Live data from Hacker News

CalyxOS – De-Googled Android Alternative

calyxos.org

101–110 of 496 posts

Re: CalyxOS – De-Googled Android Alternative

#102

F-Droid is for distributing viruses. There may be legit apps on there, but there are also tons of virus's and not enough app oversite to be safe. It's doesn't seem like much of a threat because the userbase is so small that not a lot of hackers target it. Once it has 5% of pop though, it would be a meaninful target - particularly since these are rooted phones.

> F-Droid is for distributing viruses.

Lol, please point me to one? (Or an article about one?)

Re: CalyxOS – De-Googled Android Alternative

#104

The thing which always makes me hesitant about these projects is that they don't receive frequent security audits and not having an expensive brand behind them makes them more at risk to being willing to trash their name at the cost of my privacy and security. I consider these to be a fairly critical part of any project which claims superior privacy and security. I think about it this way: Should I trust A. The compa…

[deleted]

Re: CalyxOS – De-Googled Android Alternative

#105
post #8

I don't know if they have this, but a good feature a privacy centric android experience would be, to have a simple accessible log of what app accessed what using which permission.

We do, https://calyxos.org/features/ (Look for "Trusted Agent" to see a screenshot)

The code for this was already present in AOSP, Google simply had it disabled / reverted in their builds. We just bring it back like many other Android ROMs.

Re: CalyxOS – De-Googled Android Alternative

#106

F-Droid is for distributing viruses. There may be legit apps on there, but there are also tons of virus's and not enough app oversite to be safe. It's doesn't seem like much of a threat because the userbase is so small that not a lot of hackers target it. Once it has 5% of pop though, it would be a meaninful target - particularly since these are rooted phones.

Your comment seems to imply that the majority of apps on F-droid are malware. I don't think that's the case.

Also, F-droid does not require root.

Re: CalyxOS – De-Googled Android Alternative

#107

F-Droid is for distributing viruses. There may be legit apps on there, but there are also tons of virus's and not enough app oversite to be safe. It's doesn't seem like much of a threat because the userbase is so small that not a lot of hackers target it. Once it has 5% of pop though, it would be a meaninful target - particularly since these are rooted phones.

It has been years since I have used Android (and F-Droid), but I always thought F-Droid was pretty heavily curated and had a sane security model [1]. Why do you say it is for distributing viruses?

[1] https://f-droid.org/en/docs/Security_Model/

Re: CalyxOS – De-Googled Android Alternative

#108

The thing which always makes me hesitant about these projects is that they don't receive frequent security audits and not having an expensive brand behind them makes them more at risk to being willing to trash their name at the cost of my privacy and security. I consider these to be a fairly critical part of any project which claims superior privacy and security. I think about it this way: Should I trust A. The compa…

Anyone who has managed a product security program will tell you that's it's impossible for small groups to keep up with the complexity and attack surface of products like android. From a consumer perspective, going with A and trusting the company is by far the safest option.

I can appreciate that but option A actors are now in full dictator mode with respect to how they are willing to breach privacy and monetize their users.

How did Linux keep up with security updates?

Re: CalyxOS – De-Googled Android Alternative

#109

Earlier quoted context omitted.

Well, Calyx keeps the basic security model of Android intact (verified boot), unlike Lineage.

Indeed, but in return it only supports pixel phones, sadly (considering they're not great value for money for custom rom purposes, and most of their added value is lost when running a custom rom)

> most of their added value is lost when running a custom rom

Could you please explain?

Re: CalyxOS – De-Googled Android Alternative

#110

The thing which always makes me hesitant about these projects is that they don't receive frequent security audits and not having an expensive brand behind them makes them more at risk to being willing to trash their name at the cost of my privacy and security. I consider these to be a fairly critical part of any project which claims superior privacy and security. I think about it this way: Should I trust A. The compa…

A. While it is hard to say something about A having thousands of developers (just having more eyes on everything they're doing), it's not infallible, nor does it strictly mean they want to 'avoid their brand being dirtied'

B. CalyxOS is a project of the non-profit Calyx Institute, founded by https://en.wikipedia.org/wiki/Nicholas_Merrill

Post reply on HN