Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped (discuss.grapheneos.org)

383 points by finnlab 9 hours ago

microtonal 8 hours ago

As others have said, this is not the most recent status update (it depends on future Google changes in QPR1 or QPR2).

The much more interesting recent news IMO is that Google is not allowing (non-Samsung) OEMs to sell devices with GrapheneOS:

https://news.ycombinator.com/item?id=49946698

See the last paragraph.

For example, non-Samsung Android OEMs aren't allowed to directly sell devices with GrapheneOS and Google will only permit it within a quota. It can and is being worked around and there will be devices sold with GrapheneOS as the stock OS without Google restricting how many can be sold.

My guess is that the workaround is that Motorola sells them with Google-certified Android. A third-party (non-OEM) buys them in bulk and preinstalls GrapheneOS.

But this is really end-90s/begin-00s Microsoft levels of anti-competitiveness. I'm surprised that (particularly non-US) regulators are not investigating them yet.

bayindirh 7 hours ago

> But this is really end-90s/begin-00s Microsoft levels of anti-competitiveness. I'm surprised that (particularly non-US) regulators are not investigating them yet.

Every company is nice until the monies they earn is not guaranteed anymore. They were closing the doors they have intentionally left open in the name of security for a couple of generations.

Now they're being more open about why they are limiting user choice. Because like Chrom(e/ium), Android is designed to be a large data sink for Google to feed The Machine.

lukan 7 hours ago

"Because like Chrom(e/ium), Android is designed to be a large data sink for Google to feed The Machine."

Also maintaining the monopoly over the app market and getting a good cut out of every transaction within. A non google controlled device in the mass market can introduce new markets independent of google (and not paying them).

They would not like that.

dreamcompiler 5 hours ago

Apple did the same thing. In the early days of OSX much of Darwin was open-sourced. Now, not so much.

grommz 6 hours ago

It's all about that sweet backdoor. With Google and Samsung the NSA can just waltz in and out of your phone no matter which OS is running. But if some Chinese OEM decides that Unisoc chip & baseband would be the best choice for your GrapheneOS device the NSA will be quite unhappy.

subscribed 11 minutes ago

It's the other way round.

If the device is sufficiently secure, it will be considered for the official support from GrapheneOS.

Of course, GOS can be forked by anyone, including Chinese OEM with insecure hardware.

RobotToaster 5 hours ago

I'm honestly a little surprised we haven't seen a Chinese OEM use grapheneOS or their own fork of it.

thenthenthen 5 hours ago

anvuong 4 hours ago

rurban 4 hours ago

dathinab 6 hours ago

> The much more interesting recent news IMO is that Google is not allowing (non-Samsung) OEMs to sell devices with GrapheneOS:

how is that legal??

that sounds like a very clean cut case of thinks companies aren't allowed to do under fair market lawes

eikenberry 3 hours ago

It's only illegal if the law is enforced and the US federal government gave up on anti-trust enforcement a long time ago and any attempts to re-awaken it get nerfed quick.

NetMageSCW an hour ago

markasoftware 5 hours ago

Yeah, I don't understand this, graphene is FOSS and unaffiliated with google so if you as an oem install grapheneos on hardware you manufactured how does Google have any say at all?

madeofpalk 4 hours ago

madeofpalk 4 hours ago

> I'm surprised that (particularly non-US) regulators are not investigating them yet.

This is basically the reason Google lost their Play Store anti-trust lawsuit when Apple won theirs. Google did all these incriminating, behind closed doors deals to lock out competition from their “open ecosystem”, where Apple never pretended to be open to behind with.

xethos 2 hours ago

This is just the Breaking Bad "He can't keep getting away with it" meme, for tech giants. Google has been ruling Android with an iron fist for over a decade, and they continue to do so. This came up in a different comment chain of mine [0] recently as well, and is probably more worth reading than a lot of the other comments here that are just now realizing how restrictive Google is with Android

[0] https://tildes.net/~tech/1wam/blocking_of_unverified_apps_on...

rationalist 4 hours ago

> Apple never pretended to be open

Except when Steve Jobs lied saying FaceTime would be an open standard.

