Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped
GrapheneOS may skip supporting the Pixel 11 series because it lacks firmware support for ARM hardware memory tagging (MTE).
summary is enough The core claim is a simple hardware/firmware deficiency, and the discussion reveals the information is slightly outdated and evolving.
summary
GrapheneOS reports that the Pixel 11 lacks the necessary firmware support for ARM Memory Tagging Extension (MTE), a critical security feature they use to prevent remote and local exploits. While the device has other improvements like post-quantum secure boot and a Titan M3 chip, the absence of MTE significantly reduces security after the first unlock. Consequently, GrapheneOS recommends against buying the Pixel 11 and is shifting focus toward an upcoming partnership with Motorola.
key points
- Pixel 11 lacks firmware support for MTE, which GrapheneOS uses across the base OS and kernel to mitigate memory safety vulnerabilities.
- The Pixel 11 is described as overpriced with incremental CPU gains and an underpowered GPU compared to the Snapdragon 8 Elite Gen 5.
- GrapheneOS is pivoting toward Motorola devices, which are expected to support their security requirements by 2027.
- The Pixel 11 includes a Titan M3 chip and ML-DSA for verified boot, improving security before the first unlock (BFU).
who should read it
Privacy-conscious Android users and security researchers interested in hardware-level memory protections.
discussion mixed
consensus
Commenters generally agree that Google's decision to omit or disable MTE is a regression, though some note that the original announcement is outdated and that future firmware updates might resolve the issue.
pushback
Some argue that MTE is a niche feature that doesn't impact the average user and that GrapheneOS is too dependent on specific Google hardware.
Most recent comment from them (9/30)
https://discuss.grapheneos.org/d/41564-pixel-11-doesnt-yet-m...
GrapheneOS:
``` We're not going to add support for the Pixel 11 series unless it ships MTE support. It has hardware level support for MTE but it shipped without firmware support for it. It's unknown why that's the case and it could be due to flaws in the hardware implementation which have to be worked around. It isn't yet clear if it's going to support MTE but we've decided we won't support it unless it ships. Android 17 QPR2 Beta launched for the Pixel 11 after we made our initial posts …
Provides a more recent update from GrapheneOS clarifying that they will not support the device unless MTE support is added, noting preliminary firmware support in Android 17 QPR2 Beta.
Generated by an LLM from the article and thread. Check the sources before relying on it.