| Interests | Security and privacy of OSs and browsers. |
| Happy user of | GrapheneOS <3, Arch btw |
Chromium team developed a new font rendering library (Skrifa) as part of their Fontations library written in Rust. Skrifa now provides memory safe rendering for all web fonts since Chromium 133 for Android, ChromeOS and other Linux distributions:
Latest release of Vanadium has support for passkeys without Google Play services via the Android 15 credential manager:
https://grapheneos.social/@GrapheneOS/114186195115859187
Proton Pass and Bitwarden are examples of apps providing passkeys without Play services.
Vanadium version 134.0.6998.108.0 released: https://github.com/GrapheneOS/Vanadium/releases/tag/134.0.6998.108.0 See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog. Forum discussion thread: https://discuss.grapheneos.org/d/20963-vanadium-version-134069981080-released #GrapheneOS #privacy #security #browser
"Come to the dark side, load Linux" we say.
Consumers: "No, no, we prefer the adware loaded OS, really. We only trust large corporations, Microsoft loves us. Please give us AI, and I like the advertising in my Start Menu. It will even be better occupying my screen! How dare you suggest a non-corporate OS!!"
Happy to report public availability of a new paper "A Data-Driven Evaluation of the Current Security State of Android Devices" at the IEEE CNS 2024: https://www.android-device-security.org/publications/2024-leierzopf-cns/Leierzopf_2024_IEEECNS2024_AndroidDeviceSecurityState.pdf
It describes our security scoring algorithm for Android devices using specific threat models.
The application is available at https://www.android-device-security.org/database and the collected data partially consists of crowdsource contributions.
Please see https://www.android-device-security.org/app/, if you want to contribute non-personal data of your device.
GrapheneOS users on 8th/9th gen Pixels are making a massive contribution to getting memory corruption bugs in the open source ecosystem thanks to the nice crash report notifications created by our hardware memory tagging feature. One of the latest fixes:
Encrypted Client Hello is dead: https://divested.dev/misc/ech.txt
Extra sad since Mozilla is rolling out HTTPS record support without their in-built resolver requirement on Tuesday with 127.
GrapheneOS is the first platform using MTE in production, and does a lot more too:
https://grapheneos.org/features#exploit-protection
Our Vanadium browser is the first browser using it in prod:
https://grapheneos.org/features#vanadium
We plan to add stack MTE, improve PartitionAlloc and make new kernel slab MTE.
China: “Remove all VPNs”
Apple: “Sure thing”
China: “…and podcast apps”
Apple: “Can do boss!”
China: “…and also hand over all iCloud data for our citizens”
Apple: “I mean why wouldn’t we? Here you go!”
EU: “Allow alternate app stores, and do it fairly”
Apple: “Ahhh hell no! This is so unfair you guys are bullies! Malware! Privacy! We have standards! Unlike you we care about our users!”
Peergos protocol
GrapheneOS
AI6YR Ben
René Mayrhofer 
🇺🇦
epicenter.works
Tavi
Russell Ivanovic