View Single Post
  #1   (View Single Post)  
Old 12th November 2022
shep shep is offline
Real Name: Scott
Arp Constable
 
Join Date: May 2008
Location: Dry and Dusty
Posts: 1,507
Default TrustCor Certificate Authority - Not to be trusted

In the culturing an illusion of trust category

From the GrapheneOS Changelog:
Quote:
2022111000

Tags:

TP1A.221005.002.2022111000 (Pixel 4, Pixel 4 XL) — extended support release for legacy devices with frozen 2022-10-05 patch level
TP1A.221105.002.2022111000 (Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, emulator, generic, other targets)
TD1A.221105.001.2022111000 (Pixel 7, Pixel 7 Pro)

Changes since the 2022110800 release:

remove TrustCor Certificate Authority due to malicious domain squatting and ties to entites involved in surveillance which should have very little impact on web compatibility due to this CA barely being used by anyone other than a specific dynamic DNS provider
ignore wireless alert channels being marked as always-on to prevent channel configuration overriding presidential alert toggle
GmsCompatConfig: change app label from "GmsCompat config" to "GmsCompatConfig"
GmsCompatConfig: disable TelecomTaskService to resolve sandboxed Google Play services crash caused by feature flag
kernel (Pixel 4, Pixel 4 XL, Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): update base kernel to Android 13 QPR1 Beta 3 to ship the December security update early
Vanadium: update Chromium base to 107.0.5304.105
And the well documented, academic presentation of the evidence:
https://groups.google.com/a/mozilla..../c/oxX69KFvsm4

Last edited by shep; 14th November 2022 at 12:45 PM. Reason: jggimi's spelling correction
Reply With Quote