Android 17 is the first since 3.x to add new APIs without releasing to the AOSP (grapheneos.social)

814 points by theanonymousone 14 hours ago

wps 13 hours ago

The amount of roadblocks Google is putting up for GrapheneOS is just ridiculous. None of their decisions make any sense, from the delayed source patches upstream, to the embargos, attestation issues, etc. Google simply regrets android being open source.

godelski 12 hours ago

I hope people remember this when advocating for chromium. Just because it is open source doesn't mean they don't control it. We need to start the long process of hard forking now or turn to alternatives like Firefox as a new foundation.

  > Google simply regrets android being open source.
Android wouldn't be what it is if it wasn't open source. With all the work from outside Google. The same is true chrome.

But they won't learn that on their own. They are breaking the deals. So we move. We force their hand

saghm 11 hours ago

> But they won't learn that on their own

I think they're fully aware of this. They just don't care, because the goal of "get market share super high" has been reached, so now they have no need for it to continue being open.

I don't disagree about what that means we should do; I just don't think we should assume they're being naive here. It's like writing a program to play chess; you should select your move assuming the opponent is smart and will make the optimal counterplay rather than assuming weakness, and then if they end up being less smart than that, you're still in a good place.

godelski 6 hours ago

lokar 8 hours ago

echelon 6 hours ago

StilesCrisis 12 hours ago

Hard forking doesn't solve the problem of closed source.

If the goal of a hard fork is "the community will invest equal resources that Google does today" then you wildly underestimate how many engineers work on Chrome.

seb1204 7 hours ago

MiroslavPokorny 4 hours ago

floxy 7 hours ago

Forgeties79 11 hours ago

ocdtrekkie 8 hours ago

redeeman 10 hours ago

arcanemachiner 11 hours ago

> Android wouldn't be what it is if it wasn't open source.

Yes, and now that they've achieved market saturation, it's time to pull up the ladder.

Thanks for all the free work, suckers!

spydum 8 hours ago

dmacedo an hour ago

I would say its even more proactive than support other projects. It is becoming clearer that every single technically competent member of the friends or family is now required to educate and proactively change devices.

Remember this upcoming Christmas that the ye oldie tradition of fixing PCs clearing awful exploiting phone apps (and cancelling subscriptions) should also include the "fix my browser" again, instead of Internet Explorer being replaced by Chrome, our collective duties is to replace Chrome with Firefox, plus its useful extensions to block ads and improve the web experience removing trackers etc.

Your call to arms today is to ensure all your tech colleagues join the movement, and then we can see Google's management views on "market growth"; they forget they made Chrome, we sold it - its our fault we forgot the "infinite growth of shareholder value"...

suprjami 5 hours ago

> or turn to alternatives like Firefox

Implying I ever left Firefox in the first place.

cecexacjrgec 11 hours ago

> or turn to alternatives like Firefox as a new foundation.

With the way Firefox is heading, that might not be the best idea. Nowadays Mozilla seem more focused on riding the AI-hype wave than actually making an excellent browser people want to actually use.

bryanlarsen 10 hours ago

josephg 10 hours ago

II2II 11 hours ago

jdjfnfjdjjeh 8 hours ago

stuaxo 11 hours ago

seb1204 7 hours ago

p0w3n3d 2 hours ago

  So we move. We force their hand
How?

xmprt 7 hours ago

Google is starting to turn into early 2000s / late 90s Oracle.

awakeasleep 11 hours ago

The “we” in your post is interesting to me. Who do you mean? Individuals?

throwaway27448 5 hours ago

> advocating for chromium.

Advocating for chromium to do what?

nomel 12 hours ago

> So we move. We force their hand

What do you have in mind?

PaulCarrack 12 hours ago

saghm 11 hours ago

JumpCrisscross 12 hours ago

shevy-java 12 hours ago

charcircuit 8 hours ago

There are already several different forks of Chromium and they are able to make their own decisions on points where they want to differentiate from upstream or other browsers in the market.

DANmode 5 hours ago

> Just because it is open source doesn't mean they don't control it

Just point out how that hurts security or privacy and we’re with you!

rs_rs_rs_rs_rs 2 hours ago

Who's we?

the_real_cher 12 hours ago

LOL "start" using Firefox. I've been using Firefox for half a decade. There's zero I miss about Chrome.

weikju 9 hours ago

drnick1 11 hours ago

OtomotO 12 hours ago

Henchman21 8 hours ago

Ahem. Ladybird.

jauntywundrkind 11 hours ago

It's sad we lost ChromeOS. They got Linux, they got open source, they didn't make so so so many unforced errors.

Now that the chromebooks are also Android, it feels like the slide is only going to grow ever more fearsome.

zx8080 21 minutes ago

  > Google simply regrets android being open source.
No, they are benefitting from it! They gained some trust and removed competition from the horizon. Now they are locking the platform down to do what their business is about: displaying ads.

Retr0id 13 hours ago

Google is also seriously dropping the ball in terms of security. The CVE-2026-43499 root LPE (aka ghostlock) is still unpatched across all Pixel devices, on the latest """security""" update, despite weaponized exploits being public for months.

grapheneos 12 hours ago

Pixels used to have far better updates than any other Android devices but they stopped improving it years ago. It should have kept improving because it's not at all adequate. They need to be able to release OS updates more than once per month and it shouldn't take months for patches to make it into the OS. It currently takes them at least around 2 months to get even the most urgent patches into the OS. They could fix emergency calls being broken if the patch was made around 3 weeks before an OS release, but that's about as quick as they can go. It's not at all adequate for security and is a complete joke compared to Chromium's release cycle. They can get an emergency Chrome update released within a couple days. They should at least be able to do it for the Pixel OS in a week.

