer these questions!<br/><br/>👉 <a href="https://www.projets-libres.org/en/podcast/smartphone-put-privacy-in-your-smartphone/">https://www.projets-libres.org/en/podcast/smartphone-put-privacy-in-your-smartphone/</a><br/><br/>#podcast #opensource #privacy #eos #iodeOS #calyxos #postmarketos #fairphone #commown #murena #ubuntutouch #grapheneos<br/> <img src="https://static.piaille.fr/media_attachments/files/116/379/558/337/549/221/original/1626e82fd1cc0d53.png"> <br/> </blockquote> 2026-04-10T16:26:20+02:00 https://nostr.ae/nevent1qqsp92f0ndvclv3hx3wdmffc2jtfyszs694mue29ewucly66v84x47szyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj8h90ex In reply to <a href='/nevent1qqsx5gm9h029ur45z4qh59mmrq64t44xfvrwx2zua0zqxfjlmtqfg5gsuqn3s'>nevent1q…qn3s</a><br/>_________________________<br/><br/>The claims made about GrapheneOS in this interview are extremely inaccurate. It heavily misrepresents the purpose of GrapheneOS and what we&#39;ve worked on for years. The claim GrapheneOS is a security project rather than a privacy project is misinformation. Contacts are specifically brought up and yet our Contact Scopes feature is ignored. <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub15r7un2qsdswpyfxqhcxw27c2e2c3x24kfextxar95pxsd2vlj70qwc62av" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Fla</span> (<span class="italic">npub15r7…62av</span>)</a></span> knows GrapheneOS is a privacy project. He replied to a thread with our response to this misinformation only 4 days ago... 2026-04-10T15:39:05+02:00 https://nostr.ae/nevent1qqsxz6sfm5p0gap9pgjrat5dlecnvf7y43tgzmlw9q9e57pwhw2fnsczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj3eta76 In reply to <a href='/nevent1qqsy3xuxv2numjrsqlu0crr3erzm5ncekp8exhjd8fxw9t4qp8dqtvcuxvyfu'>nevent1q…vyfu</a><br/>_________________________<br/><br/>GrapheneOS doesn&#39;t have a centralized push notification service integrated into the OS. If you install Signal in a profile where you haven&#39;t installed sandboxed Google Play, it will only use Signal&#39;s own servers for push.<br/><br/>Signal&#39;s push implementation isn&#39;t power efficient and will drain a lot more power than Google&#39;s Firebase Cloud Messaging. However, there&#39;s a fork of Signal called Molly supporting using an arbitrary push provider with efficient implementations available. 2026-04-09T19:09:57+02:00 https://nostr.ae/nevent1qqst8d5f6hrtd7gfz6qt8r5d76pkkjn3p6v0l7qdwyyxe978pumaqxszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljja3hw5 In reply to <a href='/nevent1qqs8epm40sq83vxd2y5ny2du60xexe4hu4przk83zjggqyq26rpxfngcg3ud4'>nevent1q…3ud4</a><br/>_________________________<br/><br/>That&#39;s an outrageously inaccurate story. Rossmann engaged in months of bullying towards the founder of GrapheneOS both privately and publicly. He also supported Henry Fisher&#39;s public bullying campaign based around fabrications. There&#39;s nothing polite about the toxicity he engaged in towards us. After swatting attacks from Henry Fisher&#39;s community targeting the founder of GrapheneOS, Rossmann live streamed himself trolling him and then followed it up making a video out of it. 2026-03-09T23:42:36+01:00 https://nostr.ae/nevent1qqsy3e5s5y8x5x7jlu326euq64vx9jv2ukvh0hnhj3wn3gdjvjvnqfgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlju8epx4 In reply to <a href='/nevent1qqsgy990zzcfwukug9smgyf4dgshxdaf83mf9dc55ulf6tgf9jm02dcc9d49g'>nevent1q…d49g</a><br/>_________________________<br/><br/>Yes, but patches were already included before the 145 branch too. 2026-03-06T22:52:08+01:00 https://nostr.ae/nevent1qqs2cmwpdedn04fqctumr0q9awsl2usergxmu28tvt9ad4vj273nr3czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljjrpqh2 Vanadium version 146.0.7680.65.0 released:<br/><br/><a href="https://github.com/GrapheneOS/Vanadium/releases/tag/146.0.7680.65.0">https://github.com/GrapheneOS/Vanadium/releases/tag/146.0.7680.65.0</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/32825-vanadium-version-14607680650-released">https://discuss.grapheneos.org/d/32825-vanadium-version-14607680650-released</a><br/><br/>#GrapheneOS #privacy #security #browser 2026-03-06T22:40:08+01:00 https://nostr.ae/nevent1qqs80xnjjjanxqzaeald8a3ghctq7qwjxa75s2ardcjr02uy2yxw6cgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljsxe8as In reply to <a href='/nevent1qqsgzv5f22vwl354m2jq7fjwfs5ed64cyp86gzgje50fsgtd4pzc6kspmez7u'>nevent1q…ez7u</a><br/>_________________________<br/><br/>For network-based location, enabling &#34;Wi-Fi scanning&#34; is recommended since otherwise it has to fall back to only using cell towers when Wi-Fi is disabled and can&#39;t function if cellular is disabled. Wi-Fi scanning changes the meaning of the Wi-Fi toggle to allow scans when off. 2026-03-03T18:15:30+01:00 https://nostr.ae/nevent1qqs0uc8kxcvr995u0q0fc3lqycwgjnxsq7fw2354nd52p59t2u5rgfczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljvfxe4v In reply to <a href='/nevent1qqsp2452pzmjrjn8rz8auqqn9qfkeynwgw33n43avc07sq7uq7cupcgphlc4z'>nevent1q…lc4z</a><br/>_________________________<br/><br/>Android is mobile Linux. Linux doesn&#39;t mean glibc, systemd and GNOME. The desktop Linux software stack has atrocious privacy and security compared to the Android Open Source Project. There&#39;s a large and far better open source mobile app ecosystem for AOSP alongside the rest of the Android app ecosystem. Google&#39;s announced changes don&#39;t have any direct impact on an AOSP-based OS that&#39;s not licensing Google Mobile Services. The changes only amount to added UI friction for a GMS OS. 2026-02-20T16:46:06+01:00 https://nostr.ae/nevent1qqs2n62luakhefcs492lkf7dgm867en2sfy3slm05etpvcedrlkstuszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljjmrkl6 We need more 10Gbps or higher dedicated servers for hosting our OS and app updates. We have North America covered well enough via sponsored servers from ReliableSite in both Miami and Los Angeles and a sponsored server from Xenyth in Toronto but no longer have any left in Europe. 2026-02-12T17:21:47+01:00 https://nostr.ae/nevent1qqswnm5mps56wk26crvvrj6gzje24u5y5vaqafd66ncg69cwp5nnklqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljhcfr52 We&#39;ve built our own text-to-speech system with an initial English language model we trained ourselves with fully open source data. It will be added to our App Store soon and then included in GrapheneOS as a default enabled TTS backend once some more improvements are made to it. 2026-01-29T22:54:34+01:00 https://nostr.ae/nevent1qqsq0qvj0luh0f47je9f95dg49qe97l3kayjxz9e4nd3e48qtc0uygqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljs92jmz GrapheneOS version 2026012100 released:<br/><br/><a href="https://grapheneos.org/releases#2026012100">https://grapheneos.org/releases#2026012100</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/31014-grapheneos-version-2026012100-released">https://discuss.grapheneos.org/d/31014-grapheneos-version-2026012100-released</a><br/><br/>#GrapheneOS #privacy #security 2026-01-22T08:03:45+01:00 https://nostr.ae/nevent1qqsrh7g3pukl875knslew272sas9ep5vrrmu8efpngtcjdy5zwfl6ugzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljh5f06r In reply to <a href='/nevent1qqsr04hrc3wj0knwxug5esw052wwss8hh6slf984ttuulphvxac6vycugj9ej'>nevent1q…j9ej</a><br/>_________________________<br/><br/>Here&#39;s your own timelime:<br/><br/><a href="https://mastodon.social/@giorgiopasqualini">https://mastodon.social/@giorgiopasqualini</a><br/><br/>One of the two posts is boosting a serial harasser who targeted both DivestOS and GrapheneOS with fabricated stories and direct harassment including vile personal attacks. We showed an example here of him linking to harassment content on a neo-nazi conspiracy site and we can show a lot more.