My colleague @Final wrote the following on X:

>We threat modelled that this feature could be a notable target for exploits to prevent reboots & keeping data safe when introduced in
GrapheneOS. Compared to iOS, you can configure a shorter reboot time & USB-C port hardware controls prevent USB as a mode of exploit delivery.

> In my adversarial opinion, blocking auto-reboot matters more than an AFU Locked extraction capability. Extraction only opens up phones seized around/after the capability exists, while the automatic reboot blocker keeps phones seized in the past more exploitable.

> Magnet Forensics, the company in the article, have already discussed about the impacts the addition of automatic reboots across flagship smartphones in mobile forensics including this recent webinar. We even get a mention.

https://t.co/2wAtfq3qnb

> Protecting GrapheneOS against malicious use of forensic tools / 0days for unauthorised access is two parts: preventing known tools from working, and designing the OS that the window of exploitability if a capability ever emerged is as short as possible. Nothing is unhackable.

> There will always be an eventual risk of an exploit day where stolen devices will be peeled open from being vulnerable after several years with no updates. This is why you use a strong entropy alphanumeric password to resist any capability of brute forcing the credentials in BFU.

If you have just or are planning on joining the global family of GrapheneOS users, you are doing so at a time of accelerated progress and change on a UI/UX basis. Great to have you along for the journey.

#ThingsAreHappening #GrapheneOS

Almost half way to the Zapraiser target.

Nostr is dead 😜

#NostrIsDead

Thankyou everyone so far 🙏

We need the person who recently sent a 1000 EUR donation via Wise to contact us via email with their full name so we can get Wise to unfreeze the payment. We regularly run into this issue with Wise but it's usually for small donations such as a 5 EUR one which got returned today.

There's someone who keeps trying to donate 5 AUD and it keeps being returned since we don't have their full name to pass this review. It's likely mainly caused by sanctions enforcement. There are often name collisions especially in cases where the sending bank gives initials.

"2026 DeGoogle Mobile Telemetry Study: 72-Hour Packet Capture Dataset
How much data does a phone secretly send to Google when you are not using it? Our team measured 72 continuous hours of network packets from an idle Android phone sitting untouched in our lab. Here is our raw dataset, our test setup, and what it means for your privacy."

https://www.praveentechworld.com/research/degoogle-telemetry-2026