GrapheneOS is often around 4 to 6 months ahead on merging Linux kernel LTS releases. We used to handle this ourselves but switched to the Android GKI LTS branch maintained by Greg KH. Unfortunately, it was often struggling to keep up even before the absolutely massive increase in Linux kernel security patches this year. AI models have rapidly accelerated vulnerability discovery and it's an ongoing crisis for the Linux kernel. We want to be on the latest LTS revision within days and want to be using the latest LTS branch within months of it being released. We're not at all happy with how Android is handling things and plan to fix that ourselves. We'll get things back to how they should be.

We also ship all the AOSP userspace patches months before Pixels due to shipping all of the security preview patches as soon as possible. There are sometimes minor regressions but we find and fix them ourselves downstream. The security preview system has a terrible design especially considering that frontier AI models can reverse engineer the patches. There should at least only be a source embargo for around 24 to 72 hours rather than pretending as if it can work with the patches available 2 to 6 months in advance.

cyberax 12 hours ago

jeroenhd 13 hours ago

I just ran https://github.com/CakesTwix/Android-CVE-2026-43499 on my Pixel 9 Pro and it seems to have been patched. I did get a system update not long ago, though.

Retr0id 13 hours ago

lenerdenator 13 hours ago

There's "dropping the ball" and then there's "not reaching out your glove to catch it to begin with".

It'd be interesting to see which one is happening here.

7734128 13 hours ago

It's not a regret. Android would never have been popular in the first place if it had not been open source. If phone makers had been able to anticipate how much the demons at Google would be able to lock down the Android then they would never had used the OS back in ~2009.

thevillagechief 13 hours ago

I don't think this is actually true. Phone makers seem happy to have the platform locked down even further. They're putting even more roadblocks, as evidenced by most of them making bootloaders unlockable.

ardacinar 13 hours ago

alightsoul 12 hours ago

tosti 12 hours ago

lenerdenator 13 hours ago

mrpippy 13 hours ago

That’s possible (never underestimate the bad decision-making of phone makers), but what would they have done instead? Windows Mobile 6 was the only licensable alternative, but it was a known quantity and obviously a generation behind Android and iOS.

edent 12 hours ago

SoftTalker 13 hours ago

pmlnr 13 hours ago

LTL_FTC 13 hours ago

thomasahle 13 hours ago

cyberax 12 hours ago

sublinear 13 hours ago

No, everyone knew what they were getting into with Android. It wasn't taken lightly by the power users of the time either. I still have a phone somewhere with Ubuntu Touch on it. I really was hoping that would be my phone OS by now. Not that Canonical isn't capable of similar, but that it would bring about acceptance of Linux phones.

I think we're all more surprised by how long it took for Google to make these bad moves. For a period of time in the 2010s we actually started thinking maybe Google was alright.

reedciccio 13 hours ago

alightsoul 12 hours ago

Phone manufacturers had Symbian which became open source

ikiris 5 hours ago

It didn't become a major regret really until the antitrust treated android as a competitive space and iphone separate. That decision led to a lot of wtf and tactics changing. Because the platform had been made open it was then an issue of tying vs if it had just been closed like apple there wouldn't have been an issue was a pretty stupid take if you ever want to see an open platform again.

Telaneo 7 hours ago

I'm convinced Android being open source is just an accident of history. It's been somewhat useful for Google to be able to ride on that goodwill, but they're not actually invested in open source beyond the ways it directly benefits them (or at least they haven't been in the last 10 years). Thus they're happy to throw the baby out with the bathwater if they believe they need the bathtub for anything that will earn them 0.1 cent more than that baby would.

Ritewut 7 hours ago

It's like PC parts being modular. IBMs greatest mistake and the industry wants to make sure it never happens again.

NetMageSCW an hour ago

ikiris 5 hours ago

Its more a reflection of the vastly different internal culture of the time (and different executive leadership).

When Patrick Pichette left and Sundar became CEO both led to massive culture shifts.

binkHN 4 hours ago

They want to be like Apple here and lock things down. Remember SMS? The ubiquitous text messaging protocol that had an API that developers could access? Now, the latest standard, RCS, is locked down with no API and behaves just like iMessage. Ring any bells?

surajrmal 5 hours ago

There was a split world for a long time even before the more recent changes because of the need to hide secret new features or products from the general public. It was always a tricky arrangement. They just decided one day that there wasn't a lot of folks contributing that lacked access to the private repos, so they might as well just switch all development to occur in that place. Honestly, it's somewhat rationale. If there was a significant number of folks contributing to Android without such access I'm sure that wouldn't have happened. We didn't lose as much as folks think we did given the code drops from the private repos still happened even previously.

monomania 13 hours ago

There's a non-zero chance that three-letter agencies are lobbying for at least some of this.

jasonfarnon 10 hours ago

Yeah. Which doesn't mean Google isn't happy to comply for its own profit motivations.

zx8080 an hour ago

> None of their decisions make any sense ..

What? Google is advertisement business. Not a software house. They sell ads. It all makes sense to build a walled garden. They are effectively a monopoly for half of the personal devices _in the world_. And they _will_ return their investments into the opensource. By locking Android and Chrome and showing ads to everyone.

Like the old days shitty TV, full of ads.

yndoendo 12 hours ago

It makes perfect sense when you apply the Friedman doctrine to their actions. [0]

Google is a lawn mower, stop anthropologizing them. This goes the same with Apple, Microsoft, Meta, Amazon, ...

[0] https://en.wikipedia.org/wiki/Friedman_doctrine

mikeweiss 11 hours ago

Agree. The only time a company does something in the public interest is when it believes doing so would ultimately benefit the shareholders. Everything is a business decision.

sporkland 3 hours ago

As an outsider in a hyper competitive commercial space like mobile os (apple, android) which part makes you think it's active obstruction and not just moving fast and trying to keep up, get ahead, etc and they want the open source side but it's a lower priority?

varenc 5 hours ago

> Google simply regrets android being open source.

