Vanadium version 138.0.7204.63.0 released:
https://github.com/GrapheneOS/Vanadium/releases/tag/138.0.7204.63.0
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
https://discuss.grapheneos.org/d/23569-vanadium-version-13807204630-released
#GrapheneOS #privacy #security #browser
@GrapheneOS Is it possible in next graphene version to allow the removal of vanadium without removing the vanadium system webview ?
Also is it possible to allow the removal of calculator clock contacts and gallery (and info / pdf viewer)?
I use fossify app for owner that are more beautiful and open but it force me to disable your that will not be properly updated anymore, and for car profile i would prefer remove any app i don’t use
edit also camera sms and phone
@ElysianEve Vanadium browser and Vanadium WebView are already separate apps. You can disable the Vanadium browser without disabling the WebView. Vanadium is the most secure available browser and what we recommend as a general purpose browser though.
> Also is it possible to allow the removal of calculator clock contacts and gallery (and info / pdf viewer)?
You can disable apps which you aren’t interested in using. It prevents them running. You just have the option to enable them again.
@ElysianEve It’s worth noting that our PDF Viewer has a unique, highly secure approach to PDF rendering and other PDF viewers largely have atrocious security. The only one with reasonable security would be the Chromium PDFium one which can be enabled in Vanadium via chrome://flags but is still significantly less secure than our PDF Viewer which is why it’s disabled by default. Significant improvements will be made to our PDF Viewer such as adding swiping between pages in a single view.
@GrapheneOS i understand here the goal is more removing it on profile where i don’t need it more than replacing it i use it on owner.
@ElysianEve You can disable it on profiles where you don’t use it. The same applies to most of the built-in apps. Camera is a special case providing very basic OS functionality to other apps. It can still be disabled via ADB. Messaging and Dialer are similar to Camera where they’re expected to be present and aren’t really meant to be disabled. We don’t change how it works for those 2, that’s standard. We gray out disable for Camera, Keyboard and WebView since otherwise people break apps.
@ElysianEve It’s still possible to disable those apps via ADB, we just turn off the option in Settings similarly to what AOSP / stock Pixel OS do for many OS components because people don’t realize they’ll break stuff.
@GrapheneOS i know you use a more secure than ntp, but i’ve seen request to ntp.org, can i safely block them ? (if it’s not normal how can i find where they come from ?)
@ElysianEve GrapheneOS uses HTTPS network time itself. There may be a connection to ntp.org from the Samsung gnssd service which we may still need to replace. Blocking it should be harmless as long as it knows to fall back to the OS time. This isn’t intended to happen but is a potential recent regression. Pixel 8a and 9th generation Pixels use Samsung GNSS instead of Broadcom GNSS and this potential issue is limited to them. We need to research it and replace it if it still happens.
