Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped (discuss.grapheneos.org)
383 points by finnlab 9 hours ago
microtonal 8 hours ago
As others have said, this is not the most recent status update (it depends on future Google changes in QPR1 or QPR2).
The much more interesting recent news IMO is that Google is not allowing (non-Samsung) OEMs to sell devices with GrapheneOS:
https://news.ycombinator.com/item?id=49946698
See the last paragraph.
For example, non-Samsung Android OEMs aren't allowed to directly sell devices with GrapheneOS and Google will only permit it within a quota. It can and is being worked around and there will be devices sold with GrapheneOS as the stock OS without Google restricting how many can be sold.
My guess is that the workaround is that Motorola sells them with Google-certified Android. A third-party (non-OEM) buys them in bulk and preinstalls GrapheneOS.
But this is really end-90s/begin-00s Microsoft levels of anti-competitiveness. I'm surprised that (particularly non-US) regulators are not investigating them yet.
bayindirh 7 hours ago
> But this is really end-90s/begin-00s Microsoft levels of anti-competitiveness. I'm surprised that (particularly non-US) regulators are not investigating them yet.
Every company is nice until the monies they earn is not guaranteed anymore. They were closing the doors they have intentionally left open in the name of security for a couple of generations.
Now they're being more open about why they are limiting user choice. Because like Chrom(e/ium), Android is designed to be a large data sink for Google to feed The Machine.
lukan 7 hours ago
"Because like Chrom(e/ium), Android is designed to be a large data sink for Google to feed The Machine."
Also maintaining the monopoly over the app market and getting a good cut out of every transaction within. A non google controlled device in the mass market can introduce new markets independent of google (and not paying them).
They would not like that.
dreamcompiler 5 hours ago
Apple did the same thing. In the early days of OSX much of Darwin was open-sourced. Now, not so much.
grommz 6 hours ago
It's all about that sweet backdoor. With Google and Samsung the NSA can just waltz in and out of your phone no matter which OS is running. But if some Chinese OEM decides that Unisoc chip & baseband would be the best choice for your GrapheneOS device the NSA will be quite unhappy.
subscribed 11 minutes ago
It's the other way round.
If the device is sufficiently secure, it will be considered for the official support from GrapheneOS.
Of course, GOS can be forked by anyone, including Chinese OEM with insecure hardware.
RobotToaster 5 hours ago
I'm honestly a little surprised we haven't seen a Chinese OEM use grapheneOS or their own fork of it.
thenthenthen 5 hours ago
anvuong 4 hours ago
rurban 4 hours ago
dathinab 6 hours ago
> The much more interesting recent news IMO is that Google is not allowing (non-Samsung) OEMs to sell devices with GrapheneOS:
how is that legal??
that sounds like a very clean cut case of thinks companies aren't allowed to do under fair market lawes
eikenberry 3 hours ago
It's only illegal if the law is enforced and the US federal government gave up on anti-trust enforcement a long time ago and any attempts to re-awaken it get nerfed quick.
NetMageSCW an hour ago
markasoftware 5 hours ago
Yeah, I don't understand this, graphene is FOSS and unaffiliated with google so if you as an oem install grapheneos on hardware you manufactured how does Google have any say at all?
madeofpalk 4 hours ago
madeofpalk 4 hours ago
> I'm surprised that (particularly non-US) regulators are not investigating them yet.
This is basically the reason Google lost their Play Store anti-trust lawsuit when Apple won theirs. Google did all these incriminating, behind closed doors deals to lock out competition from their “open ecosystem”, where Apple never pretended to be open to behind with.
xethos 2 hours ago
This is just the Breaking Bad "He can't keep getting away with it" meme, for tech giants. Google has been ruling Android with an iron fist for over a decade, and they continue to do so. This came up in a different comment chain of mine [0] recently as well, and is probably more worth reading than a lot of the other comments here that are just now realizing how restrictive Google is with Android
[0] https://tildes.net/~tech/1wam/blocking_of_unverified_apps_on...
rationalist 4 hours ago
> Apple never pretended to be open
Except when Steve Jobs lied saying FaceTime would be an open standard.
