Why Did Google Disable this Security Feature?

Our top stories this week:

  • GrapheneOS Unable to Complete Pixel 11 Port Due to Cut Security Feature
  • Pixel 11 Has Hardware MTE Support, "May Still Be Usable" for GrapheneOS
  • Trump Goes After Anonymous Email Provider in Italy. The Real Target Is Free Speech in the U.S.
  • Brave launches Email Aliases to keep your personal email address private from websites
  • Introducing Ad Blocker for Firefox on iOS: More Control, Fewer Distractions

TWIP Live 🔴


Updates from the Team

Site Updates

This week we committed a few small but important updates to the website. We fixed a few dead links on the page about Privacy Guides' origin story, updated our advice about how to use Arch Linux properly, and removed Mullvad DNS from our list of recommended DNS resolvers since Mullvad has announced their intent to shut down the service.

update: Fix dead links in PrivacyTools FAQ (#3268) · privacyguides/privacyguides.org@3b27fed
Protect your data against global mass surveillance programs. - update: Fix dead links in PrivacyTools FAQ (#3268) · privacyguides/privacyguides.org@3b27fed
update: Remove Specific Arch-Based Anti-Recommendations (#3269) · privacyguides/privacyguides.org@3aef104
Signed-off-by: Jordan Warne <jordan@privacyguides.org> Co-authored-by: Daniel Gray <dngray@privacyguides.org>
update: Remove Mullvad DNS from Encrypted DNS providers (#3270) · privacyguides/privacyguides.org@95f8513
Protect your data against global mass surveillance programs. - update: Remove Mullvad DNS from Encrypted DNS providers (#3270) · privacyguides/privacyguides.org@95f8513

News Briefs

This week, Fria covered the highlight stories as they happened, so remember to subscribe to our news briefs to get updates ASAP without having to wait til Friday. Besides that, we also covered stories about the new Signal Android beta that has support for accounts without phone numbers, a bug in Google Messages sending old texts to random people, a router manufacturer found with multiple backdoors in the products, and more!

Privacy & Security News
The latest news in data privacy, cybersecurity, and consumer rights brought to you by Privacy Guides.

Sources

Pixel 11 & Graphene Updates

When the Pixel 11 was released a few weeks ago, we asked the same question many privacy enthusiasts did: when will GrapheneOS support it? Much to our shock, this week the Graphene team announced that during their investigations, a critical security feature present in all previous Pixels (starting with the 8 series) called Memory Tagging Extension (MTE) was removed. MTE is a foundational part of Graphene. The team announced they were considering skipping support for the 11 series, but then later announced the next Android 17 Beta had re-added MTE support. They haven't officially announced if they will support the Pixel 11 or not. This is an ongoing story, so subscribe to our news briefs and stay tuned.

GrapheneOS Unable to Complete Pixel 11 Port Due to Cut Security Feature
GrapheneOS has completed a partial port to the new Pixel 11 devices, but they say they’re unable to complete it due to Google dropping ARM Memory Tagging Extension (MTE) support.
Pixel 11 Has Hardware MTE Support, “May Still Be Usable” for GrapheneOS
After GrapheneOS previously hit a roadblock porting to the Pixel 11 due to a missing security feature, they found the hardware does have “at least bare minimum support for MTE.”

Trump Goes After Anonymous Email Provider in Italy. The Real Target Is Free Speech in the U.S.

This past week, the US government sanctioned and Italian provider known as "Autistici/Inventati" or the "A/I Collective." The US claimed that this group enabled violent far-left extremists groups in the US, but experts warn that this is actually an attack on free speech with "slippery slope" repercussions. Furthermore, we assert that this story shows how some large governments (especially the US) have outsized control over the internet, even for foreign-based organizations.

Trump Goes After Anonymous Email Provider in Italy. The Real Target Is Free Speech in the U.S.
Trump designated a collective that provides anonymous email services as a foreign “terrorist” group. It could curtail free speech in the U.S.

Brave launches Email Aliases to keep your personal email address private from websites

In a sign that demand is increasing for email aliasing services, Brave has launched their own. It will require a Brave account (separate from the Premium account used to pay for Brave VPN or other premium services). Forwarded emails will be scanned for spam & malware but once delivered, Brave will delete it from their servers "in seconds." At the moment there are five free aliases available, but in the future Brave will charge for more features.

Brave launches Email Aliases to keep your personal email address private from websites | Brave
Starting with desktop version 1.94, Brave is offering Email Aliases to let you sign up for online services without revealing your personal email address. Aliases forward to your primary inbox, helping reduce spam and break cross-site tracking.

Introducing Ad Blocker for Firefox on iOS: More Control, Fewer Distractions

Firefox for iOS has finally added in-app adblocking. Mozilla had to build the ad-blocking in directly because iOS doesn't allow extensions the same way that Android and desktop do, where third-party extensions can provide that service. Right now the service is opt-in, and according to a post in our forum, it does require some limited telemetry until the rollout is complete.

Reduce clutter and distractions with Ad Blocker for Firefox on iOS | The Mozilla Blog
There’s only so much room on your screen. Pop-ups, overlays, and ads can take over fast, getting between you and what you came to do. That’s where

Forum Updates

1Password wades into a right-wing mess after funding a Linux project
▶ Update