Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GrapheneOS – Break Free from Google and Apple

blog.tomaszdunia.pl

Post reply on HN
Print view View original

761–770 of 967 posts

Re: GrapheneOS – Break Free from Google and Apple

#761

Post by askonomm »

monksy wrote: post #751
askonomm wrote: post #554

Earlier quoted context omitted.

Voting, much like all other things in Estonia such as getting married/divorced, doing taxes, signing documents, starting/closing companies, notary dealings, bank dealings, selling/buying vehicles, and many more things I can't even think of right now are entirely done via the digital ID that every citizen has. This means that you authorize/sign actions with it, including voting, because only you have your private keys…

> in your phone's sim card, Phones and sim cards a lot more temporary than ID cards. I don't know of a lot of theves that target ID cards for their authorization uses. Phones... people will steal those.

You can close your Mobile-ID when your phone gets stolen so the security keys on it will be useless, and even if you don't close it, nobody can use your security keys without your PIN, which is in your head.

Re: GrapheneOS – Break Free from Google and Apple

#762

Post by dotancohen »

raddan wrote: post #534
dotancohen wrote: post #308

Earlier quoted context omitted.

> This should be illegal that the government forces people into apps controlled by private, commercial entities. I call such a government corrupt. Or how about schools requiring parents to use WhatsApp to receive updates and information? Luckily my ex forwards to me the important stuff, but not everyone is as lucky to have an ex like mine ))

Forget exes—-how about current partners! I predict with high confidence that my wife’s response to such a request would be “grow up and install WhatsApp already.”

To which one might reply "I can not unread those terms of service to which I do not consent".

Oh, wait, I think I've just figured out why I'm divorced.

Re: GrapheneOS – Break Free from Google and Apple

#763

Post by maxloh »

protimewaster wrote: post #574
madeforhnyo wrote: post #338

Earlier quoted context omitted.

A collegue of mine was tech lead at a large online bank. For the mobile app, the first and foremost threat that security auditors would find was "The app runs on a rooted phone!!!". Security theater at its finest, checkboxes gotta be checked. The irony is that the devs were using rooted phones for QA and debugging.

Meanwhile, it's probably A-OK for the app to run on a phone that hasn't received security updates for 5 years. I don't get it. If they're worried about liability, why not check the security patch level and refuse to run on phones that aren't up to date? I'm guessing it's because there are a lot of phones floating around that aren't updated (probably far more than are rooted), and they're willing to pretend to be secu…

Because a phone running an unknown OS is significantly more dangerous than a phone that hasn't received security updates for years. For example, a malicious OS maker could add their own certificate to the root store, essentially allowing them to MitM all the traffic you send to the bank.

Liability works on the principle that "if it's good enough for Google, it's good enough for me." A bank cannot realistically vet every vendor, so they rely on the OS maker to do the heavy lifting.

Even if they wanted to trust a third-party OS, they would need to review them on a case-by-case basis. A hobbyist OS compiled by a random volunteer would almost certainly be rejected.

Re: GrapheneOS – Break Free from Google and Apple

#764

Post by tamimio »

ghrl wrote: post #306

"Break free from Google" and buy a Pixel phone from them to do so. But unironically Pixels are currently some of the best actually open phones. They do not lock down or require shady practices for unlocking the bootloader (although they do require a network check once that happens automatically, but it will permanently allow unlocking the bootloader if successful once. Pixels are very easy to restore and almost un-br…

> "Break free from Google" and buy a Pixel phone from them to do so.

Pretty much yeah.

Also, the surveillance tech is getting ahead of the people now, this article might make sense back in 2015, it’s not the case anymore, even if you use a full linux distribution, hardened too, but connected to the cellular network through a modem, the operator can pinpoint your location accurately, because all new cell modems are equipped with gnss and send the NMEA message either in demand or periodically to the towers.. not to mention if your software is open source and secure, your hardware isn’t, and until we reach that point, I would prefer to have a gray man model and blend in within the crowd rather than standing out like a sore thumb.