"FaceTime is based on a lot of open standards: H.264 video, AAC audio, and a bunch of alphabet-soup acronyms. And we’re going to take it all away. We’re going to the standards bodies, starting tomorrow, and we’re going to make FaceTime an open industry standard." - Steve Jobs at Apple’s WWDC 2010 keynote (emphasis mine)
NetMageSCW an hour ago
Aissen 7 hours ago
> But this is really end-90s/begin-00s Microsoft levels of anti-competitiveness. I'm surprised that (particularly non-US) regulators are not investigating them yet.
You mean like the Skyhook vs Google 2014 lawsuit? (look it up) Settled before it could go any further.
pipodeclown 8 hours ago
You can always notify the EC anti competition whatsdpg through their wistleblower portal:)
cherryteastain 8 hours ago
EU is hell bent on locking "your" devices down as much as possible so they can shove their big brother spyware down your throat under the guise of "protecting the kids" [1]. They are building tons of EU and national level apps where strong Play Integrity is required [2] and will pair these up with the need to prove your identity to "make sure you are an adult" everywhere on the internet [3]. At least one EU country, Spain, has already begun to profile people based on whether they may be running phone OSes other than Google blessed ones [4]
[1] https://fightchatcontrol.eu/chat-control-overview
[2] https://waag.org/en/article/european-digital-id-wallets-are-...
[3] https://en.wikipedia.org/wiki/EU_Kids_Act
[4] https://www.androidauthority.com/why-i-use-grapheneos-on-pix...
riedel 5 hours ago
Xelbair 8 hours ago
with how EC has been behaving recently that might make things worse..
realusername 7 hours ago
They probably know already, it's not the first time it happens. See the illegal pressure Google has made against OEM after CyanogenMod wanted to go commercial.
Google was found guilty by the EU antitrust investigation and payed a 4 billions euros fine (and Google has changed nothing since then, they only increased the pressure).
GrapheneOS is especially annoying for them as it destroys their blanket excuse that it's ""for security""
someonebaggy 7 hours ago
Corporations learned they have to get in bed with regulators first, and how to do it.
subarctic 7 hours ago
I saw an interview with Bill Gates once where he said that one thing he would've done differently is more quickly come around to the idea of sending people to Washington. Apparently he didn't like the idea of lobbying and that cost them when the regulators started coming for them
runjake 7 hours ago
someonebaggy 7 hours ago
HumblyTossed 7 hours ago
> My guess is that the workaround is that Motorola sells them with Google-certified Android.
Was this ever the deal with Moto? They announced something recently, but it didn't read like Moto would be distributing devices with preinstalled GOS. Just that it would be able to run GOS.
subscribed an hour ago
Well, they designed some handsets (one is announced, maybe there's another one or two) to meet Pixels / GrapheneOS level of hardware security. That alone is BIG.
Then there's expectation GOS might be sold pre-installed as well.
eszed 6 hours ago
Unless they've recently changed the deal, they'll be selling GOS out of the box. That was the announcement two or so years ago, and so far as I know nothing had changed.
sebastiennight 6 hours ago
One obvious challenge with the distribution is: would you want to buy a phone with pre-installed GrapheneOS?
This seems similar to wanting to follow the advice of "only buy bottled water on your trip to India", but the bottle you're buying has the cap removed so they could put a straw in it for your convenience.
mikem170 4 hours ago
mschuster91 5 hours ago
Motorola is at 5% of the world's market share. They fell really deep.
stkdump 6 hours ago
It takes EU regulators like half a decade or so to make up their minds on each issue.
eastbound 6 hours ago
The EU never sanctionned Microsoft for monopoly. They received $2bn fines in 2005 for lack of transparency on the documentation for drivers, if I remember, then a little extra for paperwork. Then Microsoft complied mostly at the last minute before being fined (even for the 6-months disappearance of the Browser Choice Dialog, it only cost them $500m).
But never, never has the EU sanctionned Microsoft for signing OEM deals that prevent companies from installing other OS than Windows.
stkdump 5 hours ago
izacus 4 hours ago
Time for US regulators to show how it's done? I'm sure Americans can show Europe how this is done properly, right?
RRRA 3 hours ago
So long for monopoly laws...
morkalork 8 hours ago
Also reminiscent of iirc Intel's choke hold on companies like Dell that froze out AMD
verisimi 6 hours ago
> I'm surprised that (particularly non-US) regulators are not investigating them yet.
Because corporate managed phones are required for all the id crap governance franchises intend to foist on people.
surgical_fire 7 hours ago
This is where governments should slam them with regulations.
