GoKawiil
Tech News
GrapheneOS has introduced a feature called Secure Paste that lets users paste text normally while preventing apps from silently reading clipboard content in the background. The feature aims to close a long-standing privacy gap where apps could monitor copied passwords, codes or personal data without user awareness.
Security researchers found a flaw in Android's network stack that lets any app, without special permissions, send UDP packets through the device's Wi-Fi or cellular hardware that bypass VPN tunnels entirely. This occurs even when the 'Block all connections without VPN' setting is enabled, exposing a user's real IP address. The bug was reported through Google's Vulnerability Reward Program but closed without action, while GrapheneOS says it is working on a fix.
GrapheneOS has shipped version 13 of its Messages app, rebuilding the interface with Jetpack Compose and Material 3 design. The update adds conversation management tools like pinning, snoozing, archiving, and multi-select actions, plus support for large-screen two-pane layouts and a redesigned recipient picker.
GrapheneOS announced it is teaming up with Motorola to produce phones running the privacy-focused custom Android OS. Commentator Switched To Linux says the deal raises unanswered questions and concerns rather than excitement, without detailing specific terms of the arrangement.
GrapheneOS announced it is issuing a new OS build to fix a volume bar UI bug introduced by an upstream Android security patch, along with a Private Space interface issue. As a result, the long-in-development overhaul of its Messaging app, which the team has worked on for months, will now arrive after this maintenance release rather than alongside it.
GrapheneOS is rebuilding its Messaging app with a new Android Compose interface, along with numerous fixes and improvements. The project also confirmed plans to implement RCS messaging natively, eventually letting users message over RCS without depending on Google Messages, and it's developing a secure paste feature to stop apps from reading clipboard data left by other apps.
Fender has released the Fender Audio app for iPhone, adding EQ presets and a custom five-band equalizer to its $299 MIX wireless headphones. The app also shows battery status and offers configurable Home Screen widgets for quick access to device settings.
GrapheneOS developers discovered that Google's Pixel 11 phones do include hardware support for Memory Tagging Extension (MTE) after examining code in the Android 17 QPR2 Beta 4 release. This contradicts the project's earlier assessment, made just days prior, that the phones lacked MTE and its accompanying warning against purchasing them.
Aurora Store, the popular open-source client used to download apps without a Google account, has started failing for many users with a 'Server busy, please try again later' error when installing apps anonymously. The problem persists across troubleshooting steps like clearing cache, using a VPN, or restarting devices, suggesting Google may be blocking access at the server level rather than a local bug.
The GrapheneOS development team says it could not finish porting its security-focused Android build to Google's new Pixel 11 phones because the devices lack support for Arm's memory tagging extension (MTE), a hardware-level security feature. Developers say they built a partial port after a week of effort but had to halt the project, calling the omission an apparent cost-cutting move by Google. As a result, the team may abandon future support for Pixel devices and focus instead on Motorola hardware.
The GrapheneOS project has said that Google's upcoming Pixel 11 will no longer support hardware Memory Tagging Extension (MTE), a security feature present in recent Pixel devices. The announcement came via a social media post rather than a detailed report, so specifics on why the feature was removed remain unclear.
A GrapheneOS user reports that the PayPal app now fails to launch, throwing a RootDetectionSecurityException citing a security policy violation. The user suspects the crash may be tied to having enabled the PayPal card for contactless NFC payments, though this hasn't been confirmed as the sole trigger.