Cameron Aaron

opt-in to MTE async mode

5

currently only benefits GrapheneOS users on Pixel 8 and 9 who don't turn on MTE for all apps. hopefully will be extended to all Pixel users and then more devices

Crash in Dart VM on GrapheneOS – mprotect Permission Denied Error

2

When running the Flutter-based application (package: com.openbubbles.messaging:20002136) on GrapheneOS (OS version: google/husky/husky:15/BP1A.250405.007.B1/2025041100:user/release-keys), the app crashes with signal 6 (SIGABRT). The Dart VM aborts execution due to a failed mprotect system...

Outline server leak prevention

2

Create a optional feature that disables the internet connection when the outline server is not active this will prevent the case of those in censored countries accidentally tipping off the...

opt-in to MTE async mode

1

currently only benefits GrapheneOS users on Pixel 8 and 9 who don't turn on MTE for all apps or Molly manually. hopefully will be extended to all Pixel users and...

Kill-switch VPN blocks GrapheneOS auto-updater in BFU mode due to missing Direct-Boot support

2

On GrapheneOS, the system updater is explicitly designed to run before first unlock (BFU) so that critical security updates can be applied even while the device is locked. However, if...

Allow remote attestation in BFU via direct boot

Enable MTE for the metadata region

1

Enable MTE for the metadata region

chore: migrate encrypt to cryptography and upgrade objectbox

2

## Summary - Migrate from archived `encrypt` package to actively maintained `cryptography` package - Upgrade `objectbox` from 4.0.3 to ^5.0.3 ## Changes - `encrypt: ^5.0.3` → `cryptography: ^2.7.0` - `objectbox:...