Zum Inhalt der Seite gehen


@GrapheneOS is being threatened by French authorities for refusing to add backdoors and they're dealing with coordinated attacks in French media right now. They're pulling out of France entirely, moving all their servers, and fighting off a wave of bullshit one-sided reporting that makes them look like they're helping criminals.

They need us to fight back. Support them however you can, whether that's a dollar, sharing their story, pushing back on the garbage news coverage when you see it, or just telling someone you know about what's happening. All of it matters because they're drowning in attacks from governments and media and bad actors who want them gone.

This is the only Android OS that actually makes me feel like privacy isn't just marketing. They fight for us now they need us to fight for them.

The EU is pushing Chat Control and creating an environment where governments feel empowered to threaten developers into compliance, and if we stay quiet we're letting it happen. Show up for them in whatever way you're able to.

#grapheneos #Privacy #NoBackdoors #encryption #security #chatControl

Dieser Beitrag wurde bearbeitet. (2 Wochen her)
Als Antwort auf Watchful Citizen

no the EU is NOT allowing this, stop misinforming, it's a move by French authority ALONE

as proof they move some part to germany, and other to canada

Dieser Beitrag wurde bearbeitet. (2 Wochen her)
Als Antwort auf LΞX/NØVΛ 🇪🇺

@lexinova Fair pushback but France isn't operating in a vacuum here. The EU has been pushing Chat Control, which is the same surveillance agenda France is using to justify this. So yeah, France is doing the threatening, but the EU is absolutely creating the environment where governments feel empowered to demand backdoors from security projects.

Not misinformation, just pointing out that this isn't just one rogue country, it's part of a broader push that the EU is leading on.

Als Antwort auf Watchful Citizen

@lexinova France is one of the countries pushing Chat Control. Not all EU countries support it. It's being blocked by the countries opposing it but it doesn't take many switching sides to change that.

fightchatcontrol.eu/

Als Antwort auf GrapheneOS

yest but i disagree on their lie that EU is allowing or push the attack against you.

It's french alone that did this

Als Antwort auf Watchful Citizen

Can you share the source for the alleged threats and the refusal to add backdoors?
Als Antwort auf Corsac

@corsac They've made the threats in multiple places publicly including archive.is/UrlvK and other interviews. They sent out a memo to all French police telling them to suspect people with Google Pixel phones and to treat it as a special case. They're conflating closed source products marketed as being based on GrapheneOS with GrapheneOS and attributing what those sketchy companies do to us which they're using to justify taking actions they did against SkyECC/Encrochat.
Als Antwort auf GrapheneOS

@corsac "They sent out a memo to all French police telling them to suspect people with Google Pixel phones and to treat it as a special case."

How close is GrapheneOS from being released on other devices? So that other phone brands can have it in order to make Pixel phones feel less exceptionally suspicious to authorities.

Als Antwort auf Tichodrome Colvert

@tichodrome_colvert @corsac No other devices provide the required hardware-based security features and updates to provide a reasonable level of security. It would not be possible to successfully defend against commercial exploit tools to nearly the extent that we do on any other existing devices.

They can identify another OS is running on any device quite easily unless it's the official stock OS and therefore there isn't a verified boot notice.

Als Antwort auf GrapheneOS

@tichodrome_colvert @corsac It's also important to note that French law enforcement is clearly conflating many things which are not GrapheneOS with GrapheneOS. They're calling any closed source product using portions of our code GrapheneOS if it's marketed as being GrapheneOS. They're attributing what various apps do to GrapheneOS itself including device admin apps for providing wipe triggers which are in no way specific to GrapheneOS. Their claims are highly inaccurate.
Als Antwort auf GrapheneOS

What do you mean by verified boot device? For reference, when I boot my Pixel 7 device on which I installed GrapheneOS, the first thing that appears is a message about an alternative OS to the stock OS being installed, before the Google then GrapheneOS logos. Maybe I don't understand it correctly, but from your message it sounds like the first message about a non-stock OS being used shouldn't appear.

[Edit: after doing some research the "Your device ils loading a different operating system" message seems normal.]

Dieser Beitrag wurde bearbeitet. (2 Wochen her)
Als Antwort auf Tichodrome Colvert

@tichodrome_colvert @corsac What we're saying is that it's easy for them to tell if a device runs another OS through the notice shown at boot for verified boot. If it's locked, it even shows a fingerprint usable to identify the OS. They could have used this to figure out many of the devices they think are running GrapheneOS are clearly actually running something else which explains all the weird features they describe not present in it and even incompatible with our features.
Als Antwort auf GrapheneOS

Thanks for the link. I don't really see the `threats` there or mentions of backdoors to be included by the project. And Johanna Brousse seemed to be pretty reasonable when she closed the SSTIC conference last year (sstic.org/2025/presentation/cl…)
Als Antwort auf Corsac

@corsac The context is important especially the references to SkyECC and Encrochat. They've made it clear they think we should providing them access and are demanding cooperation. They're also inaccurately conflating GrapheneOS with other things and talking about features, distribution and marketing it doesn't have. It's quite clear to us that it's not safe to operate in France or with French services. There are a huge amount of quotes attacking us from her across news sites.
Als Antwort auf GrapheneOS

@corsac Giving a talk at an infosec conference doesn't indicate anything positive. They're waging a media war against GrapheneOS, against encryption without backdoors and against secure devices. There was no contact to us about anything beforehand. If the projects being developed in France were legitimate and truly protecting people's privacy and security, then they would face similar government attacks rather than receiving substantial government funding. Not a smart move.
Als Antwort auf GrapheneOS

@corsac I dont really get that "other projects" (namely eOS and iodé) stance. These are in no way marketing security features but minimizing of big corps tracking. Those are two really different threat models. You can achieve less big corps tracking with GOS, and gain added security as a bonus, but it is not the out of the box experience...
Als Antwort auf alci

@alci @corsac /e/ and iodéOS are both scams with extraordinarily poor privacy and security. Both fail to provide high importance privacy and security patches along with standard privacy and security protections. Both have invasive services built into the OS. Both companies are misleading people about what's provided and have spent years spreading misinformation about GrapheneOS due to seeing it as a threat. We began making people aware of their false marketing because of it.
Als Antwort auf GrapheneOS

@alci @corsac GrapheneOS is a privacy project and provides far better privacy than either of those. You're demonstrating the impact of their false marketing harming GrapheneOS. They've successfully propagated the myth that it's a security project rather than a privacy project. They've mislead people into believing an extraordinarily non-private OS without basic privacy patches which sends user data to OpenAI without consent is a privacy project. Privacy also depends on security.
Als Antwort auf GrapheneOS

@alci @corsac Both companies have a business model heavily based around misleading people about what they provide including through misinformation about GrapheneOS. The claims you're making are directly based on their false marketing. The claim that GrapheneOS somehow provides less privacy than than those in general or out-of-the-box is ludicrous. Neither of those provides the standard Android privacy patches and privacy features let alone Storage Scopes, Contact Scopes, etc.
Als Antwort auf GrapheneOS

@alci @corsac Both companies have continued misinformation about GrapheneOS during the current attacks on it from French law enforcement. It should also be noted the attacks from French law enforcement build on the foundation built by companies including Murena and iodé of wrongly portraying it as something niche, the ridiculous claim of it not being a privacy project but rather a security project, only being useful to people targeted by states, etc. They're directly complicit.
Als Antwort auf GrapheneOS

@alci @corsac Both companies are involved in attacks on our team based on fabricated stories and other libel clearly aimed at directing harassment towards us. Murena has done it very directly and continues doing it. iodé is partnered with Robert Braxman, a blatant charlatan who posts fake privacy content to sell fake privacy products. He makes daily attacks on GrapheneOS with outrageously false claims to promote his products including ones in partnering with iodé.
Als Antwort auf GrapheneOS

@alci @corsac Multiple of Braxman's products and services are proven by security researchers to contain backdoors including fake end-to-end encryption providing keys to the server.

/e/ and iodéOS both claim to provide privacy/security patches they do not and set an inaccurate Android security patch level. The mislead users about how little their DNS filtering does for privacy from apps and bogus labels on apps.

See discuss.grapheneos.org/d/24134… and the linked third party content.

Als Antwort auf Watchful Citizen

I feel very safe running a Fairphone 6 on e/OS/, a french OS, right now. that's just wonderful.

[TONE INDICATOR: Sarcasm, I don't feel safe at all]

Als Antwort auf Straybun

@straybun See discuss.grapheneos.org/d/24134… including the linked third party sources from Divested Computing, Mike Kuketz and others.

/e/ and Fairphone have atrocious security. They provide far weak protection against commercial exploit tools than iPhones. It entirely fits with what the French government wants. They either want devices to have poor security where they can break into them very easily or to provide backdoors in the encryption and for remote/physical device access.

Als Antwort auf GrapheneOS

@straybun France won't tolerate devices with a reasonable level of security where they can't use widely available off-the-shelf tools to extract data from them. GrapheneOS has massive privacy and security improvements planned.

France's law enforcement sent out memos to all their police telling them to suspect Pixel phones and to give those special treatment due to GrapheneOS existing. Most of what they're talking about is clearly not even GrapheneOS but closed source forks...

GrapheneOS hat dies geteilt.

Als Antwort auf オチュー (stop colonialism 🇵🇸)

@otyugh @straybun France's government is making false and unsubstantiated claims about Signal to promote the Olvid app made in France:

interoperable-europe.ec.europa…

lemonde.fr/en/economy/article/…

France is pushing for encryption backdoors which could be forced into Olvid due to it being based in France but could not be forced into Signal since Signal would simply stop operating in France as we're choosing to do going forward.

They're absolutely attacking Signal in addition to GrapheneOS.

teilten dies erneut

Als Antwort auf GrapheneOS

When i first saw Olvid 1yr ago, i didnt trust it cause its made in France, and they could be pressured to track users, now i dont regret using #session when i see whats happening..

#getsession

Dieser Beitrag wurde bearbeitet. (2 Wochen her)
Als Antwort auf GrapheneOS

I think the decision regarding Olive is more about the broader effort within the EU to technological sovereignty. Especially because the risk of unpredictable regulatory changes by the Trump administration as seen by the sanctions against the ICC.

@otyugh @straybun @watchfulcitizen

Als Antwort auf GrapheneOS

@otyugh @straybun Olvid isn't used anymore in gov agencies (in favor of an internal tool based on Matrix named Tchap). The article you linked date back to 2023.

legifrance.gouv.fr/download/pd…

Als Antwort auf Charles P.

@charlesp @otyugh @straybun France has continued making false and unsubstantiated claims about Signal regardless of which messaging app their government is using themselves. 2 years is not a long time ago and the information hasn't become inaccurate due to that time passing. The details of which apps the government itself are using were not the point being made. They're still continuing to promote French-made apps over Signal and other options with misinformation about them.
Als Antwort auf GrapheneOS

@otyugh @straybun "However, what sets Olvid apart is its strong emphasis on security and privacy."
😂 Yeah right, unlike Signal. Sounds legit.
Als Antwort auf GrapheneOS

@otyugh @straybun
This is a bit FUD'y, no? Olvid is open source, any encryption backdoors would be transparent to security researchers.
Als Antwort auf jksc

@jksc @otyugh @straybun No, software being open source doesn't mean the developers aren't trusted or that everything the code is doing is publicly known. It's a misconception that source code is enough to figure out what code is doing through basic review. In reality, open source software that's widely reviewed still has lots of severe vulnerabilities due to mistakes. Many severe vulnerabilities last for years or even decades in the Linux kernel. A backdoor would be hidden.
Als Antwort auf GrapheneOS