<br/><br/><a href="https://archive.is/SWXPJ">https://archive.is/SWXPJ</a><br/><a href="https://archive.is/n4yTO">https://archive.is/n4yTO</a><br/><br/>He&#39;s a scammer harming privacy projects. 2026-01-04T01:42:42+01:00 https://nostr.ae/nevent1qqsvvjwy0ha4dpr9quqzm9dre2xu9agr96c3mmvgdjy3ukltjsjqzrczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj3u9uta In reply to <a href='/nevent1qqsw0ndudlgnn03e7gxnnhex2sm6lk5ct0aga50enfzy6gyu45m5yaq9crmd5'>nevent1q…rmd5</a><br/>_________________________<br/><br/>You&#39;ve made it very clear in this thread that you&#39;re an authoritarian who doesn&#39;t believe in privacy or security but rather you want the government to have access to people&#39;s devices and engage in mass surveillance. It makes sense that you use and support /e/ because it&#39;s perfectly aligned with all of that. Governments support &#34;data sovereignty&#34; so they can enforce providing them access to people&#39;s data and backdoors in encryption. 2026-01-04T01:41:15+01:00 https://nostr.ae/nevent1qqsw0ndudlgnn03e7gxnnhex2sm6lk5ct0aga50enfzy6gyu45m5yaqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljmykc25 In reply to <a href='/nevent1qqs93jy602dulwkeuxu3vxvcum4hmd98lx9swjvjj943qhx0gjwhvxsy2cu2a'>nevent1q…cu2a</a><br/>_________________________<br/><br/>GrapheneOS is not in remotely the same space as other alternate mobile operating systems. None of those is a privacy or security hardened OS. They&#39;re only alternatives to the mainstream options with significantly worse privacy and dramatically worse security than an iPhone. You promote scam products from Murena, a company which has engaged in many years of attacks on real privacy/security options including harassing the developers. 2026-01-04T01:39:28+01:00 https://nostr.ae/nevent1qqszdq38l9ufmpczulf7ujw098qg8nqyvp2evvyzh5e0qekd648pwqgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljsanmps Android 16 QPR2 experimental releases will be available soon. We&#39;re dealing with a lot of attacks on the project branching off from the smear campaign in France. We&#39;d appreciate if our community would debunk this nonsense across platforms for us so we can focus on QPR2. Thanks. 2025-12-08T01:46:50+01:00 https://nostr.ae/nevent1qqswshe0ad4vltm5fefdqzlkch9j22g3kpm63ppjfrwcrjlwyrrjlgqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljefm9z9 In reply to <a href='/nevent1qqst42n5n90dy3pyrfecy7k0p3jv4gc9xgdrrnjsxq63q7aq4tp2yygyrcrvz'>nevent1q…crvz</a><br/>_________________________<br/><br/>It&#39;s absolutely not a single story. Law enforcement did interviews with dozens of news publications. It&#39;s trivial for anyone to debunk your incredibly false claim by doing basic research. Blaming this on a specific newspaper is utter nonsense. How do you explain the multiple French state-funded news agencies which covered it and posted similar content with extreme inaccuracy and bias? Why are you ignoring all the direct quotes from French law enforcement about it? 2025-11-25T19:40:30+01:00 https://nostr.ae/nevent1qqs2r4p6pz6z3kvrev7z0ltf62j4m9a5hwmehuxwc9a5y2h7syckh2qzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljhw2drn In reply to <a href='/nevent1qqsdwker8s0sz94d6s98xhjutsx8n9j4nqxgl2zfttu3ev6g96k2x5g3xpavt'>nevent1q…pavt</a><br/>_________________________<br/><br/>France won&#39;t tolerate devices with a reasonable level of security where they can&#39;t use widely available off-the-shelf tools to extract data from them. GrapheneOS has massive privacy and security improvements planned.<br/><br/>France&#39;s law enforcement sent out memos to all their police telling them to suspect Pixel phones and to give those special treatment due to GrapheneOS existing. Most of what they&#39;re talking about is clearly not even GrapheneOS but closed source forks... 2025-11-24T20:24:16+01:00 https://nostr.ae/nevent1qqsvl3a4wmxff5z6py6yk0avm3aq0xcpusdphu4a9trryqfrpjdm2kgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljvmxqx3 Pixel Camera recently added a hard dependency on Google Play services. It still works on GrapheneOS, but started requiring sandboxed Google Play services.<br/><br/>GmsCompatLib version 100 for GrapheneOS 2025102300 or later restores support for Pixel Camera without Play services:<br/><br/><a href="https://grapheneos.social/@GrapheneOS/115431369734974446">https://grapheneos.social/@GrapheneOS/115431369734974446</a> 2025-10-25T00:15:46+02:00 https://nostr.ae/nevent1qqsf88d02dxfjj2wlgf9ffcreg4pf9s5y96yulhwallar86wh2uj6kszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj7ph2xg In reply to <a href='/nevent1qqs0gtrn0e9wcc30xfrgecm09ps6j8nlcv8tg8p79cnwj6q3hglafvccpnz67'>nevent1q…nz67</a><br/>_________________________<br/><br/>Our discussion forum, Reddit and X allow very long responses compared to having the standard 500 character limit from Mastodon here so it&#39;s harder to give detailed replies here. We should probably patch Mastodon to raise the limit as many instances do but would greatly prefer if they just made it configurable upstream. 2025-10-12T08:07:19+02:00 https://nostr.ae/nevent1qqs9wgjrfzcrvr3a0gk3quk6z4hea24em7tfel2jjany366pts70ejszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj90xt4k In reply to <a href='/nevent1qqsrthumklvccfjy357c7zn5wwpke836pc7k4tj3l85yxqvsvwxcerq7fzyw9'>nevent1q…zyw9</a><br/>_________________________<br/><br/>Possibly a glitch with the hardware-level sensor hub which implements this. Not really clear. It might have just gotten into a weird state. A reboot generally fixes those rare issues. Some hardware isn&#39;t fully reset on reboot and turning off completely + turning on again can work around those glitches. These issues are rare but they do happen and we have a lot of users so we regularly encounter people running into rare issues like this where we haven&#39;t heard of it ever before. 2025-10-07T03:31:41+02:00 https://nostr.ae/nevent1qqsw9ngfkvxmds6ftrpe57vc2zzylv7mcherg7fkcecwy0cptatqutqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljhjxess GrapheneOS version 2025092700 released:<br/><br/><a href="https://grapheneos.org/releases#2025092700">https://grapheneos.org/releases#2025092700</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/26874-grapheneos-version-2025092700-released">https://discuss.grapheneos.org/d/26874-grapheneos-version-2025092700-released</a><br/><br/>#GrapheneOS #privacy #security 2025-09-27T19:29:11+02:00 https://nostr.ae/nevent1qqs84lmwyuq0svpjdm9ur0yeqw6pu0804e36ufymerlwl3cakwvamzgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljku92z4 Vanadium version 141.0.7390.43.1 released:<br/><br/><a href="https://github.com/GrapheneOS/Vanadium/releases/tag/141.0.7390.43.1">https://github.com/GrapheneOS/Vanadium/releases/tag/141.0.7390.43.1</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/26856-vanadium-version-14107390431-released">https://discuss.grapheneos.org/d/26856-vanadium-version-14107390431-released</a><br/><br/>#GrapheneOS #privacy #security #browser 2025-09-26T21:34:47+02:00 https://nostr.ae/nevent1qqsweftldpgu0wmyskr50hrkz64t3answz3wd677lq5xzutnjj4ymmqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj33fye7 We&#39;ve received the Pixel 10 we ordered and have confirmed it supports unlocking, flashing another verified boot key and locking again.<br/><br/>Our Pixel 10 support will likely only be possible to complete after we finish porting to Android 16 QPR1 which is being released in September. 