Conversation

You’re unable to view this Tweet because this account owner limits who can view their Tweets. Learn more

Replying to

and

As the post says, it was fixed in the February security update, so it doesn't impact the latest versions in any way. grapheneos.org/releases#2020. You would need to ask about releases before 2020.02.04.01. Don't have time to look back every old vulnerability and analyze them, sorry.

Replying to

and

Their exploit is only for Android 8-9 since they say exploiting Android 10 is harder so there's already a catch before GrapheneOS hardening comes into play. If you want to pay a security researcher to revert fixes for old vulnerabilities and analyze impact of hardening, go ahead.

You’re unable to view this Tweet because this account owner limits who can view their Tweets. Learn more

Replying to

and

Bluetooth is already disabled by default in GrapheneOS. Leave it disabled and remove the quick settings entry so you don't toggle it on by accident. This isn't a good reason to make alternate builds of the OS. That requires substantial resources and wouldn't make much sense.

Replying to

and

GrapheneOS can't have assorted variants of the official builds disabling different combinations of features. Our resources are already stretched thin and we're considering dropping support for devices without maintainers. Can't be maintaining variants of the official releases.

Replying to

and

There's tons of work that needs to be done: github.com/GrapheneOS/os_ github.com/GrapheneOS/Van github.com/GrapheneOS/Aud github.com/GrapheneOS/Att github.com/GrapheneOS/har github.com/GrapheneOS/Pdf Can't afford to lose a day per month making builds removing a disabled-by-default feature.

github.com

Issues · GrapheneOS/hardened_malloc

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-base...

1:54 AM · Apr 23, 2020Twitter Web App

Likes

You’re unable to view this Tweet because this account owner limits who can view their Tweets. Learn more

Replying to

and

So either leave Bluetooth enabled or don't authorize apps to use it unless you trust them with it. The concerns you are raising don't make sense to me and I don't understand why you want special treatment for Bluetooth. We aren't making builds for things toggles handle just fine.