XIPRELAY

Son, Brother, Geek. // Co-Founder // Editor, Resource Director

Mozilla Labs Raindrop Developer

[XIPRELAY @XIPRELAY]

Redesign on the Harry Potter Books is Genuinely Magical - It's just like—oh you get the idea. http://t.co/fzXmJENd5m http://t.co/HUAE1tY3go

[XIPRELAY @XIPRELAY]

Where is the magback case for the 10a? @magbaksays

[XIPRELAY @XIPRELAY]

@lakshyalark The MTE thing fr

[GrapheneOS @GrapheneOS]

We have a partial port of GrapheneOS to the Pixel 11 series after a week of work on it. We're unable to complete the port due to lack of support for ARM hardware memory tagging in software, firmware and near certainly hardware. It appears Google cut an important security feature to save money.

ARM hardware memory tagging (MTE) is used by GrapheneOS across the entire base OS including the kernel and every standard base OS process. It's only temporarily disabled for a few device-specific processes. It greatly improves protection against nearly all remote exploits and many local exploits.

Pixel 8 launched with hardware MTE support in October 2023. We integrated it into our hardened_malloc project and began using it across the OS later that month. Android and the Pixel OS never started using it by default. Android Advanced Protection Mode in Android 16 enables it for a few processes.

Apple's Memory Integrity Enforcement (MIE) is an always enabled feature on the iPhone 17. It's simply a high quality implementation of MTE using the latest standard extensions. It uses MTE in the most secure mode in the kernel and a large portion of userbase. They did a very good job integrating it.

Apple's MIE and Android 16+ AAPM don't use MTE for user installed apps unless those explicitly opt in. GrapheneOS enables it for more apps automatically and has a toggle for users to opt-in for every user installed app. There's a per-app toggle to opt-out for incompatible apps which is uncommon.

Neither iOS or Android encourage app developers to opt into MTE and other more aggressive security features used in the base OS. Apple's docs warn developers of performance and stability issues. Even Signal doesn't opt-in. Our approach enables forcing using MTE in the standard allocators regardless.

Pixel 11 does have security improvements including moving to post-quantum secure verified boot (ML-DSA) and replacing Samsung Shannon IMS with AOSP IMS. Titan M3 should significantly improve protection against data extraction in Before First Unlock state. It's too bad they ruined it by cutting MTE.

Pixel 11 series is a lot more expensive for an incremental improvement to the CPU, the same underpowered GPU and reduced RAM for the Pro base models. They finally caught up to the last generation of Qualcomm cellular radio. It's overpriced, the upgrades aren't impressive and losing MTE is appalling.

Compared to the Pixel 11, a Snapdragon 8 Elite Gen 5 has ~40% higher single threaded CPU performance, ~80% higher multi threaded performance, over 100% higher GPU performance and a far better cellular radio. It also finally has MTE. The next gen is what will be in the first Motorola with GrapheneOS.

Pixel 9a and earlier (including Nexus devices) were the Android Open Source Project reference devices. Pixel support was removed from AOSP with Android 16. It's now harder to support Pixels than many other devices and massive progress towards open source firmware and driver libraries was discarded.

Compared to the stock Pixel OS, GrapheneOS ships AOSP patches months earlier and Linux kernel patches many months earlier. However, we rely on them for firmware and most driver updates. We also want to move to new kernel branches earlier. These things can be improved with our Motorola partnership.

We strongly recommend against buying Pixel 11 devices. Pixel 8, 9 and 10 have much better overall security for GrapheneOS. Pixel 10 is cheaper with similar hardware and MTE. Pixel 11's Titan M3 should improve BFU security for users without a strong passphrase, but losing MTE craters AFU security.

We haven't determined what to do about this situation. It may be best for us to skip the Pixel 11 series devices. We can shift our focus entirely to the upcoming Motorola devices instead. Pixel 10a was really a 9th gen Pixel, so hopefully the Pixel 11a does the same with 10th gen and includes MTE.

