Live data from Hacker News

Original GrapheneOS responses to WIRED fact checker

discuss.grapheneos.org

221–230 of 343 posts

Re: Original GrapheneOS responses to WIRED fact checker

#221

Earlier quoted context omitted.

[flagged]

> Immature maybe Yeah, that’s the issue. I don’t want people who behave immaturely, impulsively, or vindictively, having a key role in something as important as my phone os. I want stability, maturity, and thoughtfulness.

So what exactly would you have done? Risk the key being taken over by a shady entity? Does the alternative really scream "mature, stable, and thoughtful" to you?

Re: Original GrapheneOS responses to WIRED fact checker

#222
post #107

Earlier quoted context omitted.

My gut feel is that Micay is genuine, and obviously also very defensive. At least some of the defensiveness is warranted. Maybe most of it. Regardless, it comes across in most GrapheneOS communications, and it's sometimes counterproductive. A related issue, which I'm sure Micay can appreciate, is that users of GrapheneOS tend to be cautious, and increasingly will want to know why the project should be trusted, now th…

All of the defensiveness is warranted. They speak neutrally and objectively. The project is not going to relinquish control to any 3rd party. Not even the Motorola partnership is given control over the GOS project. The hypothetical you describe is not possible by design. The GOS project takes no issue with critical thinking, and encourages it. But that is often used as an excuse to handwave attacks. There is a very b…

> The GOS project takes no issue with critical thinking, and encourages it. But that is often used as an excuse to handwave attacks. There is a very big difference between criticism/critical thinking and attacking them.

Responding to attacks so defensively is almost alway a bad look for organizations. They could really use a PR person with a more measured voice that corrects facts and projects confidence, and does not convey victimhood, insecurity or defensiveness. Take a look at the tone of press releases issued by companies when some tech press bozo writes a hit piece on them, for good examples of dealing with people attacking you.

Re: Original GrapheneOS responses to WIRED fact checker

#223

Earlier quoted context omitted.

GrapheneOSs posts are made to combat misinformation. Drawing public attention from those who may be misled and put at risk is how one combats misinfo. Its not ranting and its not somehow unreasonable to defend oneself.

Your entire comment history on HN exists across two separate posts about GrapheneOS. You're not a community member, you're an astroturfer.

I have been a GrapheneOS user for several years, and I choose to dedicate my time supporting the project. Supporting an open source project is not 'astroturfing'.

I am an active chatroom member, and many people see me there on a regular basis. I choose to volunteer my time, and am not paid or compensated in any form.

Re: Original GrapheneOS responses to WIRED fact checker

#225
Frankly insane and speaks to the entitlement of many users that they are against Micay and GOS on this primarily because their online comms are abrasive; I'm used to this having seen the same from many in the Minecraft and Skyrim mods communities, but it still stands saying: You are not owed ANYTHING from a free software developer. They can say anything they want to you and revoke the software at any point or anything they wish - they are providing the software for purely no reason but they want to. If Micay wants to be rude on main he has absolutely every right to do so; if you don't like it, don't use his software. He's not a steward or paragon of virtue just because he has a popular software project, and it's extremely easy to stand on a soapbox and say "If I was in that position, I'd be so much better!" To all the detractors in this thread, I beg you: go make software and give back instead.

P.S. I avoided making any statements about what I personally think about Micay and the GOS team's behaviour above because I don't use it and have never looked into it before reading this article, but from looking at the comments, the WIRED article, the forum thread linked in this post, and some cursory research, it just seems like they are a popular software project that is at odds with many powerful actors with obvious motivations against their existence and popularity - if they are constantly combative online instead of being friendly, don't you think part or all of it may be because they have to defend themselves against attacks instead of having the freedom to be friendly like say SQLite/FFMPEG/Rust/other free software projects? I'm admittedly new to HN but this entitlement and refusal to empathise with the people giving you free shit seems insanely out of character

Re: Original GrapheneOS responses to WIRED fact checker

#226

Earlier quoted context omitted.

> They "handle the business" while someone else does 99% of the actual work, then ask to split 50/50. As a response, Micay decided to destroy the update signing keys for all the CopperheadOS devices out in the wild. Resulting in financial damages to Donaldson. Hardly a level-headed response, even if you disagree about the financial share of something.

That is a perfectly level-headed response. Signing keys must be protected. In the event of a hostile takeover, where a malicious party seeks to compromise the privacy and security of your userbase, destroying the keys is a sensible decision. Failure to do so, and successful compromise of the keys, will let the malicious party push whatever update they want, and it will be accepted due to being signed correctly. It wa…

Exactly. It was a bold and necessary move to defend the users and the project. Some users got bricked OSes, but had he handed over the keys it would have put those users at risk and would have destroyed the credibility of the project. Also, and as from what I understood from the GOS response he was not an employee of the company and had the ownership of his OS, and CopperOS would have been able to use their own signing keys but they never did which is strange, so even legally it looks like a "level-headed" response.

Re: Original GrapheneOS responses to WIRED fact checker

#227

Earlier quoted context omitted.

> Immature maybe Yeah, that’s the issue. I don’t want people who behave immaturely, impulsively, or vindictively, having a key role in something as important as my phone os. I want stability, maturity, and thoughtfulness.

That is what CopperheadOS, and now GrapheneOS, provides. Its a level of "battle tested" that most OS and app devs never have the opportunity to have. Deleting the signing keys during a hostile takeover attempt rather than submitting to pressure or greed is an amazing quality that is rare to find.

[deleted]

Re: Original GrapheneOS responses to WIRED fact checker

#228

Earlier quoted context omitted.

[flagged]

> Immature maybe Yeah, that’s the issue. I don’t want people who behave immaturely, impulsively, or vindictively, having a key role in something as important as my phone os. I want stability, maturity, and thoughtfulness.

It looks like a very mature action to me: It certainly avoided the compromission of an OS that aims to be secure after all. It is not some windows OS with encryption keys sent to the cloud, so if security is compromised I fully expect targeted devices to break.

Re: Original GrapheneOS responses to WIRED fact checker

#229

Earlier quoted context omitted.

Mental health and wellness issues in high tech research and development are everywhere. I would suggest that you focus on the product and what it can/cannot do for you.

Suggest away. It’s still a factor in my decision making, because if I can’t trust the developers to behave well, i can’t trust the product to continue to do what it says it can do for me.

What does it means to "behave well" for you in this case ?

Re: Original GrapheneOS responses to WIRED fact checker

#230
post #107

Earlier quoted context omitted.

My gut feel is that Micay is genuine, and obviously also very defensive. At least some of the defensiveness is warranted. Maybe most of it. Regardless, it comes across in most GrapheneOS communications, and it's sometimes counterproductive. A related issue, which I'm sure Micay can appreciate, is that users of GrapheneOS tend to be cautious, and increasingly will want to know why the project should be trusted, now th…

All of the defensiveness is warranted. They speak neutrally and objectively. The project is not going to relinquish control to any 3rd party. Not even the Motorola partnership is given control over the GOS project. The hypothetical you describe is not possible by design. The GOS project takes no issue with critical thinking, and encourages it. But that is often used as an excuse to handwave attacks. There is a very b…

I'm sure you realize that confident assurances of a random new pseudonymous account on a Web site isn't sufficient for anything of importance.

Is there an authoritative source of information about how a takeover like that isn't possible by design, which people can verify, analyze, hold parties accountable for the pieces that require it, etc.?

Post reply on HN