From 441c18784b129d9f40deaeafb8cb985f6f641a55 Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Wed, 19 Jun 2024 18:58:13 -0400
Subject: [PATCH] clarify USB security changes

---
 static/releases.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/static/releases.html b/static/releases.html
index 40e19b41..57ff1c58 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -782,10 +782,10 @@
                     <p>Changes since the 2024061400 release:</p>
 
                     <ul>
-                        <li>hide USB peripheral security setting when USB-C port setting is available</li>
-                        <li>extend USB-C port setting to pogo pins (for Pixel Tablet)</li>
+                        <li>remove our USB peripheral security setting on devices supporting our much better USB-C port mode (Pixel 6 and later)</li>
+                        <li>extend USB-C port setting to also handle pogo pins on the Pixel Tablet</li>
                         <li>kernel (5.10, 5.15, 6.1, 6.6): replace our deny_new_usb feature with a new deny_new_usb2 feature also disabling USB gadgets</li>
-                        <li>extend USB-C port setting to enable deny_new_usb2 as a second layer of defense beyond low-level hardware disabling of new USB connections and then USB data</li>
+                        <li>extend USB-C port setting to enable deny_new_usb2 as a second layer of defense disablingf new USB connections and then USB data at a hardware level, in case the USB controller is compromised or doesn't work correctly</li>
                         <li>require user authentication for changing auto-reboot, USB peripheral and USB-C port security settings</li>
                         <li>temporarily add back memory tagging exception for Pixel wifi_ext service</li>
                         <li>add GrapheneOS Linux kernel port to the 6.6 GKI LTS branch</li>