"FaceTime is based on a lot of open standards: H.264 video, AAC audio, and a bunch of alphabet-soup acronyms. And we’re going to take it all away. We’re going to the standards bodies, starting tomorrow, and we’re going to make FaceTime an open industry standard." - Steve Jobs at Apple’s WWDC 2010 keynote (emphasis mine)

NetMageSCW an hour ago

Aissen 7 hours ago

> But this is really end-90s/begin-00s Microsoft levels of anti-competitiveness. I'm surprised that (particularly non-US) regulators are not investigating them yet.

You mean like the Skyhook vs Google 2014 lawsuit? (look it up) Settled before it could go any further.

pipodeclown 8 hours ago

You can always notify the EC anti competition whatsdpg through their wistleblower portal:)

cherryteastain 8 hours ago

EU is hell bent on locking "your" devices down as much as possible so they can shove their big brother spyware down your throat under the guise of "protecting the kids" [1]. They are building tons of EU and national level apps where strong Play Integrity is required [2] and will pair these up with the need to prove your identity to "make sure you are an adult" everywhere on the internet [3]. At least one EU country, Spain, has already begun to profile people based on whether they may be running phone OSes other than Google blessed ones [4]

[1] https://fightchatcontrol.eu/chat-control-overview

[2] https://waag.org/en/article/european-digital-id-wallets-are-...

[3] https://en.wikipedia.org/wiki/EU_Kids_Act

[4] https://www.androidauthority.com/why-i-use-grapheneos-on-pix...

riedel 5 hours ago

Xelbair 8 hours ago

with how EC has been behaving recently that might make things worse..

realusername 7 hours ago

They probably know already, it's not the first time it happens. See the illegal pressure Google has made against OEM after CyanogenMod wanted to go commercial.

Google was found guilty by the EU antitrust investigation and payed a 4 billions euros fine (and Google has changed nothing since then, they only increased the pressure).

GrapheneOS is especially annoying for them as it destroys their blanket excuse that it's ""for security""

someonebaggy 7 hours ago

Corporations learned they have to get in bed with regulators first, and how to do it.

subarctic 7 hours ago

I saw an interview with Bill Gates once where he said that one thing he would've done differently is more quickly come around to the idea of sending people to Washington. Apparently he didn't like the idea of lobbying and that cost them when the regulators started coming for them

runjake 7 hours ago

someonebaggy 7 hours ago

HumblyTossed 7 hours ago

> My guess is that the workaround is that Motorola sells them with Google-certified Android.

Was this ever the deal with Moto? They announced something recently, but it didn't read like Moto would be distributing devices with preinstalled GOS. Just that it would be able to run GOS.

subscribed an hour ago

Well, they designed some handsets (one is announced, maybe there's another one or two) to meet Pixels / GrapheneOS level of hardware security. That alone is BIG.

Then there's expectation GOS might be sold pre-installed as well.

eszed 6 hours ago

Unless they've recently changed the deal, they'll be selling GOS out of the box. That was the announcement two or so years ago, and so far as I know nothing had changed.

sebastiennight 6 hours ago

One obvious challenge with the distribution is: would you want to buy a phone with pre-installed GrapheneOS?

This seems similar to wanting to follow the advice of "only buy bottled water on your trip to India", but the bottle you're buying has the cap removed so they could put a straw in it for your convenience.

mikem170 4 hours ago

mschuster91 5 hours ago

Motorola is at 5% of the world's market share. They fell really deep.

stkdump 6 hours ago

It takes EU regulators like half a decade or so to make up their minds on each issue.

eastbound 6 hours ago

The EU never sanctionned Microsoft for monopoly. They received $2bn fines in 2005 for lack of transparency on the documentation for drivers, if I remember, then a little extra for paperwork. Then Microsoft complied mostly at the last minute before being fined (even for the 6-months disappearance of the Browser Choice Dialog, it only cost them $500m).

But never, never has the EU sanctionned Microsoft for signing OEM deals that prevent companies from installing other OS than Windows.

stkdump 5 hours ago

izacus 4 hours ago

Time for US regulators to show how it's done? I'm sure Americans can show Europe how this is done properly, right?

RRRA 3 hours ago

So long for monopoly laws...

morkalork 8 hours ago

Also reminiscent of iirc Intel's choke hold on companies like Dell that froze out AMD

verisimi 6 hours ago

> I'm surprised that (particularly non-US) regulators are not investigating them yet.

Because corporate managed phones are required for all the id crap governance franchises intend to foist on people.

surgical_fire 7 hours ago

This is where governments should slam them with regulations.