@jksc @otyugh @straybun Software being open source doesn't mean there's any significant external review, and even when there is that doesn't mean vulnerabilities will all be found especially ones which are intentionally made very subtle and hidden. Few people are even capable of auditing cryptographic code and the vulnerabilities can be extremely subtle. Aside from that, People usually aren't confirming builds match the code and in practice users can't check before updating.
Als Antwort auf オチュー (stop colonialism 🇵🇸)

@otyugh @jksc @straybun Who was behind the xz backdoor? It was made to look as if it was done by China through the name and other aspects of how it was done. It doesn't mean that's actually who did it. It could be North Korea, Iran or even intelligence services in a western country like France pretending to be Chinese as cover. It would be very strange if China's own intelligence services used a Chinese name and public working hours for it.
Als Antwort auf GrapheneOS

@otyugh @jksc @straybun Is there any way to prevent backdoors from being implanted into GrapheneOS by developers who have been bought off?
Als Antwort auf GrapheneOS

@otyugh @jksc @straybun incompetence is a well shared characteristic ! French secret services used recognisable french devices in there rogue action against Rainbow Warrior. This was stupid (an immoral), not sure they changed much... In would be surprised if they were able of a clever trick !
Als Antwort auf GrapheneOS

Do you actually have a list of recommended open source android apps? Or a recommended source of such a list? What do your developers use?
Als Antwort auf GrapheneOS

Despite this, Olvid is hosted on AWS. So much for digital sovereignty.
Dieser Beitrag wurde bearbeitet. (2 Wochen her)
Als Antwort auf GrapheneOS

@otyugh @straybun
The French justice department also has a really interesting case against the founder of Telegram

You can read all about it in the Telegram group that the founder is running

What's interesting in the case of Telegram is that the French government didn't follow the standard rules of reporting within the Telegram ecosystem

FR is hostile against privacy in the Digital Realm

France is falling back into the Dark Ages

#InfoSec #FR #GrapheneOS #privacy #programming #Telegram #backdoor

Als Antwort auf GrapheneOS

@otyugh @straybun This article is 2 years old and OBE (they use TChap now). You should re-consider your media strategy. At the moment it comes across panicky and unprofessional.
Als Antwort auf Bonsai861

@bonsai861 @otyugh @straybun France has continued making false and unsubstantiated claims about Signal regardless of which messaging app their government is using themselves. 2 years is not a long time ago and the information hasn't become inaccurate due to that time passing. The details of which apps the government itself are using were not the point being made. They're still continuing to promote French-made apps over Signal and other options with misinformation about them.
Als Antwort auf GrapheneOS

@bonsai861 3 of the 33 accounts you follow are a French organization (Murena and /e/) engaging in years of attacks on the GrapheneOS project. The products and services sold by Murena are extraordinarily insecure and non-private. This is covered at discuss.grapheneos.org/d/24134… which links to more information from Divested Computing, Mike Kuketz and others. Murena and /e/ have spent years misleading people about GrapheneOS with false claims and libel targeting our team members with harassment.
Als Antwort auf GrapheneOS

I like, use and support GrapheneOS. I was not attacking you, I'm offering advice to improve your external communications. The tone of your original 2 responses (now deleted) only strengthened my point.

I am well aware of how /e/OS and Murena are not secure and how they've communicated poorly in the past. It doesn't mean you need to lower yourselves their level. Following them on Mastodon doesn't constitute supporting them. I simply like to be aware of what they are doing.

Dieser Beitrag wurde bearbeitet. (2 Wochen her)
Als Antwort auf GrapheneOS

I would like to use Molly but I'm not sure if I should get an eSim for that and keep it. I saw some people getting one time numbers only for Signal sms verification, so I'm not sure how to do it. And I'm worried with these one time numbers that others who get the number, that they can login in to my Account then.
And I need to research about how nickname works.
Dieser Beitrag wurde bearbeitet. (1 Woche her)
Als Antwort auf GrapheneOS

@otyugh @straybun its sad that even people associated with the European Comission are included in this bullshit.
Als Antwort auf Transcedental

@Transcedental @straybun BraX3 is an extraordinarily insecure and non-private scam device. Braxman's products/services have regularly included actual real world backdoors proven by security researchers. His privacy content is filled with fabrications focused on promoting those insecure products/services. BraX3 is dramatically less secure worse than not just an iPhone but even most mainstream Android devices.

We're working with an OEM on a serious, secure alternative to Pixels.

Als Antwort auf GrapheneOS

You got me interested. What are some sources of this research?
Als Antwort auf GrapheneOS

@straybun
This sounds very worrying indeed. Where did you get this information from? I read about the media campaign against GrapheneOS, which is bad enough already, but the political orders you mention sound very extreme to me.
Als Antwort auf huiiii!!!

@Ja_E_I_O_U @straybun It was covered in a bunch of the French news including state funded media. The initial articles didn't cover it. The news that they sent out a memo about GrapheneOS was also provided to the press. State and corporate media in France are acting as a law enforcement mouthpiece for all of this. There's very little pushback against it except from more independent journalists which are almost entirely giving much fairer coverage questioning the narrative.
Als Antwort auf GrapheneOS

@Ja_E_I_O_U @straybun
this might be a job for @404mediaco since they seem to be covering a more unbiased angle when writing articles.
Als Antwort auf GrapheneOS

@straybun are iPhone devices with unreasonnable level of security ?
Or can France easily extracts data from them ?

If not, why would France tolerate them (iPhones) ?

Als Antwort auf Blue Luma

@blueluma @straybun Apple and Google do both try to defend from forensic data extraction but GrapheneOS is more exploit resistant. They're getting better, especially iPhones and stock OS Pixels. iPhone 17 with appropriate configuration should be quite resistant to it, better than stock OS Pixels.

