News for hackers. Stuff that matters.
Re:Enable MTE on Pixel 8 by jchw on Friday November 03, 2023 @09:28AM (#38128417)
Speaking of which, what ever happened with all of the kerfuffle going on around GrapheneOS leadership, anyway?

I remember Louis Rossmann posting a video[1] that felt pretty damning regarding project leadership, especially given that he seemed to be implicated in the mess for almost no reason at all. In general I wouldn't give a good god damn about drama, but I'll admit it: it's ALREADY hard to trust operating systems, and especially security software, that's effectively made by effectively random strangers on the Internet, but much worse so if it's unclear they wouldn't be willing to abuse their position.

Daniel Micay (aka strcat on here I believe) apparently announced they were stepping down from leadership roles in the project shortly after, according to tweets that appear to now be deleted, but that Wikipedia has links to an archive of.[2] At least from the code side of things though, they are still working quite actively.[3] Which is not a bad thing, but it doesn't tell us much about what happened.

What I'd hope to hear is that Daniel Micay is in better mental health, but they made the almost-certainly wise choice to stop engaging with social media, and I can't find much information about what actually went down, so I guess it's a question mark.

This is unfortunate because as I understand it, the closest competitor to GrapheneOS, CalyxOS, is not nearly as sophisticated. I'd really prefer to just be able to trust GrapheneOS, but I'm left absolutely unsure about what even happened. Did I miss something?

[1]: https://www.youtube.com/watch?v=4To-F6W1NT0

[2]: https://web.archive.org/web/20230530063836/https://nitter.fd...

[3]: https://github.com/thestinger

Re:Enable MTE on Pixel 8 by piaste on Friday November 03, 2023 @10:46AM (#38129627)
> What I'd hope to hear is that Daniel Micay is in better mental health, but they made the almost-certainly wise choice to stop engaging with social media, and I can't find much information about what actually went down, so I guess it's a question mark.

I mean, it sounds like you have pretty much all the relevant information already?

strcat's technical chops were AFAIK never in question, but he had a tendency to pick up loud internet fights - to be fair, sometimes the other party were also being hostile jerks, but sometimes they weren't and he'd just swing at shadows.

After he pissed off Rossmann, he either realized or someone close to him made him realize (doesn't really matter which) that he should step away from the public square, and he did. Now he's just an ordinary, and I presume highly valued, contributor to GrapheneOS and to upstream AOSP.

Whether he still lurks the GrapheneOS discussion threads or not, or whether he is currently undergoing therapy or just chilling with a good book isn't really anyone else's business.

What else do you need to know?

Re:Enable MTE on Pixel 8 by jchw on Friday November 03, 2023 @10:54AM (#38129731)
I was curious if that actually happened or not. However, I didn't actually see anything about GrapheneOS's leadership structure, or any kind of blog or anything where news like this would be announced.

So if it happened, who replaced them? Are they trustworthy? At least in my cursory searching, I didn't figure out an answer to that.

I assume the answer is actually out there, but I don't have it.

> Whether he still lurks the GrapheneOS discussion threads or not, or whether he is currently undergoing therapy or just chilling with a good book isn't really anyone else's business.

Sure, whatever. But failing any information about whether or not anything happened, I assume they still have root access to critical infrastructure. If so... I mean, naturally, the problem of trust hasn't changed much. If that's the case, then you still need to trust them to trust GrapheneOS. Can you? Don't know.

Re:Enable MTE on Pixel 8 by jacoblambda on Friday November 03, 2023 @12:41PM (#38131258)
> So if it happened, who replaced them? Are they trustworthy? At least in my cursory searching, I didn't figure out an answer to that.

https://github.com/thestinger/daniel.micay.dev/commit/79e44b...

They just stepped down as the official head and stopped making public comments. They still are a major developer for the project and still seem to own/run parts of the project.

Re:Enable MTE on Pixel 8 by jchw on Friday November 03, 2023 @01:26PM (#38132022)
That's an orphaned commit on their personal website (and that text doesn't appear anywhere on it), and still nobody seems to have any idea who has taken their place. I don't believe that someone should be eternally punished because of making poor decisions, and with time even a pattern of poor decisions can be forgiven, but as it stands from the outside there's zero clarity on what, if anything, actually happened, no apologies, and ultimately no way to know who you're trusting when you install GrapheneOS.

On one hand, the track record for the actual OS is still completely fine as far as anyone knows. On the other hand, the stuff said and done on record is pretty tough to swallow for someone you are investing a lot of trust into, for an OS that is meant to be privacy and security focused.

Like. It's one thing if you are a casual user running random ROMs off XDA, the risk is high and the only real assurance you get is online reputation and the normal assurances of social pressure. But this is software endorsed by Edward Snowden and many others whose opinions regarding security and privacy are well-regarded. The stakes could be quite high for some users. In the light of that, I really don't like the situation here at all.

Dismiss it if you want to, but there's really absolutely no good reason for this to simply remain effectively unaddressed indefinitely.

Re:Enable MTE on Pixel 8 by refulgentis on Friday November 03, 2023 @11:56AM (#38130649)
It sickens me that this tabloid blathering is the 2nd thing after the story link and about 1/2 the page after load. The disclaimer that it's important because it's an OS, OS' are important, thus people who work on OS' are important, and you are discussing their mental health because you need to know if they'd "abuse their position" is ham-fisted.
Re:Enable MTE on Pixel 8 by jchw on Friday November 03, 2023 @12:05PM (#38130752)
What?
Re:Enable MTE on Pixel 8 by telotortium on Saturday November 04, 2023 @01:55AM (#38138550)
Wow, strcat - now that's not a name I've heard in a long, long time. I remember he contributed a fair deal to Rust in the early days and then blew up in a very similar fashion.
Re:Enable MTE on Pixel 8 by privacyking on Saturday November 04, 2023 @05:58AM (#38139532)
What happened in relation to rust?