New release build coming
Hardware accelerated encryption
Full spectre v1 mitigation (CPU not vulnerable to v2 and v3)
Full meltdown mitigations
July 5 security patch merged in ROM and kernel
90% of HALs binderised
Several improvements to the RIL
Improved audio quality
Misc changes:
Glassrom will now verify your system after updating it. It will throw a failure and warn you if the system partition doesn't match an expected value. This will prevent accidental flashes if your download was corrupt
For low bandwidth users the compression rate of the OTA has been increased so that they can actually download the file. Compression doesn't affect the time required for flashing. (Btw compression of this level takes 11 hours on my server! Thanks to the way Google wrote the compression algorithm only 1-2 minutes are required for the flash. We're using brotli level 11 for compressing the system image and zip level 9 for compressing the overall OTA package)
Since oneplus2 doesn't currently support vboot 2.0 (implementation is possible and I'm working on it), the current verification mechanism for system is sha1 which isn't a very secure algorithm. It will prevent 99% of bad flashes but it's not perfect and we should move to vboot 2.0 with sha512 which has a very low error rate soon. I'm other words the system partition check isn't entirely foolproof
Glassrom will boot with software accelerated encryption and NOT convert to hardware accelerated encryption unless you format data. This is done intentionally to prevent data loss
That concludes the changelog. The release build should be out in the next 24 hours
Oh yeah and after this I'm going to look into twrp. Since I'm the twrp maintainer I gotta fix a lot of bugs