Absolute anti-competitive behavior. "Android is open, but not really"
izacus 4 hours ago
You want to lead an assault on companies that develop OSS because they don't follow your dictats on how to work?
That sounds like a brilliant idea, I'm sure it'll be amazing show of force for all the top kernel contributors as well.
surgical_fire 3 hours ago
mschuster91 5 hours ago
> I'm surprised that (particularly non-US) regulators are not investigating them yet.
Simple reason, they're afraid of Trump bullying them into submission, just look at the oil/diesel stockpile release drama.
The US has never been shy about its politicians up to and including the President being an extended arm of the large US corporations - but Trump takes that x1000.
ajross 7 hours ago
> The much more interesting recent news IMO is that Google is not allowing (non-Samsung) OEMs to sell devices with GrapheneOS:
To be That Guy, Apple is not allowing anyone anywhere to sell any devices with anything but MacOS/iOS.
> But this is really end-90s/begin-00s Microsoft levels of anti-competitiveness.
It's not even the most anti-competitive in the market of 2026!
GeekyBear 6 hours ago
iOS was never never an OS that was open to any device maker who cared to use it.
Google made the choice to announce that Android was open to all, in an attempt to take market share from Windows Phone.
Now they want to go back on their word.
ajross 5 hours ago
microtonal 7 hours ago
To be That Guy, Apple is not allowing anyone anywhere to sell any devices with anything but MacOS/iOS.
Apple doesn't allow Apple selling Apple devices with other operating systems.
Google doesn't allow other OEMs selling the OEMs' devices with other operating systems.
Big difference.
(Yes, pedantics: I know that OEMs could sell devices with other OSes, but not being able to sell GMS Android devices would lose them most of their customers.)
ajross 5 hours ago
alerighi 8 hours ago
If you say something about it you are accused to be a communist because you are against free market, from people that doesn't even know what the term free market means (yes, we need rules to make the market truly free, deregulation is not the way).
amelius 8 hours ago
A free market is like an OS without memory protection. Every process can scratch in memory everywhere they want. Some may like it, but for most people it's just terrible.
someonebaggy 7 hours ago
aftbit 8 hours ago
The Pixel 11 is the first Pixel phone to be released after the RAMpocolypse. It has made a lot of compromises in the name of lowering cost. I am definitely going to skip that generation. I tend to upgrade every 3 years, but there really isn't a big driver to do so right now. My Pixel 8 is holding up great. If I broke it and needed to buy a new phone today, I'd probably get a used Pixel 10 instead of a new 11.
76SlashDolphin 8 hours ago
Just be careful with the 8 because their motherboards tend to randomly fry themselves - both me and a friend had this happen around 2 years into owning ours and there are a decent number of people online with the same issue. Switched to the 10a on sale right before the price hike and man I'm glad I did. It'll probably be the last great Pixel if hardware costs keep getting worse and Google keeps shoving Gemini down everyone's throats.
randlet 3 hours ago
My Pixel 8 failed with the exact failure mode (supposedly) covered by an extended warranty [0] program after owning it for 18 months. I had a very frustrating back and forth with Google support and in the end they refused to fix it under warranty because it wasn't manufactured in a specific batch.
Flagship phone turned into a useless device after 18 months of ownership due to a manufacturing issue and I've got no recourse. I'm done with Pixel and Google in general.
[0] https://support.google.com/pixelphone/answer/15009955?hl=en
bpev 8 hours ago
I had this happen twice with pixel 5a's as well. Older, but just to say I'm not sure this is limited to the 8 line. One of them literally just died in my hand and was unfixable.
doublepg23 3 hours ago
I swear every Pixel model people write "well it's a good smartphone minus the 'kills itself for no reason' bug".
Gigachad 28 minutes ago
Cider9986 3 hours ago
kolla 8 hours ago
So just use it until the motherboard dies, why switch before it dies?
hbn 8 hours ago
havblue 4 hours ago
I fried my 8 pro wifi but I attributed it to listening to it inside my shower where it would get the full force of steam damage. So at least on my part I can admit that was a mistake.
gib444 8 hours ago
> Just be careful with the 8
Don't forget the notorious vertical pink line issue! Luckily that had (has?) an extended warranty programme.
randlet 3 hours ago
ButlerianJihad 8 hours ago
I had an 8 Pro and it had a fantastic run, and it was probably the best phone I ever had until I upgraded to the 10 Pro.
