Latest release addresses the privacy issue brought to our attention by NitroKey with Qualcomm SoC devices by stopping xtra-daemon from sending the SoC serial number in the HTTPS User-Agent header:

https://grapheneos.social/@GrapheneOS/110284380098624253

We'll be removing the User-Agent header completely later.

#grapheneos #qualcomm #xtra #psds #privacy

GrapheneOS (@[email protected])

GrapheneOS version 2023042900 released: https://grapheneos.org/releases#2023042900. See the linked release notes for a summary of the improvements over the previous release. Forum discussion thread: https://discuss.grapheneos.org/d/4749-grapheneos-version-2023042900-released #grapheneos #privacy #security

GrapheneOS Mastodon

Default connections made by GrapheneOS are documented at https://grapheneos.org/faq#default-connections including Qualcomm PSDS (XTRA) for 4th/5th gen Pixels.

On 6th/7th gen Pixels, GrapheneOS only uses GrapheneOS services by default since we use our own PSDS cache for Broadcom GNSS (GPS, etc.).

GrapheneOS Frequently Asked Questions

Answers to frequently asked questions about GrapheneOS.

GrapheneOS

We've already been hosting a Qualcomm PSDS cache since March which we're in the process of integrating:

https://github.com/GrapheneOS/grapheneos.network/commit/6e213e84c881d6afc64c3c54a8ea8aeab03dcb9a

xtra-daemon setting User-Agent is entirely unnecessary so we'll stop it from doing that instead of only preventing it from including any hardware IDs.

add Qualcomm PSDS data cache · GrapheneOS/grapheneos.network@6e213e8

Servers for HTTP/HTTPS connectivity checks, HTTPS network time, Broadcom PSDS cache, Qualcomm PSDS (XTRA) cache, SUPL proxy, attestation key provisioning proxy and Vanadium component update check/download proxy. - add Qualcomm PSDS data cache · GrapheneOS/grapheneos.network@6e213e8

GitHub