We agree it's not an attack, we even said that capability is an expectation at the start.
Unfortunately, some malicious actors, namely people selling proprietary scam phone products have been misinterpreting such claims by Cellebrite, XRY and others about GrapheneOS being supported as GrapheneOS being under attack.
This is our response. This post is meant to highlight how we have got these companies' attention and how they have trouble dealing with us. Earlier this year we found the exploit XRY was using to brute force modern Pixels which lead to us patching it (and got a pretty good bounty from Google for it too). This is more of a post talking about our recent successes and future plans.
We are showing GrapheneOS is not like the other devices with stock or other OSes with exception to some modern iPhones in this post. Consent is the ONLY way for supported GrapheneOS devices at this time. We also wanted to reveal this Cellebrite documentation for clarity as we had discussed it in the past on our forum.
final [GrapheneOS] 📱👁️🗨️
npub1c9d…sqfm
2024-05-18 23:15:42
in reply to nevent1q…20vz
Author Public Key
npub1c9d95evcdeatgy6dacats5j5mfw96jcyu79579kg9qm3jtf42xzs07sqfmPublished at
2024-05-18 23:15:42Event JSON
{
"id": "9fa15a61a5982604a3e7bc5f266a3c73de579039ebbdbcaff383efce0f48f98e",
"pubkey": "c15a5a65986e7ab4134dee3ab85254da5c5d4b04e78b4f16c82837192d355185",
"created_at": 1716066942,
"kind": 1,
"tags": [
[
"e",
"ec348089f38354fe2aa7cbf3143dfdaa9a563399e54679b54c85073db6a1f8ea",
"",
"root"
],
[
"e",
"b7dde59d331655856de8088a8dbdb3922c6a2da6fc21a25d5b0082417d8c7278",
"",
"reply"
],
[
"p",
"ee11a5dff40c19a555f41fe42b48f00e618c91225622ae37b6c2bb67b76c4e49"
],
[
"p",
"4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d"
]
],
"content": "We agree it's not an attack, we even said that capability is an expectation at the start.\n\nUnfortunately, some malicious actors, namely people selling proprietary scam phone products have been misinterpreting such claims by Cellebrite, XRY and others about GrapheneOS being supported as GrapheneOS being under attack.\n\nThis is our response. This post is meant to highlight how we have got these companies' attention and how they have trouble dealing with us. Earlier this year we found the exploit XRY was using to brute force modern Pixels which lead to us patching it (and got a pretty good bounty from Google for it too). This is more of a post talking about our recent successes and future plans.\n\nWe are showing GrapheneOS is not like the other devices with stock or other OSes with exception to some modern iPhones in this post. Consent is the ONLY way for supported GrapheneOS devices at this time. We also wanted to reveal this Cellebrite documentation for clarity as we had discussed it in the past on our forum.",
"sig": "cf420a654ea098e7731077382478852d4f3a8ed90d4494bc1edf8ec2f2d4779f388d3ea8583b778ef0aed9b80843360eef1da9b1847c733045e6b4791c9342a4"
}