Sadly I never, ever put the 8 Pro in any case or protective shell, and the damage of repeated minor drops took its toll. The screen was just cracked a tiny bit around the corners, but eventually the upper-right corner began a creeping black amoeba of darkness, and finally the entire touchscreen became unreliable, I suppose due to that damage, so I decided to bail out. Repairs were exorbitant so I decided to take Google's own trade-in deal.
mystifyingpoi 8 hours ago
I have Pixel 9a and considered Pixel 10 for a while, but seeing Pixel 11 show up with absurdly microscopic improvements over 10 made me realize, that this smartphone line is just a solved problem since years ago.
sir_eliah 8 hours ago
Is there a point in changing a phone so often if it's not broken?
mystifyingpoi 8 hours ago
I know it's not really an argument, but I tend to change my devices also every 2-3 years, just so I can pass the "old" one to my less technical family.
nkingsy 8 hours ago
Att offered such good trade in rates for my phone that it’s been effectively free to upgrade to the last two generations.
chrismorgan 6 hours ago
fouc 8 hours ago
tstenner 8 hours ago
drnick1 7 hours ago
Same thing here, I will keep my 10a for the foreseeable figure. It's unclear if future Pixels will support GOS at all, and the new Motorola is almost certainly going to be a $1000+ phone. Hopefully mid-range models will follow. I don't need a huge, expensive phone with five cameras.
regularfry 8 hours ago
Yeah, I've got a 10 Pro, jumped up from an 8. Looked briefly at upgrading to the 11 but it's clearly not worth it.
gregdeon 8 hours ago
Huh, good point. I wonder if this is the beginning of the end of constant phone upgrades. It used to be that new phones had much better hardware, so software that was only tested on new phones would make an older phone grind to a halt. But if the upgrades are much more incremental, perhaps a phone will last a lot longer?
lucb1e 6 hours ago
The people who I knew that upgraded every 2 years stopped doing that nearly ten years ago now. Smartphones barely get better, why get a 49€/month contract when you can get one for 15€ instead and not have to migrate phones every two years upon contract renewal when the new phones aren't significantly better anyway?
mylasttour 8 hours ago
My Pixel 3 is still going strong! :)
yodsanklai 6 hours ago
I loved my 4a, but broke a couple due to water infiltration in rainy conditions. Modern phones are resistant to water which is a nice improvement.
INTPenis 4 hours ago
I tend to "upgrade" to the previous release, I always got them as their stocks dwindle and their prices are low. Did this with the last nexus, pixel 6, 7, and now I got a pixel 9 from work so the pattern is broken.
microtonal 8 hours ago
The Pixel 10 Pro is even fairly cheap in many countries if you can live with 128GB storage and the base model still has 16GB RAM.
ponector 4 hours ago
The only reason to update from my pixel 7 is to get more storage. Otherwise a perfect phone
yaro330 6 hours ago
To be fair, the trade in offers are larger this year than during P10 release window, at least where I live. So I was able to go from 10 Pro 16/256 to 11P 16/512 for something like 650 eur. It's a great deal IMHO as the SoC + modem combo is at least 30 to 40% more efficient. The phone runs faster, cooler and I don't have the battery anxiety that I got after 10 Pro.
I used the OP15 in the meantime and its ram management and (ironically enough) performance in day to day apps was somehow much worse. It unloaded apps, skipped notifications, apps took longer to open. Google have put in a lot of work into software ahead of the rampocalipse.
prism56 6 hours ago
I'm not wanting to dispute or tell somebody what to spend their money on. I see this take a lot on reddit especially.
You bought arguably the same phone with marginal gains to CPU score and a little better battery. Paying €650 for that privaledge doesn't seem like a great deal to me...
coryrc 5 hours ago
tcfhgj 6 hours ago
why upgrade every 3 years when there are 7 years of updates?
yodsanklai 6 hours ago
I get new phones and computers from my company every 3 years, I don't even bother upgrading so often. The improvements aren't even worth me spending a few hours to set up and migrate data.
kakacik 6 hours ago
photos
sigbottle 8 hours ago
I never thought about it like that, damn.
metalliqaz 3 hours ago
I dropped my Pixel 8 and replaced it with a Pixel 10a. I'm perfectly happy and the lack of a camera bump is awesome. I don't intend to upgrade for quite some time.
rickdeckard 8 hours ago
Quite a bad signal-to-noise ratio in this link.