Apple has an enormous amount of money, large market share in France, an in-house legal department and support from the US government if European countries take actions against them.

Als Antwort auf GrapheneOS

@straybun
@kuketzblog

es wird Zeit für ein vorinstalliertes GrapheneOs auf einem Smartphone.
Für e/os spricht, dass die Einrichtung für bisher alle "normalen" User, die das Gerät nutzen, einfach ist.
Was sagte letztens jemand zu meiner Frau: "Du hast ja den ITler zu Hause. Ich muss dafür bezahlen".
Krass oder?

Als Antwort auf GrapheneOS

I strongly prefer depending on a Fairphone that respects human rights than in Google Pixel : amnesty.org/en/latest/news/202…
Als Antwort auf s94

@s94 Fairphone's own OS is a Google Mobile Services OS. The other official variant uses the state-sponsored /e/ project which has extraordinarily poor security and is scamming people. Fairphone's devices are made in a factory in China too with similar oversight as what's done by Apple and Google rather than it being much better. A similar amount of resources is used to produce a Fairphone but the small scale makes it less resource efficient. It does not have proper updates / long term support.
@s94
Als Antwort auf GrapheneOS

But... Fairphone is certified Fairtrade and TCO...

Furthermore, I have a question for you because you seem to be expert in hardware. Why does Fairphone's hardware (and not software) is worst than Pixel one ?

Als Antwort auf GrapheneOS

@s94 this is a funny way to look at things... What makes you think e/OS/ is state funded ? I really don't think it is. And really, they are not into security but into privacy. Their threat model is against Gafam tracking , not against determined attackers (and likely not against malware either). Disclaimer: I use GrapheOS.
@s94
Als Antwort auf alci

@alci @s94 They've received millions of euros worth of government funding from multiple government sources. /e/ is set up as a non-profit which gets government grants despite existing to make products for Murena which is a for-profit company owned / controlled by the same people. The government is funding them building the products they sell.

projets-libres.org/en/podcast/…

> The European Union has subsidized us to the tune of several million for this project.

/e/ provides extremely poor privacy.

@alci @s94
Als Antwort auf GrapheneOS

@alci @s94 You should read discuss.grapheneos.org/d/24134… and the third party content linked there from Divested Computing and Mike Kuketz. /e/ sends user data to OpenAI without consent and contains user tracking in the update system. It has a bunch of privacy invasive services included. /e/ always connects to multiple Google services and builds those in with privileged access. Their DNS filtering does not actually stop the most privacy invasive behaviors by apps and fundamentally cannot do that.
@alci @s94
Als Antwort auf GrapheneOS

@alci @s94 Their labeling of apps with whether one of a small list of specifically listed libraries was included misleads users about app privacy. It also has inaccurate information on permissions misrepresenting how the permission model works. Do you believe that Facebook's app has no tracking?

reports.exodus-privacy.eu.org/…

The DNS filtering they use blocks single-purpose ad/tracking domains, not dual purpose ones used to provide functionality for apps. It's also easily and widely evaded.

@alci @s94
Als Antwort auf GrapheneOS

@alci OK thanks so much for the post! This was the answer I expected. Now I understand why Fairphone isn't secured.
@alci
Als Antwort auf GrapheneOS

but I am not talking about /e/ but Fairphone... Why do you say that Fairphone hardware is less secured than Pixel one ?

I don't use /e/ because it eats my battery

Dieser Beitrag wurde bearbeitet. (1 Woche her)
Als Antwort auf s94

@s94 @alci Fairphones are missing important hardware-based security features and important updates. See discuss.grapheneos.org/d/24134… which covers that too. Fairphone 5 uses a kernel branch end-of-life in December 2025 and that's not an old device. It lags 1-2 months behind on partial security backport patches compared to the official date, while meanwhile they're available 3-4 months before the official date (discuss.grapheneos.org/d/27068…). Complete patches require the current Android stable branch.
@alci @s94
Als Antwort auf Watchful Citizen

They're also doing a bot campaign on fediverse platforms trying to say the Graphene guy is just going crazy midwest.social/post/39320422. Vigilance, people!
Als Antwort auf 𐁂𐀑𐀐𐁐

@Emerson61 This libel and harassment has been ongoing since long before recent state attacks.

There's someone there linking harassment content filled with blatant lies while claiming there's no harassment. It's ridiculous and it's time for them to stop.

Look through the links we gave and search for it. archive.is/UrlvK has a clear threat, as do numerous other quotes across media platforms French authorities went to with this. It's clearly not made up no matter the lies.

Als Antwort auf Avi

@notavi10 @Emerson61 Our non-profit was already based in Canada.

OVH is a French company and was the first server provider we chose after losing free credits elsewhere. We've been primarily using OVH as our server hosting company ever since. We eventually started using BuyVM as a secondary provider. We moved the update mirrors to sponsored dedicated servers instead, initially with Macarne and ReliableSite, then a Tempest one. Vultr was introduced for BGP and more locations.

Als Antwort auf GrapheneOS

@notavi10 @Emerson61 Leaving France primarily means fully migrating away from OVH despite it being a good fit for our needs in the past. It's no longer suitable due to an explicit threat from French law enforcement with an ongoing attempt to justify acting on that against us. We shouldn't have anything they can act against without going through the courts in another country with a reasonable approach to encryption and secure devices. Their attacks on us are outrageous...
Als Antwort auf GrapheneOS

@notavi10 @Emerson61 We have some project members in France but not developers at the moment and we'll avoid that going forward.
Als Antwort auf Watchful Citizen

Certified baguette here; I just checked, because I was really surprised that this was happening, and it looks like it's right-wing leaning journals that are doing this... So I'd chalk this up to the usual fearmongering, and not something widespread (e.g. Le Monde hasn't written anything about it, and they're IMO far more grounded and diligent).

