GrapheneOS, 22 days ago

@apicultor This is very outdated.

apicultor, 22 days ago

@GrapheneOS Has it been entirely remediated since it was written in 2021?

GrapheneOS, 22 days ago

@apicultor Pixels moved away from Snapdragon in 2021 to Tensor. They began using wrapped key encryption support, moved to a custom RISC-V secure element (Titan M2) and an entirely different TEE (TrustZone) implementation (Trusty OS). It's a different platform, not the same one. We've recently posted a lot about this and how we have worked on improving security against recovery of data from After First Unlock devices. Our pinned post is about firmware improvements we got them to add in April.

GrapheneOS, 22 days ago

@apicultor Pixel 5a is the only Snapdragon Pixel that's not end-of-life and will be soon. Our device-specific hardening work is being done for Tensor Pixels.

You should read the thread we have pinned: https://grapheneos.social/@GrapheneOS/112204428984003954. It goes into detail about some of our recent improvements and the firmware updates we pushed for.

We have zero-on-free which applies at shutdown/reboot as it does normally, auto-reboot, USB-C port control disabling USB at a low level and our usual exploit protections.