Disk encryption vulnerabilities on Android devices

…broader context you're going to miss significant fundamentals. Qubes OS's encryption situation out of the box is lacking in numerous ways which some Qubes OS users attempt to manually address. Consider the rigor it would take one to replicate your config vs. the rigor it would take to buy a Pixel and install Graphene…

…tures with usability compromises are either opt-in or opt-out. Worth noting however is that usage of GOS is also seen as a signal in and of itself for the authorities that you may have something unsavory to hide GrapheneOS is far more widely used than most alternate mobile operating systems and there's a lack of basis…

…op software stack is going in the opposite direction from GrapheneOS. GrapheneOS doesn't exist to simply provide an alternative to mainstream operating systems but rather to offer much better privacy and security. We wouldn't be doing that if we were forking a desktop Linux environment and doing similar work for it.…

…nel, drivers and HALs in addition to the AOSP portion of userspace. Disk encryption doesn't truly work on most Android devices for the majority of users because they're missing Weaver throttling support in hardware so a random 6 digit PIN can be easily brute forced once an attacker gets control over the OS. Most users…

…far, far behind those of mobile operating systems (Android/iOS). ChromeOS, followed by macOS are the closest to mobile security but are still severely lacking. Windows is farther behind and desktop Linux might as well be minimum security. It’s not even an equivalent comparison as you’re comparing mobile OSes to ones…

>I've had people tell me that nobody should use anything but GrapheneOS and stop supporting alternatives to throw all support into that because the others are "less secure" Without having an kind of authoritative knowledge or experience on the topic, those people are wrong and please ignore them. The argument has…

…rrent technology is not the same as what was reasonable 30 years ago. Google chose to come up with a archaic way of distributing the sources involving someone manually going through a list and sharing Google Drive access. It's a deliberate way of making it painful. If they can't keep up with it and it gets delayed for…

…provides far better privacy and security than non-GrapheneOS options. Most other options have very poor privacy/security including lacking even basic privacy/security patches and protections. Similarly, our project and community regularly recommends using macOS for better privacy and security than either Windows or…

…ooking. All it takes is one supply chain or runtime security exploit. Software security is also extremely poor with a lack of comprehensive sandboxing and so on, I would just read the grapheneos accounts replies on here since they’re writing entire novels on this. I mean even GrapheneOS shows how relevant this is with…

…PI being banned by regulators but this is good enough for now. since GOS is missing vitally important features compared to other Android ROMs let alone "normal" Linux systems GrapheneOS has similar functionality to mainstream Android smartphones. We highly prioritize providing missing functionality not available…

…Specifically: they're all or nothing on app stores and Google. For some reason some of the key developers seem to constantly bash every "store" except Accrescent, ignoring the fact that Accresent is missing the key feature of telling you what you're even installing (which fails security 101: "you're only secure if…

…ways, you aren't 100% compatible, so my point stands. >> since GOS is missing vitally important features compared to other Android ROMs let alone "normal" Linux systems GrapheneOS has similar functionality to mainstream Android smartphones. We highly prioritize providing missing functionality not available through…

…he secure element along with the OS version for downgrade protection. It's enforced automatically so it's not as if people need to manually check the fingerprint each boot, but it does have value in protecting against tampering despite this. It's a feature we want to have on our own hardware too, although GrapheneOS…

…n providing updates for drivers, firmware, the Linux kernel and more. They miss a large portion of the monthly Android security bulletins which are a limited subset of the patches in the first place but then claim to provide the latest patch level despite many of the required patches being missing. /e/ has a…