Could Google backtrack on this if they wanted? If they suddenly decided to stop releasing public code updates, what would they be violating? I can guess: Anti-trust maybe. probable at least contractual commitments Or is there some stronger forcing function?

jeroenhd 13 hours ago

The thread states that Google is putting out patches that affect other Android vendors too.

They're not treating GrapheneOS very differently from other vendors, except that Graphene isn't relevant enough to sign a contract with because they don't make phones (or money, really).

Google should be putting out the code and patches like they used to, but the constant badgering of Google on this issue feels off. I don't see anyone complaining that Samsung isn't supporting their security-focused fork enough, or complain that Apple is delaying the bootloader unlock process by a day.

Despite their very worst, selfish intentions, Google is the very best vendor of commercial open source software. While Google's open source project collapses, there's plenty of space for other vendors to step in.

We should bemoan Google's fall from grace, but only because they're on the way to becoming just as bad as every vendor but Librem if they keep this up another decade.

microtonal 3 hours ago

Librem seems as bad as a typical Android OEM. Maybe I'm looking at the wrong repository, but the barely seem to update driver firmware?

https://source.puri.sm/Librem5/fw/firmware-librem5-nonfree

https://source.puri.sm/Librem5/arm-trusted-firmware

I hope I'm looking in the wrong place.

rkagerer 10 hours ago

Yeah I have trouble accepting it's pure coincidence this occurs just as GrapheneOS is starting to gain some noticeable traction.

mitxela 8 hours ago

When you realize that keeping people on proprietary mobile OSes is a matter of national security it makes more sense. The USA spares no expense for national security.

alightsoul 13 hours ago

It's a net loss. Less data and in their view makes development harder.

dimaaan 12 hours ago

And don't forget about Manifest V2/uBlock Origin removal!

_blk 8 hours ago

It's not that it doesn't make sense, you just said it, they regret - well maybe not regret since they'd never made it without, but they now want to reverse a decision they feel needs to be overhauled. I always thought they'll replace Linux with Fuchsia but that hasn't happened and it's not like they couldn't have done it.

karlgkk 8 hours ago

> None of their decisions make any sense

It only doesn’t make sense if you’re assuming conspiracy.

It makes a lot more sense if you assume they just don’t give a shit.

bossyTeacher 10 hours ago

> None of their decisions make any sense,

Of course, it does. Google is no longer afraid to spit on open source. People happy to use Chromium features better remember this. You are renting everything and your landlord will soon come demanding it back.

taneq 7 hours ago

If someone’s (or some company’s) decisions don’t make sense to you, you don’t understand their motivations.

curiousgal 12 hours ago

> Google

Can we just stop saying "Google" as if it's same faceless org? No, it's not Google, one or two asshole execs are behind this policy.

SahAssar 9 hours ago

The org takes responsibility. If you want to additionally name & blame an exec feel free.

bebeirjd848r 13 hours ago

GrapheneOS does not even register on Google scale! It does not even manufacture its own devices!

Bigger problem is HarmonyOS and similar devices, compatible with Android. Opensource threat from china!

And no NSA backdoors or honeypots!

subscribed 13 hours ago

If the hardware security is on par with iPhone / pixel 8+, then sure.

Otherwise there's no need for NSA backdoors (as Cellebrite matrix shows) :)

mitxela 8 hours ago

GrapheneOS does, however, register on the FBI's radar because a lot of criminals know to use it, and the FBI can't crack it.

ChickeNES 13 hours ago

Sure, let's just trade the NSA for the CCP, no issues there.

anonym29 12 hours ago

bri3d 12 hours ago

So, the real thing that's happening here is:

* Google drop "real" Android source-code updates to OEMs _and_ the public every half.

* But they ship four Pixel updates, including documentation + SDKs.

* Now they added new APIs in a Pixel-only update.

* Google also drop security update backports to "trusted" OEMs monthly (which GrapheneOS have had access to for years).

So, there are now Pixel-exclusive app features on the Pixel SDK version which isn't available to OEMs - but, it's highly unlikely any app developer would actually depend on these new APIs, since Pixel marketshare is tiny to begin with. This in essence just makes Pixels a weird beta-testing device for what will come out a quarter later to "normal" devices, which is sort of an odd business decision, but also a weird thing to get really mad about, in my opinion (I do see what GrapheneOS are trying to do, with having OEMs saber-rattle about not getting features on the same cadence as Pixels, it just doesn't resonate very loudly for me).

However, the API headline seems to bury a deeper lede; in the thread, GrapheneOS also claim that the quarterly Pixel releases contain security content which is not appearing in the monthly backports. This is quite bad and very sloppy if true, since the Pixel releases can easily be patch-diffed and exploits backed out of them. I'd be interested in seeing this enumerated in more depth.

mdwrigh2 11 hours ago

> * Google drop "real" Android source-code updates to OEMs _and_ the public every half.

All of the major OEM shave access to the internal source with a _very_ small delay. OEMs don't ship these intermediate releases because they choose not to, not because Google witholds the source for them.

bri3d 10 hours ago

Oh! I had thought they stopped at the same time they closed off AOSP commits - that makes this entire rabble-rousing effort _exceptionally_ silly, then; I can't see the angle GrapheneOS are trying to push at all in that case (like, I get their side of the _concern_, but "Google are shipping features to Pixels that you don't get" becomes... quite a poor argument indeed in that scenario).

microtonal 3 hours ago

fluidcruft 12 hours ago

I don't really see what the Pixel-only early API releases achieve except for allowing developers to work on Pixels ahead of time, but Pixels are such a small sliver of the universe that it basically just gives Google a leg up, I would assume. And if you're on Graphene why would you care about Google's beta edge apps?

grapheneos 12 hours ago

Exclusive access to QPR1 and QPR3 releases gives Pixels an unfair advantage over other Android OEMs. They get an extra 2 major updates per year. Introducing new APIs for third party app developers as part of these updates means third party apps will now run best on the Pixel OS. Google apps already run best on the Pixel OS due to many exclusive features. It's Google's standard overall approach to propping up parts of their business with their monopolies in other markets. It's not legal.

fluidcruft 11 hours ago

teekert 11 hours ago

The rattling is because of the security patches of course.

publlus_enigma 9 hours ago

As someone who went through similar challenges with Google making it impossibly hard for BlackBerry to provide an Android runtime on BBOS10, and now running GrapheneOS, I trust Google exactly zero to do the right thing by any open source project it stewards. Combined with their other practices, and lack of ongoing support for their commercial offerings, means that my perception of them is irreparably damaged and I minimise my usage of their products as much as practicably possible.

largbae 13 hours ago

Alright AI maximalists, what's the estimated token budget to remove the Google dependency?