Here's an article on a (small) French tech site, noting the altercation before pointing out that @GrapheneOS went on conspiratory-like afterwards... I side with the final paragraph, stating more or less that we're all trying our best, and bashing each other's gonna lead somewhere.
linuxfr.org/users/hellpe/journ…
"*Le Parisien* calls GrapheneOS a secret trump card for drug dealers, devs are miffed"

PS: I happen to type this from a iodéOS phone, because I decided to buy a Fairphone out of ethical reasons, and thus GrapheneOS was a non-starter. Consider that this kind of reasoning might be at play for why they're receiving government funding and not you, not just conspiracies?

Als Antwort auf ISSOtm

@issotm
> and it looks like it's right-wing leaning journals that are doing this

That's not true. They're doing it because state agencies contacted them. Most of the articles are quotes. Do you consider state-funded news in France to be right wing? There's a massive amount of coverage based on inaccurate claims from state agencies, not the journalists. The journalists are not doing their job by taking that as fact and not giving a chance for us to respond to specifics, sure.

Als Antwort auf GrapheneOS

@issotm You linked to another highly inaccurate and extremely biased article. Rather than doing your own research, you're basing your claims on another inaccurate article which is wrongly blaming a right wing newspaper for it. It's easily proven wrong by a review of French state-funded news and other papers which similarly published stories heavily quoting inaccurate and unsubstantiated claims from law enforcement. Le Parisien gave little input of their own into it anyway.
Als Antwort auf GrapheneOS

iodéOS and /e/ are extraordinarily insecure and non-private. iodéOS is openly partnered with scammers including Robert Braxman. Both companies (iodé and Murena) have misled people about GrapheneOS for years including misrepresenting it as not for regular people. In doing so, they helped build the narratives now being used by law enforcement to mislead people about GrapheneOS.

discuss.grapheneos.org/d/24134… has more info and third party sources on Fairphone, iodéOS and /e/.

Dieser Beitrag wurde bearbeitet. (2 Wochen her)
Als Antwort auf GrapheneOS

Alright, so... I took the time to do some more searches, read your messages, and read some of that giant thread you've linked to.

> [The journals a]re doing it because state agencies contacted them. Most of the articles are quotes.
I can't speak for the contents of the Parisien or Figaro article, because they're paywalled. I would however like to point out that the Figaro's headline specifically uses the word “misused” (« détourné »), implying that this is *not* the use case y'all have intended for it.

> Do you consider state-funded news in France to be right wing?
Arguably, given our political direction these last few years, I'd say yes lol. But neither of the above two is state-funded, and since I don't have access to the contents I can't say they got the info from state agencies. How'd you know?

> There's a massive amount of coverage
Is there? I could only find three articles: [Le Parisien](leparisien.fr/faits-divers/goo…), [Le Figaro](lefigaro.fr/secteur/high-tech/…), and [francetvinfo](franceinfo.fr/faits-divers/nar…) (more on that one below).

> The journalists are not doing their job by taking that as fact and not giving a chance for us to respond to specifics, sure.
Actually, the francetvinfo article contains two lengthy paragraphs of your response. And... claiming that you're a non-profit is kind of missing the point? Like, yeah, sure, but what happened still happened. I agree with the rest of your stance, but I'm afraid this kind of thing does paint you in a bad light. But what do I know, I'm just a single guy :P

Als Antwort auf ISSOtm

@issotm It was meant to be a link to discuss.grapheneos.org/d/24134… about the extraordinarily level of insecurity of /e/ devices. We've edited the post to use the correct URL.

> implying that this is *not* the use case y'all have intended for it.

We're focused on what law enforcement is claiming, not journalists. The articles are a source for what law enforcement is claiming via their quotes and paraphrasing. Our issue is with what law enforcement has claimed and threatened.

Als Antwort auf GrapheneOS

@issotm
> But neither of the above two is state-funded, and since I don't have access to the contents I can't say they got the info from state agencies. How'd you know?

There are numerous other articles including from franceinfo and other sites. There are 2 articles from Le Parisien, not one, and the 2nd article contains a clear threat. We've posted a response to how things are being misrepresented at grapheneos.social/@GrapheneOS/… with a link to the article we're talking about.


A false narrative is being pushed about GrapheneOS claiming we're ending operations in France due to the actions of 2 newspapers. That's completely wrong. If both newspapers and the overall French media had taken our side instead of extreme bias against us, we'd still be leaving.

Als Antwort auf GrapheneOS

@issotm There are many other articles. Use the French Bing and Google search engines to search for GrapheneOS in the news mode. You can find a large amount of articles including state media rather than only corporate media. Many of these articles have their own direct quotes from law enforcement. Our focus is on what law enforcement has said: inaccurate claims about GrapheneOS including conflation of GrapheneOS with products which are not GrapheneOS + some quite clear threats.
Als Antwort auf GrapheneOS

@issotm
> Actually, the francetvinfo article contains two lengthy paragraphs of your response. And... claiming that you're a non-profit is kind of missing the point?

We were not given any opportunity to respond to the specific details of what was claimed. How are we supposed to address what's claimed above when we had no chance to see it? Our response was not to what was written above but rather to a generic query from the journalist. The same applies to the other articles.

Als Antwort auf GrapheneOS

@issotm They sent a query to law enforcement and to us. They published both in the same article. This is likely what most of the publications covering it did. Most did not contact us. We weren't provided with the claims made by law enforcement and given an opportunity to review and respond to those. We've responded to those claims on our social media accounts with at least 5 top level threads since we weren't given the opportunity to do it for the news articles.
Als Antwort auf ISSOtm

> You linked to another highly inaccurate and extremely biased article.
You mean... biased in your favour, you know that, right? Here's the last paragraph, translated for any reader's convenience:

(full disclosure: I agree with GrapheneOS that they've been unfairly portrayed by Le Parisien and on the political predicament in France, however I don't think their project is any less security theater than other extant Android forks. Regardless, one can see that for the pigs, not wanting Google in your pocket, that's suspect. "Don't stand out", I guess.)