2025-08-27T21:52:50+02:00 https://nostr.ae/nevent1qqs0es5wghvu5vxjk39248rl32kdg55lua6uptu6k9t8rr26cxccvugzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljh8839y In reply to <a href='/nevent1qqsgus2hahg77yrnvwg8vdfehg6hl8dttjw4f4ym8ndswxw3ww7upqglmvwt2'>nevent1q…vwt2</a><br/>_________________________<br/><br/>GrapheneOS has a toggle for users to control MTE on a per-app basis and has a global toggle for making it enabled by default for all user installed apps, which we recommend people enable if they understand how to deal with incompatible apps with bugs found by MTE during regular use. We show special notifications for it with the crash log and users can disable it for just the app with the issue instead of turning it off for their other apps. 2025-08-09T18:44:37+02:00 https://nostr.ae/nevent1qqsd285n7ggfaa3423h7hp8kfnfy5ynpz0zrhvejj0q0aanezycq2gszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj4mt53s In reply to <a href='/nevent1qqsthwrvd8fxa7mhad5l7ejvsuzh83nh4apls3taqj8xud5znv54g4c2ppatw'>nevent1q…patw</a><br/>_________________________<br/><br/><a href="https://www.sec.gov/Archives/edgar/data/2009536/000200953624000001/xslFormDX01/primary_doc.xml">https://www.sec.gov/Archives/edgar/data/2009536/000200953624000001/xslFormDX01/primary_doc.xml</a> is the SEC filing for shares issued in February 2024 by a for-profit telecommunications company founded in 2019. The owners of the company are Nicolas Merrill, Louis Rossmann and Steve Gerber. This raises a lot of questions, as does other publicly available information. 2025-08-08T18:26:44+02:00 https://nostr.ae/nevent1qqsxqrt29ccx4gg98pqslhg829e9asq2qcu0tnqh57g4pfmag4xl8egzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljt5ewlz In reply to <a href='/nevent1qqsxhrcrtpxzccsx3t0v7k98khtr2jpm0u3muegjr5uy7wjtl58xnzga0vzyl'>nevent1q…vzyl</a><br/>_________________________<br/><br/>Here&#39;s information from the founder of DivestOS:<br/><br/>Issues with /e/OS: <a href="https://codeberg.org/divested-mobile/divestos-website/raw/commit/c7447de50bc8fadd20a30d4cbf1dcd8cf14805a0/static/misc/e.txt">https://codeberg.org/divested-mobile/divestos-website/raw/commit/c7447de50bc8fadd20a30d4cbf1dcd8cf14805a0/static/misc/e.txt</a><br/><br/>ASB update history: <a href="https://web.archive.org/web/20241231003546/https://divestos.org/pages/patch_history">https://web.archive.org/web/20241231003546/https://divestos.org/pages/patch_history</a><br/><br/>Chromium update history: <a href="https://web.archive.org/web/20250119212018/https://divestos.org/misc/ch-dates.txt">https://web.archive.org/web/20250119212018/https://divestos.org/misc/ch-dates.txt</a><br/><br/>Chromium update summary: <a href="https://infosec.exchange/@divested/112">https://infosec.exchange/@divested/112</a><br/><br/>Here&#39;s an article from a privacy and security expert (Mike Kuketz) which touches on various issues including severely delayed patches, user tracking in the update client and privacy invasive default connections:<br/><br/><a href="https://kuketz-blog.de/e-datenschutzfr">https://kuketz-blog.de/e-datenschutzfr</a> 2025-07-22T16:12:24+02:00 https://nostr.ae/nevent1qqsqsu56qe4pylx465jtpfyuv3p5apgh9kaz3l597vklqtqzewka8zczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljjyp3vj In reply to <a href='/nevent1qqsf6wdras6kzr8ulxn7hd84wydlrn688tgelwfanmtzunujvqzthjqjhv0ag'>nevent1q…v0ag</a><br/>_________________________<br/><br/>Governments shouldn&#39;t fund building products for companies to sell for profit. We wouldn&#39;t want to be beholden to governments, particularly ones moving towards making end-to-end encryption and secure devices illegal.<br/><br/>/e/OS and Murena are not colleagues or competitors. /e/OS massively rolls back privacy and security rather than improving them. They heavily misrepresent what they&#39;re providing and through that are scamming people. /e/OS is nearly the direct opposite of GrapheneOS. 2025-07-20T18:55:10+02:00 https://nostr.ae/nevent1qqsw99f0l0w3fqj29pftfvxj9px9308w84wf7xmsm000w78ph8gykwczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljy6ghx5 In reply to <a href='/nevent1qqsztsud5e272rweulmll6djazcf2s5s0q2txxpk4jzdrepr4cl7jvqdtre8q'>nevent1q…re8q</a><br/>_________________________<br/><br/>Murena is a for-profit company and /e/OS is very clearly built and managed for the benefit of Murena. Despite this, /e/OS receives a huge amount of EU government funding. If you&#39;re an EU taxpayer, your money is being used to build this extraordinarily insecure and non-private OS. 2025-07-19T18:48:35+02:00 https://nostr.ae/nevent1qqsw5s8zwf66ld9m476y0whh52c32cy3mfqvh06chkea3q4km7ma8uqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljtuyg2f In reply to <a href='/nevent1qqswhn4ya9z6tw6h5czypz29hmkrmm7tn8yfenxk43hjpra0rgc45eql74nwr'>nevent1q…4nwr</a><br/>_________________________<br/><br/>/e/OS is an extraordinarily insecure and non-private OS. If people avoid it and use an iPhone instead, they&#39;ll have far better privacy and security.<br/><br/>The information we&#39;ve provided in this thread and on our forum is accurate and verifiable. We&#39;ve included a link to a post by Mike Kuketz, a neutral third party privacy/security researcher, where he covers many of the issues with /e/OS. We can include additional third party sources about it.<br/><br/>/e/OS is not safe and SHOULD be avoided. 2025-07-18T21:36:01+02:00 https://nostr.ae/nevent1qqsxj2k45ff99ul0nvfqq7r50p3zd8npyw6a30n3ux6z2qwyps5zufqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj8l02cm We published this response to a recent article promoting insecure devices with /e/OS with inaccurate claims, including inaccurate comparisons to GrapheneOS:<br/><br/><a href="https://discuss.grapheneos.org/d/24134-devices-lacking-standard-privacysecurity-patches-and-protections-arent-private">https://discuss.grapheneos.org/d/24134-devices-lacking-standard-privacysecurity-patches-and-protections-arent-private</a><br/><br/>The founder of /e/OS has responded with misinformation promoting /e/OS and attacking GrapheneOS. 2025-07-18T19:53:58+02:00 https://nostr.ae/nevent1qqswj3psfwnzhncdljdsujnnr06yyuanuhr5u3g60hvppgv7wptynlqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljr6z372 In reply to <a href='/nevent1qqsqme6k9kd88g9cqetjlh2m9skxp4qf4qrgdtx6yu3qjn9tn60yflqyr8jrr'>nevent1q…8jrr</a><br/>_________________________<br/><br/>&gt; But not sure what you mean by &#34;sock puppet&#34; accounts, the implication here is that we are creating some accounts that would undermine GrapheneOS? If so, this is ridiculously untrue - all statements we make, we make under our own name.<br/><br/>We didn&#39;t accuse you of doing anything. We said someone malicious is making accounts on SimpleX to attack the GrapheneOS project which is not your fault and we don&#39;t expect you to do anything. They&#39;re an obsessive stalker targeting GrapheneOS. 2025-07-10T21:19:24+02:00 https://nostr.ae/nevent1qqsxzvmj3etz57jm8yvwrp6rn4ru2jt9wk6rwc2d7zgv5arjj205x7qzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj9svpl6 In reply to <a href='/nevent1qqsvea7mh56ncn08yfh6xluq9xv7hk8gkf9xskw5wpjjsjcxwgkgdesw0r03l'>nevent1q…r03l</a><br/>_________________________<br/><br/>GrapheneOS fully supports device management. It&#39;s seamless to set it up for a work profile. For setting it up for the whole device to make it owned by a company, which should never be done with a personal device, it requires using ADB because we don&#39;t yet have setup wizard integration for it. For a work profile, everything needed is provided. There are some management apps which can&#39;t handle not having Google Play preinstalled in the work profile which is a separate issue. 2025-06-30T18:27:41+02:00 https://nostr.ae/nevent1qqs8r20x896gews4q3hjgzwwqzxhz762j9gf4gclkljtquepgeqx8eczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljm2q3hy In reply to <a href='/nevent1qqsz6nwqgzywpepsnhkux400arcj0ssthle5kzeup37jqhln6lqglwgrlkyjj'>nevent1q…kyjj</a><br/>_________________________<br/><br/>No, these issues were never present on the stock OS or in the Android Open Source Project. Murena does lag incredibly far behind on shipping updates. You&#39;ll be months behind on getting critical privacy/security patches including multiple issues found being exploited in the wild. The instability and basic functionality being broken is not due to missing updates but rather the problems they introduce to their low quality LineageOS fork. The stock OS or AOSP were never unusable. 2025-06-17T00:02:26+02:00 https://nostr.ae/nevent1qqs84segplav7rls0xnegvng68dffh4xf3wfa0tcn6ptszju83yg23czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj5z46fl In reply to <a href='/nevent1qqspj3parukmmy993eg7nz4wcs8h3s6kt9kv9n2jc6gwwqutews9sfq2tvmuz'>nevent1q…vmuz</a><br/>_________________________<br/><br/>We do all production builds on 3 local GrapheneOS Foundation machines and each OS developer has at least one powerful local workstation. However, we need a lot more computing power than usual due to the way we&#39;re adding back device support to AOSP requiring many clean builds. 2025-06-16T17:16:55+02:00 https://nostr.ae/nevent1qqsr2uz03fdju20txyfku5ncr7kresmm8vjradrmrlnjwz37d3rnhdszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj83serd In reply to <a href='/nevent1qqsf0erc6mgwds2fe2yedz22n6c7vdqeg802l5ffrlcm8fn4yhzuaksp0j2kz'>nevent1q…j2kz</a><br/>_________________________<br/><br/>Yes, it will be supported as part of our regular Android 16 releases when the port is done. Support for it and the other devices is going to be much harder than expected to implement for Android 16. We can get it done, but it will take more time and effort than usual. We&#39;ll be spending more work on device support than the main port to Android 16. 2025-06-11T19:42:01+02:00 https://nostr.ae/nevent1qqsgf0nl2grymt0yeqzd7vf3u6m4wl6z5yw3jg66axc29g6q7ggvfkqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljdsrngf Vanadium version 137.0.7151.44.1 released:<br/><br/><a href="https://github.com/GrapheneOS/Vanadium/releases/tag/137.0.7151.44.1">https://github.com/GrapheneOS/Vanadium/releases/tag/137.0.7151.44.1</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/22743-vanadium-version-13707151441-released">https://discuss.grapheneos.org/d/22743-vanadium-version-13707151441-released</a><br/><br/>#GrapheneOS #privacy #security #browser 2025-05-27T01:20:51+02:00 https://nostr.ae/nevent1qqs8qa6a6h49j6jms9f5fkujg25uq4mt859z4zg0yjwan48wktvumaczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljnz4rcp In reply to <a href='/nevent1qqstqja4a5dytdl8vxnm8rfdxmyugq7kp9mwrtsnkdh24qz75uw5l7qj852yt'>nevent1q…52yt</a><br/>_________________________<br/><br/>Chrome / Chromium provides a very misleading &#34;V8 Optimizer&#34; toggle which contrary to popular belief does not disable the Just-In-Time compiler and therefore cannot block dynamic code generation. It&#39;s not a default JIT disable like iOS lockdown mode or default GrapheneOS. 2025-05-17T16:04:56+02:00 https://nostr.ae/nevent1qqs28m6ks7yz9ykrp4y8dnqcqwms8af6uc0yagpvh6yxnvu0kxgzrhgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj66txxt In reply to <a href='/nevent1qqs8fcmq2jese46g3jhwtt4e3tr90fnszz9vfcdfk6la0h4k9kd9cngj0s6kx'>nevent1q…s6kx</a><br/>_________________________<br/><br/>GrapheneOS Foundation can sign an NDA for this. We can act as a contractor for an Android OEM or one of their contractors. We need this early access so that we can start early due to the developer who usually does most of it being unavailable. If you can get us this, please help. 2025-05-06T22:43:38+02:00 https://nostr.ae/nevent1qqs8fcmq2jese46g3jhwtt4e3tr90fnszz9vfcdfk6la0h4k9kd9cngzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljz04z93 We need an Android OEM or someone working at one to provide us with early access to the Android 16 sources in order to have a smooth port this year. We need this before June. We requested it to help with this very difficult situation (see the linked thread) and still need it.<br/><br/><a href="https://grapheneos.social/@GrapheneOS/114359660453627718">https://grapheneos.social/@GrapheneOS/114359660453627718</a> 2025-05-06T18:23:42+02:00 https://nostr.ae/nevent1qqsx85wcxghff24uf3nn4m97dghg2eefssh8gr8tf4ed7m0u32xue8czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljafxveh In reply to <a href='/nevent1qqs8eg74vhrmjg73yk7960n8sxdcv9h24v7fh6v9yhvhkf0ejq07j7c6atuwz'>nevent1q…tuwz</a><br/>_________________________<br/><br/>OCSP stapling with Must-Staple was the best path forward for working certificate revocation checks but had poor adoption. OCSP responses with signed revocation data for a certificate from the Certificate Authority generally had several days of validity. 6 day validity certificates sidestep all this. 2025-05-05T04:23:53+02:00 https://nostr.ae/nevent1qqs8eg74vhrmjg73yk7960n8sxdcv9h24v7fh6v9yhvhkf0ejq07j7czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljrj7hxv In reply to <a href='/nevent1qqs9d2vxuum4h7rvlnfw8n9qpevwpg029lcmefvt6pc54856z7t823s8kvcgr'>nevent1q…vcgr</a><br/>_________________________<br/><br/>The `tlsserver` profile drops support for OCSP early along with various legacy features. The upcoming `shortlived` profile is based on the `tlsserver` profile with validity reduced from 90 days to 6 days, so we can now smoothly migrate to `shortlived` as soon as it&#39;s made available for us to use. 2025-05-05T04:23:51+02:00 https://nostr.ae/nevent1qqs9d2vxuum4h7rvlnfw8n9qpevwpg029lcmefvt6pc54856z7t823szyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj2fe09z In anticipation of Let&#39;s Encrypt dropping Must-Staple support on May 7th and OCSP 3 months later, our services previously using OCSP stapling and Must-Staple have been moved to the Let&#39;s Encrypt `tlsserver` profile made publicly usable a couple weeks ago.<br/><br/><a href="https://community.letsencrypt.org/t/removing-ocsp-urls-from-certificates/236699">https://community.letsencrypt.org/t/removing-ocsp-urls-from-certificates/236699</a> 2025-05-05T04:23:46+02:00 https://nostr.ae/nevent1qqsy0w29luhg0h4vpy55lx4wcs3uld59g0zak4hujfl5jhm9we3u4kszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljqu7ckg In reply to <a href='/nevent1qqsygf4nxh44veq036g8y7gxme7auz4zn3638awcnm3aqnjcdd3z9wgnafq74'>nevent1q…fq74</a><br/>_________________________<br/><br/>If you&#39;re curious about the configurations we use on our servers, most of that is available in these 2 repositories:<br/><br/><a href="https://github.com/GrapheneOS/ns1.grapheneos.org">https://github.com/GrapheneOS/ns1.grapheneos.org</a><br/><a href="https://github.com/GrapheneOS/infrastructure">https://github.com/GrapheneOS/infrastructure</a><br/><br/>Our bird.conf for announcing our anycast IPs via BGP to Rage4 and a routing setup script aren&#39;t published yet. 2025-05-04T21:10:05+02:00 https://nostr.ae/nevent1qqsygf4nxh44veq036g8y7gxme7auz4zn3638awcnm3aqnjcdd3z9wgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj8tgz2g In reply to <a href='/nevent1qqsdd2yx79pcxz9zymus2jm3f46xaswa9c24ye208menfpf6fphxe7sztmu0a'>nevent1q…mu0a</a><br/>_________________________<br/><br/>Several large public resolvers including Google Public DNS and several European ISPs have adopted opportunistic ADoT (Authoritative DNS-over-TLS) and use it with our servers. There&#39;s no way to ENFORCE using ADoT yet but we&#39;re keeping an eye on it. We have valid WebPKI certs + DANE TLSA for it. 2025-05-04T21:06:06+02:00 https://nostr.ae/nevent1qqsdd2yx79pcxz9zymus2jm3f46xaswa9c24ye208menfpf6fphxe7szyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj47x94u In reply to <a href='/nevent1qqsz32g2nkqx7vwpz80rs7gptkze9c4sjgarj3lm4szut2agv287m2qv4dnc5'>nevent1q…dnc5</a><br/>_________________________<br/><br/>One of the side benefits of hosting our own authoritative DNS is that we&#39;re among an incredibly tiny subset of services supporting DNS-over-TLS (DoT) for our nameservers. There are widely used DNS resolver servers including Google Public DNS opportunistically using DoT to query authoritative DNS. 2025-05-04T20:55:39+02:00 https://nostr.ae/nevent1qqsz32g2nkqx7vwpz80rs7gptkze9c4sjgarj3lm4szut2agv287m2qzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljnku2m9 In reply to <a href='/nevent1qqs85vuwmk5qtyk7zxdy4vnlsgfg88lcg8scmusak38vnhchf3nw4ksdn59sk'>nevent1q…59sk</a><br/>_________________________<br/><br/>We also plan to make a small upgrade for ns2.grapheneos.org by adding the optional Miami location via BGP once BuyVM has stock available. BuyVM will hopefully add a Singapore location and IPv6 support in the future, which are the main weaknesses other than lack of failover beyond Miami going to NY. 2025-05-04T18:41:43+02:00 https://nostr.ae/nevent1qqs85vuwmk5qtyk7zxdy4vnlsgfg88lcg8scmusak38vnhchf3nw4kszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljt29qu2 In reply to <a href='/nevent1qqs9zt0qpygkkhwqlhadx7gsxyrrq326e0f48c5whd6yanmcz3ft2ac0jef27'>nevent1q…ef27</a><br/>_________________________<br/><br/>We plan to replace the Beauharnois VPS with New York to have it near a Rage4 New York node. Our new Frankfurt VPS is already right near the Rage4 Frankfurt node. We also plan to add Seattle and Singapore soon. Adding more can be done alongside new website and network server instances in the future. 