GrapheneOS
6 posts
A claim, not a control
GrapheneOS rewrote its Messages app under a privacy and security claim, but the enforcing controls are not named or independently verifiable.
Google locked AuroraStore out of the Play Store
The Play Store blocking AuroraStore shows GrapheneOS users never held the app delivery path. The dependency, not the block, is the exposure.
Pixel 11 drops hardware MTE
Pixel 11 has no hardware memory tagging. GrapheneOS inherits the gap. What the missing per-access MTE check removes from your threat model.
It measures conformity, not security
Volkswagen blocks GrapheneOS while admitting baseline devices. The gate measures configuration identity, not security posture.
GrapheneOS Android 17 degrades every exploit primitive
GrapheneOS's Android 17 port: how sync MTE, hardened_malloc, and a hardened kernel degrade mobile exploit chains-and why failed attempts are the loudest telemetry.
Spanish police flagged GrapheneOS as suspicion
Authorities treating GrapheneOS as a targeting signal inverts threat intel logic and exposes the wrong population to scrutiny. The mechanism breakdown.