thestinger

Please read through https://attestation.app/about again but also check out the upstream documentation on key attestation and the Auditor protocol documentation linked from that page while going through it. There's likely already be information there that's useful to you. I avoided trying to explain everything myself rather than delegating to existing documentation elsewhere like my protocol documentation in the app which shows the binary-level format of the attestation challenge and response.

Forgive me if this seems trivial to the security researchers out there, but I'm having a hard time wrapping my head around what having Remote Attestation actually does for the user, and what a user has to gain by setting this up for themselves by installing Auditor.

It provides you with hardware-verified information, and chains trust to the application which provides software-verified information. The whole point is that you are not trusting the OS or the user interface on the device to provide accurate information.

thestinger

Sandboxed Google Play compatibility layer (gmscompat)

• https://github.com/GrapheneOS/platform_art/commit/0e277192c3e6f9d3c990e70239880c5cbffe2c1e
• https://github.com/GrapheneOS/platform_bionic/commit/17e9a9a86a2e3e64ebacdf14af7ca2a68e03eb4a
• https://github.com/GrapheneOS/platform_build/commit/85c5b9542771ef4d5f9337d0ae8d8f6df52689b5
• https://github.com/GrapheneOS/platform_frameworks_base/commit/ccd5bac1b400596bc35ca9ef4545eea623fdecee
• https://github.com/GrapheneOS/platform_libcore/commit/8d4383d15f9baed7665dbb459b29567e729b166d
• https://github.com/GrapheneOS/platform_packages_apps_GmsCompat
• https://github.com/GrapheneOS/platform_packages_apps_Settings/commit/550842c62ac693234b38fcaa0ed30692fae1873b
• https://github.com/GrapheneOS/platform_packages_apps_Settings/commit/7036f7190593cb3ce5e2eed5066c574388ba47a3

thestinger

Some of the privacy features that I developed in the past are now going to be standard Android features in the next major release. In some cases, the implementation that I worked on ended up being a direct inspiration for the upstream work. I also pushed them to enable permissions review by default, which may have had some influence on it finally shipping as enabled. It was seemingly implemented for some niche scenario and most of their privacy / security team didn't know about the feature existing when I talked to them about it in the past.

Most of my work has focused on improving security, and that focus will be somewhat increased in Android Q due to many of the privacy improvements being part of the baseline OS.

Android P had previously replaced some of the privacy features developed as part of the AndroidHardening project such as restricting access to the camera, microphone and sensors in the background.

Features that were not implemented by my past work:

• [Scoped storage](https://developer.android.c

thestinger

These results are with glibc malloc on x86_64. The last public PaX and grsecurity patches don't support arm64 which is one of the two architectures (x86_64 kernels including x32/x86_32 and arm64 kernels including armv7 userspace) focused on by linux-hardened. There isn't anything other than x86_64 to compare across all 3 kernels although linux-hardened has the same end result for both x86_64 and arm64 (with slightly different starting points) and there are few mainline differences. The linux-hardened implementation of ASLR is a very minimal modification of the mainline implementation to fix the weaknesses compared to grsecurity. The intention is to upstream all of these changes, although care needs to be taken to properly justify them to avoid getting anything rejected unnecessarily.

Explanation of differences between kernels:

• Mainline and linux-hardened base randomization entropy for the mmap base and executable to the vm.mmap_rnd_bits sysctl for 64-bit and

thestinger

# done

- device_common
- device_generic_goldfish
- device_google_barbet
- device_google_bonito
- device_google_bonito-sepolicy
- device_google_bramble
- device_google_coral
- device_google_coral-sepolicy

thestinger

0.releases.grapheneos.org
qdisc cake 8001: root refcnt 2 bandwidth 2Gbit besteffort triple-isolate nonat nowash no-ack-filter split-gso rtt 100ms raw overhead 0
 Sent 825589304596 bytes 562670731 pkt (dropped 2197065, overlimits 23438538 requeues 0)
 backlog 416930b 284p requeues 0
 memory used: 5471404b of 15140Kb
 capacity estimate: 2Gbit
 min/max network layer size:           42 /    1514
 min/max overhead-adjusted size:       42 /    1514
 average network hdr offset:           14

thestinger

This post has been moved to our discussion forum:

https://discuss.grapheneos.org/d/522-experimental-android-13-grapheneos-release

thestinger

Contact info:

• https://grapheneos.org/contact which lists our official @GrapheneOS organization account on Twitter
• contact@grapheneos.org

8 articles published in the past 6 months from news publications with verified Twitter accounts (Twitter requires at least 3):

• https://www.androidpolice.com/what-is-graphene-os/
• https://www.golem.de/news/nitrophone-2-im-test-das-sicherste-smartphone-hat-keine-mikrofone-2202-163283.html
• https://www.forbes.com/sites/federicoguerrini/2022/04/03/worried-that-your-phone-is-spying-on-you-try-a-different-os/

thestinger

Note: these 10 news articles were chosen based on notability of the publisher and for directly covering the GrapheneOS project rather than it just being mentioned or a team member being asked to provide comments. Most don't have particularly accurate or good coverage of the project, but that wasn't the point of this selection.

• https://www.wired.co.uk/article/james-bond-no-time-to-die-tech
• https://www.golem.de/news/nitrophone-2-im-test-das-sicherste-smartphone-hat-keine-mikrofone-2202-163283.html
• https://www.jpost.com/business-and-innovation/tech-and-start-ups/article-695882
• https://www.forbes.com/sites/federicoguerrini/2022/04/03/worried-that-your-phone-is-spying-on-you-try-a-different-os/
• https://larepublica.pe/tecnologia/2022/03/12/android-descubre-las-8-nuevas-aplicaciones-que-google-play-store-estreno-esta-semana/
• https://www.heise.de/news/c-t-3003-Ent-googletes-Android-dank-Calyx-e-Graphene-Lineage-Volla-6682371.html
• https://9to5google.com/2022/01/05/nitrophone-2-pixel-6-series-security/

thestinger

<?xml version="1.0"?>
<!DOCTYPE fontconfig SYSTEM "fonts.dtd">
<fontconfig>
  <alias>
    <family>sans-serif</family>
    <prefer>
      <family>Source Sans Pro</family>
    </prefer>
  </alias>
  <alias>