Absolute anti-competitive behavior. "Android is open, but not really"

izacus 4 hours ago

You want to lead an assault on companies that develop OSS because they don't follow your dictats on how to work?

That sounds like a brilliant idea, I'm sure it'll be amazing show of force for all the top kernel contributors as well.

surgical_fire 3 hours ago

mschuster91 5 hours ago

> I'm surprised that (particularly non-US) regulators are not investigating them yet.

Simple reason, they're afraid of Trump bullying them into submission, just look at the oil/diesel stockpile release drama.

The US has never been shy about its politicians up to and including the President being an extended arm of the large US corporations - but Trump takes that x1000.

ajross 7 hours ago

> The much more interesting recent news IMO is that Google is not allowing (non-Samsung) OEMs to sell devices with GrapheneOS:

To be That Guy, Apple is not allowing anyone anywhere to sell any devices with anything but MacOS/iOS.

> But this is really end-90s/begin-00s Microsoft levels of anti-competitiveness.

It's not even the most anti-competitive in the market of 2026!

GeekyBear 6 hours ago

iOS was never never an OS that was open to any device maker who cared to use it.

Google made the choice to announce that Android was open to all, in an attempt to take market share from Windows Phone.

Now they want to go back on their word.

ajross 5 hours ago

microtonal 7 hours ago

To be That Guy, Apple is not allowing anyone anywhere to sell any devices with anything but MacOS/iOS.

Apple doesn't allow Apple selling Apple devices with other operating systems.

Google doesn't allow other OEMs selling the OEMs' devices with other operating systems.

Big difference.

(Yes, pedantics: I know that OEMs could sell devices with other OSes, but not being able to sell GMS Android devices would lose them most of their customers.)

ajross 5 hours ago

alerighi 8 hours ago

If you say something about it you are accused to be a communist because you are against free market, from people that doesn't even know what the term free market means (yes, we need rules to make the market truly free, deregulation is not the way).

amelius 8 hours ago

A free market is like an OS without memory protection. Every process can scratch in memory everywhere they want. Some may like it, but for most people it's just terrible.

someonebaggy 7 hours ago

aftbit 8 hours ago

The Pixel 11 is the first Pixel phone to be released after the RAMpocolypse. It has made a lot of compromises in the name of lowering cost. I am definitely going to skip that generation. I tend to upgrade every 3 years, but there really isn't a big driver to do so right now. My Pixel 8 is holding up great. If I broke it and needed to buy a new phone today, I'd probably get a used Pixel 10 instead of a new 11.

76SlashDolphin 8 hours ago

Just be careful with the 8 because their motherboards tend to randomly fry themselves - both me and a friend had this happen around 2 years into owning ours and there are a decent number of people online with the same issue. Switched to the 10a on sale right before the price hike and man I'm glad I did. It'll probably be the last great Pixel if hardware costs keep getting worse and Google keeps shoving Gemini down everyone's throats.

randlet 3 hours ago

My Pixel 8 failed with the exact failure mode (supposedly) covered by an extended warranty [0] program after owning it for 18 months. I had a very frustrating back and forth with Google support and in the end they refused to fix it under warranty because it wasn't manufactured in a specific batch.

Flagship phone turned into a useless device after 18 months of ownership due to a manufacturing issue and I've got no recourse. I'm done with Pixel and Google in general.

[0] https://support.google.com/pixelphone/answer/15009955?hl=en

bpev 8 hours ago

I had this happen twice with pixel 5a's as well. Older, but just to say I'm not sure this is limited to the 8 line. One of them literally just died in my hand and was unfixable.

doublepg23 3 hours ago

I swear every Pixel model people write "well it's a good smartphone minus the 'kills itself for no reason' bug".

Gigachad 28 minutes ago

Cider9986 3 hours ago

kolla 8 hours ago

So just use it until the motherboard dies, why switch before it dies?

hbn 8 hours ago

havblue 4 hours ago

I fried my 8 pro wifi but I attributed it to listening to it inside my shower where it would get the full force of steam damage. So at least on my part I can admit that was a mistake.

gib444 8 hours ago

> Just be careful with the 8

Don't forget the notorious vertical pink line issue! Luckily that had (has?) an extended warranty programme.

randlet 3 hours ago

ButlerianJihad 8 hours ago

I had an 8 Pro and it had a fantastic run, and it was probably the best phone I ever had until I upgraded to the 10 Pro.

Sadly I never, ever put the 8 Pro in any case or protective shell, and the damage of repeated minor drops took its toll. The screen was just cracked a tiny bit around the corners, but eventually the upper-right corner began a creeping black amoeba of darkness, and finally the entire touchscreen became unreliable, I suppose due to that damage, so I decided to bail out. Repairs were exorbitant so I decided to take Google's own trade-in deal.

mystifyingpoi 8 hours ago

I have Pixel 9a and considered Pixel 10 for a while, but seeing Pixel 11 show up with absurdly microscopic improvements over 10 made me realize, that this smartphone line is just a solved problem since years ago.

sir_eliah 8 hours ago

Is there a point in changing a phone so often if it's not broken?

mystifyingpoi 8 hours ago

I know it's not really an argument, but I tend to change my devices also every 2-3 years, just so I can pass the "old" one to my less technical family.

nkingsy 8 hours ago

Att offered such good trade in rates for my phone that it’s been effectively free to upgrade to the last two generations.

chrismorgan 6 hours ago

fouc 8 hours ago

tstenner 8 hours ago

drnick1 7 hours ago

Same thing here, I will keep my 10a for the foreseeable figure. It's unclear if future Pixels will support GOS at all, and the new Motorola is almost certainly going to be a $1000+ phone. Hopefully mid-range models will follow. I don't need a huge, expensive phone with five cameras.

regularfry 8 hours ago

Yeah, I've got a 10 Pro, jumped up from an 8. Looked briefly at upgrading to the 11 but it's clearly not worth it.

gregdeon 8 hours ago

Huh, good point. I wonder if this is the beginning of the end of constant phone upgrades. It used to be that new phones had much better hardware, so software that was only tested on new phones would make an older phone grind to a halt. But if the upgrades are much more incremental, perhaps a phone will last a lot longer?

lucb1e 6 hours ago

The people who I knew that upgraded every 2 years stopped doing that nearly ten years ago now. Smartphones barely get better, why get a 49€/month contract when you can get one for 15€ instead and not have to migrate phones every two years upon contract renewal when the new phones aren't significantly better anyway?

mylasttour 8 hours ago

My Pixel 3 is still going strong! :)

yodsanklai 6 hours ago

I loved my 4a, but broke a couple due to water infiltration in rainy conditions. Modern phones are resistant to water which is a nice improvement.

INTPenis 4 hours ago

I tend to "upgrade" to the previous release, I always got them as their stocks dwindle and their prices are low. Did this with the last nexus, pixel 6, 7, and now I got a pixel 9 from work so the pattern is broken.

microtonal 8 hours ago

The Pixel 10 Pro is even fairly cheap in many countries if you can live with 128GB storage and the base model still has 16GB RAM.

ponector 4 hours ago

The only reason to update from my pixel 7 is to get more storage. Otherwise a perfect phone

yaro330 6 hours ago

To be fair, the trade in offers are larger this year than during P10 release window, at least where I live. So I was able to go from 10 Pro 16/256 to 11P 16/512 for something like 650 eur. It's a great deal IMHO as the SoC + modem combo is at least 30 to 40% more efficient. The phone runs faster, cooler and I don't have the battery anxiety that I got after 10 Pro.

I used the OP15 in the meantime and its ram management and (ironically enough) performance in day to day apps was somehow much worse. It unloaded apps, skipped notifications, apps took longer to open. Google have put in a lot of work into software ahead of the rampocalipse.

prism56 6 hours ago

I'm not wanting to dispute or tell somebody what to spend their money on. I see this take a lot on reddit especially.

You bought arguably the same phone with marginal gains to CPU score and a little better battery. Paying €650 for that privaledge doesn't seem like a great deal to me...

coryrc 5 hours ago

tcfhgj 6 hours ago

why upgrade every 3 years when there are 7 years of updates?

yodsanklai 6 hours ago

I get new phones and computers from my company every 3 years, I don't even bother upgrading so often. The improvements aren't even worth me spending a few hours to set up and migrate data.

kakacik 6 hours ago

photos

sigbottle 8 hours ago

I never thought about it like that, damn.

metalliqaz 3 hours ago

I dropped my Pixel 8 and replaced it with a Pixel 10a. I'm perfectly happy and the lack of a camera bump is awesome. I don't intend to upgrade for quite some time.

rickdeckard 8 hours ago

Quite a bad signal-to-noise ratio in this link.