> Rather than doing your own research, you're basing your claims on another inaccurate article which is wrongly blaming a right wing newspaper for it.

No, I went to google.fr's News tab, typed "GrapheneOS", and sifted through the first three pages, finding only Le Parisien and Le Figaro as reputable news source, and then linuxfr as an opinion piece. You'll find attached a screenshot of the first page of results. The second page only contains technical articles about trying out GOS or explaining what it is. (Again, if there's “massive” coverage, I'm missing it. And the secondary sources I see only quote these two papers, not any TV source either.)

Again, since the two articles are paywalled, I cannot offer further comment on the rest of your (second) post.

Als Antwort auf ISSOtm

@issotm
> I agree with GrapheneOS that they've been unfairly portrayed by Le Parisien

This is missing the point of what we've been saying. GrapheneOS has been misrepresented by French law enforcement including false claims.

> I don't think their project is any less security theater than other extant Android forks

That's an extraordinarily inaccurate belief. GrapheneOS preserves all the standard privacy/security model/features and greatly enhances it vs. the direct opposite.

Als Antwort auf GrapheneOS

@issotm GrapheneOS is based on Android 16 QPR1 with a massive set of substantial privacy and security improvements beyond the standard ones. All of the standard privacy and security protections of current Android are intact. GrapheneOS not only keeps up with the standard patch schedule but has the December 2025, January 2026, February 2026 and March 2026 patches shipped in our security preview releases with the still embargoed patches which are allowed to be shipped early.
Als Antwort auf GrapheneOS

@issotm You're conflating GrapheneOS with operating systems which are still based on Android 13, 14 and 15 with only a subset of patches assigned High/Critical severity backported to those by Google. Those OSes typically provide the subset of backported patches 1-2 months after the official date, but yet they can actually be shipped 3-4 months before their official date such as us having the current March 2026 patches already. Those OSes heavily roll back security features too.
Als Antwort auf GrapheneOS

@issotm Those operating systems also typically go many months and even many years without providing kernel, driver and firmware patches. For example, on Pixels, they haven't provided those patches since Android 16 was released in June 2025. We backported those patches to Android 15 QPR2 and then shipped Android 16 in June 2025.

GrapheneOS successfully protects from sophisticated exploit tools such as Cellebrite Premium despite significant efforts from them to compromise it.

Als Antwort auf GrapheneOS

@issotm The reason France is going after GrapheneOS is because of the much stronger level of security against exploits than other devices. The reason they want to force inclusion of a backdoor is because multiple advanced commercial exploit tool products which work fine against other Android devices don't work again it. Here's a thread with a previous example, although note we have ongoing access to current documentation for these tools:

discuss.grapheneos.org/d/14344…

Als Antwort auf ISSOtm

@issotm Here's a previous archive of the thread, which you can refresh if you want to see the newest posts:

archive.ph/cH3vA

The archive site is being very slow for us and some of their domains aren't working so maybe it's getting DDoS attacked.

Are you able to see this one?

discuss.grapheneos.org/d/24134…

We can provide an archive link for that too if you can't.

Als Antwort auf GrapheneOS

Ah... it loads partially this time. Wonder if it's anything to do with having JS disabled. Anyway, I managed to read it.

I would like to offer some nuance to your take there; let me know if you're interested in hearing another point of view.

Als Antwort auf ISSOtm

@issotm We linked 2 different threads. The one we posted an archive link for is the leaked Cellebrite Premium documentation. The other thread is the one about Murena devices which we screwed up the link for the first time. In the one about Murena devices, we linked to third party coverage of their devices. Recommend looking at the Divested Computing coverage which is more detailed than ours in many ways. We focused on security patches in particular while they covered more.
Als Antwort auf GrapheneOS

Haha, it's been a lot of links and transitive links (and it's late), so I've gotten mixed up.

The archive link doesn't show images, but that's fine, the text covers the gist of the info anyway. The other thread is the one that took me three tries to load—lulz @ computers :P

Looked at the dOS coverage, and, yeah, it's more of what I was thinking about—the “other point of view” I mentioned in my last toot.

Als Antwort auf ISSOtm

@issotm Our forum works without JavaScript for viewing but it looks different since Flarum is implement as a single page web app with fancy quick navigation, a timeline scroll bar, dynamic loading of posts, etc. If you have JS off then it should all be shown but in a very primitive layout. Archive site is losing images because we don't allow directly embedding third party images but rather have a media proxy permitting media on specific sites being proxied, only for our site.
Als Antwort auf ISSOtm

> discuss.grapheneos.org/d/27068-grapheneos-security-preview-releases has more info and third party sources on Fairphone, iodéOS and /e/.

The only instances of the letters "fair" are three copies of "fairly" on page 2 (yes, I have JS disabled :P), I can't find any mentions of iodé or /e/ either. Did you link to the wrong thread?

> iodéOS and /e/ are extraordinarily insecure and non-private.
*shrug* Not much worse than a stock ROM tbh. Not super diligent with security updates? I know plenty of people who procrastinate installing updates anyway, and we're all going alright with our lives. Maybe I'm gonna get hacked, but living in paranoia is not worth it, so I've chosen a balance of slightly increased privacy + not Play Services + runs on a phone I have (I avoid e-waste and things made in China when I can). And yeah, I *do* have things to hide :P

> iodéOS is openly partnered with scammers including Robert Braxman.
Are they? I could only find info listing that the latter uses the former, but no official endorsement of the former towards the latter. (Again, DDG search on "iodéOS robert braxman".)

Als Antwort auf ISSOtm

@issotm The link is supposed to be discuss.grapheneos.org/d/24134…. We're responding to multiple people and had the wrong thing in the clipboard.

> Not much worse than a stock ROM tbh.

They're dramatically less secure than a stock OS Pixel or an iPhone.

