Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CalyxOS – De-Googled Android Alternative

calyxos.org

Post reply on HN
Print view View original

281–290 of 496 posts

Re: CalyxOS – De-Googled Android Alternative

#281

Post by andrepd »

yusi-san wrote: post #211
new_stranger wrote: post #198

I purchased a Pixel phone to test this stuff on. I installed LineageOS and found I couldn't run some google apps. I reinstalled LineageOS with https://opengapps.org added during the install and made the mistake of transferring from my old phone which brought all the google services and everything back to the phone (mostly). I then installed CalyxOS - much easier install process than lineage. Really liked the defaults…

You can try lineage with MicroG[0][1], it replaces Google services. If you want stores there is the F-Droid store for FOSS app or Aurora Store if you want casual apps. YouTube can be replaced by NewPipe and these days I'm trying Organic Maps (a layer for OSM with nav and offline maps) to replace Google Maps. [0] : https://microg.org/ [1] : https://lineage.microg.org/

OsmAnd is a more fully featured solution for maps.

Re: CalyxOS – De-Googled Android Alternative

#282

Post by FredFS456 »

yusi-san wrote: post #211
new_stranger wrote: post #198

I purchased a Pixel phone to test this stuff on. I installed LineageOS and found I couldn't run some google apps. I reinstalled LineageOS with https://opengapps.org added during the install and made the mistake of transferring from my old phone which brought all the google services and everything back to the phone (mostly). I then installed CalyxOS - much easier install process than lineage. Really liked the defaults…

You can try lineage with MicroG[0][1], it replaces Google services. If you want stores there is the F-Droid store for FOSS app or Aurora Store if you want casual apps. YouTube can be replaced by NewPipe and these days I'm trying Organic Maps (a layer for OSM with nav and offline maps) to replace Google Maps. [0] : https://microg.org/ [1] : https://lineage.microg.org/

How does Organic Maps compare to OsmAnd?

Re: CalyxOS – De-Googled Android Alternative

#283

Post by zozbot234 »

tholdem wrote: post #272
riedel wrote: post #261

Earlier quoted context omitted.

Don't you think it is kind of absurd that you have to buy a device from Google to degooglify it as CalyxOS does not support other devices. How difficult would it be to actually port it to a device already supported e.g. by lineage?

The OS in this case has nothing to do with not being able to be ported to other phones. Google is one of the few who will pay extra to Qualcomm for the ability for users to flash their own signing keys. Lineage does not support one of the most important security feature of any modern smartphone, lockable bootloader and verified boot. Lineage might be more privacy respecting than Googles Android, but far behind regard…

If you care about verified boot, you can let your phone boot in fastboot mode and issue a "fastboot boot" command from a trusted device. Combine that with plain FDE, and it's as secure as anything Qualcomm will support out of the box.

Re: CalyxOS – De-Googled Android Alternative

#284

Post by bubblethink »

VortexDream wrote: post #253
fragmede wrote: post #208

Earlier quoted context omitted.

In offering only two choices, when the reality is far more complex than that, GP sets the tone for the rest of the discussion. There are more options, and a far deeper lake of information to use for drawing conclusions, so the simplification is also insulting, on top of being depressing.

If you have other options or other things that should be considered, then add them. As it is, you seem to be dismissing his absolutely valid concerns without any reason as to why you think they're invalid. I have the same concerns as he does and it's the same reason I don't use custom ROMs. I have no way to know how security conscious the developers actually are.

That's a valid concern and only you can judge for yourself whether something works for you or not. It's open source. Read the code and do your research. Going to some project's thread and saying, "But, what if this is shoddy code or run by the FBI ?" is beyond pointless. Praise can be generous. Criticism needs to be conservative and precise.

Re: CalyxOS – De-Googled Android Alternative

#285

Post by folmar »

cdesai wrote: post #180
vngzs wrote: post #171

Earlier quoted context omitted.

GrapheneOS, lacking MicroG in the default install, is therefore more private than CalyxOS. Keeping Google out of the loop entirely is necessary for true privacy.

On CalyxOS you do get an option to disable microG when setting it up for the first time, see https://calyxos.org/features/microg/#1-microg-disabled microG being disabled but present is still enough for some apps to work, which makes sense given that you can disable Google Play Services on the stock OS.

It seems to miss my favourite with Lineage - microG enabled, but C2DM disabled, i.e. services present, but no talking to google servers (but maps api, locations and so on still work).

Disclaimer: I've only read the linked webpage.

Re: CalyxOS – De-Googled Android Alternative

#286

Post by commoner »

FredFS456 wrote: post #282
yusi-san wrote: post #211

Earlier quoted context omitted.

You can try lineage with MicroG[0][1], it replaces Google services. If you want stores there is the F-Droid store for FOSS app or Aurora Store if you want casual apps. YouTube can be replaced by NewPipe and these days I'm trying Organic Maps (a layer for OSM with nav and offline maps) to replace Google Maps. [0] : https://microg.org/ [1] : https://lineage.microg.org/

How does Organic Maps compare to OsmAnd?

Organic Maps has a better and easier-to-use interface, especially for turn-by-turn navigation while driving.

OsmAnd is much more fully featured, especially if you are using it to contribute data to OpenStreetMap. With OsmAnd Live, you can download hourly updates to OpenStreetMap data, while Organic Maps updates at less frequent intervals. The app supports plugins for additional functionality, including trip recording, Mapillary street view, and various map views (such as nautical and ski views).

There's no harm in having both installed, since they have different strengths.

Re: CalyxOS – De-Googled Android Alternative

#288

Post by commoner »

folmar wrote: post #285
cdesai wrote: post #180

Earlier quoted context omitted.

On CalyxOS you do get an option to disable microG when setting it up for the first time, see https://calyxos.org/features/microg/#1-microg-disabled microG being disabled but present is still enough for some apps to work, which makes sense given that you can disable Google Play Services on the stock OS.

It seems to miss my favourite with Lineage - microG enabled, but C2DM disabled, i.e. services present, but no talking to google servers (but maps api, locations and so on still work). Disclaimer: I've only read the linked webpage.

You're able to enable microG on CalyxOS while disabling Google device registration and Firebase Cloud Messaging (the current push messaging service which has replaced the deprecated C2DM). The microG Services Core app behaves on CalyxOS exactly as it does on LineageOS for microG.

Re: CalyxOS – De-Googled Android Alternative

#289

Post by hfkfktnekfm »

scns wrote: post #264
securitypunk wrote: post #85

Earlier quoted context omitted.

Anyone who has managed a product security program will tell you that's it's impossible for small groups to keep up with the complexity and attack surface of products like android. From a consumer perspective, going with A and trusting the company is by far the safest option.

Sorry to be a pedantic but: Two People created CopperheadOS, one of them now works on GrapheneOS. The security mitigations developed for those were incorporated upstream into Android, decreasing the attack surface.

If I find an exploit in Chrome and I send a patch to Google, it doesn't imply that single handed I can manage the security of a Chrome fork.

Re: CalyxOS – De-Googled Android Alternative

#290

Post by ogwh »

hfkfktnekfm wrote: post #287

How does one verify that this is not a honeypot project funded by the FBI, like those secure phones from a month ago?

There are some people and organisations you can never keep out. It doesn't matter what software you use.

You may stand a good chance of keeping the average snooper out, and for that you need to trust the software provider. So it ultimately comes down to who you trust more to keep your stuff moderately secure.

If you don't want anyone (but yourself) to have access to your information then don't store it digitally.

So who do you trust more, Google or random people on the Internet? Neither are an ideal choice, because there isn't one.

Post reply on HN