It's an emotional discussion about Google not supporting MTE on Pixel 11 (old news of August, GrapheneOS had to roll back that statement in September [0]).

Now the question is whether MTE will be enabled by Google as part of a future OS-upgrade, to which there is no definite answer AFAIK

[0] https://news.ycombinator.com/item?id=49536384

Luker88 8 hours ago

> Now the question is whether MTE will be enabled by Google as part of a future OS-upgrade, to which there is no definite answer AFAIK

Still means that currently the phone has no support for MTE.

I have bought too many things on vague promises that did not happen.

It's not there now -> it's not supported. EOL.

JacobKfromIRC 5 hours ago

Why are we dependent on Google to enable MTE on the OS-side? If it's a hardware feature, why couldn't GrapheneOS enable it in GrapheneOS even if Google's OS wouldn't enable it?

croes 8 hours ago

> It still has at least bare minimum support for MTE at a hardware level. We think they removed most of the hardware acceleration from the CPU cache to save money. They ruined the performance so it ended up being fully disabled in firmware. It may still be usable.

MTE but slow

rickdeckard 7 hours ago

"We think", followed by a quite fueled accusation.

It has no MTE right now, okay. Is there any evidence on the rest?

gib444 8 hours ago

I wonder what the comms would have been without the Motorola partnership

izacus 8 hours ago

The comms have been like that for years now.

someonebaggy 7 hours ago

They would have either sucked it up and supported the 11, or shut down the GrapheneOS project completely.

varispeed 8 hours ago

MTE support in itself says nothing as vendors usually obscure implementation details and also MTE is a perfect place to implant undocumented backdoors for security services to use.

brookst 8 hours ago

Any evidence of those backsoors?

This reads like “your front door lock is the perfect place for security services to have a master key.” True, but not strong as an argument against having a lock.

gruez 8 hours ago

jonaustin 3 hours ago

Most recent comment from them (9/30)

https://discuss.grapheneos.org/d/41564-pixel-11-doesnt-yet-m...

