Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GrapheneOS fixes Android VPN leak Google refused to patch

cyberinsider.com

Post reply on HN
Print view View original

61–70 of 142 posts

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#61

Post by subscribed »

NewJazz wrote: post #52
jona-f wrote: post #51

I bought a used Pixel 6 for cheap to try out grapheneos. Can't say I like it. UX of lineageos is much better. There is a weird russian doll kind of situation with the package managers going on. There is one builtin "App Store" with only a few basis programs, one of which is another package manager, accrescent, which offers a few more apps, but still not comprehensive at all, so another package manager is needed for w…

I'm really glad calyxos is starting up again. Grapheneos has a lot of cool technical implementation but there are a lot of things that Calyx seems to do in a simpler, more vanilla Android manner.

CalyxOS claims releases are paused[1] and the best you can get is Android 15. How recent are security patches you're getting?

Can you even lock the bootloader on your device? [2]

[1] https://calyxos.org/

[2] calyxos.org/lock

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#62

Post by realjame »

microtonal wrote: post #59
neilv wrote: post #45

Earlier quoted context omitted.

I answered this in another thread: https://news.ycombinator.com/item?id=48076522 Basically, buy a Pixel 6 or later (I suggest Pixel 7 or later, since Pixel 6 will be minimal support soon) that you are sure has an unlockable bootloader . The majority you'll see don't have an unlockable bootloader. Which mostly means either buy direct from Google, or buy one on eBay that already has GrapheneOS/CalyxOS/LineageOS on it o…

I'd say buy Pixel 8 or later, Pixel 8 is the first version with support for MTE, which is a significant security improvement.

Pixel 8 is also the first generation of Pixels to be officially supported, both security and OS updates, for 7 years (until 2030)

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#63

Post by garciansmith »

neilv wrote: post #45
fg137 wrote: post #39

Side question: what's a good way of getting a GrapheneOS phone? I have been interested in using GrapheneOS but hesitant about actually getting a Pixel phone. Used phone prices are usually >$300 even for "a" series unless I go back several generations. Whether the device bootloader can be unlocked is also a question. I am definitely not ready to spend $449 on a new Pixel 10a.

I answered this in another thread: https://news.ycombinator.com/item?id=48076522 Basically, buy a Pixel 6 or later (I suggest Pixel 7 or later, since Pixel 6 will be minimal support soon) that you are sure has an unlockable bootloader . The majority you'll see don't have an unlockable bootloader. Which mostly means either buy direct from Google, or buy one on eBay that already has GrapheneOS/CalyxOS/LineageOS on it o…

If you have time and the ebay listing is unclear, I would definitely ask. That way if they say you can unlock the boatloader and in reality you can't, you can return it to them as an item "not as described" at no cost.

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#67

Post by subscribed »

1vuio0pswjnm7 wrote: post #56

"In its latest release, GrapheneOS says it has "disable[d] registerQuicConnectionClosePayload optimization to fix VPN leak," effectively neutralizing the attack vector on supported Pixel devices." "GrapheneOS responded by disabling the underlying optimization entirely in release 2026050400." GrapheneOS "fixed" the leak by disabling the optimisation Some HN commenters in the past have praised QUIC and downvoted commen…

This is the path for the graceful closing on the QUIC connection via (IMO) illegitimate/exploitative call, GOS is not disabling QUIC as a whole.

QUIC as it is is brilliant, and this is not a feature of the protocol, it's a feature of the surveillance OS (Google's Android).

Other than that I checked on the OS before the latest release, and it didn't work anyway.

Re: GrapheneOS fixes Android VPN leak Google refused to patch

#70

Post by thrownthatway »

izacus wrote: post #47
mystifyingpoi wrote: post #43

Earlier quoted context omitted.

Don't buy Pixel 10a, 9a is almost exactly the same thing and still sold new.

10a will get longer support, so why not (unless 9a is significantly cheaper)?

Isn’t part of the point of wanting GrapheneOS is that the official support periods don’t matter?
Post reply on HN