Changes in version 141.0.7390.111.0:

• update to Chromium 141.0.7390.111
• enable origin keyed processes by default for improved site isolation sandboxing
• drop unnecessary code related to our search engine changes
• replace enabling local network checks feature in Vanadium Config via the browser again (this was enabled upstream so we dropped our patch but then they disabled it again which we dealt with via Vanadium Config)

A full list of changes from the previous release (version 141.0.7390.70.0) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

Comparing 141.0.7390.70.0...141.0.7390.111.0 · GrapheneOS/Vanadium

Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS reposito...

^GitHub

Our security preview releases provide early access to Android Security Bulletin patches prior to the official disclosure. Our current security preview releases provide the current revision of the November 2025 and December 2025 patches for the Android Open Source Project. We recommend enabling this.

The only difference between our regular releases and security preview releases are the future Android Security Bulletin patches being applied with any conflicts resolved. The downside of security preview releases is we cannot provide the sources for the patches until the official disclosure date.

The delay for being able to publish the sources is why we're now going through the significant effort of building 2 variants of each release. Our most recent 3 releases have both a regular and security preview variant:

2025092500 and 20250925012025092700 and 20250927012025100300 and 2025100301

You can enable security preview releases via Settings > System > System update > Receive security preview releases.

Our plan is to keep it off-by-default with a new page added to the Setup Wizard which will have it toggled on as a recommendation. We'll prompt users on existing installs to choose.

We're maintaining the upcoming Android security patches in a private repository where we've resolved the conflicts. Each of our security preview releases is tagged in this private repository. Our plan is to publish what we used once the embargo ends, so it will still be open source, but delayed.

The new security update Android is using provides around 3 months of early access to OEMs with permission to make binary-only releases from the beginning. As far as we know, GrapheneOS is the first to take advantage of this and ship the patches early. Even the stock Pixel OS isn't doing this yet.

During the initial month, many patches are added or changed. By around the end of the month, the patches are finalized with nothing else being added or changed. Our 2025092500 release was made on the day the December 2025 patches were finalized, but we plan to ship the March 2026 patches earlier.

Previously, Android had monthly security patches with a 1 month embargo not permitting early releases. For GrapheneOS users enabling security preview releases, you'll get patches significantly earlier than before. We'd greatly prefer 3 day embargoes over 3 month embargoes but it's not our decision.

Security preview releases currently increment the build date and build number of the regular release by 1. You can upgrade from 2025100300 to 2025100301 but not vice versa. For now, you can switch back to regular releases without reinstalling such as 2025092701 to 2025100300, but this may change.

One of the changes in this release should result in Google Messages RCS working for users receiving a verification error caused by Play Store checking for an emulator with an easy to bypass check. It was already working for many users without this but this should get it working for everyone else.

Tags:

• 2025100900 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, Pixel 9a, emulator, generic, other targets)

Changes since the 2025100300 release:

• raise security patch level to 2025-10-05 since it's already provided without applying any additional patches
• System Updater, Setup Wizard: integrate support for recommending opting into security preview releases during the initial Owner user setup and for existing users via a persistent notification which is disabled after making an explicit choice on whether to use security preview releases (this is necessary to inform all users about the option with an explicit choice)
• Settings: add support for forcing VoWiFi availability
• Settings: improve the carrier configuration override by improving the summaries, adding detailed descriptions and using clarifying the options force features to be available since there are also toggles for directly enabling/disabling the features in the main SIM settings screen
• Sandboxed Google Play compatibility layer: fix a Google Messages RCS compatibility issue by removing the error string for the missing privileged permission from SurfaceFlinger::doDump() to make a DroidGuard check pass
• Sandboxed Google Play compatibility layer: make Play Store ignore app auto-install config
• Sandboxed Google Play compatibility layer: fix Build.getSerial() shim to fix an Android Auto issue
• Sandboxed Google Play compatibility layer: add stub for TelephonyManager.getImei()
• Sandboxed Google Play compatibility layer: add stub for Window.setHideOverlayWindows() to replace reliance on a feature flag override via GmsCompatConfig
• kernel (6.1): update to latest GKI LTS branch revision including update to 6.1.155
• update test suite to handle our carrier overrides support
• Vanadium: update to version 141.0.7390.70.0
• Camera: update to version 90

