News for hackers. Stuff that matters.

A comment on Graphene OS: a security-enhanced Android build. Parent comment

Re:Graphene OS: a security-enhanced Android build by chasil on Thursday July 24, 2025 @11:20PM (#44679240)
However, do you consider yourselves as able to resist a nation-state level adversary with resources dedicated to compromising you?

I think of two things, the Solar Winds build corruption, and putty's mishandling of e521 keys.

What is your vulnerability to a similar disaster, exploited or not?

[ Parent | on HN ]
Re:Graphene OS: a security-enhanced Android build by Attrecomet on Friday July 25, 2025 @07:28AM (#44681975)
Funny how your mayer example is actually proprietary closed-source software. So being an open source project carried by a large community doesn't seem to be an actual drawback -- if at all, a Solarwinds-like attack is far more improbably to succeed in a popular and well run open source project than in the darkness of closed source.
[ Parent | on HN ]