It's an emotional discussion about Google not supporting MTE on Pixel 11 (old news of August, GrapheneOS had to roll back that statement in September [0]).
Now the question is whether MTE will be enabled by Google as part of a future OS-upgrade, to which there is no definite answer AFAIK
Luker88 8 hours ago
> Now the question is whether MTE will be enabled by Google as part of a future OS-upgrade, to which there is no definite answer AFAIK
Still means that currently the phone has no support for MTE.
I have bought too many things on vague promises that did not happen.
It's not there now -> it's not supported. EOL.
JacobKfromIRC 5 hours ago
Why are we dependent on Google to enable MTE on the OS-side? If it's a hardware feature, why couldn't GrapheneOS enable it in GrapheneOS even if Google's OS wouldn't enable it?
croes 8 hours ago
> It still has at least bare minimum support for MTE at a hardware level. We think they removed most of the hardware acceleration from the CPU cache to save money. They ruined the performance so it ended up being fully disabled in firmware. It may still be usable.
MTE but slow
rickdeckard 7 hours ago
"We think", followed by a quite fueled accusation.
It has no MTE right now, okay. Is there any evidence on the rest?
gib444 8 hours ago
I wonder what the comms would have been without the Motorola partnership
izacus 8 hours ago
The comms have been like that for years now.
someonebaggy 7 hours ago
They would have either sucked it up and supported the 11, or shut down the GrapheneOS project completely.
varispeed 8 hours ago
MTE support in itself says nothing as vendors usually obscure implementation details and also MTE is a perfect place to implant undocumented backdoors for security services to use.
brookst 8 hours ago
Any evidence of those backsoors?
This reads like “your front door lock is the perfect place for security services to have a master key.” True, but not strong as an argument against having a lock.
gruez 8 hours ago
jonaustin 3 hours ago
Most recent comment from them (9/30)
https://discuss.grapheneos.org/d/41564-pixel-11-doesnt-yet-m...
GrapheneOS:
``` We're not going to add support for the Pixel 11 series unless it ships MTE support. It has hardware level support for MTE but it shipped without firmware support for it. It's unknown why that's the case and it could be due to flaws in the hardware implementation which have to be worked around. It isn't yet clear if it's going to support MTE but we've decided we won't support it unless it ships. Android 17 QPR2 Beta launched for the Pixel 11 after we made our initial posts about this and added preliminary firmware support for MTE while keeping it fully disabled for the OS even as a developer option. It isn't clear if something is severely wrong with it or not yet so we can't make any commitment to supporting the Pixel 11 series. ```
rgblambda 8 hours ago
>It appears Google cut an important security feature to save money.
If you're doing comms for a serious project, it's probably best not to speculate on the justification of an internal decision at a different org, even if you're reasonably sure.
mgol94 8 hours ago
>For example, non-Samsung Android OEMs aren't allowed to directly sell devices with GrapheneOS and Google will only permit it within a quota. It can and is being worked around and there will be devices sold with GrapheneOS as the stock OS without Google restricting how many can be sold.
I think at this point is too late for complicity, they are actively fighting against GrapheneOS anyway. You either fight back, or wait until you loose all the leverage
rgblambda 7 hours ago
My point isn't about fighting back vs rolling over. Just that it doesn't achieve anything to guess at why Google did a certain thing.
Edit: Maybe you replied to the wrong comment? I didn't say anything about complicity and neither did the GrapheneOS announcement in the part I quoted.
lucb1e 6 hours ago
pbhjpbhj 8 hours ago
>best not to
Because? The obvious implication is you're saying Google will abuse their monopoly to hurt you if you upset them. Is that what you're implying? Or is it user trust, or something else you think is improved by avoiding such speculation?
rgblambda 7 hours ago
I was actually just implying that it looks unprofessional. Say they cut an important security feature. Don't try to guess why.
fwn 4 hours ago
pbhjpbhj 3 hours ago
jeffbee 6 hours ago
Innuendo about how large organizations make decisions, issued by people who have never had a job, are de rigueur for open source activists and catnip for HN.
realusername 7 hours ago
I think cutting it for saving money is the most charitable explanation you can give, the other ones would look much worse for Google.
hn_go_brrrrr 7 hours ago
Timeline pressure seems to me the most likely one, and that looks no worse than saving money.
lucb1e 6 hours ago
podocarp 8 hours ago
Not surprised, since it wasn't used in Android to begin with they probably thought nobody will notice if it's removed. And indeed, for the vast majority of people nobody will notice.
