final [GrapheneOS] ๐Ÿ“ฑ๐Ÿ‘๏ธโ€๐Ÿ—จ๏ธ's avatar
final [GrapheneOS] ๐Ÿ“ฑ๐Ÿ‘๏ธโ€๐Ÿ—จ๏ธ
npub1c9d9...sqfm
Keeping the fight. Community Moderator for #GrapheneOS https://discuss.grapheneos.org/u/final This is a personal account. I do not speak on behalf of GrapheneOS developers as a whole (nor am I) and suggestions shall not be endorsements.
๐Ÿ”ฅ Hello again, new #GrapheneOS Update 2024022600. This time we have a new security feature that's been worked on for a while: USB-C Port Security. This is a significant security enhancement. This feature allows users of Tensor Pixels (6 and later) to have fine grained controls on USB controller functionality including totally disabling data lines or the port when the OS is in use. There are 5 modes: - On (current) - Charging-only when locked except in BFU (before first-unlock) - Charging-only when locked - Charging-only - Off (which even disables charging while booted into the normal OS mode). This is different from the previous existing USB control features including the Android 12 USB HAL toggle which only disable high-level kernel functionality which still left all the low-level kernel driver, USB protocol and USB controller attack surface enabled. Other changelogs: - kernel (5.10, 5.15): add support for ignoring USB alt modes - kernel (Tensor Pixels): extend max77759 USB-C controller driver used by Tensor Pixels with support for a sysfs node providing fine-grained control over the USB-C data path at the USB controller level - Setup Wizard: fix crash for SIM locales not recognized by com.android.internal.app.LocalePicker #GrapheneOS #Privacy #Security
GM! ๐Ÿ”ฅ New #GrapheneOS 2024022300 Update! Adblocking for Vanadium, New Setup Wizard, new colour schemes and more! Changes since the 2024020500 release: - completely new GrapheneOS Setup Wizard implementation for the initial setup of the device and secondary user profiles - Theme Picker: update color schemes including adding the monochromatic colorscheme option - Sandboxed Google Play compatibility layer: always apply PhenotypeFlag overrides to avoid regressions for some users - Sandboxed Google Play compatibility layer: catch SecurityException from setApplicationEnabledSetting() instead of relying on PhenotypeFlag override - Sandboxed Google Play compatibility layer: add support for Android Auto 11.3 by extending the wireless Android Auto and phone call handling toggles to also allow BluetoothAdapter#getActiveDevices - Sandboxed Google Play compatibility layer: add developer functionality for updating Android Auto via the Play Store for testing - Storage Scopes: avoid legacy apps using legacy storage crashing when trying to access the wallpaper - remove legacy AOSP Search app now that Vanadium provides the global search intent in addition to the more common web search intent also implemented by other browsers including Brave - fix upstream bug breaking package manager support for uninstalling apps only installed in other profiles from the Owner user - Settings: improve strings for network connection toggles - kernel (5.10, 5.15, 6.1): temporarily ignore sysrq_always_enabled to avoid sysrq being enabled on devices passing it on the kernel line unconditionally - kernel (5.10): update to latest GKI LTS branch revision - kernel (5.15): update to latest GKI LTS branch revision - kernel (6.1): update to latest GKI LTS branch revision including update to 6.1.75 - Pixel 4a (5G), Pixel 5: update to UP1A.231105.001.B2 vendor files - Vanadium: update to version 122.0.6261.64.0 - GmsCompatConfig: update to version 96
GM! ๐Ÿ”ฅ BIG UPDATE: Vanadium version 122.0.6261.43.1 released: Our new Vanadium release has initial adblocking support - currently using EasyList + EasyPrivacy for now - no cosmetic filters or advanced features yet - filters updated via Vanadium Config app - standard filters used to avoid user distinction #GrapheneOS
โ†‘