And hopefully does something about. Disciplinary for the poor OPSEC and/or better resources to avoid it and/or better laws to stop this unfettered data collection and/or better training to avoid it in the future. Here’s hoping. Holds breath

Fennec and Mull 129.0.2 in F-Droid.org repository have 42 known security issues

Ref: https://forum.f-droid.org/t/fennec-vulnerability-recommended-to-uninstall/

old system of writing them down on paper

That’s harder to steal/hack by someone across the globe.

all media organisations use X

NPR quits Twitter after being falsely labeled as ‘state-affiliated media’

CalyxOS relocks the bootloader and they supported the FP5 right after launch.

CalyxOS is not a hardened OS, and GrapheneOS requires more than than just relocking the bootloader.

Fairphone’s devices do not meet basic security requirements for hardware, firmware and the software device support including drivers. Please look at the hardware requirements at https://grapheneos.org/faq#future-devices and check for yourself how many of those are provided by the Fairphone. Even the Fairphone 5 has a CPU core from 2021 without even PAC and BTI.

Ref: https://discuss.grapheneos.org/d/7208-8y-security-updates-on-fairphone-5-will-the-devs-consider-porting-grapheneos

You can still be part of a project without being lead, to be part of the “we.” Did he contribute and/or is he part of GrapheneOS, yes? So he’s part of the “we.”

Or does only the lead developer get the “we?” Wouldn’t that make it more of an “I” instead?

Thai article reminded me to buy (and hopefully beat) KCD before KCDII comes out in Feb 2025.

On the Xbox store, the DLC bundle (no game) was normally $20, but 75% off so it was only $5. The game+DLC bundle was normally $40, but it was 90% off so it was only $4. Easy choice, even if I already had the game and no DLC

Why do people phish, dumpster dive, or social engineer? So they can snoop and grab anything of value.

about which distro to use and got a range of suggestions but none of them were arch.

I think Debian is usually the strongest contender here.

I’d love to have working NFC pay

NFC works. NFC payment is dependent on the app as some block those that fail Play Integrity / Google certification. Google Wallet / Pay does not work for payment because Google blocks it.

Do you have Google services installed? I use MicroG…

Yes, I have Google Plays Services, Google Services Framework, and the Google Play Store installed, which are all sandboxed. MicroG isn’t supported by GrapheneOS.

https://grapheneos.org/usage#sandboxed-google-play

Nope, nor do I intend to. GrapheneOS frowns upon rooting and modifying the system as it typically widens your attack surface. I’m not using a secure OS then going around to purposefully make it less secure.

but I’m concerned RCS is going to become a deal break for me

For what it’s worth, I have RCS working with GrapheneOS. I don’t think I did anything special, but it did take awhile. I did see stuff on their forum about others having a bigger issue with it, though.

And of course, I prefer Signal, where possible.

Even just being rooted on the stock Pixel rom is a fight.

That, I can see being more of an issue than an unmodified, trusted 3rd party OS. If I remember right, rooting makes the device fail Verified Boot:

It establishes a full chain of trust, starting from a hardware-protected root of trust to the bootloader, to the boot partition and other verified partitions including system, vendor, and optionally oem partitions.

https://source.android.com/docs/security/features/verifiedboot

I’ve got old apps that won’t work any more.

I’m actually for this. The bar to entry for the Play Store is too low with too many low quality and unmaintained apps. I’m all for booting insecure and super old apps. They cheapen the ecosystem.

I’m holding out for the 10. The 8 added mirrored display (so you can mirror your screen on a monitor… I’d rather this come with the Pixel Tablet 2 and the Pixel Tablet skipped it form some reason) and MTE, which GrapheneOS says is the most significant addition to security since they’ve started the OS. If those come with the 10, not to mention the 10 is supposed to have Google’s inhouse chip and not Samsung’s…yep, I’m upgrading.

Do you pass play integrity?

GrapheneOS, and other non-OEM OSes, do not. It’s kinda the whole point of the article/OP I linked.

I’ll have to make do with a secondhand 7 pro

Ouch, that hits me right in the 7Pro feels lol. Make do, indeed, lolol.

I could see things as simple as…

Last I heard, the McDonalds’ app doesn’t work, of all things.

https://discuss.grapheneos.org/d/9123-the-mcdonalds-app-doesnt-work/

CalyxOS lets me run most safety net stuff…

SafetyNet is deprecated.

https://developer.android.com/privacy-and-security/safetynet/deprecation-timeline