Magicrafter13 2 hours ago
The vast majority of people won't notice if you dilute their food/drink products to save money. Doesn't make it okay.
NetMageSCW 4 minutes ago
But this is more like not including tops with your to go drinks when every one throws them away. If Android never used MTE, removing doesn’t harm the Android experience which is what the Pixel is intended to run.
microtonal 8 hours ago
The field is certainly moving in the opposite direction. Apple has their own extension of MTE (MIE) and uses it in the kernel and a bunch of system processor. Samsung has had MTE support in flagship Exynos for some years now and they started experimenting with MTE in the OneUI 9 betas (not sure what the MTE status in the final release is).
MBCook 6 hours ago
I don’t really follow Android so my memory may be wrong but didn’t Google make a big deal about this when they rolled it out?
If so, it seems odd to cut it back.
t1234s 2 hours ago
Google would be smart to adopt and fully support Graphine as a "Pro" version of its phone OS.
pbhjpbhj 8 hours ago
So Arm built in MTE but Google have decided to prevent access to it at the firmware level?
Have they introduced some other mitigations, for eg UAF, to improve memory safety?
It seems possible that nixing MTE is to prevent stomping on some TLAs exploits?
surajrmal 7 hours ago
MTE requires several things to work well. Notably there is some missing hardware believed to be necessary for MTE to be performant on the pixel 11.
In terms of mitigation of UAF, a great deal of new code written for Android userspace these days is in memory safe languages such as rust. Also, a lot of testing with instrumented code sanitizers is still done before release. We don't know how much risk MTE actually mitigates.
NetMageSCW a minute ago
citation needed - most seem to think it is essentially none.
Retr0id 9 hours ago
It's hard to tell, is this a new announcement?
arusahni 8 hours ago
Looks like that post was last edited August 30th. On Sept 1st they posted saying they think they found a way forward [1].
[1]: https://grapheneos.social/@GrapheneOS/117194007157499435
pavon 6 hours ago
The discussion in the post is on-going. Two days ago they posted that they will not support Pixel 11 unless Google adds MTE support in a future update. That may happen in an upcoming December update, but it is just a rumor.
[1] https://discuss.grapheneos.org/d/41564-pixel-11-doesnt-yet-m...
arusahni 5 hours ago
Medea 8 hours ago
It was posted 29 Aug
nubinetwork 8 hours ago
Old news
mistyvales 6 hours ago
Guess I should order the 10 to replace the 9a I dropped down the stairs.
jordand 8 hours ago
GrapheneOS last said they should be able to support Pixel 11 along with the Motorola phones
rkozik1989 8 hours ago
Serious question about phone security: do phone application operating systems do anything to protect against the device's real-time OS from being able to access RAM/Disk that's being used by the application OS? Because if that cannot be controlled security at the application OS level is meaningless.
gruez 8 hours ago
>do phone application operating systems do anything to protect against the device's real-time OS from being able to access RAM/Disk that's being used by the application OS? Because if that cannot be controlled security at the application OS level is meaningless.
If you're talking about the baseband, AFAIK it's already isolated on both iPhones and pixels. Not sure about other androids.
TheDong 8 hours ago
Security isn't just an absolute, it's also a multi-faceted series of defense-in-depth measures.
Can you get arbitrary code execution on the RTOS from another app? No? Then adding layers to protect apps from each other is meaningful.
What you're saying isn't too far from "Well, if the attacker has physical access they can just freeze and decap the memory to read all secrets, so like there's no point in even hashing passwords or fixing XSS"
surajrmal 7 hours ago
There are several peripherals running their own OS. Those have their access to RAM limited by an iommu and they have no direct access to the primary storage (they may have some local ROM storage for firmware). If you're asking about the other OS that runs on the application processor such as the bootloaders, trusted firmware, trusted os, etc, then no, those have a superset of access to what the primary OS running on those cores have access to. This is by design.
jeffbee 6 hours ago
It's not just phones, either. All modern computers are full of non-architectural cores running all kinds of wacky stuff.
izacus 8 hours ago
Yes, at least Pixels and Apple devices do (the Titan/T security chips handle disk encryption and communication and are behind IOMMU which disallows direct acces from things like modems).
someonebaggy 7 hours ago
What's meant by "your device's real-time OS"? Heard several variations of this questioning recently and it seems more like FUD than anything else. I presume it's a telephone game away from the fact that some modem processors have DMA access and WAN-side exploits?