All of the Android 16 security patches from the current November 2025, December 2025 and January 2026 Android Security Bulletins are included in the 2025100901 security preview release. List of additional fixed CVEs:

• Critical: CVE-2025-48593
• High: CVE-2022-25836, CVE-2022-25837, CVE-2023-40130, CVE-2024-43766, CVE-2025-22420, CVE-2025-22432, CVE-2025-32319, CVE-2025-32348, CVE-2025-48525, CVE-2025-48536, CVE-2025-48544, CVE-2025-48555, CVE-2025-48567, CVE-2025-48572, CVE-2025-48573, CVE-2025-48574, CVE-2025-48575, CVE-2025-48576, CVE-2025-48577, CVE-2025-48578, CVE-2025-48579, CVE-2025-48580, CVE-2025-48581, CVE-2025-48582, CVE-2025-48583, CVE-2025-48584, CVE-2025-48585, CVE-2025-48586, CVE-2025-48587, CVE-2025-48589, CVE-2025-48590, CVE-2025-48592, CVE-2025-48594, CVE-2025-48596, CVE-2025-48597, CVE-2025-48598, CVE-2025-48600, CVE-2025-48601, CVE-2025-48602, CVE-2025-48603, CVE-2025-48604, CVE-2025-48605, CVE-2025-48607, CVE-2025-48609, CVE-2025-48612, CVE-2025-48614, CVE-2025-48615, CVE-2025-48616, CVE-2025-48617, CVE-2025-48618, CVE-2025-48619, CVE-2025-48620, CVE-2025-48621, CVE-2025-48622, CVE-2025-48626, CVE-2025-48628, CVE-2025-48629

CVE-2025-48595 was fixed in the regular GrapheneOS 2025100300 release and is no longer listed.

CVE-2025-48611 patch was retracted.

2025100901 provides at least the full 2025-11-01 patch level and the Android 2025-11-05 patch level (Pixel Update Bulletin could have fixes we don't get early) but will remain marked as providing 2025-10-05.

For detailed information on security preview releases, see our post about it.

GrapheneOS security preview releases - GrapheneOS Discussion Forum

GrapheneOS discussion forum

^{GrapheneOS Discussion Forum}

Android Security Bulletin (ASB) for October 2025 is empty:

source.android.com/docs/securi…

However, you can see Samsung has a list of ASB patches for their October 2025 release exclusive to flagships:

security.samsungmobile.com/sec…

It's a small subset of the December 2025 patches.

Android now discloses patches around 3 months prior to their inclusion in a bulletin requiring them to raise the Android security patch level. However, OEMs are allowed to ship the patches as soon as they're receive. We're doing this in our security preview release, but with the full set of patches.

Our initial security preview release on September 25th with the November/December patches included 1 Critical severity patch and 54 High severity patches, which is the full subset applicable to Android 16. In the past couple days, 5 patches applicable to Android 16 were added and 1 was retracted.

December 2025 patches from the past couple days have been included and the January 2026 preview is now available.

Our next release coming today provides a choice to use our security preview releases in the initial setup wizard with a notification for existing users. Opting into it is recommended.

discuss.grapheneos.org/d/27068… provides more information on our security preview releases. The reason we're providing both regular and security preview releases is because we're required to wait to the embargo end date to publish the source code for the patches in the future bulletins.

GrapheneOS security preview releases - GrapheneOS Discussion Forum

GrapheneOS discussion forum

^{GrapheneOS Discussion Forum}

Ahoj, jsme skupina rodičů a na začátku září chceme spustit výzvu rodičům, aby odkládali věk, kdy svým dětem dají chytré telefony a přístup k sociálním sítím. Inspirujeme se mj. zde: smartphonefreechildhood.org/pa…. Hledáme někoho, kdo nám pomůže vybrat vhodný nástroj na sběr podpisů a práci s kontakty. Jsme schopni se složit na odměnu. Těšíme se na zprávu!

