summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Micay <daniel.micay@grapheneos.org>2023-11-29 20:23:13 -0500
committerDaniel Micay <daniel.micay@grapheneos.org>2023-11-29 20:26:28 -0500
commit58841a8c9f33d1a3838ff28f3e299815681a823b (patch)
treeff8431ed80f44751fe637e7917c5717747dc3536
parent6e4e50352e67879eabff5bb184bf392a35633c19 (diff)
MTE is used in production now
-rw-r--r--static/faq.html9
1 files changed, 4 insertions, 5 deletions
diff --git a/static/faq.html b/static/faq.html
index 7fa6bb38..68dc97d0 100644
--- a/static/faq.html
+++ b/static/faq.html
@@ -217,11 +217,10 @@
<p>8th generation Pixels provide a minimum guarantee of 7 years of support
from launch instead of the previous 5 year minimum guarantee. 8th generation
Pixels also bring support for the incredibly powerful hardware memory tagging
- security feature as part of moving to new ARMv9 CPU cores. GrapheneOS has
- experimental support for hardware memory tagging in hardened_malloc available
- as a user-facing option in the advanced security settings and is quickly
- moving towards having it enabled by default. It will be used more extensively
- in the future and is a game changer for protecting against exploitation.</p>
+ security feature as part of moving to new ARMv9 CPU cores. GrapheneOS uses
+ hardware memory tagging by default to protect the base OS and known compatible
+ user installed apps against exploitation, with the option to use it for all
+ apps and opt-out on a case-by-case basis for the few incompatible with it.</p>
<p>Both 7th and 6th generation Pixels have a minimum guarantee of 5 years from
launch. 7th generation Pixels are a year newer so they have an extra year of