Post

@securitylab.github.com

Why does GitHub Security Lab do research like Man Yue Mo’s recent work on bypassing MTE on the Pixel 8? This question was asked on Hacker News and we think it’s worth a short thread. news.ycombinator.com/item?id=3975...

news.ycombinator.comThis is great research and a great write-up, but I'm a little (pleasantly) surpr... | Hacker News

6/2/25, 9:59 pm0 reposts1 like

GitHub Security Lab

@securitylab.github.com

6 Feb 2025

First an important point: we only research open source code, which means that many parts of your phone (for example most of your apps) are out-of-scope for us. That said, all open source code is in-scope, including projects that aren’t hosted on GitHub.

GitHub Security Lab

@securitylab.github.com

6 Feb 2025

In this particular case, Man Yue Mo found a bug in Arm Mali, which is an open source GPU driver used on many Android phones. Android itself is open source. developer.arm.com/downloads/-/...

developer.arm.comMali Drivers | Open Source Valhall Mali 4th Gen GPU Architecture Kernel Drivers – Arm DeveloperThe Android and Linux version of the Mali GPUs Device Driver provide low-level access to the Mali GPUs that are part of the Valhall family. Some of these components are being made available under the ...

GitHub Security Lab

@securitylab.github.com

6 Feb 2025

Open source software is the foundation of much of the world’s software. So when open source wins, we win. And that’s why @github.com takes its responsibility seriously, to help make open source software more secure.

GitHub Security Lab

@securitylab.github.com

6 Feb 2025

GitHub Security Lab sits within GitHub Security, and we focus exclusively on open source security with four main priorities: