GrapheneOS

Open source privacy and security focused mobile OS with Android app compatibility.

Public Key

npub1235tem4hfn34edqh8hxfja9amty73998f0eagnuu4zm423s9e8ksdg0ht5

NIP-05 Address

GrapheneOS_at_grapheneos.social@mostr.pub

Profile Code

nprofile1qqs9g69ua6m5ec6ukstnmnyewj7a4j0gjjn5hu75f7w23d64gczunmgvflt8e

Author Public Key

npub1235tem4hfn34edqh8hxfja9amty73998f0eagnuu4zm423s9e8ksdg0ht5

Show more details

Last Notes

2024-08-16 17:55:33

https://x.com/cryps1s/status/1824077327577591827
This is a fake story. Turns out that getting security information from the CISO of a mass surveillance company trying to build a dystopian police state providing police with "predictive policing" software largely based on racial stereotypes is a bad move.

2024-08-15 17:52:34

Wired was manipulated into spreading misinformation to market Palantir and iVerify by misrepresenting a vulnerability in a disabled demo app as being a serious problem which could be exploited in the real world. They should retract the article but won't.
https://wired.com/story/google-android-pixel-showcase-vulnerability/

2024-08-06 20:52:16

- reply

@npub1w52…rqkr Do you think apps like Signal/Molly or Organic Maps are spying on you? You choose which apps you use.

2024-08-06 20:36:34

- reply

@npub1w52…rqkr You won't have privacy/security using carrier-based calls rather than end-to-end encrypted messaging. Decent smartphones are also much more secure than desktops or laptops.

2024-08-06 19:30:57

- reply

Google is actively cracking down on competition in the mobile space by convincing app developers to use their Play Integrity API. Play Integrity API bans using operating systems not licensing Google's apps/services and agreeing to highly restrictive and anti-competitive terms.

2024-08-06 19:28:25

- reply

Android and Chromium would massively benefit from proper collaboration between stakeholders without Google's business model getting in the way. Should be forced to deal with both following the model of the LLVM Foundation and also spin off Google Play into an independent company.

2024-08-06 19:19:40

- reply

We recently published a detailed thread about this here:
https://grapheneos.social/@GrapheneOS/112878067304840664
We're in contact with the regulators in MULTIPLE countries about this. Don't fall for Google pretending Play Integrity API is security related or that their licensing system is about compatibility.

2024-08-06 19:17:29

https://arstechnica.com/tech-policy/2024/08/google-loses-dojs-big-monopoly-trial-over-search-business/
Action is still urgently needed to address the highly anti-competitive Google Mobiles Services licensing system and the Play Integrity API which are a major part of Google maintaining their monopolies over search and many parts of the mobile market.

2024-07-21 00:08:39

- reply

It's common for them to fall behind by a few months for new iOS and Android versions. Android and iOS have no secure way to automatically get devices back into Before First Unlock from After First Unlock as GrapheneOS does so attackers can simply wait until they have an exploit.

2024-07-21 00:06:13

Cellebrite Premium documentation we published in May and which recently received a lot of media coverage was from April 2024. Someone has shared a newer version of the iOS table indicating Cellebrite caught up to iOS 17.5.1 or higher along with the iPhone 15 for the OS exploits.

2024-06-03 16:46:28

- reply

These are the same false narratives used by authoritarians trying to outlaw end-to-end encryption cannot be trusted to lead a project supposedly helping people maintain their privacy. These false narratives shouldn't be coming from the leader of a project called "Privacy Guides".

2024-06-03 16:46:10

- reply

Tools from Cellebrite and NSO are also heavily used to go after journalists, political opponents, activists, etc. It is true that these tools are almost entirely used by states. It's completely untrue that they're only used by law enforcement let alone only against criminals.

2024-06-03 16:46:02

- reply

One of the primary uses for Cellebrite's tools is violating the rights of people travelling by plane or crossing borders. It's clearly violating legally enshrined rights in many of the countries it's done, so in fact Cellebrite sells their product to people breaking the law...

2024-06-03 16:45:55

- reply

GrapheneOS focusing on protecting users from forensic data extraction and remote compromise with tools from companies like Cellebrite and NSO absolutely doesn't mean we're trying to protect criminals. Jonah claiming these tools are only used by law enforcement is 100% nonsense.

2024-06-03 16:45:51

- reply

Jonah Aragon and Henry Fisher are directly responsible for the 3 swatting attacks by one of their supporters aimed at killing a GrapheneOS project member. Despite that, they're both still trying to direct harassment towards them and further escalating their fabrications/bullying.

2024-06-03 16:45:42

- reply

Multiple members of the Privacy Guides project quit due to Jonah's corruption and extensive involvement in attacks on the GrapheneOS project. For some context, Jonah is one of the core Techlore project members and has been heavily involved in their harassment for multiple years.

2024-06-03 16:45:36

- reply

We've removed our previous thread only because Jonah edited the linked comment to direct harassment towards a specific GrapheneOS project member he has a long history of targeting with fabricated stories as part of bullying. That's why we've posted a new thread as a replacement.

2024-06-03 16:45:30

- reply

A mod banned us from the server with the justification that we were making forensics harder and claimed the server exists to help law enforcement and forensic data extraction. The chat history is still there for anyone who wants to proof Jonah Aragon is once again lying about us.

2024-06-03 16:45:22

- reply

GrapheneOS had been repeatedly mentioned in their channel on mobile devices forensics. We posted a link to https://discuss.grapheneos.org/d/11860-vulnerabilities-exploited-in-the-wild-fixed-based-on-grapheneos-reports which is on-topic for the channel, useful and relates to past discussions. We also provided some corrections for past discussions about GrapheneOS.

2024-06-03 16:45:11

- reply

Jonah Aragon followed up by pushing a fabricated story claiming we joined a private Discord server used by law enforcement to antagonize them.
The reality is we joined the public Digital Forensics and Incident Response server to participate in discussion about GrapheneOS there.

2024-06-03 16:45:04

Yesterday, we made a post linking to the leader of Privacy Guides (Jonah Aragon) repeatedly pushing the false claim GrapheneOS is marketing itself as making people untouchable by law enforcement and trying to appeal to criminals. It's a thoroughly dishonest attempt to harm us.

2024-06-02 13:00:34

Leader of the Privacy Guides project is now pushing the narrative privacy/security are only for criminals:
https://discuss.privacyguides.net/t/claims-made-by-forensics-companies-their-capabilities-and-how-grapheneos-fares/18445/7
Everyone with integrity already left the Privacy Guides project a while ago due to their heavy involvement in harassing GrapheneOS project members.

2024-06-01 07:22:17

GrapheneOS version 2024053100 released:
https://grapheneos.org/releases#2024053100
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
https://discuss.grapheneos.org/d/13155-grapheneos-version-2024053100-released
#GrapheneOS #privacy #security

2024-05-23 23:55:07

Vanadium version 125.0.6422.113.0 released:
https://github.com/GrapheneOS/Vanadium/releases/tag/125.0.6422.113.0
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/12994-vanadium-version-125064221130-released
#GrapheneOS #privacy #security #browser

2024-05-22 02:16:10

Vanadium version 125.0.6422.72.0 released:
https://github.com/GrapheneOS/Vanadium/releases/tag/125.0.6422.72.0
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/12933-vanadium-version-12506422720-released
#GrapheneOS #privacy #security #browser

2024-05-21 22:54:54

https://grapheneos.social/@GrapheneOS/112481434513090992
The latest release of GrapheneOS adds the first piece of our ongoing work on duress/panic features. It makes standard factory resets including by device admin APIs wipe the device near instantly before it reboots to recovery to wipe and format it.

2024-05-03 16:45:32

We'll be blacklisting mailbox.org and websites using it for email hosting for registration on discuss.grapheneos.org and as an alert email for attestation.app. They're blocking emails from our mail server for a convoluted, nonsensical reason and won't stop.

2024-04-22 16:12:31

- reply

@npub1j44…xp9h If you aren't using Alpha, it's not really relevant to you. It's why we have the Alpha channel. It also doesn't impact the vast majority of users in Alpha, only 3 reports so far.

2024-04-22 15:52:01

We found another regression introduced by a recent f2fs change in the Linux 5.15 LTS branch so we'll have to make another release for Pixel 8 and Pixel 8 Pro before it can reach Beta. Only 2 users doing Alpha channel testing ran into this and one has confirmed reverting it works.

2024-04-03 20:21:37

Reset attack mitigation for firmware-based boot modes such as fastboot mode has been added as one of our requirements for GrapheneOS support:
https://grapheneos.org/faq#future-devices
It shipped as part of this month's firmware updates for Pixels based on our proposal. Other OEMs should add it.

2024-03-26 13:49:11

Google is publicly working on a fix for the factory reset vulnerability we reported:
https://android-review.googlesource.com/c/platform/frameworks/base/+/3008138
Currently, apps using device admin API to wipe do not provide any security against a local attacker since you can interrupt them. Forensic companies are aware of this.

2024-03-18 22:22:58

- reply

@npub18sx…svu2 We still have extended support for the Pixel 5 and will for a while longer but that does not mean you should use it. Get a used Pixel 7a or 6a. Even a Pixel 6a still has more support remaining than the Pixel 5 did on the day it was launched since the Pixel 6 moved to 5 years of support from launch instead of only 3 years. Pixel 8 has moved to 7 years of support from launch. 7 years of support essentially solved this problem.

2024-03-18 22:20:53

- reply

@npub18sx…svu2 There's no operating system which will provide you with full security patches for the Pixel 5. You should replace it. GrapheneOS will continue providing extended support releases and then later legacy extended support releases until we feel that it's doing more harm than good. People should move to a fully supported device rather than using extended support, which cannot provide full security patches regardless of what's done.

2024-03-16 01:26:46

GrapheneOS is much different from CalyxOS and /e/OS. GrapheneOS is a hardened OS with substantial privacy/security improvements:
https://grapheneos.org/features
CalyxOS and /e/OS are not hardened operating systems. They greatly reduce security vs. AOSP via added attack surface, rolled back security and slow patches. We don't have much in common with them.

2024-03-12 22:39:49

Vanadium version 122.0.6261.119.0 released:
https://github.com/GrapheneOS/Vanadium/releases/tag/122.0.6261.119.0
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/11457-vanadium-version-122062611190-released
#GrapheneOS #privacy #security #browser

2024-03-12 14:24:38

- reply

@npub16ee…2qax Google Maps works fine alongside sandboxed Google Play. They're regular sandboxed apps unable to do more than other regular user installed apps. Our compatibility layer makes this work.

2024-03-12 14:24:00

- reply

@npub16ee…2qax The vast majority of Android apps can be used on GrapheneOS due to the sandboxed Google Play compatibility layer. GrapheneOS provides substantial privacy improvements such as Storage Scopes, Contact Scopes, Sensors toggle and much more to enable using whatever apps you want while preserving your privacy. More features are coming such as App Communication Scopes and similar features for Camera/Microphone/Location (provide video for camera, etc.).

2024-03-12 05:25:11

GrapheneOS version 2024031100 released:
https://grapheneos.org/releases#2024031100
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
https://discuss.grapheneos.org/d/11435-grapheneos-version-2024031100-released
#GrapheneOS #privacy #security

2024-03-10 05:16:29

GrapheneOS version 2024030900 released:
https://grapheneos.org/releases#2024030900
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
https://discuss.grapheneos.org/d/11397-grapheneos-version-2024030900-released
#GrapheneOS #privacy #security

2024-03-03 18:25:57

GrapheneOS version 2024030300 released:
https://grapheneos.org/releases#2024030300
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
https://discuss.grapheneos.org/d/11274-grapheneos-version-2024030300-released
#GrapheneOS #privacy #security

2024-01-31 23:19:33

Vanadium version 121.0.6167.143.1 released:
https://github.com/GrapheneOS/Vanadium/releases/tag/121.0.6167.143.1
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/10681-vanadium-version-121061671431-released
#GrapheneOS #privacy #security #browser

2024-01-31 22:05:12

- reply

@npub1nd3…s249
The script comes from the Android Open Source Project. It wasn't written by GrapheneOS. It's the same flashing script used for the Pixel stock OS factory images and other devices.
GrapheneOS has fixed multiple issues with it including not handling spaces in the path, missing device model check, missing fastboot version check on Windows, unsafe handling of firmware flashing when mixed with anti-rollback fuses, erasing additional persistent state, etc. We didn't redo the rest of it yet.

2024-01-28 02:35:51

GrapheneOS has a list of security requirements for future devices based on the status quo of the current generation devices we support:
https://grapheneos.org/faq#future-devices
Other than security patches, hardware memory tagging support is easily the most important feature on this list.

2023-12-24 16:27:36

- reply

Jonah was caught participating in a small private Signal group where attacks were regularly coordinated on GrapheneOS. One of the members of the group was a self-proclaimed fascist who repeatedly posted racist memes, holocaust denial, etc. This information was shared with Jonah and several other members of the group. They were fine with continuing to be friends with this person until a member of the group leaked screenshots and they deny knowing it. They similarly deny their blatant harassment.

2023-12-24 16:17:58

The neat.computer and mstdn.party instances are being added to our federation block list. We've already added neat.chat to our federation block list on Matrix.
These servers are run by an administrator (Jonah Aragon) who is targeting one of our team members with harassment and fabricated stories. Jonah is a power mod seeking control over as many communities as possible. They have a history of abusing their position of power. Several of our team members used to be involved in projects with them.

2023-08-07 08:03:51

It's now possible to donate to the non-profit GrapheneOS Foundation via bank transfers in the EU/SEPA, UK, US, Australia, New Zealand, Canada, Hungary, Singapore and Turkey. International wire transfers from elsewhere are not currently a supported option.
https://grapheneos.org/donate#wise
#GrapheneOS #privacy #security #donate

2023-05-04 17:05:38

GrapheneOS Apps (app repository client) version 19 released: https://github.com/GrapheneOS/Apps/releases/tag/19.
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/4844-grapheneos-apps-app-repository-client-version-19-released
#GrapheneOS #privacy #security #android #repository