samsepi0l
banner
samsepi0l.dev
samsepi0l
@samsepi0l.dev
Reposted by samsepi0l
Our security preview releases have provided the December 2025 security patches for the Android Open Source Project since September 2025. December 2025 security patches are now public and being integrated into our regular releases while our security previews have up to March 2026.
December 2, 2025 at 1:24 AM
Reposted by samsepi0l
GrapheneOS remains available for users in France and there's nothing illegal about it. All of our services will still work in France. Our servers won't be hosted in France or with providers based in France (OVH) anymore. We already moved all the main ones used by the OS away.
November 26, 2025 at 1:30 AM
Reposted by samsepi0l
A false narrative is being pushed about GrapheneOS claiming we're ending operations in France due to the actions of 2 newspapers. That's completely wrong. If both newspapers and the overall French media had taken our side instead of extreme bias against us, we'd still be leaving.
November 25, 2025 at 7:25 PM
Reposted by samsepi0l
We no longer have any active servers in France and are continuing the process of leaving OVH. We'll be rotating our TLS keys and Let's Encrypt account keys pinned via accounturi. DNSSEC keys may also be rotated. Our backups are encrypted and can remain on OVH for now.
November 24, 2025 at 7:54 PM
Reposted by samsepi0l
We host our own authoritative DNS servers to provide DNS resolution for our services. Authoritative DNS are the servers queried by DNS resolvers run by your ISP, VPN or an explicitly user chosen one such as Cloudflare or Quad9 DNS. We now have our own AS and IP space for this.
November 22, 2025 at 10:47 PM
Reposted by samsepi0l
France's cybersecurity agency was previously actively using GrapheneOS. They helped us by auditing our code and submitting bug reports such as this one:

github.com/GrapheneOS/h...

They also made suggestions for security improvements to improve protection against exploits.
Undefined behaviour in get_large_size_class() · Issue #133 · GrapheneOS/hardened_malloc
As mentioned there, I'm opening this issue to discuss another finding I investigated following static code analysis of hardened_malloc. If we can reach the following definition in get_large_size_cl...
github.com
November 22, 2025 at 3:14 PM
Reposted by samsepi0l
Please listen to this podcast about ANOM:

darknetdiaries.com/transcript/1...

The FBI ran a string operation in Europe where they created their own 'secure' phone and messaging platform. Their OS used portions of our code and was heavily marketed as being GrapheneOS or based on GrapheneOS.
ANOM – Darknet Diaries
In this episode, Joseph Cox tells us the story of ANOM. A secure phone made by criminals, for criminals.
darknetdiaries.com
November 21, 2025 at 9:34 PM
Reposted by samsepi0l
🔥Nouvelle vidéo ! Probablement une de mes enquêtes les plus importantes, je trouve. Le sujet est assez grave : l'infiltration des délires new age et de la charlatanerie dans les hôpitaux... Merci d'avance pour vos RT chamaniques😘 youtu.be/ILTgwty4bWM
Quand le bullshit s'infiltre à l'hôpital 😤 (Enquête)
YouTube video by G Milgram
youtu.be
November 20, 2025 at 4:17 PM
Reposted by samsepi0l
We were contacted by a journalist at Le Parisien newspaper with this prompt:

> I am preparing an article on the use of your secure personal data phone solution by drug traffickers and other criminals. Have you ever been contacted by the police?
November 19, 2025 at 10:31 AM
Reposted by samsepi0l
Google is 'inspired' yet again by GrapheneOS.

We are so far ahead and this shows how far behind the curve Android 17 is with this, we had it implemented on Android 13 in May 2023.

www.androidauthority.com/android-17-c...
Android 17 is building a new Contacts Picker to keep your address book private
Android 17 may finally let you share only specific contacts with apps thanks to a new Contacts Picker tool. Here's how it may work.
www.androidauthority.com
November 13, 2025 at 9:34 PM
Reposted by samsepi0l
Please consider nominating @grapheneos.org for this year's @proton.me fundraiser.

Donations are what fund our work on upcoming features & improvements, maintaining our current ones, & the upkeep of our infrastructure.

