Commit Graph
100 Commits
Author SHA1 Message Date
Daniel Micay ecadabbf79 network location compatibility improvement 2022-05-11 13:13:55 -04:00
Daniel Micay 7480fe4bdc sandboxed Google Play improvements 2022-05-11 12:39:50 -04:00
Daniel Micay 79d1dbaa31 update Vanadium to Chromium 101.0.4951.61 2022-05-10 09:48:24 -04:00
Daniel Micay e663b0fbc4 move minor features lower 2022-05-09 20:01:51 -04:00
Daniel Micay 9f026a294b fix section header level 2022-05-09 20:00:05 -04:00
Daniel Micay d1c3211d6f fix typo 2022-05-09 19:48:30 -04:00
Daniel Micay d8d4566147 auto reboot section 2022-05-09 18:30:26 -04:00
Daniel Micay 77cb70ab08 move apps to their own initial sections 2022-05-09 18:28:48 -04:00
Daniel Micay ca16c49250 split out privacy by default section 2022-05-09 18:06:34 -04:00
Daniel Micay 7d8ab16d9d split out fingerprint unlock section 2022-05-09 17:49:44 -04:00
Daniel Micay d9d370dd83 Wi-Fi privacy section for features page 2022-05-09 17:43:23 -04:00
Daniel Micay 6e1494aa52 split out location data access indicator 2022-05-09 17:37:14 -04:00
Daniel Micay 812cf895d4 add device identifier leaks section 2022-05-09 17:31:39 -04:00
Daniel Micay 503d22220c move exec spawning to exploit protection section 2022-05-09 17:22:53 -04:00
Daniel Micay 4ad4a8e90a split out PIN scrambling / longer passwords 2022-05-09 17:21:15 -04:00
Daniel Micay fcb604b003 move more Network toggle info to the section 2022-05-09 17:21:05 -04:00
Daniel Micay a1d2ce3cb1 split out LTE only mode section 2022-05-09 17:12:56 -04:00
Daniel Micay bb0d2ef6a1 split out network/sensors permission sections 2022-05-09 17:09:32 -04:00
Daniel Micay 265efb6046 reorganize secondary user feature docs 2022-05-09 16:59:16 -04:00
Daniel Micay b0015fc05c split out improved user profiles section 2022-05-09 16:54:03 -04:00
Daniel Micay 06a7148a56 rename other features section for now 2022-05-09 16:32:39 -04:00
Daniel Micay 6258b1c2c2 split sandboxing out of exploit mitigations 2022-05-09 16:26:44 -04:00
Daniel Micay e5a0f9ac52 move more under exploit protection 2022-05-09 16:20:18 -04:00
Daniel Micay 95eaa79691 move most features to Other features for now 2022-05-09 16:04:35 -04:00
Daniel Micay 8aa4759395 reorder new feature sections 2022-05-09 16:01:41 -04:00
Daniel Micay 4e49a8e1d5 split out exploit protection section 2022-05-09 15:56:52 -04:00
Daniel Micay f523ca814e expand section intro 2022-05-09 15:17:02 -04:00
Daniel Micay 0a673cfa25 split out sandboxed Google Play section 2022-05-09 15:01:12 -04:00
Daniel Micay c8a712bd65 remove trailing whitespace 2022-05-09 14:44:06 -04:00
Daniel Micay c33865ff6c reword/expand patching information 2022-05-09 14:27:57 -04:00
Daniel Micay 6a1b3041ef use bare absolute paths for internal links 2022-05-09 14:25:15 -04:00
Daniel Micay 8e71d59492 update sandboxed Google Play links 2022-05-09 14:24:15 -04:00
Daniel Micay 2170c3d112 split out more complete patching section 2022-05-09 14:20:23 -04:00
Daniel Micay de692238a9 split out disabling secondary user app install 2022-05-09 13:58:07 -04:00
Daniel Micay 18cd6dd0a4 split out section for disabling user apps 2022-05-09 13:53:26 -04:00
Daniel Micay 7f36bb2634 split out carrier support section 2022-05-09 13:43:22 -04:00
Daniel Micay 1c84a8e8b6 split out private screenshots into a section 2022-05-09 13:00:46 -04:00