GrapheneOS has the bootable AOSP and will have Google-alternative device support.

We probably need an equivalent to Play Services, app signing/porting/publishing tools.

With these in hand could we talk Valve into providing the scalable alternative to the play store?

aesh2Xa1 12 hours ago

GrapheneOS accepts donations and, to my knowledge, they spend it in hiring full time engineers.

They have replacement portions for Play Services already (attestation, an app store, and location), but it'd be interesting if they also offered something for push notifications.

If you have it to give you can spend your budget on a donation and fund the effort directly.

ninjasmosa 9 hours ago

I believe GrapheneOS talked about hosting their own unifiedpush server and baking it into the OS not long ago

nextaccountic 6 hours ago

The trouble is that banking apps will not work if you degoogle your phone. GrapheneOS was an attempt to make this sort of thing work, in a phone OS more secure than stock Android

But to be honest, many banking apps randomly stop working with GrapheneOS anyway. So if you see this...

https://privsec.dev/posts/android/banking-applications-compa...

https://github.com/PrivSec-dev/banking-apps-compat-report

And check the issues, it's unpredictable whether a bank will continue to work with GrapheneOS

So.. if you accept GrapheneOS might not be reliable for this use case, and decide have two phones (one just for banking stuff, another for.. using), then degoogling is fine.

Only thing is that the banking device probably needs to be a phone (or tablet I guess), I don't think you can emulate a real device good enough for it to work on something like Waydroid

gonight 3 hours ago

My bank can support my phone or accept that I'm going to come waste their time in person, I'm not backing down here.

alightsoul 12 hours ago

The token budget isn't to remove Google it's to create drivers for individual phone hardware, which phone and chip manufacturers keep closed source. Also it would be used to find exploits to unlock permanently locked bootloaders

MrDrMcCoy 9 hours ago

GrapheneOS won't be interested in other hardware support, since the only devices that meet their hardware security standards are Pixels and the upcoming Motorola phone.

crossroadsguy 6 hours ago

The answer to this is - the real world comes knocking. Govt, banking, investment, grocery, transport, even some mainstream social/communication apps, all stop working - yeah, kinda cold turkey. And if your, or someone else's, answer to them is: ".. well then don't use those apps.. or maybe in mobile or desktop browser.. " (this is usually the tone on those "privacy" guide forums), then yeah it will work and can be done in hours theoretically, or days max :)

the_real_cher 12 hours ago

What's the token budget to build a new phone OS?

z3ratul163071 12 hours ago

exactly

cecexacjrgec 11 hours ago

If only Graphene had a better marketing team. It pains me to say this but it is the absolute truth: the public does not know Graphene and does not care about Graphene. Even it’s name is absolutely awful. This is like the Linux distro hell: “you should use BingaBoingoKonohaOS_v34 or Peppermint_Cinn4monR0ll with the OutOfThisWorld DE, but steer clear of the Pancake package manager, use openMsPacMan with GrassFaceWhazzit frontend instead.” How is anyone (as in not us, the tech nerds) supposed to reason about this?

Things will keep as is for as long as they keep making these OSs FOR the tech nerds.

Downvote me all you want. You know it’s true. An OS made for nerds and by nerds will never reach mainstream and will not, ever, move the needle anywhere. Tech is no longer a hobbyist’s game.

jraph 9 hours ago

What's particularly bad about the names of Graphene, Mint and Cinnamon? Especially compared to Android and iOS!!

cecexacjrgec 43 minutes ago

mitxela 8 hours ago

It's the OS every drug dealer uses and the government can't break it. In privacy circles you can't get better marketing than that.

cecexacjrgec 30 minutes ago

IshKebab 12 hours ago

A lot. But I don't think you can do it with just tokens. Android without the Play store and Google Play Services is just not very useful (in the West anyway).

mitxela 8 hours ago

Which is why Grapheme runs them in a sandbox. You can too.

throe939r 12 hours ago

Buy HarmonyOS device. No google jumk, android compatible os, fdroid works, years of security updates from maker, and 40% lower price.

As a personal device it works pretty well. For ssh terminal and reading markdown, it has by far best display.

zb3 12 hours ago

HarmonyOS kernel (HongMeng) is not only closed source but also encrypted. Those devices do not allow you to unlock the bootloader or install apps not signed by them (albeit I don't know how that works for emulator apps, a signed Android emulator could possibly allow arbitrary apks).

Huawei made a big mistake by not fully open sourcing HarmonyOS, you can't flash OpenHarmony so it doesn't count.

fwip 12 hours ago

That's Huawei's Android fork, right? Is it available on devices outside of China? I'm not seeing an obvious place to buy a device running it.

palata 12 hours ago

colordrops 12 hours ago

LOL an OS controlled by the Chinese government?

largbae 11 hours ago

hacker_homie 5 hours ago

I'm so glad we stopped microsoft from shipping a browser with their OS in the 90s, <sarcasm/>.

Regulate them! that is the only way.

Their should be a path for an AOSP build to be just as privileged as a google signed build.

sixothree 3 hours ago

They just walked away from an antitrust case with what can only be considered a huge win for them. I don't think regulating them is going to happen any time soon.

