Latest release addresses the privacy issue brought to our attention by NitroKey with Qualcomm SoC devices by stopping xtra-daemon from sending the SoC serial number in the HTTPS User-Agent header:
https://grapheneos.social/@GrapheneOS/110284380098624253 (https://grapheneos.social/@GrapheneOS/110284380098624253)
We'll be removing the User-Agent header completely later.
#grapheneos (https://grapheneos.social/tags/grapheneos)#qualcomm (https://grapheneos.social/tags/qualcomm)#xtra (https://grapheneos.social/tags/xtra)#psds (https://grapheneos.social/tags/psds)#privacy (https://grapheneos.social/tags/privacy)
GrapheneOS version 2023042900 released: https://grapheneos.org/releases#2023042900 (https://grapheneos.org/releases#2023042900).
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
https://discuss.grapheneos.org/d/4749-grapheneos-version-2023042900-released (https://discuss.grapheneos.org/d/4749-grapheneos-version-2023042900-released)
#grapheneos (https://grapheneos.social/tags/grapheneos)#privacy (https://grapheneos.social/tags/privacy)#security (https://grapheneos.social/tags/security)
GmsCompatConfig (sandboxed Google Play compatibility layer configuration) version 50 released: https://github.com/GrapheneOS/platform\_packages\_apps\_GmsCompat/releases/tag/config-50 (https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-50).
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/4748-gmscompatconfig-version-50-released (https://discuss.grapheneos.org/d/4748-gmscompatconfig-version-50-released)
#GrapheneOS (https://grapheneos.social/tags/GrapheneOS)#privacy (https://grapheneos.social/tags/privacy)#security (https://grapheneos.social/tags/security)#gmscompat (https://grapheneos.social/tags/gmscompat)
Linux 6.1 replaced important core kernel code with a significantly more complex new implementation (maple trees) that's not yet battle hardened. It should have been given more time to mature before making it into the only available option. It's causing issues for a lot of people.
The kernel version ranges listed above where Android builds work still have severe issues. They tried to fix those issues at the expense of regressing this again even though there are test cases for this that are now failing. These regressions are in no way hardware specific.
Linux 6.2.13 and 6.1.26 have broken Android builds again by resolving some mmap regressions at the expense of reintroducing others. mmap has been broken since 6.1.
https://grapheneos.social/@GrapheneOS/110121891995898025 (https://grapheneos.social/@GrapheneOS/110121891995898025)
The usable 6.1/6.2 kernel versions are 6.2.9 through 6.2.12 and 6.1.22 through 6.1.25.
We use broadcom.psds.grapheneos.org as default PSDS source for 6th/7th generation Pixels with a toggle to choose standard Google cache instead. We obtain data from Broadcom's service since it can be fresher than Google's cache.
Our Qualcomm PSDS cache will be shipped for 4th/5th gen.
Auditor app version 69 released: https://github.com/GrapheneOS/Auditor/releases/tag/69 (https://github.com/GrapheneOS/Auditor/releases/tag/69).
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/4597-auditor-app-version-69-released (https://discuss.grapheneos.org/d/4597-auditor-app-version-69-released)
See https://attestation.app/about (https://attestation.app/about) and https://attestation.app/tutorial (https://attestation.app/tutorial) for info about the app and optional monitoring service.
#GrapheneOS (https://grapheneos.social/tags/GrapheneOS)#privacy (https://grapheneos.social/tags/privacy)#security (https://grapheneos.social/tags/security)#android (https://grapheneos.social/tags/android)#attestation (https://grapheneos.social/tags/attestation)#VerifiedBoot (https://grapheneos.social/tags/VerifiedBoot)#MeasuredBoot (https://grapheneos.social/tags/MeasuredBoot)#HSM (https://grapheneos.social/tags/HSM)#SecureElement (https://grapheneos.social/tags/SecureElement)#auditor (https://grapheneos.social/tags/auditor)
GmsCompatConfig (sandboxed Google Play compatibility layer configuration) version 49 released: https://github.com/GrapheneOS/platform\_packages\_apps\_GmsCompat/releases/tag/config-49 (https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-49).
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/4593-gmscompatconfig-version-49-released (https://discuss.grapheneos.org/d/4593-gmscompatconfig-version-49-released)
#GrapheneOS (https://grapheneos.social/tags/GrapheneOS)#privacy (https://grapheneos.social/tags/privacy)#security (https://grapheneos.social/tags/security)#gmscompat (https://grapheneos.social/tags/gmscompat)
Vanadium version 112.0.5615.136.0 released: https://github.com/GrapheneOS/Vanadium/releases/tag/112.0.5615.136.0 (https://github.com/GrapheneOS/Vanadium/releases/tag/112.0.5615.136.0).
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/4585-vanadium-version-112056151360-released (https://discuss.grapheneos.org/d/4585-vanadium-version-112056151360-released)
#GrapheneOS (https://grapheneos.social/tags/GrapheneOS)#privacy (https://grapheneos.social/tags/privacy)#security (https://grapheneos.social/tags/security)#browser (https://grapheneos.social/tags/browser)
GrapheneOS Apps (app repository client) version 18 released: https://github.com/GrapheneOS/Apps/releases/tag/18 (https://github.com/GrapheneOS/Apps/releases/tag/18).
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/4567-grapheneos-apps-app-repository-client-version-18-released (https://discuss.grapheneos.org/d/4567-grapheneos-apps-app-repository-client-version-18-released)
#GrapheneOS (https://grapheneos.social/tags/GrapheneOS)#privacy (https://grapheneos.social/tags/privacy)#security (https://grapheneos.social/tags/security)#android (https://grapheneos.social/tags/android)#repository (https://grapheneos.social/tags/repository)
GmsCompatConfig (sandboxed Google Play compatibility layer configuration) version 48 released: https://github.com/GrapheneOS/platform\_packages\_apps\_GmsCompat/releases/tag/config-48 (https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-48).
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/4478-gmscompatconfig-version-48-released (https://discuss.grapheneos.org/d/4478-gmscompatconfig-version-48-released)
#GrapheneOS (https://grapheneos.social/tags/GrapheneOS)#privacy (https://grapheneos.social/tags/privacy)#security (https://grapheneos.social/tags/security)#gmscompat (https://grapheneos.social/tags/gmscompat)
GrapheneOS version 2023041100 released: https://grapheneos.org/releases#2023041100 (https://grapheneos.org/releases#2023041100).
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
https://discuss.grapheneos.org/d/4437-grapheneos-version-2023041100-released (https://discuss.grapheneos.org/d/4437-grapheneos-version-2023041100-released)
#grapheneos (https://grapheneos.social/tags/grapheneos)#privacy (https://grapheneos.social/tags/privacy)#security (https://grapheneos.social/tags/security)
GmsCompatConfig (sandboxed Google Play compatibility layer configuration) version 46 released: https://github.com/GrapheneOS/platform\_packages\_apps\_GmsCompat/releases/tag/config-46 (https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-46).
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/4367-gmscompatconfig-version-46-released (https://discuss.grapheneos.org/d/4367-gmscompatconfig-version-46-released)
#GrapheneOS (https://grapheneos.social/tags/GrapheneOS)#privacy (https://grapheneos.social/tags/privacy)#security (https://grapheneos.social/tags/security)#gmscompat (https://grapheneos.social/tags/gmscompat)
Since access to TPU/GXP doesn't provide access to any additional data and the apps able to use them aren't installed by default, we'll be enabling this toggle by default for ease of use. By default, only difference will be faster Google Camera on Pixel 7 and 7 Pro via GXP access.
Google Camera uses the TPU on 6th generation Pixels which already works fine on GrapheneOS. On 7th generation Pixels, it uses both the TPU and the new GXP accelerator. It needs a special SELinux domain to access the GXP and we didn't have it set up so post-processing was slower.
Android Neural Networks API needs to abstract across different Android hardware including the Snapdragon DSP and Tensor TPU. Multiple Google apps directly use TPU to provide more acceleration. This is currently allowed but it adds extra attack surface so we're making it optional.
Tensor's hardware accelerators are isolated components respecting app sandboxing. Every app can use TPU via Neural Networks API (https://developer.android.com/ndk/guides/neuralnetworks (https://developer.android.com/ndk/guides/neuralnetworks)). Apps using Camera2 API in a certain way or using CameraX get hardware accelerated HDR+ taking advantage of TPU and/or GXP.
Our next release includes a toggle for users to choose whether Google apps they install can directly use Pixel hardware accelerators. This controls direct access to Tensor TPU on both 6th/7th generation Pixels and also direct access to the GXP for Google Camera on 7th gen Pixels.
#grapheneos (https://grapheneos.social/tags/grapheneos)#tensor (https://grapheneos.social/tags/tensor)#tpu (https://grapheneos.social/tags/tpu)#gxp (https://grapheneos.social/tags/gxp)#pixel (https://grapheneos.social/tags/pixel)#GoogleCamera (https://grapheneos.social/tags/GoogleCamera)
GmsCompatConfig (sandboxed Google Play compatibility layer configuration) version 45 released: https://github.com/GrapheneOS/platform\_packages\_apps\_GmsCompat/releases/tag/config-45 (https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-45).
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/4351-gmscompatconfig-version-45-released (https://discuss.grapheneos.org/d/4351-gmscompatconfig-version-45-released)
#GrapheneOS (https://grapheneos.social/tags/GrapheneOS)#privacy (https://grapheneos.social/tags/privacy)#security (https://grapheneos.social/tags/security)#gmscompat (https://grapheneos.social/tags/gmscompat)