microtonal
I think the whole thread misses the mark a bit, because the source that the GrapheneOS account used (Algemeen Dagblad) did not properly research this. For Dutch readers, this is not really surprising, since the AD is not known as a quality newspaper and tends to go for sensationalism (though slightly less bad than De Telegraaf). Other sources are much more detailed:
According to our information, the reseller did not distribute official GrapheneOS. Using AI tools, he had built his own fork and added mobile device management (MDM) for remote administration. The result was a separate operating system that lacked, among other things, the security updates of the original project.
His signing keys for that system were probably compromised. Anyone holding those keys can build an update that the phones accept as genuine. Such an update was apparently installed on seized phones via ADB (Android Debug Bridge), an interface that requires a USB cable connection, and probably removed the screen lock. The phones could then be examined forensically. On our information, the authorities again needed the phone in their hands. On official GrapheneOS, the same approach would require the project's own signing keys.
https://www.joint-defense-team.com/post/grapheneos-cracked-p...
AD could have written something similar if they did their homework in understanding the case.
tl;dr mostly shoddy journalism from AD.
https://docs.qualcomm.com/securitybulletin/october-2026-bull...
Then, they only roll out ASBs, which fixes vulnerabilities that have been known for up for six months, because they don't roll out embargoed patches like e.g. GrapheneOS does (and these vulnerabilities have been known for months through reverse engineering).
If that wasn't bad enough, ASBs only fix vulnerabilities high/critical, for all other fixes you need QPRs and major releases, but /e/OS is behind major releases. If you are still running Android 16, your phone has vulnerabilities that are known for up to two years. Yes, they are low/medium, but they are used in exploit chains. This recently got worse, because Google recently started only rolling out some high/critical fixes to Android 17 and not older Android versions.
Then there is all the shady stuff that Murena doesn't tell you about, like running Google's proprietary DroidGuard blobs in a privileged process on Play Integrity requests. Giving certain Google apps higher privileges than the normal Android app sandbox. Installing F-Droid packages through a proxy (CleanAPK), that they do not want to reveal the owner or purpose of, etc.
Why don't the GrapheneOS developers like Murena? Because Murena often instigates in interviews that GrapheneOS is for criminals, etc.
If you care about security (or privacy) at all, don't use /e/OS.
Disclaimer: I am not affiliated with the GrapheneOS project in any way. If you don't like GrapheneOS but care about having some basic security, then get an iPhone.
[1] Yes, it seems that they are still on 6.12.112, but they'll probably roll out an update quickly. Also see: https://forum.openwrt.org/t/cve-2026-98432-kernel-update-or-...
Heck, apparently even the new Unifi UCG Fiber is running 5.4.213 (September 2022), but maybe they backport some fixes?
[1] https://community.ui.com/releases/dd0283dc-bf71-4140-ae1d-c1...
Unified Push, which works flawlessly on Molly, could easily be implemented in the regular client.
There is even a paper by Levy & Goldberg from 2014 that shows that skip-gram with negative sampling implicitly factorizes a PPMI word-context matrix.
But Mikolov's formulation is very nice in that it is a simple linear model that allows for a very simple Hogwild optimization that worked very well/fast on multi-core CPUs of the time.
If I remember correctly, I read somewhere he initially had a hard time getting the word2vec paper accepted at a conference.
$ uname -a
Darwin MacBook 27.2.0 Darwin Kernel Version 27.2.0: Wed Oct 14 23:47:21 PDT 2026; root:xnu-13432.41.4~25/RELEASE_ARM64_T6030 arm64 arm Darwin
$ which curl
/usr/bin/curl
$ curl https://dv-g3b-emudhra.we-have-a-problem.com/
Your client successfully connected to the site. That's bad!Parenting takes time and focus. Putting 0-6 years olds behind a tablet screen is just absolving yourself from your responsibility as a parent. Some TV time can be ok after 3 years or so, but you have to time it strictly (so that it does not become a convenience) and exclude some types of cartoons [1].
[1] https://thesciencesurvey.com/editorial/2024/07/07/the-proble...
I don't think this is true at all. Our daughter played a lot with Duplo and then Lego from ~2-12. Overall, she must have collected thousands of Euros of Lego from birthday, Christmas, and Sinterklaas presents. When friends were over, they usually wanted to play with Lego.
Us older people who remember the days of Lego without franchises and a focus on your own creativity/imagination might be grumpy about modern Lego (though they have been good at making adult Lego sets as well). But Lego is still wildly successful because they found ways to connect with younger generations and the franchise-based Minecraft/DC Comics/Star Wars/Harry Potter/etc. Lego is exactly one of the ways they have managed to do this, along with Lego for specific focus groups (e.g. Lego Friends).
https://nltimes.nl/2026/04/23/meta-suspends-dozens-dutch-lgb...
It's time countries started suspending Facebook/Instagram for meddling in national affairs.
But they need kompromat to make them Krasnovs.
Sorry, but the US threw this out of the window starting with the Patriot Act. Many tech companies were in the NSA PRISM program and the program probably still exists today. Common US E2E encrypted messengers can be read out by US services through weak defaults (e.g. iMessage in iCloud is encrypted at-rest unless ADP is enabled both sides of the chat, similarly, WhatsApp only encrypts backups at-rest by default).
The US can grab all that data from US companies, regardless whether the person regardless of whether the person is inside or outside the US thanks to the CLOUD Act.
I know that they are probably going to roll out remote attestation at some point, but I cancelled YouTube Premium the last time they did an insane price raise.
In 2019, it was reported that an Iranian mole working for Dutch intelligence at the behest of Israel and the CIA inserted the Stuxnet virus with a USB flash drive or convinced another person working at the Natanz facility to do so.
At any rate, microG is a reimplementation of Play Services.
You can directly download the Telegram APK from: https://telegram.org/android
(Or using the app store that is part of /e/OS and serves as a front for both the Play Store and F-Droid.)
I guess the upside is that in countries with a multi-party system (happens more frequently without first-past-the-post), they virtually always have to form a coalition, which typically ends up in infighting within a party or between parties. E.g. in The Netherlands you typically need four parties nowadays to form a coalition.
Sadly, some of the parties that are involved (tech bros, Russia, etc.) are not going to do any good when it comes to these issues. They'll only make the housing issues worse (by accumulating even more wealth and invading your country, respectively). But blaming everything on immigrants and elites has always worked extremely well, in-group vs. out-group is something that our brain needed for survival in the past, so it is very easy to trigger.
The saddest part is that those that push the anti-elite narrative (Trump, Musk, etc.) are often the elites themselves.