Ajedi32 13 hours ago

Important details further down: https://grapheneos.social/@GrapheneOS/117282129725629495

So it seems like the problem isn't that the new API is Pixel exclusive, but that the first and third quarterly release patches each year are Pixel exclusive?

Insimwytim 13 hours ago

  No, these are standard Android APIs included since Android 17 QPR1. These will be available through AOSP and other OEMs via Android 17 QPR2 in December 2026. It's currently exclusive to Pixels because it was released as part of Android 17 QPR1 since QPR1 and QPR3 releases are now Pixel exclusive since Android 16.
  This is simply the first time they've added APIs in a QPR1 or QPR3 release following no longer releasing QPR1 and QPR3 to AOSP after the release of Android 16.

grapheneos 13 hours ago

QPR1 and QPR3 are now Pixel exclusive since Android 16. That means the new APIs for app developers added in Android 17 QPR1 are Pixel exclusive until Android 17 QPR2. There hasn't been a case of new APIs for apps not being open source or not being available to every OEM since Android Honeycomb (3.x).

iAMkenough 12 hours ago

Seems like that's anti-competitive behavior, holding back security updates except for Google's own stock users.

https://grapheneos.social/@GrapheneOS/117282190165630051

> It would be interesting to know if Google's legal team is aware they're giving Pixels months of early access to new Android features and bug fixes including certain important security patches. Pixels being given this competitive edge over Google's OEM partners is very dubious.

barbazoo 13 hours ago

I'm on GrapheneOS and I will never go back to Google Android or iOS. The amount of control you get is just liberating. I hope Google doesn't crush them.

natterangell 13 hours ago

I get the sense Android is going the way of MacOS and Darwin. At some point Google will release something non-free end users experience as an absolutely integral part of OS, and it won't be possible to continue as an equivalent alternative. AOSP will still be free and underlying the whole thing, but slowly rot away as anything more than a code base.

teekert 13 hours ago

Installed GrapheneOS on my Pixel 10 yesterday, only used the stock rom to start the installer... Am feeling a little unconfortable due to this situation: [0]. Hope this gets better. Really feeling the dislike for Google on this one.

[0]: https://news.ycombinator.com/item?id=49741510

microtonal 12 hours ago

https://grapheneos.org/releases#2026091700

Fixes/updates the modem firmware.

teekert 12 hours ago

Ah that's great news! Do you know how to force an upgrade?

fph 12 hours ago

DrewADesign 8 hours ago

Look at that dev productivity go! The continually softening job market means c-suites everywhere care less than ever about their company’s image among developers. They’re surely thrilled to stop pretending to give a shit about anything beyond the next few quarters’ stock prices and their bonuses.

xnx 13 hours ago

The world needs a Steam Phone.

fschuett 3 minutes ago

Does the Brax Phone fit?

crossroadsguy 6 hours ago

It sure needs a large enough push from one of few big companies (with their explicit backing) that can bring businesses to support other app store(s). But imho that has to happen in a way that it doesn't create a need to write and publish apps in yet another language to yet another platform. Because if businesses have to do that as well that will be a good way to ensuring it becomes a DoA effort.

I've a feeling companies like Meta, Amazon, Steam are well placed to do this (esp. Meta and Steam). But not sure it will be helpful to them in any way, besides they'd want to ensure their own control and locks.

fsflover 13 hours ago

If you mean GNU/Linux phones, they already exist and can be used as daily drivers by technical people. Sent from my Librem 5.

xnx 13 hours ago

Yes, but a popular one that's usable by regular people and with a very wealthy organization behind it.

etatester 4 hours ago

TheBicPen 10 hours ago

fsflover 13 hours ago

lanfeust6 13 hours ago

hagbard_c 13 hours ago

They exist but they need more polish and support from device vendors to be a viable alternative to the duopoly. It should be just as easy for the average phone buyer to get and use a 'Linux phone' as it is to get an Android or fruit phone. This is more or less true now for Linux distributions no matter what the naysayers keep on repeating, the next step is to make it true for mobile devices. There will still be naysayers but... who cares? Let them listen to themselves in their echo chambers like they've been doing w.r.t. 'Linux on the desktop'.

MrDrMcCoy 9 hours ago

Wake me when they get modern hardware.

Velocifyer 13 hours ago

This is confirming my belies that Google is trying to block OEMs that don't pay them to be part of GMS, with the goal of eventually being the only android phone maker.

petcat 13 hours ago

Does anyone contribute to AOSP besides Google? Does Google actually accept any patches into "upstream" and ultimately into their own commercial distro?

nzeid 13 hours ago

The phrasing of your first question is ironic given GrapheneOS has upstreamed a ton of their security hardening.

You're probably asking if they're able contribute anymore?

izacus 13 hours ago

Can you link to patches or commits they upstteamed? I'm not aware Google ever accepted any.

PhilippGille 12 hours ago

justdeko 12 hours ago

quite a few manufacturers do, specifically in the automotive sphere and ofc samsung etc.

in terms of accepting, unless it's stuff like bugfixes to core mechanisms, not really.

m4rtink an hour ago

Android really going for the gutter recently.

cton 31 minutes ago

Out of curiosity, do closed APIs mean OEMs can’t fuck them up or at least limit how much they can?

exabrial 13 hours ago

Someone please make a linux-based, using proper cgroups/containers for app isolation, where programs are one of: regular JVM ByteCode, or WASM. APIs follow a JEP-style Process with multiple incubators until we got it right.

QuantumGood 9 hours ago

AOSP = "Android Open Source Project"

linzhangrun an hour ago

How surprising.

soleil-colza 4 hours ago

Feels like the "Pixel = reference implementation of AOSP" relationship is starting to erode.

TiredOfLife 3 hours ago

Pixel never was a reference aosp. You are thinkin of nexus.

