Hacker News

points by throwaway_9438u 2 days ago | 0 comments

Supply chain attacks? Is grapheneOS itself audited by an external auditor?

how can grapheneos be audited if motorola/qualcomm doesn't provide source code for their blobs? it's no different than pixels, but I trust Google more.

[–] tranq_cassowary 1 day ago

Blobs can be decompiled and examined. Closed source code isn't a black box. Security research can be done on it in various ways.

[–] throwaway_9438u 2 days ago

wtf downvoters speak up