3 comments

  • nottorp 31 minutes ago

    > Because system_server operates with elevated networking privileges and is exempt from VPN routing restrictions

    So a VPN isn't a VPN on Android? Regardless of this bug. Do other locked down operating systems act the same?

    • unethical_ban 49 minutes ago

      I know there are bad business reasons, but how can someone classify a VPN leak as "not a security issue" and keep their pride?

      • boje 46 minutes ago

        That assumes there is pride they have to bother to keep.

        • k4rli 42 minutes ago

          Interestingly GrapheneOS being so good brings more money to Google as only Pixel phones are supported.

          • snapplebobapple 13 minutes ago

            First motorola grapheneos phone i am buying to get fully off the google pain train. Grapheneos tides me over until a real linux smart phone shows up or i die of old age. Now if home assistant could get thread network join*ng working without an android phone with a google account i could ve fully ris of those eh holes.

            • mcraiha 31 minutes ago

              There should be at least one Motorola phone before end of the year that has GrapheneOS support.

              • oceansky 25 minutes ago

                So far. Other companies surely will make their devices compatible if the market share increases for it

          • OutOfHere 44 minutes ago

            It wasn't patched by Google because it's a backdoor. For various reasons, modern mainline Android is substantially hazardous to use.

            Considering Google's behavior, I now wonder if Go-lang even is safe to use, if Google can be trusted to not inject a stealth backdoor into each binary that opens a port.