2025-05-04T18:39:24+02:00 https://nostr.ae/nevent1qqsf5dlc83t6d0ash95rcp9xy53mutal50fxsehqhd5v3gesq8d8n8gzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljruqey8 In reply to <a href='/nevent1qqs9zg53mstskvc2xelevz7nqs8f0caxurr7s6fc7dx63y8n9ptz49qxyr5cz'>nevent1q…r5cz</a><br/>_________________________<br/><br/>They saved time not porting either to the QPR2 release prior to launch. It wasn&#39;t as noticeable for the Pixel 8a since Android 14 QPR3 was launched weeks later and provided mainline Android support for it. It&#39;s more noticeable for the Pixel 9a since it launched in April instead of late May.<br/><br/>Android 16 is coming out this year in June instead of that being the QPR3 release as usual. We aren&#39;t sure why. It&#39;s possible they decided to move the month yearly releases come out going forward. 2025-05-03T17:25:12+02:00 https://nostr.ae/nevent1qqs9zg53mstskvc2xelevz7nqs8f0caxurr7s6fc7dx63y8n9ptz49qzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljepht90 In reply to <a href='/nevent1qqsyxxmc5dzma8en9k0hagfhv5fcukxqwldfz83lg4505js66f365psawclf6'>nevent1q…clf6</a><br/>_________________________<br/><br/>You can see from <a href="https://grapheneos.org/releases#tegu">https://grapheneos.org/releases#tegu</a> that it&#39;s not on the same version of GrapheneOS as the other devices.<br/><br/>It&#39;s normal for new devices to launch with a device branch. Pixel 8a and Pixel 9a are the first non-flagship devices launched after trunk-based quarterly releases started with Android 14 QPR2.<br/><br/>Pixel 8a launched with Android 14 QPR1 in May 2024 instead of QPR2 from March 2024. Android 14 QPR3 was released weeks later in June, merging it into mainline Android. This is similar. 2025-05-03T17:22:18+02:00 https://nostr.ae/nevent1qqsyxxmc5dzma8en9k0hagfhv5fcukxqwldfz83lg4505js66f365pszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljcjrgmc In reply to <a href='/nevent1qqsrr2m5qq8mcr46z8a282ehf967p2ze6ezk3a95rz05n4jvykakajg2ddr76'>nevent1q…dr76</a><br/>_________________________<br/><br/>Pixel 9a is a newly launched device which is not supported by mainline Android. It still has Android 15 QPR1 with the stock Pixel OS instead of Android 15 QPR2 and it&#39;s the same with GrapheneOS. It does not receive the regular releases of GrapheneOS yet and does not have the full Android or GrapheneOS feature set. It will have mainline Android with the launch of Android 16 in June. Until then, it has special releases using a Pixel 9a device branch based on the upstream branch for it. 2025-05-03T17:18:36+02:00 https://nostr.ae/nevent1qqs02gmg5ynfhr5fhcpn2m5spnhal6rn0p6ds4j8uzm52eyh0w7uqngzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljesqkpe GrapheneOS version 2025050300 released:<br/><br/><a href="https://grapheneos.org/releases#2025050300">https://grapheneos.org/releases#2025050300</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/22203-grapheneos-version-2025050300-released">https://discuss.grapheneos.org/d/22203-grapheneos-version-2025050300-released</a><br/><br/>#GrapheneOS #privacy #security 2025-05-03T16:54:23+02:00 https://nostr.ae/nevent1qqs9x38kxnk7glx0s0q30fg76kaxc4l8f6yx6z90hqh6wl2dhzld7aqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljs9gftw Secure PDF Viewer app version 30 released:<br/><br/><a href="https://github.com/GrapheneOS/PdfViewer/releases/tag/30">https://github.com/GrapheneOS/PdfViewer/releases/tag/30</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/22146-secure-pdf-viewer-app-version-30-released">https://discuss.grapheneos.org/d/22146-secure-pdf-viewer-app-version-30-released</a><br/><br/>#GrapheneOS #privacy #security #pdf #android 2025-05-01T15:17:31+02:00 https://nostr.ae/nevent1qqs073c8kfhw69dg4503stx8xvjjajews75spw7mvynkudpensrh5pczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljykupdd Secure PDF Viewer app version 29 released:<br/><br/><a href="https://github.com/GrapheneOS/PdfViewer/releases/tag/29">https://github.com/GrapheneOS/PdfViewer/releases/tag/29</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/22078-secure-pdf-viewer-app-version-29-released">https://discuss.grapheneos.org/d/22078-secure-pdf-viewer-app-version-29-released</a><br/><br/>#GrapheneOS #privacy #security #pdf #android 2025-04-29T03:31:34+02:00 https://nostr.ae/nevent1qqs2r5mf4defpzx8c0xatv7gr9wv5vrjd69uv89rrzjr475qsrwfaxqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljzvvtcv In reply to <a href='/nevent1qqsz935e5zjfxr4qp4j3uh09tsu72x8tneh6wgtyvp0mjt650k5jqpgyuwvgk'>nevent1q…wvgk</a><br/>_________________________<br/><br/>GrapheneOS enables support for blocking numbers which aren&#39;t in your contacts and you can also block all unknown numbers but it could be a bad idea to do that in case you get an important call which happens that way. 2025-04-16T20:27:34+02:00 https://nostr.ae/nevent1qqsx0xtmep2an22vq32w74apva9xxggu5gtu64vglccl8ey5xgxk30czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljt2ygg3 Vanadium version 135.0.7049.100.0 released:<br/><br/><a href="https://github.com/GrapheneOS/Vanadium/releases/tag/135.0.7049.100.0">https://github.com/GrapheneOS/Vanadium/releases/tag/135.0.7049.100.0</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/21751-vanadium-version-135070491000-released">https://discuss.grapheneos.org/d/21751-vanadium-version-135070491000-released</a><br/><br/>#GrapheneOS #privacy #security #browser 2025-04-16T00:48:54+02:00 https://nostr.ae/nevent1qqsgum5uf6zgz2rfzxd5w0d8me9zut5ahhh9ffxf9vr7wpqy7xktu9szyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljund09t In reply to <a href='/nevent1qqsyc4hyqv7we9e8dufy8g7wqrz3fm3xk3x0wk47eh0zw4pt299w4hgmymlq9'>nevent1q…mlq9</a><br/>_________________________<br/><br/>GrapheneOS for the Pixel 9a support is no longer considered experimental. Since it&#39;s still based on Android 15 QPR2 upstream, it&#39;s missing some recent improvements in Android and GrapheneOS but we backported most post-QPR2 GrapheneOS changes and it&#39;ll be on mainline Android soon. 2025-04-15T22:12:38+02:00 https://nostr.ae/nevent1qqs0qtqs7lsk5f0avx6za7pc4v0dl6hfjzr4yxjrh8lwaxrt04e6tpgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj5ng3lm In reply to <a href='/nevent1qqs2vafq8x8taa5c22tg7rkz9g6ac2pes5vsxvyjn7zc6j4jrt8t6dsf088fl'>nevent1q…88fl</a><br/>_________________________<br/><br/>They&#39;re essentially not supported anymore. We haven&#39;t unlisted them from our site as insecure end-of-life legacy extended support devices because we know people will start bothering us about it. We do bare minimum updates to fix something breaking with a service, etc. so people don&#39;t bother us about it. If people are determined to use insecure devices, it&#39;s also better if they use an OS that&#39;s being honest with them about that rather than one misleading them. 2025-04-15T21:11:21+02:00 https://nostr.ae/nevent1qqs2vafq8x8taa5c22tg7rkz9g6ac2pes5vsxvyjn7zc6j4jrt8t6dszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljhk25vc In reply to <a href='/nevent1qqsqnc478es7q9yng2w8yatxekl802ygrcrjz8nvhhenkkj0nqelj5svlpr5j'>nevent1q…pr5j</a><br/>_________________________<br/><br/>It&#39;s very clearly marked as being insecure including a notification shown on each boot. We also don&#39;t set an inaccurate Android security patch level based on only having AOSP patches as LineageOS and most other non-stock operating systems do. There&#39;s no false sense of security provided by us. We did decide to permit people to disable the at-boot notification but doing so requires them to explicitly do that via disabling the notification channel. 