Remix.run Logo
bhouston 2 days ago

FYI the poster this story links to says that this title is incorrect:

https://x.com/grapheneos/status/1964757878910136346?s=46

They say this:

Our reply here was linked on Hacker News with an inaccurate title ("Delayed Security Patches for AOSP"). Security patch backports were pushed to AOSP on September 2nd for Android 13, 14 and 15 as expected.

More information is available at x.com/GrapheneOS/sta… explaining the situation with security patches. It would be better to have a thread linking to that instead. We have early access to the security patches, but we can't break the embargo. We can only release the sources once source release is allowed. We could make a security preview branch but the system simply doesn't make sense.

Android 16 QPR1 is a new major release, not a security patch release. Our reply is talking about 2 different issues. Android 16 QPR1 is what was delayed for AOSP and we don't currently know why. It's possible it was a mistake and it will be pushed on Monday.

transpute 2 days ago | parent | next [-]

Thanks for the clarification. 90 day embargo of patches for all Android is worse than delaying for AOSP, https://news.ycombinator.com/item?id=45158523#45161240

  They're giving OEMs 3-4 months of early access which we know for a fact is being widely leaked including to attackers.
strcat 2 days ago | parent | prev [-]

X cut off the link you copied within our reply. Here's that link along with 2 alternatives other than X:

https://x.com/GrapheneOS/status/1964754118653952027

https://bsky.app/profile/grapheneos.org/post/3lyb6rx46tc2r

https://grapheneos.social/@GrapheneOS/115164133992525834