GrapheneOS:

``` We're not going to add support for the Pixel 11 series unless it ships MTE support. It has hardware level support for MTE but it shipped without firmware support for it. It's unknown why that's the case and it could be due to flaws in the hardware implementation which have to be worked around. It isn't yet clear if it's going to support MTE but we've decided we won't support it unless it ships. Android 17 QPR2 Beta launched for the Pixel 11 after we made our initial posts about this and added preliminary firmware support for MTE while keeping it fully disabled for the OS even as a developer option. It isn't clear if something is severely wrong with it or not yet so we can't make any commitment to supporting the Pixel 11 series. ```

rgblambda 8 hours ago

>It appears Google cut an important security feature to save money.

If you're doing comms for a serious project, it's probably best not to speculate on the justification of an internal decision at a different org, even if you're reasonably sure.

mgol94 8 hours ago

>For example, non-Samsung Android OEMs aren't allowed to directly sell devices with GrapheneOS and Google will only permit it within a quota. It can and is being worked around and there will be devices sold with GrapheneOS as the stock OS without Google restricting how many can be sold.

I think at this point is too late for complicity, they are actively fighting against GrapheneOS anyway. You either fight back, or wait until you loose all the leverage

rgblambda 7 hours ago

My point isn't about fighting back vs rolling over. Just that it doesn't achieve anything to guess at why Google did a certain thing.

Edit: Maybe you replied to the wrong comment? I didn't say anything about complicity and neither did the GrapheneOS announcement in the part I quoted.

lucb1e 6 hours ago

pbhjpbhj 8 hours ago

>best not to

Because? The obvious implication is you're saying Google will abuse their monopoly to hurt you if you upset them. Is that what you're implying? Or is it user trust, or something else you think is improved by avoiding such speculation?

rgblambda 7 hours ago

I was actually just implying that it looks unprofessional. Say they cut an important security feature. Don't try to guess why.

fwn 4 hours ago

pbhjpbhj 3 hours ago

jeffbee 6 hours ago

Innuendo about how large organizations make decisions, issued by people who have never had a job, are de rigueur for open source activists and catnip for HN.

realusername 7 hours ago

I think cutting it for saving money is the most charitable explanation you can give, the other ones would look much worse for Google.

hn_go_brrrrr 7 hours ago

Timeline pressure seems to me the most likely one, and that looks no worse than saving money.

lucb1e 6 hours ago

podocarp 8 hours ago

Not surprised, since it wasn't used in Android to begin with they probably thought nobody will notice if it's removed. And indeed, for the vast majority of people nobody will notice.

Magicrafter13 2 hours ago

The vast majority of people won't notice if you dilute their food/drink products to save money. Doesn't make it okay.

NetMageSCW 4 minutes ago

But this is more like not including tops with your to go drinks when every one throws them away. If Android never used MTE, removing doesn’t harm the Android experience which is what the Pixel is intended to run.

microtonal 8 hours ago

The field is certainly moving in the opposite direction. Apple has their own extension of MTE (MIE) and uses it in the kernel and a bunch of system processor. Samsung has had MTE support in flagship Exynos for some years now and they started experimenting with MTE in the OneUI 9 betas (not sure what the MTE status in the final release is).

MBCook 6 hours ago

I don’t really follow Android so my memory may be wrong but didn’t Google make a big deal about this when they rolled it out?

If so, it seems odd to cut it back.

t1234s 2 hours ago

Google would be smart to adopt and fully support Graphine as a "Pro" version of its phone OS.

pbhjpbhj 8 hours ago

So Arm built in MTE but Google have decided to prevent access to it at the firmware level?

Have they introduced some other mitigations, for eg UAF, to improve memory safety?

It seems possible that nixing MTE is to prevent stomping on some TLAs exploits?

surajrmal 7 hours ago

MTE requires several things to work well. Notably there is some missing hardware believed to be necessary for MTE to be performant on the pixel 11.

In terms of mitigation of UAF, a great deal of new code written for Android userspace these days is in memory safe languages such as rust. Also, a lot of testing with instrumented code sanitizers is still done before release. We don't know how much risk MTE actually mitigates.

NetMageSCW a minute ago

citation needed - most seem to think it is essentially none.

Retr0id 9 hours ago

It's hard to tell, is this a new announcement?

arusahni 8 hours ago

Looks like that post was last edited August 30th. On Sept 1st they posted saying they think they found a way forward [1].

[1]: https://grapheneos.social/@GrapheneOS/117194007157499435

pavon 6 hours ago

The discussion in the post is on-going. Two days ago they posted that they will not support Pixel 11 unless Google adds MTE support in a future update. That may happen in an upcoming December update, but it is just a rumor.

[1] https://discuss.grapheneos.org/d/41564-pixel-11-doesnt-yet-m...

arusahni 5 hours ago

Medea 8 hours ago

It was posted 29 Aug

nubinetwork 8 hours ago

Old news

mistyvales 6 hours ago

Guess I should order the 10 to replace the 9a I dropped down the stairs.

jordand 8 hours ago

GrapheneOS last said they should be able to support Pixel 11 along with the Motorola phones

rkozik1989 8 hours ago

Serious question about phone security: do phone application operating systems do anything to protect against the device's real-time OS from being able to access RAM/Disk that's being used by the application OS? Because if that cannot be controlled security at the application OS level is meaningless.

gruez 8 hours ago

>do phone application operating systems do anything to protect against the device's real-time OS from being able to access RAM/Disk that's being used by the application OS? Because if that cannot be controlled security at the application OS level is meaningless.

