Android 15 will run Bluetooth with your phone still turned off. (security.googleblog.com)
I saw this on infinity for Reddit earlier, I don’t know if there’s a workaround for this or not.
How we built the new Find My Device network with user security and privacy in mind (security.googleblog.com)
Secure by Design: Google’s Perspective on Memory Safety (security.googleblog.com)
Piloting new ways of protecting Android users from financial fraud (security.googleblog.com)
Google Online Security Blog: Bare-metal Rust in Android (security.googleblog.com)
Android 14 introduces first-of-its-kind cellular connectivity security features - Google Security Blog (security.googleblog.com)
Key points:...
Pixel Binary Transparency: verifiable security for Pixel devices - Google Security Blog (security.googleblog.com)
cross-posted from !googlepixel...
Pixel Binary Transparency: verifiable security for Pixel devices - Google Security Blog (security.googleblog.com)
cross-posted from !googlepixel !android !technology...
Pixel Binary Transparency: verifiable security for Pixel devices - Google Security Blog (security.googleblog.com)
cross-posted from !googlepixel !android...
Pixel Binary Transparency: verifiable security for Pixel devices (security.googleblog.com)
August 4, 2023...
The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022 (security.googleblog.com)
This is Google’s fourth annual year-in-review of 0-days exploited in-the-wild [2021, 2020, 2019] and builds off of the mid-year 2022 review. The goal of this report is not to detail each individual exploit, but instead to analyze the exploits from the year as a whole, looking for trends, gaps, lessons learned, and successes.
The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022 (security.googleblog.com)
41 in-the-wild 0-days were detected and disclosed in 2022, the second-most ever recorded since we began tracking in mid-2014, but down from the 69 detected in 2021. Although a 40% drop might seem like a clear-cut win for improving security, the reality is more complicated.
The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022 - Google Blog (security.googleblog.com)
Google Messaggi: un passo importante verso una messaggistica sicura e interoperabile (security.googleblog.com) Italian
La maggior parte delle moderne piattaforme di messaggistica per i consumatori (tra cui Google Messages) supporta la crittografia end-to-end, ma gli utenti oggi si limitano a comunicare con i contatti che utilizzano la stessa piattaforma. Per questo motivo Google sostiene con forza le iniziative normative che richiedono...
Google: An important step towards secure and interoperable messaging (security.googleblog.com)
cross-posted from: lemdro.id/post/125896...
Google: An important step towards secure and interoperable messaging (security.googleblog.com)
July 19, 2023 An important step towards secure and interoperable messaging Posted by Giles Hogben, Privacy Engineering Director...
Memory Safe Languages in Android 13 (security.googleblog.com)
In Android 12 we announced support for the Rust programming language in the Android platform as a memory-safe alternative to C/C++ … In Android 13, about 21% of all new native code (C/C++/Rust) is in Rust. There are approximately 1.5 million total lines of Rust code in AOSP …
Pixel Binary Transparency: verifiable security for Pixel devices (security.googleblog.com)
Pixel Binary Transparency responds to a new wave of attacks targeting the software supply chain—that is, attacks on software while in transit to users
Learnings from kCTF VRP's 42 Linux kernel exploits submissions (security.googleblog.com)