[The Best @TheBestqueenx]

A painting depicting a battle with a dragon, hidden behind other paintings for over 380 years, was discovered just four years ago during church restoration.

[Secretary Kennedy @SecKennedy]

Hospital food is notoriously appalling; So why do we serve it to patients who are trying to recover?

@DrOzCMS and I are changing that system, by telling hospitals across the nation to serve REAL FOOD and remove the ultra-processed junk. Thank you, FL Agriculture Commissioner @WiltonSimpson and @Nicklaus4Kids President & CEO Matthew A. Love for leading by example in Miami.

[XIPRELAY @XIPRELAY]

Hey @Fairphone when are we getting a fairphone with a headphone jack, barometer and edge positioned LED Notification light !?

[XIPRELAY @XIPRELAY]

Floot @floothq https://t.co/bmiA3ExfU4
So i tried out another platform i won't mention and then i tried out floot. The comparison is night and day. Floot actually makes me feel at home. They have a good experience and actually do what i ask it to do. :) I will stick with this 1!

[MatrixMysteries @MatrixMysteries]

“Maine kept funding a Somali-run NGO after it billed $904,000 in just ONE YEAR for services it never provided.”

A whistleblower reported the fraud.
He was fired instead.

When exposing fraud ends your career and not the scheme, the system is RIGGED.

[Eric Daugherty @EricLDaugh]

🚨 HOLY CRAP! Ohio attorney Mehek Cooke asked a Somali care center if she could sign up and they proceeded to physically INTIMIDATE her

"We're NOT taking patients! GO."

This is NOT normal behavior for a typical business!

We need MASS RAIDS in Ohio, NOW

[Joe Rogan Podcast News @joeroganhq]

Mel Gibson: "I have 3 friends. All 3 of them had stage 4 cancer…and all 3 of them…don't have cancer right now at all…"

Joe Rogan: "What did they take…? Ivermectin and Fenbendazole…"

Mel Gibson nods his head *yes*

[Dr. Eric Berg DC @dr_ericberg]

Not all food is real food.

Many everyday staples are engineered with chemicals and fillers.

Here are 5 of the worst ultra-processed factory foods, and why they’re wrecking your health:

1/ Granola bars… 🧵

[XIPRELAY @XIPRELAY]

@jack Do you think it would be possible to ask for help with funding for a new social media company ?

[NewsTalk 99.7 & AM 630 WPRO @wpro]

Attorney General Peter Kilmartin objects to release of 38 Studios docs https://t.co/GN2wu5tWqS

[Jason Nazar @jasonnazar]

See how much people in Tech are getting paid. Thousands of real salaries & equity of tech employees on @Comparably https://t.co/kiUS1Rx5mq

[TechCrunch @TechCrunch]

AT&T's Unlimited Plus wireless plan now includes free HBO https://t.co/sQaSPdIhxt by @sarahintampa

[People For the American Way @peoplefor]

You said that you don’t want to go nuclear, @SenatorCollins, so don’t. Find a consensus judge who can be confirmed by both parties. #SCOTUS

[Blue Planet Society @Seasaver]

.@CaterpillarInc @Lexus @kevingespinosa @aureliogd88 We're calling on all corporate sponsors of shark tournaments to withdraw their support & STOP destroying the world's ocean. #PRFail #sharks

[Blue Planet Society @Seasaver]

KILLING THREATENED SPECIES: @CaterpillarInc & @Lexus sponsor Brett T Bailey Mako Rodeo https://t.co/6WrhpXwPWz @kevingespinosa @aureliogd88

[Rainforest Alliance @RnfrstAlliance]

#Sustainable forestry is such an important economic sector in Appalachia! Thanks for helping us #KeepForestsStanding https://t.co/oW1hr2wV6e

[Earthjustice @Earthjustice]

BREAKING: Lawsuit challenges EPA's refusal to ban toxic pesticide linked to brain damage in children https://t.co/0mLKJsN9Wu