Security researcher focused on forensics, mobile security, and other cypherpunk grounds. Helping out at #GrapheneOS. Enjoy typos and senseless security babble. Posts made express own views and is my only npub.
Public Key
npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Profile Code
nprofile1qqstnr0dfn4w5grepk7t8sc5qp5jqzwnf3lejf7zs6p44xdhfqd9cgspp4mhxue69uhkummn9ekx7mqpr3mhxue69uhkummnw3ezucnfw33k76twv4ezuum0vd5kzmqm79n2l
Show more details
Published at
2025-06-03T20:58:41Z Event JSON
{
"id": "b5391ea6d2bdfd770d97b4479843b3277c89023030a381e86226d3ed9d538ed1" ,
"pubkey": "b98ded4ceaea20790dbcb3c31400692009d34c7f9927c286835a99b7481a5c22" ,
"created_at": 1748984321 ,
"kind": 0 ,
"tags": [
[
"alt",
"User profile for Final"
]
],
"content": "{\"name\":\"Final\",\"display_name\":\"Final\",\"picture\":\"https://image.nostr.build/38752e41d5c34a92bb49082d62af57bf67b6dc4ae15b2e7c53055d3084d0d914.jpg\",\"website\":\"https://discuss.grapheneos.org/u/final\",\"about\":\"Security researcher focused on forensics, mobile security, and other cypherpunk grounds. Helping out at #GrapheneOS. Enjoy typos and senseless security babble. Posts made express own views and is my only npub.\\n\\n#privacy #security\",\"nip05\":\"[email protected] \",\"lud16\":\"[email protected] \"}" ,
"sig": "2fa85d8fb886072f6d8d837ba0398018828de55ede3ff3029113333b4ed3568862185bae7bd2a4ed12cc8fbb6b75566daa048daad1869ceac5e974ca65322216"
}
Last Notes npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Our initial port to Android 16 has been completed and can be built for the emulator from our 16 branch. All of the device-independent #GrapheneOS code has been ported. There are some parts of the port which will be redone better and a lot of testing and fixing regressions to do. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final We're going to be moving forward under the expectation that future Pixel devices may not meet the requirements to run #GrapheneOS (https://grapheneos.org/faq#future-devices) and may not support using another OS. We've been in talks with a couple OEMs about making devices and what it would cost. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final We've made a lot of progress on porting to Android 16 already. If things hadn't been made harder for us, we would likely be able to publish an experimental release tomorrow and quickly get a release into the Alpha and then Beta channels to start ironing out the bugs in the port. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final I was aware of Frostr and intended to send it, although I don't know anything beyond the idea, zero testing. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final A lot does actually come from Fediverse, but the bridge doesn't show everything. Even in my end the threads break apart. What most people here reply to usually aren't directed towards Nostr users and is just a bridge. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final In May, we began preparing to port to Android 16 despite our most active senior developer responsible for leading OS development being unavailable. Android 16 launched today and porting is going to be significantly more difficult than we were expecting. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final The article is hyperbole made to advertise their so-called "secure" devices. Everything is fine. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final #GrapheneOS: WebRTC is a peer-to-peer communications protocol for web sites and therefore causes numerous privacy issues through making direct connections between participants. By default our Vanadium browser disables the peer-to-peer aspect by only using server-based (proxied) connections. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Users of #Obtainium may be interested in this web site: https://www.openapk.net/ npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final In a Private Space, users can create an isolated environment on their current user profile. It's treated as a separate profile. Apps in the private space show up separately to other apps and are hidden from the recents view, notifications, settings etc. They also have their own network for separate VPN, so it's like another user but not. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Check it out npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final #GrapheneOS version 2025051900 released. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final A profile within a user with their own apps, settings and files. You can store and run certain apps in this space protected by a separate PIN or password. It is isolated from the rest of the user but you can transfer certain things through it if the user desired. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Likely to be later today. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Next #GrapheneOS update adds support for private spaces in secondary user profiles and the "Install available apps" feature for private spaces and much more. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final The more significant changes (inactivity reboot, USB controls, MTE, controlling JIT in Chrome, cellular network attack surface reduction) was already in GrapheneOS for a long time. It's still good to see the stock OS implement these features, although I wished they gave users more choice and control with it. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final We did a call on the other platforms that someone who works at an Android partner could get us access to the Android 16 sources to allow us to prepare early for migration to Android 16 in June. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final It's a known Android 15 QPR2 bug on the stock OS. Happens here too and it's looking at being resolved. Your mic isn't actually in use. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final I burned that npub during a device change a while ago. This is my npub. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final That page is a bridge that's reposting from the GrapheneOS Mastodon instance. Currently we don't have a foundation lightning address. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final The developer was conscripted due to where he was born and located. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final #GrapheneOS Important Statement npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Enabling Airplane Mode disables the cellular radio. We recommend using that, rather than this menu. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Best User Profile Setup for #GrapheneOS npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Seprand - Security Privacy Android: Guides and articles by the GrapheneOS Community. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final This ^ npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Macarne (https://macarne.com/) has provided a sponsored server to replace our current EU update servers so we can handle current traffic and near future growth. Ryzen 9950X, 128GB RAM, 2x 2TB NVMe and most importantly 25Gbps bandwidth. It's greatly appreciated! npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Wow!! npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Default option for this setting sends any network location requests through a GrapheneOS proxy. If they don't want that, they can choose to request Apple directly or not use the feature. By default all location requests are routed through GNSS. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Android has always taken the approach of it being developed in private and then having the full sources and commit history published for each stable release. This approach used to be the norm for open source software many years ago, but now most projects do a lot of their development in the open. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Should also have clarified that when GrapheneOS do backports for fixes in Beta Android builds, those Android beta builds are already closed source excluding GPL licensed components. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Our latest 2025032500 release greatly improved our built-in network-based location. It's usually better than Google's network-based location in urban areas where Apple has competitive data. Unlike Google's service, position estimation is done locally by fetching location data for nearby networks. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final This just means we won't submit vulnerability reports or upstream fixes. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final #nevent1q…l5n5 npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final It doesn't change much. Most of the stuff we need for porting the OS is from stuff they mostly developed in the internal branch they plan to move the remaining components to, so the main branch was largely unhelpful regardless. Too little is published ahead of time. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Won''t be included now. currently breaks an upstream feature with hiding private spaces. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final It's intentional that it doesn't do it all the time. It needs to charge to full capacity occasionally to allow recalibration of the feature and the battery capacity. Usually you only need to do this once or twice. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final following on this, my comment shouldn't have meant to downplay his efforts if it ever appeared that way, he is an irreplaceable and extremely talented individual and i'm saying this personally. He has helped a lot with what people don't always see and is an amazing engineer. the vulnerability disclosures to Google being associated with him aren't frills. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Developing a highly private and secure mobile OS is the major motive, with a plus of providing security research and innovation. GrapheneOS as a project is anti-authoritarian, it's strictly focused on digital security and privacy. When it comes to security at a technical we are impartial about it. Too many people feed on conspiracies, what-if scenarios and pop culture to advertise security. I'm unwilling to do that. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final It absolutely doesn't mean to come across as combative, I think it would be totally wrong and out of line to be offended at someone finding this stuff for the first time or getting curious. Unfortunately such content being a top result with good SEO by being created by influencers leads the project having to put words out way more often than the project likes to. We get asked a lot, if we're being asked then answers are needed, else they wouldn't ask us. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final It was not long from his first tenure back when they were talking about how Trump was using a Galaxy S3 as his everyday device. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final JD Vance using Signal for anything Top Secret is ludicrous. Keep it professional. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Signal is an excellent application but security requirements at such a high level mandate an exceptionally high-security device and operating system as well. The weakest link is the device and operating system they're using. I'd be very disappointed to hear if they had been using their personal iPhones or Stock Android devices for this (and it seems like they are, why the hell would you have a random journalist on your phone?). State actors would laugh. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final The downside to such a reply is that it can just be interpreted as avoiding the issue, being unprofessional or uncaring. Brave, as an example gets this issue as well, fortunately they don't receive anything as extreme beyond petty posts from Reddit. For us then it is a lose-lose and it's better to reply contextually and with the transparent approach than to ignore it when it comes to such people. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Stepping in of a sudden here, but we absolutely do try to resolve sticky situations. When all measures have been exhausted, there's nothing much else to do here. It's worse to have extreme content unchecked. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final People are the weakest link. A good messenger like Signal is nothing if you're talking to someone you don't know or trust. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Other than the intensity built in intensity slider, there's no OS feature for it. Other ways would require risky apps with accessibility services that could also reduce performance and not actually do as they say. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final noticed that! GrapheneOS is spelled incorrectly npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Hold both the volume up and power button at the same time to force restart. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final The 5a is old, it's unsupported and missing almost all our major new features anyway. The Pixel 9a is on the way and likely will discount the previous generations too. 8a is the cheapest device that has every security feature and is supported for a long time too. The 6a is the cheapest currently supported device and is the second-soonest to be unsupported (July 2027). npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final All donations are without influence or strings attached and anyone donating should expect they will not be given a privilege, the most they'll get is our thanks. We've refused and took matters public against orgs who've tried to do this. We've received far more from others. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final If your device is not powering on with no Google logo or OS warning screen at all it isn't related to GrapheneOS. You'd at least get a boot loop. Please check your battery and charger, and if it doesn't work then it sounds like you have a hardware failure. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final GrapheneOS isn't useless because you installed Google services, there's still a lot of security and privacy features you can benefit from using it. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Second donation to GrapheneOS by the Proton Foundation npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final #GrapheneOS version 2025032100 released. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final If an app loads remote content submitted by other users of the app, then attack surface for remote code execution vulnerabilities could be there. The most common example is instant messenger apps having zero-click exploits thanks to malicious attachments with payloads that the app automatically parses or loads. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Chromium team developed a new font rendering library (Skrifa) as part of their Fontations library written in Rust. Skrifa now provides memory safe rendering for all web fonts since Chromium 133 for Android, ChromeOS and other Linux distributions: npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Companies of this business model are highly secretive and the amount of victims for such attacks isn't fully known since it depends on heuristics or TTPs used by the exploit during that exploit's period of not being exposed, there can always be more and it's not accurate to tell. It is almost certain such malware of its kind exists for iOS and the stock Android distributions. How that exploit is delivered also can vary and has a dependency on a user using a certain service or app, one example being WhatsApp. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Pebble is Apache 2.0 with proprietary dependencies. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final New #GrapheneOS Vanadium browser release in Alpha supports passkeys without Google Play Services using the Android 15 credentials manager. Not every passkey provider supports it, but you won't need Play if yours does. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Most of the apps I use are tied to a service, so they're not really something I can recommend unless they like that service. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Locked and unlocked are specified separately in the docs. The image you are describing is for Stock OS pixels that are locked. BFU extraction type means extractions of data available in BFU state and nothing protected by a user credential. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final I don't recommend this and I don't try this. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Should be possible, it's an entire Debian VM for you to install Docker in. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Sparrow Wallet server running on #GrapheneOS Debian virtual machine. Another great example of desktop Linux software running in GrapheneOS. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final "Full Filesystem" (FFS) Extraction - extraction of all available data including user-inaccessible operating system data, data from apps etc. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final GrapheneOS without a PIN/Password configured or GrapheneOS but the Cellebrite tool owner knows the password to unlock the phone. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final for the record, no OSINT is being done by us on where they originally come from, as we receive copies of them ourselves from people. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Graykey's capability is no different or even lesser to Cellebrite Premium and have been disrupted by patches to vulnerabilities in the stock OS that we reported to Google ourselves. Cellebrite's stock OS capability was unchanged and we are confident they lead in Pixel support. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final #GrapheneOS is still not vulnerable to Cellebrite device exploitation as of the February 2025 support matrix. Appears the documents have leaked online in multiple places. I'll make a larger post summarizing it when I have time. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Next update will add the new desktop mode. Pixel 8 and above use DisplayPort Alt Mode so you need a cable supporting it. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final It's specifically different with the Pixel Tablet because that device doesn't have DisplayPort alternate mode for external display. The next release enables the new desktop mode with far more features as well. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final This is the desktop mode for GrapheneOS itself, so no. You will be able to run the virtual machines from the desktop mode though including running virtualized Desktop apps in their own windows: npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Next release of #GrapheneOS will enable the new Desktop Mode on all devices rather than just the Pixel Tablet. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Yes. VM management with GUI support was added in 2025031300. Past posts on my page should give a rundown. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Yes npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final LibreOffice Calc in #GrapheneOS Debian VM running on an external display in the launcher with 'freeform windows in external display' switched on: npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final None currently since this is brand new and some tasks and goals will be far more difficult to accomplish. Quality features take a lot of time. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Heard the included Weston setup works with GPU acceleration, but users won't be using that, it's reference software. You could disable the GPU acceleration to keep using GNOME. We haven't tried many different unique software setups yet before release. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final GNOME itself doesn't work well with GPU acceleration. Individual apps like Chrome would do. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Other device manufacturers don't provide the hardware necessary to run the features we want, including this one which needs hardware accelerated virtualization. A lot of people online say it's about lockable bootloaders but it's a lot more than just that. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final No, this is support of desktop OS virtual machines, but a Samsung DeX style desktop mode for GrapheneOS / Android itself is also in the works and that feature will be important for adopting VMs. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final It's compatible with VPNs, the issue is that the OS is not excluding the local network traffic between the VM and Terminal app from going through the VPN which breaks it. It's something to work on. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final virglrenderer file should be in the Linux directory. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Btw, you may not be using GPU acceleration, if you want to use that then: npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Gaslighting Adversarial Network npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Upstream and GrapheneOS feature only does Debian. We are looking into other ARM Linux distros, namely Fedora, and a gold target of running completely operating systems like Windows 11 ARM. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Pixel Tablet clearly has capability for such accessories but they don't make it. It's a very neglected product. The next generation Tablet should have more effort. The Pixel Tablet is the only tablet and doesn't support all the flagship security features like MTE either since it's a 7th generation device... npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final This is Android 15 QPR2 but yes. There are some hidden feature flags for 16 that are enabled to let this happen + some additional patches. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Footage of GNOME, Firefox and Doom running within #GrapheneOS Linux virtual machines. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Awesome footage! npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final obviously this won't be fast or replacing a PC anytime soon, but it's a matter of growing improvement, there's still a hell of a lot to work on with this. We're doing it first and better than other distributions. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Currently it is Debian as that is what the upstream feature uses and downloads. Usage of other, better suited distros would be looked at in the future. It has to be a distribution with ARM support. Potentially Fedora. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Say hello to GNOME on #GrapheneOS (credit tuxpizza) npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final #GrapheneOS version 2025031300 released. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final #GrapheneOS version 2025031300 released. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final BitLocker is fine, it's the best choice of OS disk encryption for Windows users since BitLocker has TPM support. TPMs suck compared to a proper secure element but they are better than nothing. fTPMs are more resistant to physical attacks documented with TPMs. Veracrypt refuses to have TPM support at all. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final They should still need the feature. Forensic experts would be trained in device repair and just replace the port, so it should disable itself even when the port is replaced. It would increase the time before an extraction attempt could be performed though. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final There are some companies who claim BFU Physical extractions, mostly on very insecure MediaTek devices and some Samsung Exynos devices. This extracts everything but the data extracted is still encrypted... so it needs a brute force anyways. There isn't a "master key" because that key is created and derived from the user credential which you need to know. It's advertiser speak. npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75y Final Example of iOS BFU here:
