I’d like to say that grapheneOS is legitimately excellent for hardening Android, for sandboxing google play services, for making AOSP and private Android relatively usable
but now I have a lot of information about what they consider exploit analysis (throwing an LLM at it because everyone else is doing it) and threat analysis (fedi is kiwi farms). my confidence is shaken. these people have been confidently asserting that their practices are best in class or near best in class. are they really?
I’m not sure the people using LLMs who couldn’t accurately talk about LLMs, and who deleted the posts where they talked about all this just to disrupt conversation once the backlash came, are people I can trust to honestly analyze their own work