GrapheneOS makes a lot of privacy improvements, not just security improvements.
A recent focus has been fixing difficult issues to prevent users being tracked via Wi-Fi. Android and other Linux-based OSes along with iOS, etc. have flaws preventing MAC randomization from working.
A recent focus has been fixing difficult issues to prevent users being tracked via Wi-Fi. Android and other Linux-based OSes along with iOS, etc. have flaws preventing MAC randomization from working.
See grapheneos.org/features#graph… for an overview of the features added by GrapheneOS. This is a list of what we improve upon over Android 11.
It doesn't take credit for what Android provides, as is common elsewhere. That's even the case for features we participated in getting landed.
It doesn't take credit for what Android provides, as is common elsewhere. That's even the case for features we participated in getting landed.
On Android and iOS you can be tracked across Wi-Fi networks, apps can use sensors to record coarse movement, location and audio information without a way to fully revoke it and the attempts at preventing cross-app tracking are very incomplete even across profiles. Lots more too.
We'll be releasing a few proof of concept apps demonstrating some of the privacy and security issues we address.
Also going to be making apps demonstrating many features provided by OS and app privacy/security features elsewhere do not really work such as firewall features.
Also going to be making apps demonstrating many features provided by OS and app privacy/security features elsewhere do not really work such as firewall features.
We'll be publishing apps demonstrating
https://twitter.com/GrapheneOS/status/1356400290640125952, other firewall leaks, cross-profile identifier leaks, intercepting data intended for other apps via microG, a subset of Wi-Fi privacy leaks demonstrable through an app and other things. Will be able to test your OS.
The fine-grained firewall leak demonstration can essentially be a pastebin site implemented as an app sending arbitrary data to the server via DNS queries.
It's an easy way to demonstrate to users that their fine-grained firewall filtering and/or monitoring isn't really working.
It's an easy way to demonstrate to users that their fine-grained firewall filtering and/or monitoring isn't really working.
Apps are using this as a way to send data to their servers. It's often hard to draw the distinction between malware and the most popular apps, if there is one.
It's clearly not enough to point out these things can be done and are being done. We'll be making a few little demos.
It's clearly not enough to point out these things can be done and are being done. We'll be making a few little demos.
DNS queries go to the DNS resolver such as 1.1.1.1, 9.9.9.9, your ISP DNS, etc. Those send along the queries to the authoritative DNS servers chosen / run by sites. Being able to make a DNS query via system DNS is ultimately the ability to send any data to anyone, anywhere.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
