Re: Washington Post says Google sold Android phones with hidden insecure feature

Jeff Layman <Jeff@invalid.invalid> wrote:

Firstly, I tried finding out the answer to my question about
Showcase.apk and grapheneOS but I couldn't tie the search down enough,
as "showcase" is a word often used!

I went on the GrapheneOS forum and searched 'showcase':
https://discuss.grapheneos.org/d/14984-is-grapheneos-an-answer-to-recent-wired-headline-about-showcaseapk

But I could have told you the answer anyway - GOS builds from Google's
sources, so they don't include closed source apps like this.  If you choose
to install Google Play then that's closed source, but they carefully vet what
gets installed.

GrapheneOS also have an official statement which debunks the whole story:
https://discuss.grapheneos.org/d/14993-debunking-fake-stock-pixel-os-vulnerability-from-an-edr-company

Theo