Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GrapheneOS fixes Android VPN leak Google refused to patch

cyberinsider.com

Post reply on HN
Print view View original

111–120 of 142 posts

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#111

Post by zb3 »

rationalist wrote: post #101
zb3 wrote: post #85

Earlier quoted context omitted.

Oh wait they released "Liberty Phone" - still low end(!), this time with absurdly high price.. You can get true linux phone 10x cheaper by buying something that supports PostmarketOS

Your post sounds like you're trying to spread FUD. Librem says the Liberty phone is the same, it just costs more because it is assembled in the U.S. for people, companies, or governments that don't want it intercepted and modified by a bad actor.

This might justify the price of Liberty Phone, but doesn't invalidate my claim that these phones are low-end by todays standards.

Why no hardware upgrade after 7 years?

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#112

Post by ranger_danger »

fsflover wrote: post #75
whatsupdog wrote: post #36

Earlier quoted context omitted.

We all agree. But what's the solution? We know 99% of the users don't care. So, the only pressure point is phone manufacturers. I don't have any power to influence anybody significant in this space. I feel helpless.

The truly independent solution is GNU/Linux. Sent from my Librem 5.

I don't think it's going to be a savior... the same things that make Android hard to modify can happen just as easily when GNU/Linux phones become popular.

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#113

Post by [deleted] »

1vuio0pswjnm7 wrote: post #56

"In its latest release, GrapheneOS says it has "disable[d] registerQuicConnectionClosePayload optimization to fix VPN leak," effectively neutralizing the attack vector on supported Pixel devices." "GrapheneOS responded by disabling the underlying optimization entirely in release 2026050400." GrapheneOS "fixed" the leak by disabling the optimisation Some HN commenters in the past have praised QUIC and downvoted commen…

[deleted]

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#115

Post by snapplebobapple »

DANmode wrote: post #31
snapplebobapple wrote: post #10

Earlier quoted context omitted.

First motorola grapheneos phone i am buying to get fully off the google pain train. Grapheneos tides me over until a real linux smart phone shows up or i die of old age. Now if home assistant could get thread network join*ng working without an android phone with a google account i could ve fully ris of those eh holes.

> real linux smart phone shows up What’s most glaringly missing, for you specifically, from the plethora of options available? It seems like plenty of options are getting 7/10 things right.

Have you tried any of them? The software is painful or the hardware they work on is painfully underpowered.

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#116

Post by snapplebobapple »

iamtedd wrote: post #15
snapplebobapple wrote: post #10

Earlier quoted context omitted.

First motorola grapheneos phone i am buying to get fully off the google pain train. Grapheneos tides me over until a real linux smart phone shows up or i die of old age. Now if home assistant could get thread network join*ng working without an android phone with a google account i could ve fully ris of those eh holes.

> Now if home assistant could get thread network join*ng working without an android phone with a google account There is already a way to do this. It's fiddly, but not by much. Once set up it's a much better experience, though. https://www.matteralpha.com/how-to/how-to-use-home-assistant...

It needs to work theough bluetooth proxy and be a button click, not massive pain like the articlec

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#117

Post by microtonal »

snapplebobapple wrote: post #115
DANmode wrote: post #31

Earlier quoted context omitted.

> real linux smart phone shows up What’s most glaringly missing, for you specifically, from the plethora of options available? It seems like plenty of options are getting 7/10 things right.

Have you tried any of them? The software is painful or the hardware they work on is painfully underpowered.

And typically security is very bad, no good sandboxing, MAC (through e.g. SELinux), etc. I know that doesn't matter to everyone, but in the context of a discussion about GrapheneOS it does.

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#118

Post by microtonal »

DANmode wrote: post #29
k4rli wrote: post #5

Earlier quoted context omitted.

Interestingly GrapheneOS being so good brings more money to Google as only Pixel phones are supported.

I’ve seen this repeated here, but: Google's Pixel hardware division likely operates at a loss - or breaks even. and even if every active HN user bought $100-$400 used Pixels from Swappa, meaningless money to them.

Yep, Pixels for them are entry points to Google One subscriptions, etc. The Pixel 9a is currently 350 Euro in my country, it has the same CPU/GPU (modem differs) that the expensive 9 Pro/Pro XL/Pro Fold had. Factoring in development costs, etc. at that price I cannot imagine it being more than break-even.

Also, even Pixel 9a has all the security functions of the flagship that many other Android phones do not have or are just getting, such as the Memory Tagging Extension (MTE), the Titan M2 security processor (no need to rely on TrustZone for secrets), etc.

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#119

Post by DANmode »

microtonal wrote: post #117
snapplebobapple wrote: post #115

Earlier quoted context omitted.

Have you tried any of them? The software is painful or the hardware they work on is painfully underpowered.

And typically security is very bad, no good sandboxing, MAC (through e.g. SELinux), etc. I know that doesn't matter to everyone, but in the context of a discussion about GrapheneOS it does.

You’re going to struggle with that with most distros.

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#120

Post by ranguna »

pyaamb wrote: post #87
Paradigm2020 wrote: post #11

Earlier quoted context omitted.

Ios does the same, only way around it is if you have an ?enterprise? licence (250+ devices) Mullvad and others reported on that one ages ago

a VPN enabled wifi router would suffice as a fallback tho right?

For the very specific case where you are connected to that router, yes.
Post reply on HN