Daniel Micay 849ae4636c clarify background activity regression fix 2022-05-09 12:51:16 -04:00
Daniel Micay 6e719f3f52 update signing / delta examples 2022-05-08 18:47:21 -04:00
Daniel Micay 417dc08dcb clarify location rerouting fix 2022-05-08 18:23:21 -04:00
Daniel Micay e44fd5d7b1 publish new release notes 2022-05-08 17:30:36 -04:00
Daniel Micay 6155082ce4 adevtool: detect outdated Node.js 2022-05-08 14:20:16 -04:00
Daniel Micay d7e52737fa emergency contacts fix 2022-05-08 13:41:44 -04:00
Daniel Micay 66c96d3c3f new build number 2022050800 2022-05-08 13:15:37 -04:00
Daniel Micay dc9c49672d fix another gmscompat regression 2022-05-08 12:58:55 -04:00
Daniel Micay b23cfe824e compatibility fix for location rerouting 2022-05-08 12:28:08 -04:00
Daniel Micay d2b5207277 improve flock error message 2022-05-08 05:45:21 -04:00
Daniel Micay cc881bf6b7 document new screenshot EXIF timestamp toggle 2022-05-07 15:59:33 -04:00
Daniel Micay 1d39e1c35f use rerouting to match OS UI 2022-05-07 15:10:34 -04:00
Daniel Micay 06e81b8188 publish new release notes 2022-05-07 15:08:17 -04:00
Daniel Micay 0e3c31291e new build number 2022050700 2022-05-07 13:40:20 -04:00
Daniel Micay 85d10db763 clarification about factory images flashing script 2022-05-07 11:54:42 -04:00
Daniel Micay 7a162c7275 reorder release notes 2022-05-07 11:53:13 -04:00
Daniel Micay 94eba5c7a8 screenshot EXIF timestamp removed by default 2022-05-07 11:48:20 -04:00
Daniel Micay 7cc545c1a4 refer to talkback consistently 2022-05-07 11:19:16 -04:00
Daniel Micay 8cb19c6ac9 update talkback's material library 2022-05-07 11:19:12 -04:00
Daniel Micay 99f54f8f25 add missing face unlock strings 2022-05-07 11:06:27 -04:00
Daniel Micay ea215a7952 gmscompat location redirection improvements 2022-05-07 10:23:34 -04:00
Daniel Micay f42053cec6 PDF Viewer version 14 2022-05-06 16:56:23 -04:00
Daniel Micay 6cee932bad update GKI for Pixel 6 2022-05-06 16:47:24 -04:00
Daniel Micay 3e7c483b25 unlock animation workaround 2022-05-06 16:47:17 -04:00
Daniel Micay 9753ea984e Dialer Bluetooth fixes 2022-05-06 04:06:38 -04:00
Daniel Micay f63545d146 Settings string fix 2022-05-06 03:24:27 -04:00
Daniel Micay fcc6128abb Camera version 33 2022-05-05 12:49:31 -04:00
Daniel Micay f9dc401775 Camera updates 2022-05-05 10:13:05 -04:00
Daniel Micay 5c2d25be16 drop progress parameter from replicate rsync 2022-05-05 02:36:38 -04:00
Daniel Micay 0ea0e90200 use new rsync fsync parameter 2022-05-05 02:24:21 -04:00
Daniel Micay 43f9f22856 add file locking to deploy/process scripts 2022-05-05 00:19:01 -04:00
Daniel Micay b4af21f07c fix raviole boosted color mode settings string 2022-05-04 11:20:09 -04:00
Daniel Micay 0bb095fd35 fix factory image script non-bash /bin/sh compat 2022-05-04 08:15:54 -04:00
Daniel Micay 8d0f837518 adevtool improvements 2022-05-04 01:55:11 -04:00
Daniel Micay c112c660da whitespace / text wrapping fixes 2022-05-03 20:14:03 -04:00
Daniel Micay d2fc01a154 enable thread pool AIO support 2022-05-03 19:20:58 -04:00
Daniel Micay bbe68dc7af fix wording 2022-05-03 13:43:26 -04:00
Daniel Micay de99492cd2 expand Camera privacy policy 2022-05-03 13:26:34 -04:00
Daniel Micay 8d7adb343f publish new release notes 2022-05-03 12:09:37 -04:00
Daniel Micay f8ca435473 new build number 2022050301 2022-05-03 11:14:42 -04:00