> Not super diligent with security updates?

They regularly lag years behind on important privacy/security patches and improvements.

This story is about law enforcement enraged by reasonably secure devices they can't easily exploit.

Als Antwort auf GrapheneOS

@issotm
> Are they? I could only find info listing that the latter uses the former, but no official endorsement of the former towards the latter. (Again, DDG search on "iodéOS robert braxman".)

Yes, they're officially partnered with him on the BraX3 device and have announced it from their account on x.com among other places. There are articles about the partnership. It's official, not an unofficial thing.

DDG is very stripped down Bing search and not great at funding stuff.

Als Antwort auf GrapheneOS

@issotm If you want to make a serious effort to find this stuff then at least use Startpage if you're trying to avoid using Google directly.
Als Antwort auf ISSOtm

hell yeah since i use oneplus prob i would build it for the op12 since im dev for it
Als Antwort auf :P: :A: :W: :L: :I: :C: :K: :E: :R: :aamheart:

@pawlicker
Note that their requirements for supporting a device are fairly stringent (I saw a link fly by but I'd have to dig it up), including specific hardware chips, and evidently a pretty heavy time committment to apply patches for your hardware. So I wouldn't hold my breath for most consumer-grade phones to be supported.
Als Antwort auf ISSOtm

@issotm @pawlicker Our requirements are listed here:

grapheneos.org/faq#future-devi…

We only require industry standard security features. None of what we require is specific to Pixels. We require having modern exploit protections, proper patches and other hardware-based security features we depend on including a secure element with the standard Android Open Source Project APIs provided by it. No need for any specific secure element, just a decent one providing the features used by AOSP.

Als Antwort auf GrapheneOS

@issotm @pawlicker The main issue is that devices providing better security tend to not allow installing another OS or cripple the device's functionality especially security if you do.
Als Antwort auf :P: :A: :W: :L: :I: :C: :K: :E: :R: :aamheart:

@pawlicker @issotm We're working with a major OEM towards a subset of their devices supporting GrapheneOS. It will likely be late 2026 or 2027 due to Snapdragon not currently meeting our security requirements. Some of the upcoming Snapdragon flagships may meet our security requirements while others do not.
Als Antwort auf GrapheneOS

also funny thing is why samsung is not supported since tensors are literally based on exynos tensor g2 from what i remember is exynos 1280 performance like xD
( i wish i didnt trade my pixel 7 pro)
Als Antwort auf :P: :A: :W: :L: :I: :C: :K: :E: :R: :aamheart:

@pawlicker @issotm Samsung doesn't allow us to support their devices. They either block installing another OS completely which they're increasingly moving towards or heavily cripple the device when using one. The main way they cripple the devices is disabling a bunch of hardware-based security features. Pixels support using all of the hardware-based security features with another OS vs. Samsung doing the direct opposite by permanently crippling security with a burned eFuse disabling features.
Als Antwort auf GrapheneOS

@pawlicker
Amusingly, I'm trying to figure out why a relative's Samsung phone is rejecting their SIM card, figured I'd adb logcat, and... wow that's a lot of logging for a device that's supposed to be idle. Including a whole lot of errors lmao
Als Antwort auf ISSOtm

@issotm @pawlicker It's fairly normal for there to be a lot of logging and it's worth noting it's normally an in-memory buffer without persistent storage other than when recent logs get saved as part of what is called a tombstone for a crash (sort of like a core dump, but a minimal amount of info dumped in text form).
Als Antwort auf :P: :A: :W: :L: :I: :C: :K: :E: :R: :aamheart:

@pawlicker @issotm We need to be able to use the standard hardware-based security features, which Samsung largely disallows for an alternate OS. It's particularly frustrating because at a hardware/firmware and low-level software level, Samsung is likely next best at security for Android devices after Pixels. Samsung makes a huge mess of things with the massive amount of bloat and low quality software they use on top of the base code but what's underneath is pretty solid.
Als Antwort auf GrapheneOS

So are you waiting for the next gen snapdragon 8 gen 6 or will the supported device have a customized 8 gen 5 to meet your security requirements?
Als Antwort auf ISSOtm

Idk, I'm not looking for anything. Maybe you're right and our government is pulling strings, but it seems to me more like they're not.

Can't fault you for wanting to pull out of here, Chat Control is... [string of expletives]. I read that you're moving infra to the USA, though, which... er, aren't they worse? The NSA has a track record of spying on USA people, requiring backdoors, and are currently [being sus with TLS encryption](blog.cr.yp.to/20251004-weakene…)... so I'm confused?

Also, mea culpa, I just learned about [the Europe 1](europe1.fr/Police-Justice/info…) article. (Though I'd point out it's *still* another private right-wing media. I should check if they're all owned by [Bolloré](en.wikipedia.org/wiki/Vincent_…) or one of those mfs... *Those* guys I could totally see pulling strings.)

Als Antwort auf ISSOtm

@issotm
> Idk, I'm not looking for anything. Maybe you're right and our government is pulling strings, but it seems to me more like they're not.

The articles are based on claims from French law enforcement. They're nearly entirely quotes and paraphrasing of what they've been told by law enforcement. There are many articles, not only the few you're talking about. Use Startpage instead of DDG.

> I read that you're moving infra to the USA

No, that's not accurate.