Pxtl 8 hours ago
My pixel 7 is starting to get long in the tooth, I know I'll run it into the ground but I'm starting to wonder where I'll go for the next one now that Google is increasingly locking down their platform.
microtonal 8 hours ago
Motorola Signature 27, since that seems to be the phone that is going to support GrapheneOS? I have a P10P, but I'm very excited that they are working with a manufacturer that actually supports them. I'll most likely buy the Signature 27 at some point, just to vote with my wallet (even if the P10P) is still fine.
someonebaggy 7 hours ago
Whatever Graphene or Lineage supports. Google doesn't even have magic power over all phone makers, let alone all ROMs.
ljhkkjl 6 hours ago
Relying on Google hardware seems like a very bad idea. GrapheneOS would have much more adoption if they weren't so Google-obsessed.
nicman23 6 hours ago
noooooo it needs the secuureee coooproccesssorr or it is 1% easier to haaack
at least they went with something with snapdragon - the upcoming moto phone
DANmode 6 hours ago
Sorry kids, this is Hacker News,
not Lacker News.
Not tall enough, try again next year.
DANmode 6 hours ago
> GrapheneOS would have much more adoption if they weren't so Google-obsessed.
The GrapheneOS project would have lots of other devices to choose from (or any) if everyone making hardware (besides Google) weren’t so obsessed with selling cheap, insecure trash.
You don’t know what you’re talking about.
If you ever do: you’re free to build the project from source for whatever generic device - but will gain only small details over vanilla AOSP without proper hardware to make use of.
ljhkkjl 29 minutes ago
Why do I need to build a project from scratch? I have been a happy user of LineageOS for a long time (with MicroG). It works nicely.
That cheap, insecure trash works fine for almost everyone. Niche security features are not sufficient reasons to buy Google hardware.
atlgator 7 hours ago
Why does the announcement focus so much on Apple when they exclusively support Android?
mrbn100ful 8 hours ago
Yes please buy the low volume phone from a 5% market share manufacturer.
Someone high up got tired to pull over every pixel user at the border.
With the new Motorola, TSA line are going to move faster that ever!
If you care about privacy, stay away for the moto release and stick with pixel.
lesspassiveobse 8 hours ago
English version: Yes, please buy the low volume phone from a 5% market share manufacturer. Someone high up got tired of having to pull over every pixel user at the border. With the new Motorola, TSA lines are going to move faster than ever! If you care about privacy, stay away from the moto release and stick with pixel.
For reference Pixels have about 1% market share, the graphene phones will be the same hardware as normal moto flagships and 99% of TSA agents won't be able to differentiate motorola models
gruez 8 hours ago
>For reference Pixels have about 1% market share,
You're off by a factor of 3, unless you count global market share, which includes random brands unlikely to be in the US like xiaomi or huawei.
https://counterpointresearch.com/en/insights/us-smartphone-m...
Moreover motorola flagships (ie. the only model that support grapheneos for now) are likely a fraction of the market share of motorola as a whole, so OP is still correct in that motorola grapheneos phones are more identifiable.
>the graphene phones will be the same hardware as normal moto flagships and 99% of TSA agents won't be able to differentiate motorola models
That argument could be used for pixels as well, which are also just generic black rectangles, especially the "a" models that lack the distinctive camera bump. Also if DHS/ICE really wanted to, they could avoid this problem altogether by requiring travelers to self-declare what phone they have. Sure, you can lie, but then you committed a federal offense by lying on immigration paperwork.
mrbn100ful 7 hours ago
Go on the Motorola website, over 40 SKUs! We all know that the most expensive one is not going to be the most popular.
Every Google Pixel model per generation ends up supported.
DO NOT UNDERESTIMATE TSA.
Social hardening is a real problem.
Pxtl 8 hours ago
> With the new Motorola, TSA line are going to move faster that ever!
I missed a news story. Context?
worldsavior 7 hours ago
Motorola has partnership with GrapheneOS.