Daniel Micay 8b7e8c96a5 add privacy indicator exemption for Phone services 2022-05-03 10:39:34 -04:00
Daniel Micay e7efc21340 drop configuration for clearing legacy push cookie 2022-05-03 00:25:07 -04:00
Daniel Micay 5bdd465faf fix typo in most recent tag list 2022-05-02 22:07:52 -04:00
Daniel Micay af5d46305e make recent tag lists consistent 2022-05-02 22:07:21 -04:00
Daniel Micay ee5580d7f9 publish new release notes 2022-05-02 21:58:01 -04:00
Daniel Micay 5b6160de4b add last release to table of contents 2022-05-02 21:54:51 -04:00
Daniel Micay 7f8ba8d051 new build number 2022-05-02 21:54:03 -04:00
Daniel Micay 533d2fa293 compatibility fix for adevtool 2022-05-02 21:04:04 -04:00
Daniel Micay d5f3ebfb3f split up dependencies again 2022-05-02 20:54:41 -04:00
Daniel Micay 133e286c2a prepare release notes for monthly update 2022-05-02 20:05:03 -04:00
Daniel Micay 271d04b876 add resolver setup to baseline configuration 2022-05-02 04:09:18 -04:00
Daniel Micay 8c360de379 Camera version 30 2022-05-01 23:57:55 -04:00
Daniel Micay d13c519793 screenshot EXIF metadata reduction feature 2022-05-01 06:00:08 -04:00
Daniel Micay 5c6a25663d clarify alpha channel 2022-05-01 05:20:52 -04:00
Daniel Micay abd10716eb publish new release notes 2022-05-01 04:46:33 -04:00
Daniel Micay 15946d5ff9 disable traditional stateful TLS session cache
This is useless for TLSv1.3 since there's no longer any distinction in
the protocol based on whether the server is using stateless or stateful
session resumption. OpenSSL has a non-standard anti-replay mechanism for
0-RTT based on stateful session resumption but 0-RTT still ends up being
a downgrade for the TLS security properties. nginx disables that feature
since otherwise 0-RTT wouldn't work with the default stateless approach.

Since this cache is only used for TLSv1.2 when stateless resumption
isn't disabled and nearly all TLSv1.2 clients support tickets, it isn't
getting any significant use. It provides worse forward secrecy than
tickets because we implement ticket key rotation based on the expiry
time and sessions aren't actively purged from the stateful cache when
they expire. Cached session state varies in size and nginx ends up
writing errors to the log when clearing out a session fails to make room
for a new one due to it being larger. It's best to finally get rid of
this flawed approach to session resumption.

TLSv1.3 provides the option of forward secrecy for resumed sessions and
it's the only approach that's normally enabled so we don't need to worry
about this anymore once TLSv1.2 is disabled as long as we never enable
0-RTT which weakens forward secrecy and other security properties.
2022-04-30 22:53:28 -04:00
Daniel Micay 8fea46eb9f reorder release notes 2022-04-30 19:59:21 -04:00
Daniel Micay 4cdf8bffb9 new build number 2022043000 2022-04-30 19:59:02 -04:00
Daniel Micay 19c2bd62f2 consistently refer to Updater as System Updater 2022-04-30 18:03:00 -04:00
Daniel Micay d982cbadf1 add Alpha channel 2022-04-30 18:01:24 -04:00
Daniel Micay 11a2bcf14d carriersettings-extractor cleanup 2022-04-30 18:01:07 -04:00
Daniel Micay 382c892a9c add missing context 2022-04-29 21:26:47 -04:00
Daniel Micay adba2296ad update Chromium to 101.0.4951.41 2022-04-29 18:58:23 -04:00