Details:
discuss.grapheneos.org/d/28065

Form:
proton.me/blog/lifetim...
Proton Foundation has launched their 8th edition Lifetime Fundraiser - GrapheneOS Discussion Forum
GrapheneOS discussion forum
discuss.grapheneos.org
November 14, 2025 at 5:38 AM
Reposted by samsepi0l
The remarkable illusion of a mirage
November 9, 2025 at 2:00 PM
Reposted by samsepi0l
📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).

It’s also concerning. 1/
PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.
October 27, 2025 at 10:38 AM
Reposted by samsepi0l
A consensus is emerging that these mysterious little red dots, sometimes called rubies, are an entirely new type of object in the Universe.

go.nature.com/4hfynPy
Mysterious ‘little red dots’ are baffling astronomers. What are they?
Nature - A consensus is emerging that the dots, sometimes called rubies, are an entirely new type of object in the Universe.
go.nature.com
October 18, 2025 at 1:15 PM
Interesting response from GrapheneOS. Must save post
@grapheneos.org Have you thought about making a slightly less secure version of GraphineOS that can run on non-pixel phones? I know it won’t be up to your security standards, but I think many non-pixel owners would appreciate a more private phone if they’re stuck with less secure hardware already
October 18, 2025 at 6:25 AM
Reposted by samsepi0l
Do you use and need RCS via Google Messsges?

This new release has something just for you.
September 28, 2025 at 10:39 AM
Reposted by samsepi0l
I've been vulnerable to illness and under the weather this past week or so, so been quiet.

However GrapheneOS innoculates your device from more vulnerabilities, first and fastest. Nothing is stronger, not even on prescription. Opt-In to security preview releases today!
September 26, 2025 at 11:12 AM
Reposted by samsepi0l
GrapheneOS has had userland/third party app MTE (memory tagging extensions) for forever and Apple is acting like they're the first to the punch, as always
September 13, 2025 at 4:35 AM
Reposted by samsepi0l
Google and carriers deployed changes to RCS which have been breaking it for many users on the stock OS including with certain carriers and in whole countries. The changes appear to have specifically impacted GrapheneOS users too. It's not related to our September 8th update. We're working on it.
September 11, 2025 at 10:08 PM
Reposted by samsepi0l
Most people think they need to prepare for a sophisticated software attack, but your biggest risk is your habits. Exploiting people is often the easiest way in.

Anyone can fall for phishing, it’s happened to me.

#privacy #security #phishing #npm

krebsonsecurity.com/2025/09/18-p...
18 Popular Code Packages Hacked, Rigged to Steal Crypto
At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved i...
krebsonsecurity.com
September 9, 2025 at 4:57 PM
Reposted by samsepi0l
Pixels have provided hardware memory tagging (MTE) support since the Pixel 8. GrapheneOS deployed it in production around a month after the launch of the Pixel 8 and we use it for the kernel and nearly the entire base OS. We use it for some third party apps and users can opt-in to using it for all.
September 9, 2025 at 8:05 PM
Reposted by samsepi0l
We have early access to Android Security Bulletin patches and will be able to set up a workflow where we can have releases already built and tested prior to the embargo ending. For now, we've still been doing the builds after the embargo ends. It will mainly help when they screw up pushing to AOSP.
September 7, 2025 at 5:13 PM
Reposted by samsepi0l
Throwback to Napster days
August 29, 2025 at 11:03 PM
Reposted by samsepi0l
Ma vidéo sur les lunettes "anti-dyslexie" d'Atol a été sélectionnée au Festival International du Film Scientifique Pariscience. J'espère qu'Atol ne m'en voudra pas, je n'ai rien fait pour haha😅. Et sur ce même sujet : bientôt des grosses news !
August 12, 2025 at 8:56 AM
Reposted by samsepi0l
If you're wondering how easy it is for people to fall for the dangerous misleading marketing that unscrupulous characters do in the privacy/security space then how Murena worked on
@androidauthority.com is a great example.

See:

bsky.app/profile/grap...
Your claim at androidauthority.com/fairphone-ge... that /e/OS has refuted any of our points is inaccurate. None of what we said has been refuted. They largely didn't address what we talked about but did misdirection and provided inaccurate data easily proven false.
July 24, 2025 at 12:41 AM