81–90 of 496 posts
Earlier quoted context omitted.
Well, Calyx keeps the basic security model of Android intact (verified boot), unlike Lineage.
Custom verified boot needs to be supported in hardware. But with most devices, you can use "fastboot boot" from an external device to start from an image that you trust.
When it's locked (which is the entire point of custom verified boot), this is not allowed.
Earlier quoted context omitted.
Disagree. The reputation of Nick Calyx (worth a look his Wikipedia page), or GrapheneOS team, etc, is so much easier lost than that of, say, Google's Android team.....or iOS security team. Having said that: Calyx shouldn't be considered much more secure than Android Open Source Project (AOSP). That's where GrapheneOS shines. Calyx should, however, be considered more private than AOSP, less dodgy & exploitable than Sa…
How does CalyxOS compare to GrapheneOS?
For example: Calyx provides MicroG. This means you can talk to Google Play services, though in a better, more privacy-conscious way. MicroG is an open implentation of Google Play Services.
However, MicroG requires signature spoofing: You need to install a fake Google certificate so that it can trick official apps into thinking they're talking to Google Play Services directly. This could technically be abused, though Calyx takes lots of precautions to prevent that. GrapheneOS with their security-first approach don't deem this worth the risk. So with apps requiring play services you don't get push messages and network-based location checks, among others.
So, do you want an allround phone to use everyday (and use things like Uber, Facebook, etc) but more private and secure than AOSP, take Calyx. Do you want security over everything and are willing to compromise a bit on functionality and app compatibility (some apps will refuse to run without google play), pick Graphene.
Either way you'll need a Google Pixel by the way.
If you're unfamiliar with the context: Calyx Institute is a 501(c)(3) with a digital privacy and security mission. For a while they've offered, for a few hundred dollars a year donation, unmetered access to sprint's network. I don't know the details but I think they have retained access to the network through the merger due to some non-profit provision (something like the sprint merger was allowed with stipulation th…
Looks like $500-$600 for 4G, and $750 for 4G/5G. Could be a good deal for certain people. But yes, it's lame you have to use the puck.
Earlier quoted context omitted.
Unlike GrapheneOS (which I recommend you use if you can) and CalyxOS, my project https://divestos.org is tested working on 30+ devices.
Props on bringing verified boot to those devices Lineage can//will not, and doesn't tell users clearly that they could have it with other options.
The thing which always makes me hesitant about these projects is that they don't receive frequent security audits and not having an expensive brand behind them makes them more at risk to being willing to trash their name at the cost of my privacy and security. I consider these to be a fairly critical part of any project which claims superior privacy and security. I think about it this way: Should I trust A. The compa…
From a consumer perspective, going with A and trusting the company is by far the safest option.
From https://calyxos.org/about/ : > In social science, agency is defined as: the capacity of individuals to act independently and to make their own free choices. > built-in integration for Signal and WhatsApp calls Signal and WhatsApp are both fully centralised, tied to a single organisation each — they are antithetical to agency. Why not use open protocols like DeltaChat, Matrix or XMPP instead? > built-in free “Vir…
Signal and WhatsApp are choices there since they use phone numbers. How do you make a matrix call to a phone number? :)
Earlier quoted context omitted.
> B. The small group of people who have formed an organization which may or may not be another Anom like FBI controlled software. Um, this project is 100% open source, unlike Google's flavor of Android. If there are backdoors to the FBI they will be exposed in due time. https://gitlab.com/CalyxOS That said I'd love to understand how it compares to LineageOS.
Well, Calyx keeps the basic security model of Android intact (verified boot), unlike Lineage.
Anybody have experience using something like this (or others like GrapheneOS) as a daily driver? I’m interested in moving away from Apple and big tech in general, but I don’t know how practical that is yet.
Self-hosted NextCloud replaced Drive/Dropbox, and with some plugins it also does phone/location tracking, secure messaging and video calls, TODO lists, and some more. Self-hosted PhotoPrism replaces Google Photos.
The phone experience hasn't been bad. One thing that came up initially is that most of the open source apps aren't as "pretty", and the UX just isn't as good. I don't care about it too much, and I'm fine with overall using the phone less anyway. The issue that comes up on a regular basis is the Google Maps replacement. OSMand is a great app, but like someone else mentioned it's more of a "look up the address and type it in" experience than a "show me all Thai restaurants in the area" experience. IMO small price to pay, I've been using GPS much less, and I've gotten much better at navigating with my "mental map".