Is there an easy way to tell if there are unpatched vulnerabilities in my phone's modem and baseband?

Prices here are 13EUR including tools from what I can see.

The only reason I have been switching phones is banking apps: so much for Europe's right to repair..

I replaced battery in mine for like 90 EUR and several months in dropped it and broke the screen. Would still use it instead of 9a, love how light and compact the phone was. At least now I have a spare phone to root and do stuff with that I couldn't on my main one.

Would be interesting for x86-based tablets/convertibles, like for instance an old Lenovo X1. I tried using these with Linux with various different distributions, including PostmarketOS, and it was not a good experience.

Games is one use case. I play the iOS version of Balatro on my Mac.

Running apps that require a phone and are not available for Linux, without putting them on your actual smartphone (if any)

Much better security. Sandboxing and app isolation actually works on Android.

Familiarity

App consistency

Upstream app availability and release cycle

Security.

It does sound rather... cosmopolitan.

I'd say quite the opposite. jart has been very focused on specific things. While the contribution mentioned looks more butterflying amongst target.

(@0xcafebabe: ADHD high-five, I've got almost the same target list, except I'm playing with their NPUs)

Yes, best chance is to get BSG's version from https://www.celsoazevedo.com/files/android/google-camera/ and install manually.

I’m not sure that as a casual user that this fact would bother me very much, especially the kind of user who is using LineageOS as an alternative to replacing an old phone that has lost software support entirely. Getting security updates on a 3 month lag is a lot better than not getting them at all.

I also think amount of times a 3 month lag would have any significant likelihood of affecting me personally with an active exploit seems low.

A lot of CVEs don’t have widespread active exploits and a lot of threat actors aren’t sufficiently motivated. A lot of exploits require the user to interact with something sketchy or for the attacker to have a specific reason to target you.

It's optional.

> I don't understand why it took LineageOS so long to update to AOSP 17, while GrapheneOS managed to update to 17 in just 3 days.

Here's a hint: GrapheneOS has paid developers working on it full-time, while LineageOS is done by people in their spare time. Also, GrapheneOS has a collaboration with Motorola and through that gets for instance early access to security patches, and probably other things as well. And lastly, LineageOS supports roughly 10x the number of devices. It's significantly easier if you restrict yourself to Pixels.

> I don't understand why it took LineageOS so long to update to AOSP 17, while GrapheneOS managed to update to 17 in just 3 days.

GrapheneOS does not have circle battery.

> LineageOS really should be based directly on GrapheneOS.

What would that achieve?

GOS => security, usability

LOS => most security, most usability, breadth of support

Untill 22(Android 15) yeah but compared to the manufacturer this is insane.

What even is there in Android 17 to talk about, same old UI, no non-google AI features to run on-device without root

https://developers.google.com/ml-kit/custom-models

Just see out of touch with reality this section is compared to the insanse community work on Apple Silicon across whisper.cpp/mflux/llama.cpp/MLX/Exo & way more