this post was submitted on 03 Apr 2024

441 points (99.1% liked)

Technology

55744 readers

2755 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

441

Google fixes two Pixel zero-day flaws exploited by forensics firms. GrapheneOS discovered and reported these flaws. (www.bleepingcomputer.com)

submitted 3 months ago by ForgottenFlux@lemmy.world to c/technology@lemmy.world

20 comments fedilink hide all child comments

More Information: GrapheneOS Mastodon account

all 21 comments

sorted by: hot top controversial new old

[–] lordfarquaad@kbin.social 32 points 3 months ago

Exciting: https://grapheneos.social/@GrapheneOS/112204441311327128

In the near future, we'll be shipping a properly secure implementation of a duress PIN/password along with a properly secure panic wipe based on wiping without requiring a reboot. We also plan to make device admin API use our wipe-without-reboot approach until Android ships one.

[–] smnwcj@fedia.io 28 points 3 months ago (3 children)

love that i switched to graphene. I was hesitant because ages ago i bricked a phone with a random ROM, but boy have things changed.

installing was seriously easy, like in a pinch my elderly parents could probably do it. the result worries better than stock Android imo

Really strongly recommend checking it out if you have a supported devices.

[–] Raiderkev@lemmy.world 4 points 3 months ago (1 children)

I didn't brick mine, but got very close to it. Was able to run some command prompts to it while it was giving me a blank screen and managed to factory reset/ get it to where I wanted. Man was I worried I just turned my $1,000.00 phone into a paperweight. After that near miss, I gave up on rooting/ custom roms even though I enjoyed tinkering with them. Maybe I should give it another go.

[–] FiniteBanjo@lemmy.today 4 points 3 months ago

If you just want to play around you can get a Pixel 7a for $374 USD from store.google.com while it's on sale. You can pay in installments.

I don't really like Google as a company, or idea of changing phones often, but it's pretty cheap for a brand new smartphone, and buying from Google gives the option for having an unlocked bootloader unlike if you bought from a service provider's store.

[–] Case@lemmynsfw.com 2 points 3 months ago (1 children)

I need a slightly less secure walkthrough to allow, essentially, android auto and google maps to operate.

I did without for a while, and it wasn't pretty.

Lets just say I went from a sketchy hospital district to a very sketchy dead end in a neighborhood that had lookouts. Working nights, this was not a great time to drop in unannounced.

[–] Melvin_Ferd@lemmy.world 1 points 3 months ago

Only thing I hate is the messaging app sucks. I have "enter" key so I cannot make new lines in my messages.

[–] treadful@lemmy.zip 19 points 3 months ago (1 children)

The April 2024 security update for Pixel phones fixes 24 vulnerabilities, including CVE-2024-29740, a critical severity elevation of privilege flaw.

Too bad it doesn't expose which updates were made and which CVEs were patched. I guess it came in the "April 5" security update my phone has now...

[–] Corgisocks@programming.dev 11 points 3 months ago (1 children)

It constantly annoys me that it doesn't present a change log for system updates. It's just like here you go, install this, maybe this one has security updates, you'll never know. Doesn't even tell you what version it is installing.

[–] AzureRT@reddthat.com 1 points 3 months ago

That's why I like Samsung. They at least tell you what kind of update you're installing.

[–] anon987@lemmy.world 12 points 3 months ago

*Google fixes backdoor left in by Google for law enforcement.

Fixed that headline for ya, big guy.

[–] rxbudian@lemmy.ca 8 points 3 months ago (1 children)

Wish Graphene suports more than just Google Pixel

[–] chemicalwonka@discuss.tchncs.de 7 points 3 months ago

Some Samsung devices (Galaxy S series) have a proper hardware that met the requirements of GrapheneOS team but Samsung doesn't offer a proper support for other ROM's. Pixel devices are very similar to the old ADP (Android Dev Phone) in matter of software because they are the few one or even the only OEM that provides a smartphone with the ability to lock the bootloader after the installation of a different ROM

[–] muntedcrocodile@lemm.ee 5 points 3 months ago (1 children)

Maybe they should just ship grapheneos.

[–] sugar_in_your_tea@sh.itjust.works 8 points 3 months ago (1 children)

Nah, that would tick off a lot of people because there are compromises to GrapheneOS. I'm fine with those compromises, but others may not be.

[–] muntedcrocodile@lemm.ee 2 points 3 months ago (2 children)

Really? I've and literally zero problems or conpromises.

[–] glitch1985@lemmy.world 10 points 3 months ago (1 children)

Google pay and MyQ come to mind.

[–] muntedcrocodile@lemm.ee -4 points 3 months ago (1 children)

U can put ur card in the back of ur phone case works the same as google pay.

[–] sugar_in_your_tea@sh.itjust.works 8 points 3 months ago

How does that work with 5 cards?

[–] foxglove@feddit.de 6 points 3 months ago

Android Auto has been added very recently, IIRC. So that was missing for a long while

[–] iturnedintoanewt@lemm.ee 4 points 3 months ago

Would be great if they also countered Google's dark patterns in the notification bar toggles and revert back to the old working design. I'm not saying it's even close to the same priority as this. But you know... Google's decisions are downgrading the platform and the experience.