2025-04-15T21:08:56+02:00 https://nostr.ae/nevent1qqsyc4hyqv7we9e8dufy8g7wqrz3fm3xk3x0wk47eh0zw4pt299w4hgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj0ekky8 In reply to <a href='/nevent1qqs83pjgs6xzf66q7837mdqqgshygvtzc36pm6srqdx60tl7h7u22zcrzwx4n'>nevent1q…wx4n</a><br/>_________________________<br/><br/>All of the standard Android and GrapheneOS functionality should already be working on the Pixel 9a including our hardware-based USB-C port control feature, hardware memory tagging, etc.<br/><br/>Main work was dealing with the temporary QPR1-based device branch (<a href="https://grapheneos.social/@GrapheneOS/114320149441258698">https://grapheneos.social/@GrapheneOS/114320149441258698</a>). 2025-04-13T06:35:44+02:00 https://nostr.ae/nevent1qqsxkx0jq677arfpv4cx0dwpk2h3l2lvv39h7xhe37jqdknvyl5ze2gzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljrxquns In reply to <a href='/nevent1qqsxqz93dt90pj6qag9kshc2u8v9tvtqpkfea52rczyawx5hpcrr8rsgr8jat'>nevent1q…8jat</a><br/>_________________________<br/><br/>Metered bandwidth is a problem. The only way we could use it is if they waived that requirement as a special case for us. 2025-03-31T22:40:37+02:00 https://nostr.ae/nevent1qqs2098epjm6zgsyw0hn3sr3jee5sk44ccenfc0kq2940pg3nhvqzdczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljnx4e03 We currently have 16Gbps total bandwidth for our update servers and that&#39;s not nearly enough for major releases anymore. Rather than further scaling up our current 2Gbps unmetered VPS approach, we&#39;re currently looking into other options. OVH lacks cost effective 10Gbps servers. 2025-03-31T22:29:26+02:00 https://nostr.ae/nevent1qqsv434rsz7znvwddrzdxkqgkuyw84jn4nfq2rzsmapuqg0h47y8xmgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj3k22p3 In reply to <a href='/nevent1qqstltncz5vucc38tpdtzzuuevlq23neejtl96kc45f0fc70thahqegze2nvq'>nevent1q…2nvq</a><br/>_________________________<br/><br/>iPhones and Pixels have the most secure hardware. Pixels are very competitive with iPhones. 2025-03-28T14:03:16+01:00 https://nostr.ae/nevent1qqs2xamsc7pjdln4mqs5qaxejsnw9q995tmah6lvjp7u3afdlw7rz2czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljxxsacf In reply to <a href='/nevent1qqspev9w55clwfr0txs50fccwcskmrxh8xnw8flj44hvfvpe7teu83skeaazn'>nevent1q…aazn</a><br/>_________________________<br/><br/>Here&#39;s another on X:<br/><br/><a href="https://xcancel.com/gael_duval/status/1887528529694273590">https://xcancel.com/gael_duval/status/1887528529694273590</a><br/><br/>Gaël Duval consistently misleads people about the ease of obtaining GrapheneOS, app compatibility, usability and privacy. These desperate posts on X, Mastodon and elsewhere are a small fraction of it. It&#39;s Murena&#39;s company policy. 2025-03-27T17:57:49+01:00 https://nostr.ae/nevent1qqspev9w55clwfr0txs50fccwcskmrxh8xnw8flj44hvfvpe7teu83szyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljs8rejm In reply to <a href='/nevent1qqsdp4j8l48f7svjhxn44sm2szakjm7xyjmc9vz2cnprzu08ylpt2hqmj7xpp'>nevent1q…7xpp</a><br/>_________________________<br/><br/>Here&#39;s another example of the CEO of Murena replying to a post about GrapheneOS trying to mislead people about it and promote their products:<br/><br/><a href="https://xcancel.com/gael_duval/status/1904097790977810458">https://xcancel.com/gael_duval/status/1904097790977810458</a><br/><br/>Here&#39;s a high quality third party comparison between Android-based operating systems:<br/><br/><a href="https://eylenburg.github.io/android_comparison.htm">https://eylenburg.github.io/android_comparison.htm</a> 2025-03-27T17:53:40+01:00 https://nostr.ae/nevent1qqsv5qu8ttw4xnra7rpmygfnjgazcknpelcn5rzasr963ts0rpslsnczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljdeyk6a In reply to <a href='/nevent1qqsp4uzvt366ngxrnm3k3egn6p5gwjymv3xshmrm6wl6jaxdjwzqzfqwmevxs'>nevent1q…evxs</a><br/>_________________________<br/><br/>You can enable this feature via the toggle we added at Settings &gt; Location &gt; Location services &gt; Network location. You can optionally enable the standard Wi-Fi scanning toggle in the Location services menu to allow Wi-Fi scans when Wi-Fi is otherwise disabled to keep network-based location working. 2025-03-27T02:54:30+01:00 https://nostr.ae/nevent1qqsp4uzvt366ngxrnm3k3egn6p5gwjymv3xshmrm6wl6jaxdjwzqzfqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljzsjrtw Our latest 2025032500 release greatly improved our built-in network-based location. It&#39;s usually better than Google&#39;s network-based location in urban areas where Apple has competitive data. Unlike Google&#39;s service, position estimation is done locally by fetching location data for nearby networks. 2025-03-27T02:54:26+01:00 https://nostr.ae/nevent1qqs97jfcmf4tns3dq4fzz985w9q6243c9ulmuugwmmcxt5cu2h7nncgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj5d33rk GrapheneOS version 2025032500 released:<br/><br/><a href="https://grapheneos.org/releases#2025032500">https://grapheneos.org/releases#2025032500</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/21207-grapheneos-version-2025032500-released">https://discuss.grapheneos.org/d/21207-grapheneos-version-2025032500-released</a><br/><br/>#GrapheneOS #privacy #security 2025-03-26T04:16:48+01:00 https://nostr.ae/nevent1qqs9ft8jrxkwc500wfpdnw5vfh5yqn227djy0vgzznj03j5qr98d2qszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljd59pln In reply to <a href='/nevent1qqsrtzfumsv2dljf6v8g8gmrkzl08c6cw485ucfe2fhadz33t9yh20gjcnuaw'>nevent1q…nuaw</a><br/>_________________________<br/><br/>Our Auditor app generates a hardware backed attest purpose key for each pairing with attestation enabled via the root-based attestation system. It then generates a regular hardware backed signing key with attestation enabled with the attest key it generated as the attestation signing key. It signs the overall messages it sends with that signing key. On subsequent attestations, it makes a temporary unused key with the same attest key for signing it to get fresh attestation data. 2025-03-25T18:48:00+01:00 https://nostr.ae/nevent1qqsrtzfumsv2dljf6v8g8gmrkzl08c6cw485ucfe2fhadz33t9yh20gzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljhucv2n In reply to <a href='/nevent1qqspvgx9dsyvu4mmezxxcm3g7kw5480es84msn28jlpa3dnvjhw3kvsk5u0sk'>nevent1q…u0sk</a><br/>_________________________<br/><br/>Yes, but provisioned attestation signing keys are also per-app so they can&#39;t be used to identify a device across apps either. They are not per-pairing but rather per-app so an app only triggers provisioning when generating a key with attestation enabled. Apps can also generate their own attest purpose keys usable to sign attestations instead of this. It can also reuse it for a while before it has to rotate it. They have short expiry and generating a new key can trigger rotation. 