Gaël Duval is the founder and president of the /e/ foundation along with the CEO of Murena. Duval and his organizations have consistently taken a stance against protecting users from exploits. In this video, he once again claims protecting against exploits is for only useful pedophiles and spies.
Translation to English:
> There's the attack surface, on that front we're not security specialists here, so I couldn't answer you precisely, but from the discussions I've had, it seems that everything
Transcription in French:
> Il y a la surface d'attaque, là pour le coup on est pas des spécialistes de la sécurité, donc je ne pourrais pas te répondre avec précision, mais des discussions que j'ai eu, il semblerait que tout ce qu'on fait, ça réduit la surface d'attaque. Donc oui, probablement ça aide. Par contre, on a pas une approche "sécurité durcie", on développe pas un téléphone pour les pédo(bip) pour qu'ils puissent échapper à la justice. Donc il y a pas des trucs pas possibles pour voir
Here are several particularly egregious examples:
Gaël Duval and Murena participated in these attacks. They even spread harassment content towards our team and shared it with sites attacking us.
Les tĂ©lĂ©phones Google Pixel Ă©quipĂ©s du systĂšme dâexploitation GrapheneOS permettent Ă des criminels de dissimuler leurs Ă©changes. Johanna Brousse, magistrate spĂ©cialisĂ©e dans la lutte contre la cybercriminalitĂ©, explique quels sont les moyens de la justice pour contourner ce type dâoutils.
@GrapheneOS Le Parisien :
"Ces engins jusquâĂ prĂ©sent inviolĂ©s, qui protĂšgent les communications et qui ne partagent pas les donnĂ©es sur les serveurs, sont un nouveau dĂ©fi que le parquet cyber entend bientĂŽt relever."
C'est exactement pareil avec Signal sur Android si on n'utilise pas le cloud, ils nous prennent pour des imbéciles.
The article is behind a paywall...
@claude_champagne Here's a paywall bypass for the 2 paywalled articles above:
The third one doesn't have a paywall and there are many more similar articles across other sites. We didn't want to link the ones where our team was personally targeted by a tech news site heavily misrepresenting our statements and adding up the total amount of tweets we posted over a week mainly as replies to questions to misrepresent as being on our main timeline.
@GrapheneOS This is clearly a smear campaign against the project.
Is there any chance this could seriously harm the project to the point of affecting the partnership with Motorola?
@bohwaz @joe_vinegar Ehm, the thread literally starts with a video? It's pretty clear who they are attacking.
Why are you defending a company that says "security is only for pedophiles and spies"?
@bohwaz @joe_vinegar Ok, I think we can at least agree that Gael Duval's statement implies that phones that do security hardening are for criminals and spies?
Now, next, which serious projects (not snake-oil security phone companies) focus on phone hardening?
So, in what way is he not attacking @GrapheneOS ?
(Perhaps ironically, he is also attacking iOS and Pixel OS, but that will whoosh past his audience, since most people do not know about Apple/Google's hardening efforts).
"And, my friends, in this story you have a history of this entire movement. First they ignore you. Then they ridicule you. And then they attack you and want to burn you. And then they build monuments to you." - Nicholas Klein, trade union attorney (1918) [Often attributed to Schopenhauer 1819, or Gandhi 1920]
@tedstechtips @GrapheneOS Allowlisting requests & assets by default (yes this also breaks everything by default until one allows strictly what they need).
Unfortunately umatrix died a while ago and I'm not aware of anyone else doing it to anywhere near the same degree as it did.
An additional problem is that if the "legitimate" destination is also malicious, umatrix cannot help.
When Asked about age verification on their support forum, @murena buried and merged my question onto another topic which:
- had nothing to do with it;
- would have been closed after a couple of days not allowing more replies;
- and been vague about it, infact not stating their position.
Not really what you would expect from a company praising Privacy as their flagship.
Shame on me for being so naĂŻve to trust them, and those who bought their devices
https://community.e.foundation/t/uk-government-voting-on-age-verification-for-vpn-users/78533/44
A form of age verification is likely to happen, also within the EU, and I donât disagree with this in principle, because I see how young people are vulnerable. What I do disagree with is if this is left to the market and this becomes just another source of information for companies to better micro target advertisements. Reading the weathervane, itâs the most achievable to try to convince lawmakers of the dangers of that and to develop a tool that will just reveal the bare minimum (adult or no) a...
@GrapheneOS to be fair they don't promise security, only privacy. at least in their foreword on their website here.
I don't think it's by accident that they don't even use the word secure, or security, on the whole page.
I've seen claims before where they claim it's better than GrapheneOS. But in what regard? Maybe degoogling and having alternatives pre-installed? GrapheneOS is probably more involved to get the same apps. That's the only way /e/ is better in my opinion
ECOSYSTEMKEY FEATURESGET /E/OSNEED HELP /e/OS is a complete, fully âdeGoogledâ, mobile ecosystem /e/OS is an open-source mobile operating system paired with carefully selected applications. They form a privacy-enabled internal system for your smartphone. And itâs not just claims: open-source means auditable privacy. /e/OS has received academic recognition from researchers atâŠ
They dont provide privacy. So a promise is already broken. But beyond that, privacy cannot exist without security. They arent mutually exclusive, they are intertwined. To ignore security means you are not a privacy project.
E/ is not better at degoogling. GrapheneOS does not connect to any google servers, run any google play code, have any privilege google services, etc. Sandboxed google play is sandboxed and must be installed by the user. All default connections are to first party servers hosted by GOS. It is not more involved to get the same apps, google or otherwise.
@HybridStaticAnimate @codebam @GrapheneOS
That it must be installed by the user doesn't make it different.
IMHO the two app stores included in GrapheneOS are not sufficient for the vast majority of users.
If "every" user needs to install it to have a usable phone, it really is part of the attack surface.
(And yes, I'm aware the Play services are sandboxed on GrapheneOS which improves privacy and security)
It's a bit like delivering a computer without network functionality because it reduces the attack surface, and then blaming the user if they install network drivers.
as a non-expert my first conclusion is that someone like Duval is working for state agencies if he's working to diminish security for us mere mortals
@GrapheneOS I don't think you should attack frontally others like that whenever đ¶
Reminding security is privacy is good.
Responding to attacks is good (which is not the case *here*)
I understand its CEO and the Murena company might have attack the GrapheneOS project in the past, and responding to that was normal too.
But I don't see attacking /e/OS like that often as a positive feedback in general. A simple reminder could have been enough.
â€ïž on the GrapheneOS project btw
"I don't think you should attack frontally others like that whenever"
Gael Duval attack GrapheneOS, GrapheneOS responds to these attacks.
"I understand its CEO and the Murena company might have attack the GrapheneOS project in the past"
It's not in the past, these attacks are recuring, and he does it again in this recent video. Duval has been waging a disinformation campaign against GOS for years.
CryptoLek đđ»
GrapheneOS
David Penfold 
Xtreix
Claude Champagne
Lilith đŽđ”đž
Sailor Anarres
Joe Vinegar
BohwaZ
Daniël
DonCC
Emjay
Ted's Tech Tips
Andrey [0xdc, 0x09];
Zoarial94 
LisPi
@leX đ€đ»
GÌžuÌžaÌžlÌžtÌžiÌžeÌžrÌžoÌž
Sean
HybridStaticAnimate
Claudius Link
Martin
jose
Sneezy
Blue Luma