Post #2372919
2026-03-01 03:05 UTC
@Paralhax@infosec.exchange Nearly all the devices they support lack proper updates. There isn't a single device where they have updates even comparable to lagging behind the stock OS by a week. On Pixels, they end up way behind on kernel, driver and firmware updates after major OS updates since it takes months for them to port.
Most devices they support have no secure element meaning disk encryption doesn't truly work for the vast majority not using a strong passphrase with no extra convenience for it.
Replies (1)
-
@GrapheneOS@grapheneos.social 2026-03-01 03:06
@Paralhax@infosec.exchange They don't use hardware memory tagging, verified boot, etc. so of course it doesn't matter to them if devices support it. The list of hardware requirements for GrapheneOS are at https://grapheneos.org/faq#future-devices. Our OEM partner needs to spend around a year getting this implemented. Their current devices don't meet the requirements although they already started making major improvements towards it. Other non-Pixel devices similarly don't meet these requirements. It's not one, it's multiple.