1y ago

Google fixes two Pixel zero-day flaws exploited by forensics firms. GrapheneOS discovered and reported these flaws.

Google fixes two Pixel zero-day flaws exploited by forensics firms

16 comments

Friendly reminder GrapheneOS relies on donations from those who realize the value it provides! https://grapheneos.org/donate
- disclosed active exploitation
  So, not a fucking zero day.
  I'm confused. Isn't an active exploit that hasn't been patched yet, by definition, a zero day? So the release of a new patch that closes an actively exploited vulnerability patches a zero-day?
- I was so excited to see zero-day in the title, and then I was disappointed that zero-day was in the title.
- It can be a zero click 🫣
Interestingly, GrapheneOS isn't secure enough for Niantic games
- Well that's mildly disappointing. Been on GrapheneOS for a while and been considering picking up Pokemon Go just to get out and about more.
  
  Pokemon Go works for now Ingress is a no go Not sure about the other Niatic games
- explain?
  
  Niantic doesn't consider it secure enough due to the Google Play Store security check only being Basic not Strong
- thats google safety net which only allows apps that use that check to be installed on google verified OS's which graphene cant become
I hate talking like a zoomer, but damn it, Graphene is the GOAT, as usual
- The acronym GOAT has been around since well before those zoomers were born, probably before most of their parents were born, so don't feel too embarrassed!
This is how the ecosystem improves! Kudos to the Graphene team!
Any chance we'll be able to use these to gain root on a Pixel without unlocking the bootloader?

16 comments