GrapheneOS开发团队因Google在Pixel 11系列中取消ARM硬件内存标记(MTE)支持,而无法完成该机型的适配工作1。MTE是一项关键的安全特性,GrapheneOS已将其广泛集成到操作系统各层1,其缺失将严重削弱设备的漏洞防护能力1。
Pixel 8在2023年10月推出时支持硬件MTE1,但Pixel 11删除了这一功能,而Google官方的Android和Pixel操作系统从未默认启用MTE1。相比之下,Apple的iPhone 17采用内存完整性强制(MIE),在内核和用户空间的大部分中使用最安全的MTE模式1。搭载高通骁龙8 Elite Gen 5的设备不仅支持MTE,性能指标也明显优于Pixel 11,包括单线程CPU性能高40%、多线程性能高80%、GPU性能超过100%1。
虽然Pixel 11的Titan M3芯片可改善BFU(离线)安全,但MTE的缺失严重削弱了其AFU(在线)安全防护1。Pixel 10虽然价格更低且硬件相似,但仍保留MTE支持1。GrapheneOS开发团队建议用户避免购买Pixel 11,转而考虑Pixel 8/9/10或即将推出的搭载高通处理器的Motorola设备1。
The GrapheneOS development team has encountered a critical obstacle in porting their security-focused operating system to Google's Pixel 11 series.1 Google has removed support for ARM hardware memory tagging extension (MTE), a fundamental security feature that GrapheneOS integrates throughout its entire operating system architecture.1 The absence of this capability will substantially weaken the device's vulnerability protection mechanisms, prompting the team to recommend that users avoid purchasing the Pixel 11.1
MTE has been a cornerstone of GrapheneOS's security approach since the Pixel 8's introduction in October 2023, when the device first included hardware support for the feature.1 Google's standard Android and Pixel operating systems, however, have never enabled MTE by default.1 The Pixel 11's removal of MTE support represents a significant regression, as the device's Titan M3 security coprocessor, while capable of improving certain aspects of security in the boot firmware stage, cannot compensate for the loss of memory integrity protections at the application level.1 By contrast, Apple's iPhone 17 implements memory integrity enforcement through the most secure MTE mode across substantial portions of its kernel and user-space foundation.1
The GrapheneOS team suggests users consider alternative devices instead, including the less expensive Pixel 10, which maintains both MTE support and comparable hardware specifications to the Pixel 11.1 Devices equipped with Qualcomm's Snapdragon 8 Elite Gen 5 processor also remain viable options, offering significantly superior performance—40 percent higher single-threaded CPU speed, 80 percent higher multi-threaded performance, and over 100 percent greater GPU performance—while retaining MTE support.1 The team also points to upcoming Motorola devices as potential alternatives.1
评论
还没有评论,欢迎留下第一条。