Discuss this on our forum.

Rodičovská iniciativa Dětství bez mobilu a sítí hledá pomoc s IT zázemím pro spuštění výzvy rodičům

Ahoj, jsme skupina rodičů a na začátku září chceme spustit výzvu rodičům, aby odkládali věk, kdy svým dětem dají chytré telefony a přístup k sociálním sítím. Inspirujeme se mj. zde: Sign the Parent Pact.

^{Diskutuj.Digital}

Need to let loose a primal scream without collecting footnotes first? Have a sneer percolating in your system but not enough time/energy to make a whole post about it? Go forth and be mid: Welcome to the Stubsack, your first port of call for learning fresh Awful you’ll near-instantly regret.

Any awful.systems sub may be subsneered in this subthread, techtakes or no.

If your sneer seems higher quality than you thought, feel free to cut’n’paste it into its own post — there’s no quota for posting and the bar really isn’t that high.

The post Xitter web has spawned soo many “esoteric” right wing freaks, but there’s no appropriate sneer-space for them. I’m talking redscare-ish, reality challenged “culture critics” who write about everything but understand nothing. I’m talking about reply-guys who make the same 6 tweets about the same 3 subjects. They’re inescapable at this point, yet I don’t see them mocked (as much as they should be)

Like, there was one dude a while back who insisted that women couldn’t be surgeons because they didn’t believe in the moon or in stars? I think each and every one of these guys is uniquely fucked up and if I can’t escape them, I would love to sneer at them.

(Credit and/or blame to David Gerard for starting this. Also, happy 4th July in advance...I guess.)

Need to let loose a primal scream without collecting footnotes first? Have a sneer percolating in your system but not enough time/energy to make a whole post about it? Go forth and be mid: Welcome to the Stubsack, your first port of call for learning fresh Awful you’ll near-instantly regret.

Any awful.systems sub may be subsneered in this subthread, techtakes or no.

If your sneer seems higher quality than you thought, feel free to cut’n’paste it into its own post — there’s no quota for posting and the bar really isn’t that high.

The post Xitter web has spawned soo many “esoteric” right wing freaks, but there’s no appropriate sneer-space for them. I’m talking redscare-ish, reality challenged “culture critics” who write about everything but understand nothing. I’m talking about reply-guys who make the same 6 tweets about the same 3 subjects. They’re inescapable at this point, yet I don’t see them mocked (as much as they should be)

Like, there was one dude a while back who insisted that women couldn’t be surgeons because they didn’t believe in the moon or in stars? I think each and every one of these guys is uniquely fucked up and if I can’t escape them, I would love to sneer at them.

(Credit and/or blame to David Gerard for starting this.)

BlueMonday1984

2025-05-04 23:00:08

Stubsack: weekly thread for sneers not worth an entire post, week ending 11th May 2025

Need to let loose a primal scream without collecting footnotes first? Have a sneer percolating in your system but not enough time/energy to make a whole post about it? Go forth and be mid: Welcome to the Stubsack, your first port of call for learning fresh Awful you’ll near-instantly regret.

Any awful.systems sub may be subsneered in this subthread, techtakes or no.

If your sneer seems higher quality than you thought, feel free to cut’n’paste it into its own post — there’s no quota for posting and the bar really isn’t that high.

The post Xitter web has spawned soo many “esoteric” right wing freaks, but there’s no appropriate sneer-space for them. I’m talking redscare-ish, reality challenged “culture critics” who write about everything but understand nothing. I’m talking about reply-guys who make the same 6 tweets about the same 3 subjects. They’re inescapable at this point, yet I don’t see them mocked (as much as they should be)

Like, there was one dude a while back who insisted that women couldn’t be surgeons because they didn’t believe in the moon or in stars? I think each and every one of these guys is uniquely fucked up and if I can’t escape them, I would love to sneer at them.

