Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GrapheneOS – Break Free from Google and Apple

blog.tomaszdunia.pl

Post reply on HN
Print view View original

241–250 of 967 posts

Re: GrapheneOS – Break Free from Google and Apple

#241

Post by bytejanitor »

b112 wrote: post #163
fodmap wrote: post #142

Earlier quoted context omitted.

> It's mind boggingly stupid that they lock down apps like this, when you can just open the thing in a website anyway. I can use my bank on some linux distro... Not in Spain. I can access my bank's website but I can't do anything without their bank app. Even sometimes they require to confirm my identity using their app in order to access their website. I have several linux phones but I can only do banking with their…

Not in Spain. I can access my bank's website but I can't do anything without their bank app. Even sometimes they require to confirm my identity using their app in order to access their website. I've seen this elsewhere, and it's absolutely ridiculous. Why? Because in almost all cases, the apps may only be installed with Google Play, and require the framework to work correctly. And that means? If you are not in good s…

In Germany for some banks you can buy a TAN generator and then you do not need a smartphone app anymore. Is this an option in your area as well?

Re: GrapheneOS – Break Free from Google and Apple

#242

Post by cartoonworld »

ylk wrote: post #151
cartoonworld wrote: post #85

Earlier quoted context omitted.

fyi a Cell Site Simulator can masquerade as the legitimate telco operator and push type 0 messages to the handset. What that means is they can push malicious settings and configurations (Definitely) and probably malicious firmware to the handset at will. They don't need to code this, they buy the software packages from the usual suspects. Adversary simply needs to put a drt box or a hailstorm or what-not close enough…

> The baseband can do a lot, it has dma There's an IOMMU: > Is the baseband isolated? > Yes, the baseband is isolated on all of the officially supported devices. Memory access is partitioned by the IOMMU and limited to internal memory and memory shared by the driver implementations. [...] https://grapheneos.org/faq#baseband-isolation > GrapheneOS cannot really influence this, but hardened_malloc could conceivably hel…

Thanks, this is very good information!

To answer your question, I thought it might just be slightly harder to extract secrets or exploit a running process directly. Thats all I was saying.

Re: GrapheneOS – Break Free from Google and Apple

#243

Post by pmontra »

bergheim wrote: post #105

Been using this for about a year on a p9 pro. It works very well. I hear the google tap to pay does not work, but I've never tried it. However Vipps with their tap to pay works fine. BankID works but not with biometric login, which some things require IIRC. And for some reason DnB private works fine, but you are not allowed in on the corp app. It's mind boggingly stupid that they lock down apps like this, when you ca…

> I can use my bank on some linux distro,

Yes, I've been doing that since 2009 on Ubuntu and Debian but there are several caveats.

One of those banks has its own TOTP device and they won't replace it when the battery dies. It's almost 20 years old now. Then it's the fingerprint sensor on my phone.

The other banks authenticate accesses and many operations with either their app + fingerprint (all of them) or SMS (some of them). So basically I would still need a phone with a blessed OS. I could buy the cheapest one and store it in a drawer, but it's still a dependency on Google or Apple.

GrapheneOS requirement of Pixel devices is a dependency on Google too.

Re: GrapheneOS – Break Free from Google and Apple

#246

Post by 6LLvveMx2koXfwn »

bergheim wrote: post #170
b112 wrote: post #163

Earlier quoted context omitted.

Not in Spain. I can access my bank's website but I can't do anything without their bank app. Even sometimes they require to confirm my identity using their app in order to access their website. I've seen this elsewhere, and it's absolutely ridiculous. Why? Because in almost all cases, the apps may only be installed with Google Play, and require the framework to work correctly. And that means? If you are not in good s…

Especially with how things are currently, I whole heartedly agree - you cannot operate as a human being in Europe without having a good standing with either Alphabet or Apple. Absolute madness.

Absolute madness or complete nonsense - I have neither an Apple account or device, nor a Google account or mandated device (e/os on Fairphone 3+) and operate perfectly successfully in the UK with (almost [1.]) zero friction.

1. Revolut app stopped working so I emptied my account and opened a Wise account which is fully administer-able from their website. Revolut has subsequently started working again after a couple of app/OS updates.

Re: GrapheneOS – Break Free from Google and Apple

#247

Post by Gormo »

bramhaag wrote: post #202
sandreas wrote: post #115

I personally tend to own two Phones. One all-day carry GrapheneOS device (Pixel 8) and an older WiFi and at home only iPhone for all payment and ensurance stuff. This is inconvenient in some ways, but at least it is sort of privacy as good as it gets while still being able to run official apps when I need them at home. To de-google the phone, I use F-Droid as primary App store, Aurora as fallback for non-f-droid Apps…

Some other FOSS apps I use daily: Aegis - 2FA ( https://github.com/beemdevelopment/Aegis ) Breezy Weather - A very good looking weather app ( https://github.com/breezy-weather/breezy-weather ) OnlyOffice Documents - MS Office suite replacement ( https://github.com/ONLYOFFICE/documents-app-android ) Fossify Calendar ( https://github.com/FossifyOrg/Calendar ) Fossify Messages ( https://github.com/FossifyOrg/Messages )…

Some others that I use:

* NextCloud -- client for personal NextCloud server; this app is used primarily for file sync, with other features accessed with other apps. (https://nextcloud.com/features/?filter=Clients#android-clien...)

* KeePassDX -- password manager, shares DB with KeePassXC on desktop, which is synced via NextCloud. Also functions as a TOTP authenticator. (https://www.keepassdx.com/)

* DAVx5 -- CalDAV and CardDAV client; keeps mobile calendar and contact list synced with private NextCloud server. (https://www.davx5.com/)

* AntennaPod -- excellent FOSS podcatcher. (https://antennapod.org/)

* KDE Connect -- desktop sync tool; allows file/clipboard/keyboard/audio/etc. sharing between phone and a Linux desktop. (https://kdeconnect.kde.org/)

* Kore -- remote control app for a Kodi instance running on your LAN. (https://kodi.wiki/view/Kore)

And I don't see F-Droid itself mentioned -- it's the most popular repository of FOSS software for Android, with an accompanying app: https://f-droid.org.

Re: GrapheneOS – Break Free from Google and Apple

#249

Post by agile-gift0262 »

I've been using it for more than 2 years, and I can't think of ever going back to a stock OS. I had to send my phone for a screen repair, in the meantime I picked up my old Samsung, and the sheer amount of apps I didn't want, notifications and dark patterns to tricking me into handing over my data made me anxious. I couldn't finish setting the phone up and drove to my parent's home to pick up their old, remotely nerfed by Google, Pixel 4a so I could install GrapheneOS into it and use it while I waited for my repaired Pixel 8.

Re: GrapheneOS – Break Free from Google and Apple

#250

Post by niam »

StilesCrisis wrote: post #229

I can't take this seriously when their mission statement is to "break free from Google and Apple" and their entire output is a fork of a Google repo. If you're based on AOSP, the project is still 100% reliant on Google! It seems extremely cynical to me to depend on the work of a thousand-man team to build your OS, then patch out a couple of lines and claim you've broken free from them. Without Google, none of this pr…

You'd be pleased to hear, then, that "break free from Google and Apple" is not Graphene's mission statement, because this is a blog.
Post reply on HN