2025-03-25T18:46:16+01:00 https://nostr.ae/nevent1qqsd5recclhusfuxlh85rfd72r0jnuds2g5zu99lhagm424awlfaysgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljxjhs6v In reply to <a href='/nevent1qqs9altsmyahe0edszdml0v8lhnstj38zre9exlvhuky8syh79vwdkcg3uet9'>nevent1q…uet9</a><br/>_________________________<br/><br/>/e/OS is much more insecure than CalyxOS but CalyxOS still lags significantly behind on privacy/security patches and still somewhat rolls back the security model compared to AOSP while creating new privacy issues. They&#39;re both in a much different space from GrapheneOS.<br/><br/>We can&#39;t support the Fairphone 4 because it doesn&#39;t have a secure element, proper driver/firmware patches, has insecure broken verified boot and is missing important security features we use. 2025-03-25T17:20:57+01:00 https://nostr.ae/nevent1qqs8gsrs9ywveravn7x4s8t0c72uhsjmysxqh708zre8jf49yk9ar4czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljgvy2hx In reply to <a href='/nevent1qqszktyad96vsukw7eu8zn7zdzxfnr0wp7l3n3emdyw2rrlsglzvz8c2wlnn9'>nevent1q…lnn9</a><br/>_________________________<br/><br/><a href="https://eylenburg.github.io/android_comparison.htm">https://eylenburg.github.io/android_comparison.htm</a> is a third party comparison between different alternate mobile operating systems. It could include many more privacy/security features but it&#39;s a good starting point. Highly recommend looking at that as a starting point to understand how extremely different they are from each other. CalyxOS is in the same space as other non-hardened OSes like LineageOS, /e/OS and iodéOS. It&#39;s a common misconception that it&#39;s similar to GrapheneOS. 2025-03-25T17:09:37+01:00 https://nostr.ae/nevent1qqszktyad96vsukw7eu8zn7zdzxfnr0wp7l3n3emdyw2rrlsglzvz8czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljsxmx3e In reply to <a href='/nevent1qqsw94wxvyu2qpkmh40mxhscf4mj2qrjg85jzyjcrps586e2yt6gu6qv4fk6e'>nevent1q…fk6e</a><br/>_________________________<br/><br/><a href="https://grapheneos.social/@GrapheneOS/113459782313987260">https://grapheneos.social/@GrapheneOS/113459782313987260</a> is a recent thread explaining why we use our sandboxed Google Play compatibility layer approach instead. We still reimplement Google Play functionality ourselves, but we implement it in a way that&#39;s not tied to Google Play and then expand the compatibility layer to optionally or always reroute requests to it from apps if that&#39;s needed. We have much higher standards including privacy and security for the code we&#39;re adding. 2025-03-25T17:08:38+01:00 https://nostr.ae/nevent1qqsw94wxvyu2qpkmh40mxhscf4mj2qrjg85jzyjcrps586e2yt6gu6qzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj9ggcmn In reply to <a href='/nevent1qqsytlh7y6gywxzpfcsykz3nryjdr3m7zdfxwr47v2q2s76w3vdq0dgt5v8rc'>nevent1q…v8rc</a><br/>_________________________<br/><br/>No, that&#39;s not the case. CalyxOS has far less app compatibility than GrapheneOS and not all app functionality will work properly. CalyxOS also isn&#39;t a hardened OS and lacks remotely comparable privacy and security. Similar to /e/OS and LineageOS, it reduces privacy and security compared to AOSP, just not as much as /e/OS does. As an example, it&#39;s missing the full March 2025 Android and Pixel security patches. Weeks or even months of patch delays isn&#39;t safe. 2025-03-25T17:06:51+01:00 https://nostr.ae/nevent1qqsdlzq26lpu70476kze64ulc79rw4jvxy7wt5ezjk5vyds2z2muwggzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj5nr5t0 In reply to <a href='/nevent1qqs8acshtp2uvc03v8nmq3wmy4f3aehwc7yt6g0gfzvr2zevqaqtkeg682ce2'>nevent1q…2ce2</a><br/>_________________________<br/><br/>A lot of the people saying it&#39;s better or saying it&#39;s worse are probably just guessing inaccurately. However, at least some part of it is likely based on reality. It is very easy to make battery life terrible by doing something like using 6 apps with very inefficient non-FCM push rather than FCM or UnifiedPush. Some people use a ton of apps and it&#39;s hard for them to figure out what&#39;s draining battery. Battery stats help but are far from perfect at figuring it out. 2025-03-24T19:01:59+01:00 https://nostr.ae/nevent1qqs8acshtp2uvc03v8nmq3wmy4f3aehwc7yt6g0gfzvr2zevqaqtkegzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj8v6zax In reply to <a href='/nevent1qqsz4ncpe3xagqrxgaptf22qunns3m92k0zvex7f43z4e2r6mnkwh2gp3lssg'>nevent1q…lssg</a><br/>_________________________<br/><br/>Pixels moved to a more efficient cellular radio with 7th gen and then an even more efficient one with 9th gen, but the Pixel 9a will apparently have the older 7th/8th gen era radio again as part of how it cuts costs down to a less high end device.<br/><br/>There are so many ways to make battery life worse or better and GrapheneOS users are more likely to make some of both kinds of choices. That&#39;s why most of our users say it&#39;s better, but some say it&#39;s worse. 2025-03-24T18:59:45+01:00 https://nostr.ae/nevent1qqs8eg0ukpgtwnw6cxd0wrh6na0m0dkhxzwgrrz38u38j6smvq5tt7gzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljw9umsk In reply to <a href='/nevent1qqsxm034hhxhredl2609ddhrkm42den820y544zk7kczd6dyag40jxg2uw77r'>nevent1q…w77r</a><br/>_________________________<br/><br/>&gt; It&#39;s a bit janky but also doesn&#39;t keep trying to upsell me cloud services, so big net win.<br/><br/>What are you referring to? 2025-03-24T18:08:45+01:00 https://nostr.ae/nevent1qqsfykvc9ga7jxmecufnqm7snrmnzz9wg8psr2tyf64uw7lmymtlr4czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljn5vlcz In reply to <a href='/nevent1qqsx9pqdhsff3ressnzfajwwrdp7ean7ypj5nk9pk9ptytcctyn6pkc97hgj7'>nevent1q…hgj7</a><br/>_________________________<br/><br/>GNSS (satellite-based location) uses more power than network-based location. GrapheneOS has network-based location off by default and for compatibility we emulate it via GNSS for apps using the Google Play location API which is rerouted to the OS API by default. This means if you have something like an app requesting low power location frequently, it could drain a lot more power from using GNSS instead of network location. If it requests high power location, it likely wouldn&#39;t help. 2025-03-23T19:30:13+01:00 https://nostr.ae/nevent1qqsx9pqdhsff3ressnzfajwwrdp7ean7ypj5nk9pk9ptytcctyn6pkczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj30ewdv In reply to <a href='/nevent1qqs27yuzd5cm57d97w76w60asxt9s9z252wdlh3w4vamdfvnerkw45cz4d0d3'>nevent1q…d0d3</a><br/>_________________________<br/><br/>It&#39;s very hard for us to give people advice on improving battery life since it&#39;s typically a combination of apps and other factors resulting in worse battery life than people expect. GrapheneOS starts off better and is still a bit better with just sandboxed Google Play installed, but it&#39;s easy to make it worse because people are often getting non-Play variants of apps using non-FCM push, etc. Also, if you regularly use location, enabling Network location + Wi-Fi scanning will save power. 2025-03-23T19:28:55+01:00 https://nostr.ae/nevent1qqs27yuzd5cm57d97w76w60asxt9s9z252wdlh3w4vamdfvnerkw45czyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj9nhey9 In reply to <a href='/nevent1qqsdunr32zgvpc79hl2kgfkf8vqfkwqjrk8djlmnx0p7pl94xxerlfcyatyxp'>nevent1q…tyxp</a><br/>_________________________<br/><br/>The example of Signal draining battery with non-FCM push is the most common we see. Having a Wi-Fi or cellular network with a poor connection will also drain power. Using &#34;4G&#34; (4G and below) instead of the default &#34;5G&#34; will typically save power. Using our added &#34;4G only&#34; may save power if you always have a strong 4G connection, but note it requires VoLTE for phone calls to work so you should test if that works before just enabling it permanently. There are many other factors involved. 