(Credit and/or blame to David Gerard for starting this.)

https://apnews.com/article/medicaid-cuts-trump-tax-cuts-bill-1e2b12a91a3d12ceb0420ce7053de58e

Need to let loose a primal scream without collecting footnotes first? Have a sneer percolating in your system but not enough time/energy to make a whole post about it? Go forth and be mid: Welcome to the Stubsack, your first port of call for learning fresh Awful you’ll near-instantly regret.

Any awful.systems sub may be subsneered in this subthread, techtakes or no.

If your sneer seems higher quality than you thought, feel free to cut’n’paste it into its own post — there’s no quota for posting and the bar really isn’t that high.

The post Xitter web has spawned soo many “esoteric” right wing freaks, but there’s no appropriate sneer-space for them. I’m talking redscare-ish, reality challenged “culture critics” who write about everything but understand nothing. I’m talking about reply-guys who make the same 6 tweets about the same 3 subjects. They’re inescapable at this point, yet I don’t see them mocked (as much as they should be)

Like, there was one dude a while back who insisted that women couldn’t be surgeons because they didn’t believe in the moon or in stars? I think each and every one of these guys is uniquely fucked up and if I can’t escape them, I would love to sneer at them.

(Credit and/or blame to David Gerard for starting this.)

The best way to install them is through the F-Droid store, which is a catalogue of FOSS software for Android. It's installable by downloading the .apk file linked on the front page of the F-Droid projec'ts website. The mentioned apps from the Karlsruhe Institute of Technology can then be found by searching for "SECUSO", which is the name of the research project behind them all.

Alternatively, you can also get them through the Google Play Store under this link or again by searching for "SECUSO".

In particular, I recommend getting the QR code reader, because many of the free-to-use scanners route everything you scan through their servers, so they're obviously collecting your data on their servers, wherever these may be located.

F-Droid - Free and Open Source Android App Repository

F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.

^f-droid.org

ArcaneChat 1.56.1 is already available in Google Play and should be available in f-droid in the upcoming days, for other download options check arcanechat.me/

🔮 What's new?

★ ignore click in info-messages from deleted in-chat apps

★ data saving: do not send messages to the server if user is the only member of the chat in single-device usage

★ protect metadata: encrypt message's sent date

★ do not fail to send messages in groups if some encryption keys are missing

★ synchronize contact name changes across devices

★ fix changing group names that was not working in some situations

★ fix: do not show outdated message text in "Message Info" of an edited message

★ some more small bug fixes and updated translations

★ update app core to 1.158.0

💜 Show your love and support ArcaneChat development: arcanechat.me/#contribute

ArcaneChat

Private chats for the family

^{arcanechat.me}

Ahojte, viem, že nás tu je málo ale pre srandu to môžeme skúsiť 🙂

Je to reakcia na túto správu: jlai.lu/post/16058178

Navrhnite teda nejakú pesničku ktorú by sme poslali na Lemmyvision 2. V skratke:

• Musí byť z minulého alebo tohoto roku (vydaná po 1. januári 2024)
• Nesmie byť medzinárodný hit (toho sa asi báť nemusíme)

A pridám aj subjektíny nápad odomňa:

• myslime na to, že pesničku bude počúvať a hodnotiť medzinárodné publikum. Možno by teda bolo lepšie, aby pesnička nestavala len na silnom texte ale musí to proste zaujať aj bez znalosti slovenského jazyka. Vžime sa do toho, čo si z tej ktorej pesničky vezme Nemec, Švéd či Portugalec

The whole site is down and I can't upload any changesets. It doesn't appear maintenance related.

You can see some stats here:

prometheus.openstreetmap.org/d…

en.osm.town/@osm_tech/11365487…

Hopefully this is not another purposeful attack on OSM.

Edit: Site is up now, but the database is read-only. See: en.osm.town/@osm_tech/11365663…

kofola.sk

Unfortunately, it seems they removed the original posts, and made them again without this image, but it still lives on the website.
Apparently they were getting hateful comments because of it.

cross-posted from: lemmy.world/post/22220175

commons.wikimedia.org/wiki/Fil…

Just wrote a little blog and made a video about this to hopefully make it easier for folks to figure this out. I've looked it up a few times throughout the years and it was always a little tricky to find.

blog.rayberger.org/how-to-add-…

How to Add a Brand Preset to OpenStreetMap

TLDR: Learn how to add brand presets to OpenStreetMap by following the official Name Suggestion Index contribution guide. A video tutorial demonstrating this process is available here.