Ritewut 7 hours ago

I would love to know what alternative phone OSes exist. I would happily throw money and my engineering weight behind a promising project.

jeroenhd 12 minutes ago

Sailfish has a Linux-based OS with some Android compatibility.

Ubuntu Touch has left behind UBPorts which uses Android's hardware layer to provide a usable UI on existing Android devices.

There's the Librem phone with an open source stack, though its hardware doesn't come close to a cheap Android phone these days.

There are projects like PostmarketOS which work to get mainline Linux on phones. From there, you can run Linux on phones through desktop environments such as Phosh and Plasma Mobile which are touch optimized.

FirefoxOS died but was forked into KaiOS, though the modern iteration of KaiOS is an Android fork.

Samsung has TizenOS but I don't think any phones run it anymore. It's probably the closest equivalent to Android in the way it has been developed.

If you want to throw money at something, Sailfish may be the project to keep an eye on. All the other volunteer-run operating systems are worth donating to, of course, but Sailfish is actually trying to be a real third option rather than an open source proof of concept or alternative for shitty vendors stopping updates.

rustcleaner 8 hours ago

Android is irrelevant to me, there is only GrapheneOS.

Go bankrupt, Alphabet!

IronWolve 13 hours ago

I'm going to guess that google is afraid of the age of AI, they should be, those API's will be reverse engineered pretty quick. Lots of bad actors will using AI.

We live in a time, if you want to build an android app, you easily can, but installing will be harder due to google concerns.

matheusmoreira 11 hours ago

I wonder how low Google will sink next time.

Respect for the GrapheneOS for pushing through regardless, even if they have to reverse engineer stuff. Can't wait to buy their phone.

dingaling 3 hours ago

> Can't wait to buy their phone.

Good phrasing. It's certainly not _your_ phone, you're just an untrusted user who is extended the privilege of using it.

zb3 11 hours ago

> I wonder how low Google will sink next time.

Oh, the possibilities are endless and they're just getting started. Besides stopping releases of AOSP completely they could also mandate that any "certified" Android device should not allow bootloader unlocking (albeit OEMs will disallow that anyway)..

vkaku 13 hours ago

Many developers will likely be developing at Android 16 APIs only. Will rely on Aptoide+AOSP exclusively. This is likely the timeline we'll see a decline in Play Store and Pixel usage.

DaSHacka 13 hours ago

You vastly overestimate how many people care (developers included) outside of FOSS and HN circles.

Nothing will happen, as it never does.

tiagod 13 hours ago

Pixel market share is and always has been absolutely tiny, and the people that care about this are a rounding error.

ironqcold 12 hours ago

Google is increasingly locking down Android. I wouldn't be surprised if they killed off AOSP entirely in a few years...

VCFundedGenYer 13 hours ago

Android has been so thoroughly disappointing through the years. Started as a great open free form alternative to iOS, to becoming the very thing it sought to combat.

fgonzag 12 hours ago

I had never considered using lineageos and the like, but honestly the writing is on the wall. Google is going straight into a closed AI device.

I'm going to start donating to a few free android distros I guess, I'm probably going to be trying them sooner rather than later, and without AOSP support the dev burden is going to be much higher, and it probably means they'll end up diverging and incompatible at some point (not in both directions, lineage will probably always have to have Android app support)

josteink 13 hours ago

If Android wants to be the inferior not-open-source mobile OS, why would I not just buy an iPhone instead then?

It’s closed too, sure, but at least it’s more consistent.

pimeys 13 hours ago

Android has free and open artificial pancreas that is still easy to install and keeps us with complex type 1 diabetes alive.

Google may just want to kill us and Apple don't even let this kind of software exist without massive hurdles...

subscribed 13 hours ago

Because it's much worse (for me).

However at this point, as a GrapheneOS user if I couldn't use it for any reason I'll go to iOS (even though I used it for a couple of years and I've been fed up).

mitxela 8 hours ago

Because it still allows installing apps with some hoops, and iOS doesn't allow it at all.

add-sub-mul-div 13 hours ago

Because (1) you'd be rewarding the entity that originated and normalized the loss of freedom that Google much later adopted, and (2) as Apple restricts more freedoms you'll still be able to enjoy them on Android for a few more years as Google remains (comparatively) more user friendly.

palata 12 hours ago

Google managing to get worse every day.

claudiojulio 12 hours ago

Forget Android. The future is Plasma Mobile.

mitxela 8 hours ago

All FOSS consumer operating systems suck. We only tolerate them because they are FOSS.

MrDrMcCoy 9 hours ago

I desperately want to use it, but it runs on precisely no decent hardware as far as I can tell. My attempts to get it working on the fxtec and furiphones failed miserably.

d3Xt3r 11 hours ago

Agreed. Linux is the future, fk Android. GrapheneOS should stop wasting their efforts on Android, when they could've contributed towards PostmarketOS or similar, or even made their own distro. Working on Android is a complete and utter waste of time and effort.

microtonal 3 hours ago

Yes, let's abandon a very mature OS that is still open source, has millions of apps, and billions of users by one one that was designed for desktops, with a security posture fitting the 90s, virtually no phone apps unless you emulate said very mature OS, and which will have all the same problems with remote attestation, etc. </s>

fithisux 5 hours ago

Google is a for profit company. It does what it needs to stay profitable. Are the actions of Google moral? No!

Governments are paid out to not intervene. They should have stepped in decades ago. They should have made Google to release source code and interoperate with public services. They already make profit from their services.

HumblyTossed 10 hours ago

GrapheneOS scares them.

dingaling 3 hours ago

There are about 3.9 billion Android phones currently in use globally. I don't think a niche fork with 0.00025 billion users will worry them.

jokoon 11 hours ago

I mean, even if android is/was open source, it was always fastidious to build a de-googled android image for a phone model.

Of course it's not great for their business model. Not to mention, no more trustworthy app distribution.

