You are vulnerable, but GrapheneOS will KILL ITSELF preemptively to stop hackers from accessing their Forum.
With the recent php2shell incident, the GOS team took the safest way possible to protect the users. They didn't take any chances when the PHP security team published a warning, they had 3 options:
1. Run their forum and cross fingers that the vulnerability will not be exploited before the patch is shipped.
2. Try to patch it on their own with duct tape and dreams.
3. SHUT OFF the service and remove the attack surface.
They chose the safest option.
For such a non-essential service like a forum, the 3rd option seems like overkill.But the GOS team has always highlighted the importance of security update frequency. Because of advances in AI and hackers' ability to create malicious code in hours to exploit the most recently discovered vulnerabilities, speed is important.
That's why they don't support devices and apps that don't ship security updates as frequently as possible.
Attackers won't wait for you to patch.
Improve your OpSec before it's too late.
Get GOS.
the biggest flex in life is how many peopleโs lives did you change for the better
almost anyone with above average intelligence can get ahead in this world
but those that can show others the way
they become legends
Nightmare Eclipse, the person who has been dropping Windows zero-days, has finally decided to share his story. He's an ex-Microsoft employee, we had dinner together, and I've known him and his story for some time.
His real name is Abdelhamid Naceri. He's a very talented and intelligent individual, and he came across as someone who'd be a real professional to work with.
"If only I didn't pour my soul into that job with countless of stupid non sleep nights, i would have gotten over it..." - Naceri
He loved Microsoft.
I wouldn't say that what he did, releasing all those zero-days, was normal, but he felt he had no other option because of the injustice Microsoft did to him.
They fired him, and you can read the vague reason they gave in the email sent to him by the Vice President of Engineering at MSRC, below.
According to Abdel's account, VP Tom Gallagher met with him after the firing to tell him they were blacklisting him from Microsoft and writing him a bad reference so he'd never be able to get a job again.
Normally you'd think, well, big deal, just find another job, right? But Abdel doesn't have a European passport, and he was only a couple of months away from getting permanent EU residence.
So instead of granting him those couple of months, Microsoft fired him for a reason that, as far as we can tell, was never made clear, then fought him in court and offered him โฌ55,000 plus a year's pay to drop the case.
All while Abdel was releasing zero-days.
Abdel continued suing Microsoft for unfair termination in Germany, a fight that has cost him over $200,000.
He says Microsoft refused to reveal any details about the security breach and went another direction.
If you are reading this, and you can offer him a LEGAL job, this is his e-mail: [email protected]