Live data from Hacker News

GrapheneOS – Break Free from Google and Apple

blog.tomaszdunia.pl

11–20 of 967 posts

Re: GrapheneOS – Break Free from Google and Apple

#11

One of the only big downsides I've noticed with GrapheneOS is that several banking apps don't work with it at all thanks to being tied to Google's verification ecosystem. Luckily I have hardware 2FA keys from my bank so I can authenticate using that. It also slightly decreases the suck-factor from whenever the phone decides to fly off down a drain. This may not be the case for you, so do your research on what you nee…

Of course that is highly depdendet on the bank used, but so far none of my banking apps didn't work!

If you are using a rather popular banking app, chances are high that it has been discussed in the GrapheneOS forum.

Anyway, with google play services installed, mine have worked out of the box.

Re: GrapheneOS – Break Free from Google and Apple

#13
This is especially interesting in regard to the recent HN dicussion on spyware by for-profit intel firms having access to Whatsapp, Telegram, Signal, etc. (https://news.ycombinator.com/item?id=47033976) through OS-level no-click hijacks.

I wonder how secure GrapheneOS is in that regard, and what the other contenders are?

Re: GrapheneOS – Break Free from Google and Apple

#14
post #4

One of the only big downsides I've noticed with GrapheneOS is that several banking apps don't work with it at all thanks to being tied to Google's verification ecosystem. Luckily I have hardware 2FA keys from my bank so I can authenticate using that. It also slightly decreases the suck-factor from whenever the phone decides to fly off down a drain. This may not be the case for you, so do your research on what you nee…

Author is installing Google Play Services it seems, wouldn't that work around this? In any case, for me this also sort of defeats the purpose: I'd rather break free from Google and Apple, not just (stock) Android and iOS.

No, because most banking apps call upon the Google Play Integrity API, which GrapheneOS doesn't (or can't?) use. There's a decent list kicking around of which ones work (Monzo, for instance).

https://privsec.dev/posts/android/banking-applications-compa...

Re: GrapheneOS – Break Free from Google and Apple

#15
post #9

Why only pixel phones are supported?

Because google actually cares about hardware and software security. Read the FAQ: https://grapheneos.org/faq#supported-devices

>Because google actually cares about hardware and software security.

That statement might not have aged so well, especially consindering googles attempt to lock out apps from their devices, If the developers do not comply with being oficially registered.

Re: GrapheneOS – Break Free from Google and Apple

#16

I've been using GrapheneOS for about 3 years now. For the most part, it works very well. I don't have any issues with banking apps, nor any other closed source apps. I'm using two profiles both with sandboxed Google play installed. I'm logged in into my private Google account on the work profile. However, there was one case that lead me to thinking about ditching grapheneos to this day. I installed Uber on my phone a…

I regularly use Uber on Graphene OS and have had no issues.

Re: GrapheneOS – Break Free from Google and Apple

#17

I've been using GrapheneOS for about 3 years now. For the most part, it works very well. I don't have any issues with banking apps, nor any other closed source apps. I'm using two profiles both with sandboxed Google play installed. I'm logged in into my private Google account on the work profile. However, there was one case that lead me to thinking about ditching grapheneos to this day. I installed Uber on my phone a…

That's clearly a Uber problem. I'm also a GrapheneOS and used Uber once -- it worked.

Re: GrapheneOS – Break Free from Google and Apple

#19

Why only pixel phones are supported?

I believe (as it's open source) there is nothing impeding anybody else to compile grapheneOS in a samsung S10, which would not be as secure, but should still work as any lineage

However I haven't seen anybody try

Post reply on HN