News for hackers. Stuff that matters.
Re:LineageOS 19 by josephcsible on Tuesday April 26, 2022 @04:06PM (#31172517)
> They ship userdebug builds as production releases

What specific security problem does this cause?

> pretend to support devices past their vendor EOL (which is impossible since Lineage can't provide security updates for firmware etc.)

This is good for security. Not everyone can afford to get a new phone as soon as the vendor drops support, and just because you can't fix everything doesn't mean that you shouldn't fix what you can.

> ship the F-Droid Privileged Extension (which uses an incorrect approach to implementing unattended updates)

What's incorrect about it?

> don't support locking the bootloader to enable verified boot on many supported devices

This isn't really their fault. On most devices, relocking the bootloader with anything non-stock has a high chance of permanently hard bricking.

Re:LineageOS 19 by aaaaaaaaata on Tuesday April 26, 2022 @06:48PM (#31174111)
> This is good for security

No, it isn't. It's good for reducing e-waste, your security is on the line.

Having the newly shaped and colored Android UI doesn't do anything to fix security issues..

Re:LineageOS 19 by josephcsible on Tuesday April 26, 2022 @11:38PM (#31176026)
Security issues can occur in both the device-agnostic Android OS code and in device-specific drivers. Some people are going to continue to use phones after the vendor drops support. Although those people won't get security updates to their device-specific drivers anymore no matter what they do, by using LineageOS instead of their stock ROM, they will get security updates to the device-agnostic Android OS code.