^{Ray Berger (Ray Berger's Blog)}

The International Atomic Energy Agency (IAEA) and the European Bank for Reconstruction and Development (EBRD) have signed an agreement to expand their cooperation in nuclear energy as part of efforts to unlock investments in a low-carbon future.

The IAEA said in a statement that the agreement, signed on the sidelines of the United Nations Climate Change Conference (Cop29) in Baku, Azerbaijan, will expand existing partnership between the two organisations “beyond nuclear and radiation safety concerns”.

The move marks a shift in focus from traditional safety concerns towards capacity-building initiatives and developing energy policy, governance and financing frameworks, and mechanisms to reach net zero goals, the statement said.

“Together we are not only building on years of successful cooperation in nuclear safety, but we are opening new doors for capacity building, clean energy, and economic resilience,” said IAEA director-general Rafael Grossi.

“Partnering with financial institutions, like the EBRD, is essential to unlocking the investments needed for a low-carbon future,” he said.

Grossi highlighted the importance of partnerships with financial institutions and the private sector to scale up nuclear energy.

The IAEA said it invites government, industry, banks and other stakeholders to partner with the agency and to contribute their financial resources, expertise, industrial knowledge and advocacy.

The agency said countries can benefit from the IAEA-EBRD partnership’s activities in support nuclear and radiation safety and technical infrastructure, including the decommissioning of facilities and the management of radioactive waste.

The IAEA and EBRD have a longstanding commitment to nuclear decommissioning efforts across Eastern Europe, Russia, and Central Asia, including ongoing projects in Ukraine, Bulgaria, Lithuania, and Slovakia, and environmental remediation in Central Asia.

Cop29 / IAEA And EBRD Nuclear MOU Aims To ‘Unlock Investments In Low-Carbon Future’

Agency highlights importance of partnerships with financial institutions

^{The Independent Global Nuclear News Agency}

"Hana MATELOVA of Czechia and Barbora BALAZOVA of Slovakia clinched their first-ever medal together at the Continental Championships. At the LIEBHERR European Championships in Linz, MATELOVA and BALAZOVA triumphed over reigning champions Sofia POLCANOVA of Austria and Bernadette SZOCS of Romania. The bronze medals went to Izabela LUPULESKU and Sabina SURJAN of Serbia, and Natalia BAJOR of Poland and Tatiana KUKULKOVA of Slovakia.

In her third European final, BALAZOVA made history by securing Slovakia’s first European title. After losing the mixed doubles finals in 2013 and 2020, she finally claimed victory. For MATELOVA, it marked her second European title and a significant win for Czechia, having previously won the mixed doubles title in 2013 (ironically against BALAZOVA).

The final was intense, but the Czech-Slovak pairing always seemed one step ahead.

“This was our best match here. Even we were impressed with our performance in the final. We had never won a medal before at the Europeans, and we’ve been playing together since 2011 in Herning. For sure, the experience of playing finals was on their side. POLCANOVA especially, since she knows how to handle the pressure of the final stage, having been there three times before,” MATELOVA said.

Sometimes, experience can also be a burden, making it harder to carry.

“They were nervous, especially in the opening games, while we were more relaxed. Before the match, we just said, ‘Let’s fight and see what happens.’ We stuck to our game plan,” added MATELOVA.

BALAZOVA shared her thoughts about her nerves before the match.

“Five minutes before the match, I told Hana that I was nervous, but she calmed me down. Even if we lost, we had already achieved a lot by winning a silver medal. So I just wanted to give my best without feeling the pressure of the result. We had a rocky path throughout the entire tournament with a really tough draw. From round one, it was challenging. Also, we weren’t sure if this would be our last European Championship, so we just wanted one medal to say goodbye. But to win gold—it’s unbelievable.”

