KindnessInfinity

@KindnessInfinity@lemmy.ml

She/Her

Spreading positivity and kindness

This profile is from a federated server and may be incomplete. View on remote instance

GrapheneOS Organization: Claims made by forensics companies, their capabilities, and how GrapheneOS fares ( grapheneos.social )

XRY and Cellebrite say they can do consent-based full filesystem extraction with iOS, Android and GrapheneOS. It means they can extract data from the device once the user provides the lock method, which should always be expected. They unlock, enable developer options and use ADB....

GrapheneOS Experimental Pre-release Now Available For Pixel 8a ( grapheneos.social )

An experimental prerelease of GrapheneOS for the Pixel 8a is now available via https://staging.grapheneos.org/ including web installer support. It will be made available via https://grapheneos.org/ after we've done basic testing including testing the upgrade path to a future release....

GtapheneOS Discusses How Chromium Releases Are Handled and How They Impact Security ( grapheneos.social )

Our Vanadium browser (https://grapheneos.org/features#vanadium) is based on the stable releases of Chromium. We port to the new releases when they're still in Beta/Dev/Canary but we wait until it's Stable to upgrade, particularly since Stable is the only branch with proper security support....

KindnessInfinity OP Mod ,

Vanadium is still more secure than fennec

Why? Well, vanadium has these security improvements:

  • Type-based Control Flow Integrity (CFI)
  • Hardware memory tagging (MTE) enabled for the main allocator
  • Strict site isolation and sandboxed iframes
  • JavaScript JIT disabled by default with per-site toggle via drop-down permission menu

Also many more security improvements

GrapheneOS Organization Explains How Their PDFViewer Is Not Affected By a Vulnerability That Was Discovered In pdf.js ( grapheneos.social )

Our PDF Viewer isn't impacted by issues like this in pdf.js. We use a strict Content Security Policy allowlisting the app's static CSS and JavaScript without permitting unsafe-eval or unsafe-inline. It's blocked from using eval or including dynamic JS....

GrapheneOS Organization Has Preordered Pixel 8a Devices For Development and Testing ( grapheneos.social )

We've pre-ordered a Pixel 8a for our official device testing farm. They push the Android Open Source Project tags and stock OS factory images on the official release day. Should take us a couple hours to add support for it. We'll build, test and make an official release quickly.

GrapheneOS News About Upcoming Release, Patch Backports, VPN DNS Leak Patches and More ( grapheneos.social )

Android monthly security backports were released this Monday. We expect the full monthly release to be released much later today (Tuesday). It's what happened last month, but last time we expected the monthly release to be delayed a week so we did an early release with backports....

[UPDATED] GrapheneOS Organization Discuss Forum and Attestation.app Issues With Mailbox.org Email Addresses ( grapheneos.social )

We'll be blacklisting mailbox.org and websites using it for email hosting for registration on discuss.grapheneos.org and as an alert email for attestation.app. They're blocking emails from our mail server for a convoluted, nonsensical reason and won't stop....

GrapheneOS Organization Discusses Planned Improvements To Resolve Possible VPN Leakage ( grapheneos.social )

One of our community members has been doing testing of Android VPN apps to check for leaks. They've found and reported 2 issues where leak blocking functionality doesn't appear to work as intended: one occurs with local network multicast and the other with DNS while VPN is down....

GrapheneOS Will Have Another Release To Address Additionally Discovered Regression Caused By Upstream f2fs Changes ( grapheneos.social )

We found another regression introduced by a recent f2fs change in the Linux 5.15 LTS branch so we'll have to make another release for Pixel 8 and Pixel 8 Pro before it can reach Beta. Only 2 users doing Alpha channel testing ran into this and one has confirmed reverting it works....

  • All
  • Subscribed
  • Moderated
  • Favorites
  • supersentai
  • WatchParties
  • Rutgers
  • jeremy
  • Lexington
  • cragsand
  • mead
  • RetroGamingNetwork
  • loren
  • steinbach
  • xyz
  • PowerRangers
  • AnarchoCapitalism
  • kamenrider
  • Mordhau
  • WarhammerFantasy
  • itdept
  • AgeRegression
  • mauerstrassenwetten
  • MidnightClan
  • space_engine
  • learnviet
  • bjj
  • Teensy
  • khanate
  • electropalaeography
  • neondivide
  • fandic
  • All magazines