Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GrapheneOS has been ported to Android 17

discuss.grapheneos.org

Post reply on HN
Print view View original

61–70 of 653 posts

Re: GrapheneOS has been ported to Android 17

#61

Post by Ingon »

I've been running GrapheneOS for over an year now. Bought a Pixel 6a last year as a cheap way to test waters, but pretty soon I upgraded to discounted Pixel 9. It took a while to set the basics (coming from iPhone), and I'm still have a couple of stuff missing, but at this point don't intend to use anything else (for as long as possible).

The biggest hurdles for me were - should I use separate profiles and how to get apps. Initially, I started with a separate profile for google stuff (like play store/services and apps downloaded from there, like Viber), but eventually I moved everything to the owner profile (and took a bit of a privacy and battery hit in the matter of convenience). Still, being able to control many app permissions, gives me a good state of mind that apps are not doing more then I expect.

Just looked at what android 17 brings to the table and I'm mildly excited - especially improving performance and adding more permissions (like ACCESS_LOCAL_NETWORK)

Re: GrapheneOS has been ported to Android 17

#63

Post by sowbug »

theandrewbailey wrote: post #39
jordand wrote: post #12

I've been running GrapheneOS for 7 months now and I'm not going back. When I bought my Pixel 10 last year, I wasn't actually planning on trying Graphene for a while....until I noticed Google had force bundled a 'Wicked For Good' movie promo theme with the latest security update.

When I got a new phone last year, I purposely got a Pixel (open box 9a) to put GrapheneOS on it immediately. Been happy living the de-Googled Android life since. I was sad that I had to go through the OOBE setup on the stock image to unlock the bootloader. At least it doesn't force an internet connection and login, unlike Windows.

If it's any consolation, the wipe* requirement before unlocking the bootloader is generally a good thing, even if it's inconvenient. Someone who is targeting your personal data gets access to your encrypted phone, either by stealing it or in an evil maid situation. They unlock the bootloader and install privileged code that helps them recover the symmetric encryption key or intercept your PIN. Then they either have your data or wait for you to enter the PIN. In theory recovery shouldn't be possible (access to the key depends on a secure element that rate limits brute-force attacks), but security bugs do happen. Wiping* your data before removing the bootloader's signing requirement is an extra layer of protection.

*It doesn't actually wipe your data; it just destroys the symmetric key, making the data permanently unreadable.

Re: GrapheneOS has been ported to Android 17

#64

Post by Cider9986 »

mcsniff wrote: post #53
Cider9986 wrote: post #42

Earlier quoted context omitted.

What does RFID-blocking wallet do?

[flagged]

The person mentioned it like it's a feature for them, but I haven't heard of it being anything other than a marketing gimmick, so I was curious for their perspective.

Re: GrapheneOS has been ported to Android 17

#65

Post by hiitsmyaccount »

tasty_freeze wrote: post #2

I've been using Graphene on my Pixel 7a for about a year and I'm happy I made the switch. For sure it is a bit rougher than using Google's OS, but not enough to make me regret it. The main things I miss are (1) when I'm entering text I can't swipe left and right on the space bar to scroll the cursor left and right, and (2) the texting app doesn't just attach reaction emojis to a message -- it quotes the whole message…

I use GBoard on GrapheneOS. I just deny it network permission so it can't phone home.

Re: GrapheneOS has been ported to Android 17

#66

Post by Sarkie »

RachelF wrote: post #57
jordand wrote: post #12

I've been running GrapheneOS for 7 months now and I'm not going back. When I bought my Pixel 10 last year, I wasn't actually planning on trying Graphene for a while....until I noticed Google had force bundled a 'Wicked For Good' movie promo theme with the latest security update.

I too, liked it. However, some apps that I need for work, like Microsoft Authenticator, no longer work under GrapheneOS. https://www.theregister.com/on-prem/2026/03/10/microsoft-tig...

Google Authenticator works?

Re: GrapheneOS has been ported to Android 17

#67

Post by idiotsecant »

RachelF wrote: post #57
jordand wrote: post #12

I've been running GrapheneOS for 7 months now and I'm not going back. When I bought my Pixel 10 last year, I wasn't actually planning on trying Graphene for a while....until I noticed Google had force bundled a 'Wicked For Good' movie promo theme with the latest security update.

I too, liked it. However, some apps that I need for work, like Microsoft Authenticator, no longer work under GrapheneOS. https://www.theregister.com/on-prem/2026/03/10/microsoft-tig...

Sounds like your work has been using your personal phone for free

Re: GrapheneOS has been ported to Android 17

#68

Post by troyvit »

725686 wrote: post #49
Cider9986 wrote: post #10

Earlier quoted context omitted.

To get a sense of the project and its goals I recommend reading this post[1]. Buying a used Pixel is economical, environmental, and likely doesn't support Google. Pixels are the only secure and open android devices that could work for the project and meet the extensive requirements[2]. This is because GrapheneOS takes real steps to protect user privacy and security, not features that degrade security and don't increa…

Motorola is not mentioned in any of the links.

https://news.ycombinator.com/item?id=47214645

Re: GrapheneOS has been ported to Android 17

#69

Post by eszed »

RachelF wrote: post #57
jordand wrote: post #12

I've been running GrapheneOS for 7 months now and I'm not going back. When I bought my Pixel 10 last year, I wasn't actually planning on trying Graphene for a while....until I noticed Google had force bundled a 'Wicked For Good' movie promo theme with the latest security update.

I too, liked it. However, some apps that I need for work, like Microsoft Authenticator, no longer work under GrapheneOS. https://www.theregister.com/on-prem/2026/03/10/microsoft-tig...

Yeah, I'm hanging on with GrapheneOS (on a Pixel) until their native-hardware (Motorola) phones come out, which hopefully will solve this. As I understand it, third-party (banks and so forth) app vendors have to accept their security attestation, which they don't right now, but (I hope) will with Motorola behind them.

Re: GrapheneOS has been ported to Android 17

#70

Post by y2244 »

hiitsmyaccount wrote: post #56
qurren wrote: post #48

Earlier quoted context omitted.

Is it possible to install basic Google apps like Gmail, Calendar, Maps, Drive without googlifying the whole phone? I'm not looking to fully de-Google but I want Google as apps and not my OS.

Yes, you install the Google Play store via the GrapheneOS App Store. The OS comes with like 5 apps out of the box. The rest is up to you. Biggest caveats that I've encountered: tap to pay via Google Wallet is a no go, Android Auto can be flaky, MDM managed work profiles don't work at the moment, and some apps that use the Google Play integrity API fail to validate and refuse to work (I've only encountered one app tha…

Tap to pay is mostly NFC? So is there an alternative app?
Post reply on HN