GrapheneOS fixes Android VPN leak Google refused to patch

(cyberinsider.com)

75 points | by Georgelemental 3 hours ago ago

8 comments

  • nottorp 34 minutes ago ago

    > Because system_server operates with elevated networking privileges and is exempt from VPN routing restrictions

    So a VPN isn't a VPN on Android? Regardless of this bug. Do other locked down operating systems act the same?

  • unethical_ban an hour ago ago

    I know there are bad business reasons, but how can someone classify a VPN leak as "not a security issue" and keep their pride?

    • boje an hour ago ago

      That assumes there is pride they have to bother to keep.

      • k4rli an hour ago ago

        Interestingly GrapheneOS being so good brings more money to Google as only Pixel phones are supported.

        • snapplebobapple 17 minutes ago ago

          First motorola grapheneos phone i am buying to get fully off the google pain train. Grapheneos tides me over until a real linux smart phone shows up or i die of old age. Now if home assistant could get thread network join*ng working without an android phone with a google account i could ve fully ris of those eh holes.

        • mcraiha 34 minutes ago ago

          There should be at least one Motorola phone before end of the year that has GrapheneOS support.

        • oceansky 28 minutes ago ago

          So far. Other companies surely will make their devices compatible if the market share increases for it

  • OutOfHere an hour ago ago

    It wasn't patched by Google because it's a backdoor. For various reasons, modern mainline Android is substantially hazardous to use.