Als Antwort auf Watchful Citizen

what does "being threatened" mean? They sent an email and asked friendly? Coordinated media attacks also sounds weird for a single story (that as usual appears in various outlets). Almost as if the GrapheneOS marketing person (as usual) puts things out of proportion for publicity...
Dieser Beitrag wurde bearbeitet. (2 Wochen her)
Als Antwort auf pixelschubsi

@pixelschubsi It's absolutely not a single story. Law enforcement did interviews with dozens of news publications. It's trivial for anyone to debunk your incredibly false claim by doing basic research. Blaming this on a specific newspaper is utter nonsense. How do you explain the multiple French state-funded news agencies which covered it and posted similar content with extreme inaccuracy and bias? Why are you ignoring all the direct quotes from French law enforcement about it?
Als Antwort auf GrapheneOS

It's a single story from law enforcement that is then picked up by multiple media. This is literally how media publishing works. One press release leads to multiple newspapers writing about it. That doesn't make it a coordinated effort. Nobody is coordinating anything, law enforcement shares information and news outlets report what they claim. No news outlet claimed that this is their own research, analysis or anything like that.
Als Antwort auf pixelschubsi

@pixelschubsi No, that's highly inaccurate. A national French law enforcement agency sent out a notice to police across the country with fearmongering about GrapheneOS and even Google Pixel phones. The law enforcement agency contacted dozens of news publications, not one. They made highly inaccurate claims to the news publications. They chose those 2 newspapers as among the media they would contact and they know the content and approach of those papers.
Als Antwort auf GrapheneOS

@pixelschubsi Part of that attack involves using the media as useful idiots who take their word at face value and report it without any skepticism. Our initial response was to the first article because they rushed to publish it and we didn't know law enforcement had done interviews with dozens of other media publications which were just slower.

The media attack on GrapheneOS is not the media deciding to attack us, it's them being used as tools to attack us by law enforcement.

Als Antwort auf GrapheneOS

@pixelschubsi Coordinated attacks in the French media doesn't mean that the media publications are coordinating attacks on GrapheneOS together. It's law enforcement which came up with this strategy of attacking GrapheneOS through contacting a bunch of media publications at the same time. It was likely meant to get published around the same time, but Le Parisien rushed to get out their story first and was the only story published for a while, then the 2nd newspaper afterwards.
Als Antwort auf GrapheneOS

@pixelschubsi Law enforcement specifically chose Le Parisien to give their most detailed information and interview. It was a conscious choice on their part based on their knowledge about the newspaper's bias and (lack of) journalistic practices. They specifically went to newspapers they knew would fearmonger. It's likely Le Parisien was the first one they contacted but it definitely wasn't the only one they contacted. There are many quotes not in Le Parisien published elsewhere.
Als Antwort auf GrapheneOS

@pixelschubsi There's a false narrative going around that we're ending operations in France and with French companies due to a couple inaccurate newspapers articles with journalists attacking GrapheneOS. No, that's not the case at all. We don't even particularly see what the journalists in those articles are doing as attacking us. They're just acting as mouthpieces for a state agency taking their word as fact while doing the bare minimum to give us a poor opportunity to respond.
Als Antwort auf GrapheneOS

@pixelschubsi We're ending operations in France and with French providers (OVH) because of direct quotes from law enforcement with highly inaccurate claims about GrapheneOS and a few statements where they make threats of action towards us. We know that they didn't concretely specify exactly what they intend on doing. It's enough that they referenced SkyECC and Encrochat in detail followed by threatening to take similar action if we do not "cooperate" in the way they describe.
Als Antwort auf GrapheneOS

The notice to local police wasn't about fearmongering, it was merely instructions how to handle phones with GrapheneOS, notably to be careful to not enter a PIN, as it could be triggering a wipe. This just makes sense to educate law enforcement personnel.
Als Antwort auf pixelschubsi

It was then that, when this notice circulated widely, some journalists would find out and ask PJ for a comment and publish articles about it with their replies. I'm not aware of PJ directly reaching out to news outlets asking them to report on this topic. Please provide proof for your claim that this is what happened.
Als Antwort auf pixelschubsi

@pixelschubsi How is this not reaching out to a news outlet?

archive.is/UrlvK
archive.is/AhMsj

That was before there was a media cycle. Many other news sites are providing their own quotes from direct contact too.

You're not providing any proof for your claims but we've provided ample proof for ours and there are many articles along with the radio/television coverage people can look at for themselves.

You even started falsely claiming this was a single article.

Als Antwort auf GrapheneOS

I never claimed it was a single article, I claimed it's a single story. The story is about PJ instructing local authorities on how to handle GrapheneOS phones. And everything beyond that is journalists asking about how this instructions came about.
Als Antwort auf pixelschubsi

@pixelschubsi Our response is due to French law enforcement making highly inaccurate claims about GrapheneOS and clear threats towards us if we don't provide law enforcement access to devices which can only mean providing backdoors. The spin you're putting on things and repeated misrepresentations of our statements is similar to multiple previous attacks you've made on the GrapheneOS project on this platform. It's clear you're acting in bad faith and we're through with it.
Als Antwort auf pixelschubsi

And no, for this specific articles in Le Parisien, the journalist already confirmed they reached out to PJ after they were hinted at the existence of the internal notice. It was not PJ reaching out to them or asking them to write favorably about them. And I bet this is how it worked for other news outlets. You have not provided any proof that PJ reached out to specific news outlets asking them to write about this.
Als Antwort auf pixelschubsi

@pixelschubsi You've failed to provide any proof for the many false and unsubstantiated claims you've made about GrapheneOS. We've linked to multiple articles showing proof for what we said. You've failed to link to any evidence for any of what you've claimed. You're the one who is attacking GrapheneOS by repeatedly misrepresenting our statements, making false technical claims about the sandboxed Google Play compatibility layer and much more. It's clearly not in good faith.
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
GrapheneOS
@djvdq archive.is/UrlvK is an interview with leadership of a French state agency. These claims don't come from the journalist, they're directly quoted from French law enforcement. They're interviewing French law enforcement and writing articles based on their statements because they sent out a memo about GrapheneOS including to the press. Which part of this are you denying? Are you claiming these aren't quotes from law enforcement or that law enforcement didn't share a notice with them?
Als Antwort auf GrapheneOS

I asked for proof of your words, not the same article again which says nothing like you are saying.

Do you have connection with terrorists or criminals? If no, you have nothing to fear.