Thread

Android 17 is the first since 3.x to add new APIs without releasing to the AOSP

1180 points · 723 comments · theanonymousone

wps · 1789760710 · focus · HN ↗
The amount of roadblocks Google is putting up for GrapheneOS is just ridiculous. None of their decisions make any sense, from the delayed source patches upstream, to the embargos, attestation issues, etc. Google simply regrets android being open source.
1. Retr0id · 1789761534 · focus · HN ↗
  Google is also seriously dropping the ball in terms of security. The CVE-2026-43499 root LPE (aka ghostlock) is still unpatched across all Pixel devices, on the latest """security""" update, despite weaponized exploits being public for months.
  1. jeroenhd · 1789762239 · focus · HN ↗
    I just ran <a href="https://github.com/CakesTwix/Android-CVE-2026-43499" rel="nofollow">https://github.com/CakesTwix/Android-CVE-2026-43499 on my Pixel 9 Pro and it seems to have been patched. I did get a system update not long ago, though.
    Retr0id · 1789763128 · focus · HN ↗
    Try <a href="https://github.com/alex193a/Root-My-Pixel" rel="nofollow">https://github.com/alex193a/Root-My-Pixel, worked on my 9a as of a few days ago (the version table in the readme is stale). I haven't checked the September update yet though (installing it now, to check).
    Edit: September update for 8a has a kernel build from July. I believe it's still vulnerable but the exploit will need its offsets adjusting etc.

Unofficial Hacker News client; not affiliated with Y Combinator.