Paul Jones / Android Authority
TL;DR
- The group behind the /e/OS Android fork has addressed some safety claims in regards to the platform.
- This comes after GrapheneOS builders criticized /e/OS for “lagging far behind” when it comes to updates.
- The /e/OS software program ships on the Fairphone Gen 6 within the US.
The Fairphone Gen 6 will launch within the US subsequent month utilizing the Google-free /e/OS platform. Nonetheless, the builders behind the privacy-focused GrapheneOS Android fork made a number of regarding claims about this platform. The group behind /e/OS has now revealed a weblog submit addressing these claims.
Murena, the corporate behind /e/OS, revealed a weblog submit stating that it took safety points significantly. Nonetheless, it additionally criticized the GrapheneOS builders for making what it referred to as “deceptive claims.”
The group confirmed that it focused “commonplace business practices” for well timed safety updates:
Subsequently, for a given launch on month N, our present work-flow is to combine Android safety patches from month N-1. Consequently, within the worst case, it’s going to take as much as 9 weeks to roll out the most recent accessible safety updates. Normally, it will likely be a lot sooner.
The group additionally defined that it makes an exception for zero-day exploits and tries to ship these patches “as quickly as attainable.” It additionally posted a desk exhibiting how main Android smartphone makers evaluate when it comes to replace lag. This implies that /e/OS is consistent with some main OEMs so far as typical patches go. You may view this screenshot under.
Murena additionally took umbrage with claims that it lagged on browser updates for WebView points. The corporate stated it issued two zero-day WebView fixes and the June safety patch degree with the just lately launched /e/OS 3.0.4 replace. For what it’s price, these two zero-day exploits have been disclosed in early June and late June, respectively.
What’s subsequent for Murena, although? Nicely, the corporate confirmed that it will likely be making some enhancements:
Murena is taking safety points significantly, and our coverage about integration of safety patches in /e/OS may be very corresponding to and even higher in some instances than lots of cell OS distributors within the smartphone business.
Nonetheless, as a part of our ongoing efforts to repeatedly enhance we now have determined to scale back the mixing time of month-to-month safety updates in /e/OS. Subsequently we’ll progressively replace our construct infrastructure to permit the roll-out of newest safety updates following the times after they’ve been launched.
Murena will proceed to deploy pressing /e/OS builds for 0-day safety fixes
The corporate additionally disputed a number of different claims by the GrapheneOS group. For one, it stated that /e/OS didn’t cover the true patch degree however exposes these fields “precisely like inventory Android.” The GrapheneOS builders argued that the Fairphone Gen 6 lacks a safe factor, which made it “trivial” for dangerous actors to brute-force a PIN code or primary password. Murena downplayed these assertions, arguing that Qualcomm’s safe processing unit means it may take “years” for attackers to recuperate a six-digit PIN.
What do you consider /e/OS’s safety and privateness?
15 votes
Murena additionally confirmed that it makes use of the open-source microG framework to hook into a number of Google providers (e.g. push notifications) however provides that customers can swap Google’s notification service out for the UnifiedPush platform. It’s price noting that microG is a long-established, well-liked various to Google Play Companies that enables individuals to make use of Google apps and providers. This framework is especially helpful on gadgets for customized ROMs and HUAWEI telephones, which usually lack Google providers. So this can be a wise inclusion if you wish to let individuals use some Google apps on an in any other case deGoogled platform.
There’s evidently some room for Murena and Fairphone to enhance their safety practices. Nonetheless, not each Android fork has the identical safety and privateness priorities. Fortunately, the great thing about the Android ecosystem means you may swap to a special Android pores and skin, Android fork, or customized ROM if in case you have particular wants. In any occasion, you may learn the full weblog submit for a extra complete response by the /e/OS group.