If you're talking about the baseband, AFAIK it's already isolated on both iPhones and pixels. Not sure about other androids.

TheDong 8 hours ago

Security isn't just an absolute, it's also a multi-faceted series of defense-in-depth measures.

Can you get arbitrary code execution on the RTOS from another app? No? Then adding layers to protect apps from each other is meaningful.

What you're saying isn't too far from "Well, if the attacker has physical access they can just freeze and decap the memory to read all secrets, so like there's no point in even hashing passwords or fixing XSS"

surajrmal 7 hours ago

There are several peripherals running their own OS. Those have their access to RAM limited by an iommu and they have no direct access to the primary storage (they may have some local ROM storage for firmware). If you're asking about the other OS that runs on the application processor such as the bootloaders, trusted firmware, trusted os, etc, then no, those have a superset of access to what the primary OS running on those cores have access to. This is by design.

jeffbee 6 hours ago

It's not just phones, either. All modern computers are full of non-architectural cores running all kinds of wacky stuff.

izacus 8 hours ago

Yes, at least Pixels and Apple devices do (the Titan/T security chips handle disk encryption and communication and are behind IOMMU which disallows direct acces from things like modems).

someonebaggy 7 hours ago

What's meant by "your device's real-time OS"? Heard several variations of this questioning recently and it seems more like FUD than anything else. I presume it's a telephone game away from the fact that some modem processors have DMA access and WAN-side exploits?

Pxtl 8 hours ago

My pixel 7 is starting to get long in the tooth, I know I'll run it into the ground but I'm starting to wonder where I'll go for the next one now that Google is increasingly locking down their platform.

microtonal 8 hours ago

Motorola Signature 27, since that seems to be the phone that is going to support GrapheneOS? I have a P10P, but I'm very excited that they are working with a manufacturer that actually supports them. I'll most likely buy the Signature 27 at some point, just to vote with my wallet (even if the P10P) is still fine.

someonebaggy 7 hours ago

Whatever Graphene or Lineage supports. Google doesn't even have magic power over all phone makers, let alone all ROMs.

ljhkkjl 6 hours ago

Relying on Google hardware seems like a very bad idea. GrapheneOS would have much more adoption if they weren't so Google-obsessed.

nicman23 6 hours ago

noooooo it needs the secuureee coooproccesssorr or it is 1% easier to haaack

at least they went with something with snapdragon - the upcoming moto phone

DANmode 6 hours ago

Sorry kids, this is Hacker News,

not Lacker News.

Not tall enough, try again next year.

DANmode 6 hours ago

> GrapheneOS would have much more adoption if they weren't so Google-obsessed.

The GrapheneOS project would have lots of other devices to choose from (or any) if everyone making hardware (besides Google) weren’t so obsessed with selling cheap, insecure trash.

You don’t know what you’re talking about.

If you ever do: you’re free to build the project from source for whatever generic device - but will gain only small details over vanilla AOSP without proper hardware to make use of.

ljhkkjl 29 minutes ago

Why do I need to build a project from scratch? I have been a happy user of LineageOS for a long time (with MicroG). It works nicely.

That cheap, insecure trash works fine for almost everyone. Niche security features are not sufficient reasons to buy Google hardware.

atlgator 7 hours ago

Why does the announcement focus so much on Apple when they exclusively support Android?

mrbn100ful 8 hours ago

Yes please buy the low volume phone from a 5% market share manufacturer.

Someone high up got tired to pull over every pixel user at the border.

With the new Motorola, TSA line are going to move faster that ever!

If you care about privacy, stay away for the moto release and stick with pixel.

lesspassiveobse 8 hours ago

English version: Yes, please buy the low volume phone from a 5% market share manufacturer. Someone high up got tired of having to pull over every pixel user at the border. With the new Motorola, TSA lines are going to move faster than ever! If you care about privacy, stay away from the moto release and stick with pixel.

For reference Pixels have about 1% market share, the graphene phones will be the same hardware as normal moto flagships and 99% of TSA agents won't be able to differentiate motorola models

gruez 8 hours ago

>For reference Pixels have about 1% market share,

You're off by a factor of 3, unless you count global market share, which includes random brands unlikely to be in the US like xiaomi or huawei.

https://counterpointresearch.com/en/insights/us-smartphone-m...

Moreover motorola flagships (ie. the only model that support grapheneos for now) are likely a fraction of the market share of motorola as a whole, so OP is still correct in that motorola grapheneos phones are more identifiable.

>the graphene phones will be the same hardware as normal moto flagships and 99% of TSA agents won't be able to differentiate motorola models

That argument could be used for pixels as well, which are also just generic black rectangles, especially the "a" models that lack the distinctive camera bump. Also if DHS/ICE really wanted to, they could avoid this problem altogether by requiring travelers to self-declare what phone they have. Sure, you can lie, but then you committed a federal offense by lying on immigration paperwork.

mrbn100ful 7 hours ago

Go on the Motorola website, over 40 SKUs! We all know that the most expensive one is not going to be the most popular.

Every Google Pixel model per generation ends up supported.

DO NOT UNDERESTIMATE TSA.

Social hardening is a real problem.

Pxtl 8 hours ago

> With the new Motorola, TSA line are going to move faster that ever!

I missed a news story. Context?

worldsavior 7 hours ago

Motorola has partnership with GrapheneOS.