We cannot say which OEM it is at this point. It'll be announced when we can.

It's been more than that, and in those years, there have been no other devices meet our requirements. We're currently working with an OEM to have some of their future devices support GrapheneOS. They're implementing what we need. We can't cut corners, we'll just support OEMs who want to do the work.

You're calling GrapheneOS corrupt for having clearly defined standards and sticking to them, but not companies that make software and hardware that is marketed as private and secure while being neither? It's very weird.

This is an extremely weird thing to say. We've made it extremely clear why we currently support the devices we do, and we have also made it clear why we can't support the other devices people usually talk to us about. We're working on supporting other devices, but we won't cut corners doing it.

This kind of thought process and purity tests almost always leads people to worse outcomes where they're much worse off than they could've otherwise been, such as with devices with horrible security/privacy practices that don't receive basic patches or have gaping holes.

Privacy is not synonymous with "avoid Google". You can use things Google has made and have privacy. There are specific things that make e.g. Brave a better choice than other non-Chromium based browsers, or Pixels a better device for building an alternative OS.

Things were a bit different with Android this time, likely due to a functionality vs security trade-off that made it harder to address the issue in AOSP. Going forward, we'll continue reporting to Google but jointly disclose to GrapheneOS for any future Android-related issues.

Disable non-proxied UDP is the most secure/private option.

GrapheneOS currently supports all devices that meet the project's criteria. We would love to be able to support more devices, and would be open to do so if a device meeting our requirements is made. You can see our hardware requirements at grapheneos.org/faq#future-d....

For an idea of what we're looking for, see the 10Gbps options at tempest.net/dedicated-se... with 64GB memory. They're also willing to give us a significant discount, which other major providers haven't offered. Tempest is currently IPv4-only though, which isn't ideal for our usage.

We've made 2 attempts at talking to OVH about offering us something different than their publicly available products which hasn't gone anywhere. We likely need to move this part of our infrastructure to 1 or 2 other providers with unmetered 10Gbps dedicated servers like Tempest.