2025-03-23T19:27:39+01:00 https://nostr.ae/nevent1qqs2sh9qp39a82qtly8d7hxstnxtxqd6qg6g932t4g3997k2rx4jlyqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj3mhn74 In reply to <a href='/nevent1qqsfw7px8zfy0khknp7ulwxrduvs5c5xjr9ht5g27mk8denx8tu8fnqgw4k4g'>nevent1q…4k4g</a><br/>_________________________<br/><br/>The only case it would increase power consumption in practice is if you do something like a 2 hour video encode using poorly optimized software which runs less efficiently due to hardened_malloc, hardware memory tagging, etc. which have per-app toggles available.<br/><br/>Our use of full ahead-of-time compilation for apps with the usual just-in-time compilation disabled decreases runtime battery usage at runtime while needing more power after an update for recompilation (optimizing apps). 2025-03-23T19:14:00+01:00 https://nostr.ae/nevent1qqsfw7px8zfy0khknp7ulwxrduvs5c5xjr9ht5g27mk8denx8tu8fnqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljdj8eqz In reply to <a href='/nevent1qqsfja7fzjq07vr48cyuux45875hdl4fmfcryha5hsf4pdjuzgfg7qq58v7u0'>nevent1q…v7u0</a><br/>_________________________<br/><br/>It&#39;s hard to make proper comparisons. GrapheneOS uses less power by default because it doesn&#39;t have nearly as much stuff included. If you add sandboxed Google Play and dozens of Google apps to reach roughly what&#39;s included in the stock OS, battery life should be quite similar. There can be differences due to our hardening features (both positive and negative) but it&#39;s insignificant overall.<br/><br/>People do often set up inefficient setups with a bunch of different push connections, etc. 2025-03-23T19:12:43+01:00 https://nostr.ae/nevent1qqsrjw49hnfy3zpc6f0jatsfa6jhhhe7dzhcwjsn59snnkn5xfwxp2szyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljxavsrn In reply to <a href='/nevent1qqsx945nj77ptup3zj4mhxhv86v0t72tttaglcndprpg8edjznzhrwqplk4pe'>nevent1q…k4pe</a><br/>_________________________<br/><br/>Using only 1 profile on the stock OS with a dozen apps installed will drain more power than using the same dozen apps on GrapheneOS with sandboxed Google Play in 1 profile. If you compare apples to apples, GrapheneOS saves power.<br/><br/>If you compare apples to oranges such as Signal with FCM vs. incredibly inefficient non-FCM Signal push (the Molly fork makes it far less bad) along with multiple profiles, then it can drain more power because you&#39;ve configured it in a less efficient way. 2025-03-23T16:40:52+01:00 https://nostr.ae/nevent1qqsx945nj77ptup3zj4mhxhv86v0t72tttaglcndprpg8edjznzhrwqzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljd3wkes In reply to <a href='/nevent1qqs9kfg6hdu4d4r9qtv3cssfjtzae7sd36jjm42d4wgaxszcwpsdpdc8dn4y5'>nevent1q…n4y5</a><br/>_________________________<br/><br/>UnifiedPush is an alternative to Firebase Cloud Messaging able to reuse a single push messaging connection in a similar way. The issue is that only a few apps such as Molly and Element currently support it. Since UnifiedPush is not a specific implementation but rather a compatible interface with multiple apps and services, efficiency and robustness will vary.<br/><br/>Running a dozen push connections for separate apps especially very non-optimized ones like Signal&#39;s own push will drain power. 2025-03-23T16:37:52+01:00 https://nostr.ae/nevent1qqs9kfg6hdu4d4r9qtv3cssfjtzae7sd36jjm42d4wgaxszcwpsdpdczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljlnqw22 In reply to <a href='/nevent1qqs0zu69s2resw3yl205fw94wpr2g2pztrpvwas90ew5m9gjzcxq5nq3pe3f2'>nevent1q…e3f2</a><br/>_________________________<br/><br/>Battery consumption is much lower in a fresh install of GrapheneOS than the stock OS.<br/><br/>Google Play services Firebase Cloud Messaging is an efficient push messaging system and using multiple less efficient push messaging systems at the same time will consume more power than it. This is a choice about how you set things up. You can use FCM on GrapheneOS.<br/><br/>If you use multiple profiles that will be more heavyweight than using a single profile whether it&#39;s the stock OS or GrapheneOS. 2025-03-23T15:53:42+01:00 https://nostr.ae/nevent1qqs2524ela6kdxz90mkzeyul3f8r09unmv5yedrcq5gre8c7c60vgqczyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljhj5am7 Latest release of Vanadium has support for passkeys without Google Play services via the Android 15 credential manager:<br/><br/><a href="https://grapheneos.social/@GrapheneOS/114186195115859187">https://grapheneos.social/@GrapheneOS/114186195115859187</a><br/><br/>Proton Pass is an example of an app providing passkeys without Play services. Bitwarden appears to require Play services for this. 2025-03-20T00:38:47+01:00 https://nostr.ae/nevent1qqs8zdvlemflhtzua6dyrq8e02h5ahq6gern4dccke0ctgyag04jyvszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtlj0szcle GrapheneOS version 2025031300 released:<br/><br/><a href="https://grapheneos.org/releases#2025031300">https://grapheneos.org/releases#2025031300</a><br/><br/>See the linked release notes for a summary of the improvements over the previous release.<br/><br/>Forum discussion thread:<br/><br/><a href="https://discuss.grapheneos.org/d/20821-grapheneos-version-2025031300-released">https://discuss.grapheneos.org/d/20821-grapheneos-version-2025031300-released</a><br/><br/>#GrapheneOS #privacy #security 2025-03-14T03:44:53+01:00 https://nostr.ae/nevent1qqsgasrh6rmkg6a0mghp7jf5lgg3qh4vtvu47wa0wzhlcxxsc8e0aggzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljqvds2m In reply to <a href='/nevent1qqs29zttkef420j37g55rpw775s8huh8fe5pnd5nf0ztf824qj20nkgrfjaxe'>nevent1q…jaxe</a><br/>_________________________<br/><br/>The cable can be connected to a USB-C hub with DisplayPort alternate mode support to provide charging and USB-C ports for a wired mouse and keyboard if desired instead of only being able to use Bluetooth ones. It&#39;s very practical if you make a proper setup for it.<br/><br/>These are hardware accelerated virtual machines so the overhead for CPU tasks is very low and the overhead for GPU tasks is quite reasonable when GPU acceleration is enabled. It&#39;s similar to WebGL in Chromium. 2025-03-14T03:43:44+01:00 https://nostr.ae/nevent1qqsr7r5yan53002fcys2rqqcmq07yscxada473yzk3m2frc7plyrvvszyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljy0jeux In reply to <a href='/nevent1qqsvel74mutclzxr3usr8xljwfhpuq8mnjy7pq3ty3d2m7lwng72pug4wf7kp'>nevent1q…f7kp</a><br/>_________________________<br/><br/>GrapheneOS is already mobile Linux. It&#39;s far more private, secure and functional than desktop Linux distributions. A variant of GrapheneOS built with the rest of the OS is what will be used for mobile usage to seamlessly isolate apps/profiles better.<br/><br/>The intended usage of virtual machines in future GrapheneOS is for isolating low level app and OS components via the GrapheneOS microdroid variant, running apps and profiles in a VM as a better sandbox and Windows / desktop Linux app compat. 2025-03-12T14:31:12+01:00 https://nostr.ae/nevent1qqs06kqq7qzamk6ntc5vcuykg2p52xgekxf4qqap42q6hf3556pl2jgzyzem50zsgha6lxd7nj6d420367awak46plzmj9vk2y0zlda8phtljg9en68 In reply to <a href='/nevent1qqsggl8phgqa9hg8atzxq33afe5jrse6v9x75ajar3zf7vdk8ss645q5yh8hf'>nevent1q…h8hf</a><br/>_________________________<br/><br/>Running an up-to-date OpenSSH version in a terminal doesn&#39;t require a non-native userspace. It can simply be the latest OpenSSH built for Android and run in a terminal emulator with the native Android command-line environment available to apps.<br/><br/>Termux is a legacy approach built upon many awful hacks. They essentially ported a userspace CLI environment from another OS to Android without using namespaces or virtualization. It doesn&#39;t follow how things are meant to be on Android. 2025-03-11T06:33:10+01:00