I don't see the EU really being able to forcing them to de-google android phones.

I am also curious how much those phones would cost, BTW, since the cost calculation to release such an OS would be a bit complicated.

izacus 2 hours ago

EU was very clear that closing down the OS (Apple) is how they avoid fines with their latest rulings. They punished Google for open sourcing the OS and left Apple get away free with explicit explanation that closed OS doesn't need to adhere to same rules.

So yeah, don't expect EU to defend you here.

shevy-java 12 hours ago

One can not simply trust Google. While I personally like the MIT licence more, I think it is time that the GPL or variants of it (Affero etc...) get used a lot more. It worked very well with the Linux kernel. Corporations keep on abusing this.

jauntywundrkind 10 hours ago

Worth reminding folks that the EU DMA Act is forcing Google to start unlocking some of their APIs, such as the AI services AI. Right now a bunch of the apis for digital assistants/chat stuff are kind of proprietary, and this is demanding interoperation. August 1, 2027 is the deadline for most of this (but open access to hotword listening capabilities is slated for Aug 1, 2028).

https://digital-markets-act.ec.europa.eu/developer-portal/in...

Side note, that API here is HID. USB HID is so cool. There's so much stuff in this spec! Chargers and batteries can both communicate all kinds of status, which, well, afaik no one does, there's all kinds of sensors. It's this ancient spec that has so much, and weirdly is just so far ahead of where we are. More HID on Android will be great. Wish they'd played with others to make this so though!

hagbard_c 13 hours ago

Fine, whatever but no Android 17-derived Google-free AOSP distribution for me if these APIs are in any way essential to the functioning of the device or required by one or more of the government/bank-mandated applications which are sometimes needed. If they are in any way related to some Google service I don't care since I don't use those anyway.

Onavo 13 hours ago

So...if you vibe code API shims Google can't sue your right? It would be clean room implementation by definition.

MrDrMcCoy 9 hours ago

Oracle enters the chat

dingdong2026 12 hours ago

Google is a cancer on humanity.

izacus 2 hours ago

Why do you so desperately want to use their software then?

This whole topic is basically people demanding that Google continues giving them their code for free for their operating system.

If it's really such a cancer, why whine and demand the continued work then?

kuschku 2 hours ago

That's always been the deal: they can build their OS on the work of many volunteers, and we in turn can build our projects on top of the OS.

Google is trying to take from the community potluck without giving anything back.

jeroenhd 24 minutes ago

mitxela 8 hours ago

Google is just one symptom of late stage capitalism.

fithisux 5 hours ago

100%

Capitalism is transforming to feudalism.

ahmd-sh 13 hours ago

i despise where Google is going with this. it's a duopoly in the smartphone OS space and we need (for lack of a better analogy, spare the technicals) open-source distros like we have with Linux on desktop.

Graphene is reaching that status for me every day and i'm looking forward to switching to it as my daily driver.

pojntfx 13 hours ago

GrapheneOS is pretty neat, https://postmarketos.org/ is also pretty damn polished out of the box these days. I'd argue the "mobile desktop Linux systems" are actually a bit more polished than Graphene, esp. when it comes to default apps (no AOSP abandonware dialer, contacts etc. apps to fight with, it's all just maintained, responsive GNOME/KDE apps)

spijdar 13 hours ago

I want to believe this, but it's hard for me to take this at face value. It's been about 4 years since I've run pmOS, so my experience IS very out of date, but I also have a hard time believing that the experience has radically changed in the meantime.

The short is that yes the GNOME/KDE apps do often look more impressive, but they suffer the same sort of malaise which seems to have infected Linux desktops sometime since Eternal September, and between the sporadic crashing and "this doesn't feel right", it's really hard for me to accept "It's more polished than AOSP!".

pmOS's installation page opening with a warning:

   Make sure you read state of postmarketOS before installing postmarketOS. 
Which leads to a page that opens with:

  The goal is to make postmarketOS usable for everyone, but we are not there yet. Usability and most importantly stability issues need to be worked out first. If you are looking for an OS that is as usable as iOS or Android, this project is currently not for you.
Does not do a lot to dissuade my skepticism. I know you said the apps specifically, but even there, it's like... I dunno.

MrDrMcCoy 9 hours ago

PMOS doesn't run with full support and performance on any decent hardware. Would love to be proven wrong.

cobertos 13 hours ago

I tried getting it to run on a Pixel 3a and struggled for hours, eventually gave up (albeit I tried running it with Wayland and Niri which seems less tried-and-true).

brnt 13 hours ago

fungi 7 hours ago

2nd vote for postmarket. have put it on an old tablet i pulled out of ewaste and it is excellent.

there is clearly no future for android for anyone wanting an open and spyware free platform. its time to invest out efforts elsewhere.

kenhwang 13 hours ago

I just wish Graphene had better support for non-Google hardware.

subscribed 13 hours ago

They can't due to the shortcomings of the hardware (why develop a hardened os to the grossly insecure hardware) or the vendor (no/slow updates, etc).

Anyone is free to fork, add the desired hardware support and flash.

(that's aside of some Moto flagships in 2027)

tcfhgj 8 hours ago

vkaku 13 hours ago

Those Razr phone updates need to start landing sooner ....

armadyl 13 hours ago

More like OEMs need to take security more seriously and add in the capable hardware and commit to firmware updates long term.

dessimus 13 hours ago

aftbit 13 hours ago

Graphene has been my daily driver for the past year or so. The only thing I miss is the ability to do contactless payments. Otherwise, it's been awesome. I don't run any games nor do I care about any of the AI features. YMMV.

edent 12 hours ago

Contactless payments do work on Graphene - but only with the Curve app. It also requires the card-holder to be from the UK or EU.

dlahoda 13 hours ago

for some people contactless payments are essential for their lifes

eppp 13 hours ago

austinthetaco 13 hours ago

i so desperately wish we were still in the days of manufacturers making their own OS. It's why I moved to iphone: when the hardware company makes the software and vice-versa the integration is much better and less error-prone/bloated. It never made sense to me for android to be shoehorned into thousands of devices, instead of a fork being made and for thorough OS rework to happen to support the device.

qlte 9 hours ago

That is definitely not how I remember the feature phone era. The OS was an afterthought seemingly whipped together a couple months before the device hit the shelves and nothing was ever consistent even across recent models from the same manufacturer.