Reflecting on their challenging path, MATELOVA added, “The first match was the hardest. We faced Charlotte LUTZ and Jia Nan YUAN of France. It couldn’t have been a tougher start, but we managed to beat them 3-0. Strangely, my defeat in singles helped me focus entirely on doubles, and I had plenty of rest between matches, allowing me to prepare in peace. Yesterday’s match against Natalia BAJOR and Tatiana KUKULKOVA was also incredibly difficult. They had a 2-0 lead and two match points,” MATELOVA recalled.

BALAZOVA also shared a personal anecdote: “After I lost in singles to LUTZ, without much of a chance, my fiancé told me, ‘Maybe it’s for the best because you might become the European champion in doubles.’ That idea stuck in my mind, and I thought about it before the final. For me, the toughest match was the quarterfinal against BERGSTROM and KALLBERG, when we finally secured our medal.”

Women's Doubles final:

Sofia POLCANOVA, Bernadette SZOCS (Austria, Romania) - Hana MATELOVA, Barbora BALAZOVA (Czechia, Slovakia) 2-3 (7-11, 11-7, 9-11, 11-7, 6-11)

Semi final

Sofia POLCANOVA, Bernadette SZOCS (Austria, Romania) - Izabela LUPULESKU, Sabina SURJAN (Serbia) 3-2 (10-12, 11-4, 11-5, 5-11, 11-3)

Natalia BAJOR, Tatiana KUKULKOVA (Poland, Slovakia) - Hana MATELOVA, Barbora BALAZOVA (Czechia, Slovakia) 2-3 (11-8, 11-5, 12-14, 5-11, 11-13)"

The final in relive video at ettu.tv

Seattle / PNW: Keep an eye out and call the contact numbers if you have any info

king5.com/article/news/local/s…

I've been playing around with Google Maps lately to create custom maps.

I don't like google but have no experience with any other apps and have never tried mapping of any sort before.

I'm trying to create a map layer(s) that has historic sites, stone circles, woodland, cemeteries, UNESCO sites etc. So if I'm traveling I can stop and see them.

I've created my own Google Map using lists of sites from Wikipedia. This has gone ok but leads to a lot of data cleansing and the functionality isn't great.

I've seen this website but it isn't as complete as the Wikipedia text lists ive imported: hmdb.org/

I'm completely new to this and have no experience. Are there any good resources out there for me to use or contribute to?

I'd like to de-google as much as possible.

P.S. do I need to enable developer mode or root my phone to install open street map now?

Thanks!

cross-posted from: discuss.tchncs.de/post/2107679…

xkcd #2977: Three Kinds of Research

alt text:

The secret fourth kind is 'we applied a standard theory to their map of every tree and got some suspicious results.'

explainxkcd.com/2977/

Hi !Friendica Support,
I've only been able to upload 1 photo at a time to Friendica. Is bulk upload available?

The thumbnail that is shown with a link is confusing at best because it is blurred. Is there any way to unblur it?

Thank you!

Hi !Friendica Support,
I'm not finding much documentation about following and connecting.
Is this how it works:
If the only relationship between A and B is that A follows B, then:
- A is a fan and follower of B.
- A and B are not considered connected.
- There is a unilateral friendship between A and B.

If B also follows A, then:
- A and B are considered connected.
- There is a mutual/bilateral friendship between A and B.

Also, from this page:

When you receive a friendship notification from another Friendica member, you will have the option of allowing them as a "Follower" or as a "Friend". If they are a follower, they can see what you have to say, including private communications that you send to them, but not vice versa. As a friend, you can both communicate with each other.

How do you cause a “friendship notification” to be sent? What form does it take when it arrives? I've been experimenting with 2 accounts, but have not seen a friendship notification.

Thank you,
Dirk

Za mňa asi Zaľúbil sa chlapec z albumu Hodina Pravdy. Myslel som že Sestrička z kramárov ale zistil som že to je dosť staré

Diskografia:

sk.m.wikipedia.org/wiki/Diskog…