Re: GrapheneOS – Break Free from Google and Apple

#765

Post by kQq9oHeAz6wLLS »

raddan wrote: post #534
dotancohen wrote: post #308

Earlier quoted context omitted.

> This should be illegal that the government forces people into apps controlled by private, commercial entities. I call such a government corrupt. Or how about schools requiring parents to use WhatsApp to receive updates and information? Luckily my ex forwards to me the important stuff, but not everyone is as lucky to have an ex like mine ))

Forget exes—-how about current partners! I predict with high confidence that my wife’s response to such a request would be “grow up and install WhatsApp already.”

Mine would be the exact opposite. She'd walk into the school district office and read them the riot act for being so stupid.

Re: GrapheneOS – Break Free from Google and Apple

#766

Post by neumann »

protimewaster wrote: post #574
madeforhnyo wrote: post #338

Earlier quoted context omitted.

A collegue of mine was tech lead at a large online bank. For the mobile app, the first and foremost threat that security auditors would find was "The app runs on a rooted phone!!!". Security theater at its finest, checkboxes gotta be checked. The irony is that the devs were using rooted phones for QA and debugging.

Meanwhile, it's probably A-OK for the app to run on a phone that hasn't received security updates for 5 years. I don't get it. If they're worried about liability, why not check the security patch level and refuse to run on phones that aren't up to date? I'm guessing it's because there are a lot of phones floating around that aren't updated (probably far more than are rooted), and they're willing to pretend to be secu…

It's more frustrating because my partner's pixel 4A cannot use google pay or the bank apps because it is an invalid os - I am guessing due to lack of updates? So, perfectly fine hardware, but crippled in functionality due to the lack of software updates.

Re: GrapheneOS – Break Free from Google and Apple

#767

Post by JCattheATM »

noirscape wrote: post #60
ramon156 wrote: post #18

Does anyone have a good grasp of the differences between GOS and /e/OS? I'm buying a Fairphone soon and was wondering what both are like

GOS creates a complete bunker of a phone that can provide defense against pretty much all but the most dedicated state level actors. If you're worried that someone would steal your phone specifically to target you, Graphene will protect against that. Securitywise it's hard to argue against them, although GOS tends to sacrifice usability in favor of security, which leads to odd decisions. Their device depreciation tim…

> /e/OS (and similar "non-LineageOS" ROMs really)

LineageOS is degoogled unless you install google apps as a deliberate choice, so I don't really see any advantage or /e/OS or Murena over it.

Re: GrapheneOS – Break Free from Google and Apple

#768

Post by h4kunamata »

I've been using GOS for 3years give or take on a Pixel 7 PRO. Yes, GOS also stops you from buying new phone every year and personally, I am hopping Pixel 10 PRO is worth the upgrade, doubt it.

In Australia, everything works, from banking to gov services, they do not block or have limited function. CommBank App supports NFC payment via its app for example.

Dual profiles is silly and utterly unnecessary.

List of my open-source applications:

- Aurora Store: Should be avoided, it like F-Droid have broken security in place. You have a high risk of installing crappy on your phone via those stores. That is why I still use Google Play and download apk once here in there from GitHub project.

- Organic Maps: Dead project, a lot of things have happened and that is why CoMaps was created/forked. It is a beautiful and mega lightweight offline GPS map with tons of features.

CoMaps replaced Earth Magic that got completely destroyed to greedy, and Sygic which I have an old lifetime premium license which now is somewhat limited unless you pay for premium plus :)

OP didn't mentioned but GOS + Android Auto works like a dream wirelessly, GOS provided is Google-free dependency version and it just works.

Re: GrapheneOS – Break Free from Google and Apple

#770

Post by JCattheATM »

palata wrote: post #219
seba_dos1 wrote: post #179

Earlier quoted context omitted.

You may be surprised to learn what that "A" stands for.

You may be surprised to realise that you actually don't understand the difference between AOSP and Android :-). See https://news.ycombinator.com/item?id=47047167

You're vastly exaggerating that difference. It's ridiculous to say it's incorrect that GOS is not Android based.
Post reply on HN