Back then the primary goal was checkboxes for the carrier to advertise and UI/UX was a distant second priority at most. Sometimes an advertised feature would just flat out be unusable (such as MP3 players), but good luck waiting for any kind of update because by then those developers had already been reassigned to the next handset model they promised to carriers.

Also, Samsung extensively customizes their OneUI fork of Android, with its own UI look and feel that evolves independently from Android based on their own priorities. Plus Samsung's Android maintains hundreds of features that either don't exist at all on AOSP/Pixels or later get folded into mainline Android.

(Including the little known killer app suite "Good Lock" available on Samsung's Galaxy store which gives power users an almost obscene amount of additional niche options and customizations that would give UX minimalist designers at Google or Apple a heart attack)

But despite how different Pixel vs. OneUI look and feel, I can use the exact same apps whether on a Pixel or Galaxy or $100 trash phone. Interoperability is very easy to take for granted and Android app ecosystem is (still) paradise compared to the lowest common denominator J2ME "app" era of the 2000s.

b112 13 hours ago

If Google doesn't smarten up, it will no longer be in control of Android.

Oracle was a mighty powerhouse when it bought MySQL, StarOffice, and more. It lost defacto control of all of them, due to its stupidity. In the world of open source, the tighter you hold on, the less likely you'll retain control.

And yet, here we are, with Google playing games.

Google, a note: there are far more relying upon Android than you, and now there are forced alternative stores in the mix. If Samsung and everyone else said "sorry Google', or even a large majority, you're out. Gone. Nada.

They can now fork, and force old Android to have their new fancy pants 'Play' store too.

Google is also getting more and more pushy with Chrome. What if everyone depending upon that backend, shrugs and says "Sorry Google, we're hard-forking Chrome and we'll all maintain it".

murderfs 13 hours ago

> If Samsung and everyone else said "sorry Google', or even a large majority, you're out. Gone. Nada.

The OEMs are incapable of writing a competent operating system, and don't particularly care to.

> Google is also getting more and more pushy with Chrome. What if everyone depending upon that backend, shrugs and says "Sorry Google, we're hard-forking Chrome and we'll all maintain it".

With what maintainers?

https://chrome-commit-tracker.arthursonzogni.com/organizatio...

anonzzzies 13 hours ago

> Oracle was a mighty powerhouse

It definitly still is. We run Postgres when we host our banking / financial stuff, but when we talk with banks and say that, they demand Oracle not that 'open source amateur stuff'. We have a version of our software for Oracle (and MSSQL) as well so no biggy, but still, we always try if we know it's not a complete immediate kill (which it will be if we put it in our documentation as only option). Oracle is still everywhere at the big guys.

LooseMarmoset 12 hours ago

mrlonglong 13 hours ago

cyberax 12 hours ago

qlte 9 hours ago

Google and Samsung have a closer relationship than ever these days, with cross-branded Google features even featured in advertisements for the last couple Galaxy models which would have been unthinkable back in 2012 or so.

They have their private own agreements with Google to secure whatever access they need to maintain their OneUI fork and are not the one making any public complaints. Samsung did have a love/hate relationship with Google that was openly simmering with resentment during the early years of Android but those days are long past.

Samsung already includes their own Galaxy store alongside the Play Store on all their devices, and have for 10+ years. But during that time have actually moved the opposite direction from your hypothetical fork scenario and both companies clearly view their current relationship as mutually beneficial.

Even though GrapheneOS and Samsung both maintain their own Android fork their views on AOSP/Google are not aligned.

wvenable 9 hours ago

I don't think so. Google's customers are phone OEMs and as long as they are happy, things will continue as is. The precedents here are Microsoft with Windows and maybe Apple with iOS.

Anything Oracle doesn't have much relevance. They were not really interested in growing any marketshare of those products for anyone.

tredre3 13 hours ago

> it will no longer be in control of Android

Who will step up to maintain it? Keep in mind that it has to be somebody that every other OEM trust. In other words it would likely have to be an alliance of manufacturers. And they'd inevitably treat OEMs outside the alliance poorly and we'd be back to the current situation, but worse.

linuxftw 13 hours ago

Google's Android customers are phone OEMs. The major ones seem to like how things are going. Until Samsung and whomever start the OpenHandset Foundation or some such and fork Android, there's never going to be the Mariadb of Android.

charcircuit 8 hours ago

Thank god that AI is progressing well enough that agents can figure out most of the changes and do the reverse engineering to get this stuff, but it's introducing a lot of inefficiency to the ecosystem that doesn't change the final outcome.

escanor 4 hours ago

I don't buy into the "good guy" narrative associated with GrapheneOS. The complaint is valid, but the solution isn't to keep using AOSP. GrapheneOS project, for all its merits, limits users' freedom by forcing them to install Google services if they want to use the most common apps (banking apps in Europe, government apps). They absolutely refuse to support microG. That's their choice, but in my opinion, they aren't "good guys." They have other, shady (imo), interests. Let's stop supporting AOSP and Google's proprietary services.

chrismartin 4 hours ago

Which "other, shady (imo)" interests? This feels like innuendo. Just say what you think actually motivates them.

escanor 2 hours ago

That's just my perception, therefore "imo". I tried GOS, I've read the forum (about microG, F-Droid) and that's what I've felt: something shady. It is most likely just me, so I stay away from the project. I just wanted to say that people should take a more critical stance on these issues, and not follow GrapheneOS point of view unconditionally.