Earlier quoted context omitted.
[flagged]
If a state actor wants to pwn your phone, they don't need to orchestrate a complex inter-organizational conspiracy to get there.
I also don't need pay a lot of money just to use their compromised hardware.
Devices with GrapheneOS support should be available in 2027
341–350 of 445 posts
Re: Devices with GrapheneOS support should be available in 2027
#342Earlier quoted context omitted.
> Waydroid is a bad implementation on security and compatibility, just running Android in VM is better. What security problems does waydroid have that a VM wouldn't?
Waydroid disables most of the Android privacy and security model through not having functional SELinux. SELinux is not simply an additional layer of security on Android but rather deeply integrated into the OS. The app sandbox and isolation throughout the OS are heavily built on SELinux. It also heavily depends on it for kernel attack surface reduction combined with internal kernel hardening via exploit protections.…
> The approach used by desktop operating systems with TPMs is awful and makes security worse in a lot of ways rather than better. It's not at all the same thing, similarly to how what the desktop world calls secure boot is not a serious or complete implementation of it and doesn't provide nearly any useful security properties to end users unlike iOS or AOSP.
Interesting. Could you elaborate? I always thought that Secure Boot is reasonably secure (provided you can set it up in the first place).
Re: Devices with GrapheneOS support should be available in 2027
#343Earlier quoted context omitted.
There has been successful honeypots like EncroChat. What's the evidence that GrapheneOS is not yet another one?
For one, GrapheneOS is open source, unlike EncroChat which was a shady proprietary app distributed on shady modified smartphones. GrapheneOS also doesn't have any custom messengers or other services which could potentially be monitored. It's very easy to check where your phone is sending requests, and if Graphene was secretly MITMing all of your traffic it would be discovered within days.
Since more than a decade that MITM is not a mass event. It is a targeted event for selected users which are scored as having a low chance of discovering anomalous traffic. It first (publicly) started by government authorities sending fake updates to operating systems which then weaken the target machines or straight up RAT them.
Same case here.
Re: Devices with GrapheneOS support should be available in 2027
#344Anyone has any idea if this changes current situation with nfc payments? Currently many banking apps do not work, and google pay is just unavailable, to my understanding it was related to secure chip on phone - as graphene wasnt "stocked" android os approved by google, i dearly hope this chnages with motorola
Me too.
My two requirements for a device are:
* Being able to pay for stuff
* My blood glucose sensors work (Librelink)
If they worked on a dumbphone, I'd have a dumbphone.
Re: Devices with GrapheneOS support should be available in 2027
#345Earlier quoted context omitted.
I would bet that what Motorola can change without trouble on the lower end is more restricted, too. Generally low end models use more parts that are old, off the shelf, and/or shared with several other models to keep costs low, and so major changes can quickly balloon costs.
From the linked url > Lower end devices will take more time to meet our requirements since the updates and security features aren't as good. It's mostly due to how Qualcomm handles it. The latest Snapdragon flagships have the best security features. We'll also need Motorola to start paying them for longer updates below flagships
GP is likely right still, the longer updates is an also according to the post.
Re: Devices with GrapheneOS support should be available in 2027
#346Earlier quoted context omitted.
What is your music workflow? I got stuck in Spotify for new music but that obviously doesn’t work long term
Bandcamp or buying CDs and ripping them, it doesn't take that long and each CD is a fire-and-forget task. I'm using syncthing to avoid the chore of having to copy them into my SD card
I really wish more artists would put their music on band camp. I have even noticed that some artists who used to put their albums up there no longer are. It's a real shame
Re: Devices with GrapheneOS support should be available in 2027
#347Earlier quoted context omitted.
If your bank requires you to use a device that is pre-compromised by Apple or Google, get a different bank.
[flagged]
This is false, https://news.ycombinator.com/item?id=49363246
Re: Devices with GrapheneOS support should be available in 2027
#348Earlier quoted context omitted.
GrapheneOS on a flip is my dream. I tried with the ZFlips a couple of times but Samsung's kitchen-sink approach is just not for me.
We should be able to support the next generation of the Razr Ultra. It will take longer for the lower end devices to meet our requirements for updates and hardware-based security features. We think folding devices are a lot more useful and likely to get more users but we already have those via Pixels so flip devices are compelling as a new form factor. We're also interested in having support for new tablets.
How is the crease on the flip? On some of the foldables like the samsung's, the crease is pretty noticeable and for me it bothers my OCD a little bit. I love the idea of a foldable though
Re: Devices with GrapheneOS support should be available in 2027
#349Earlier quoted context omitted.
> I have read your marketing materials GrapheneOS is a non-profit open source project. We provide documentation and other information on the project. > Android is not a Linux distro nor is it directly derived from Linux Android is a family of Linux distributions. Linux is a kernel without a specific userspace and there are many different choices of libc, shell, init system, command-line utilities and far more. There…
[flagged]
> In the future, I'd recommend replying on your own account rather than an organization sockpuppet. Thanks!
We're using a project account making it clear these responses are from the GrapheneOS project. That's the opposite of a sockpuppet account. We've moved to using this project account instead of individual accounts because of personal attacks directed towards our team. A community member created this account and transferred it to us to encourage us to keep posting on Hacker News.
Re: Devices with GrapheneOS support should be available in 2027
#350Earlier quoted context omitted.
All the existing apps are on Android and iOS. Graphene lets you run them. You can't have a bank account on a Linux phone* because they won't let you, but you can on Android including on Graphene. * before replying snarkily that Android is Linux, please take a long walk off a short pier, thanks
> All the existing apps are on Android and iOS. Graphene lets you run them. We have waydroid for that. > You can't have a bank account on a Linux phone* because they won't let you, but you can on Android including on Graphene. Unless of course it uses those stupid integrity apis to block anything that isn't stock.
I haven't tried using Wade Droid on a phone, but on a fedora desktop it is a little bit rough. It takes a lot of finagling to get anything that requires Google services running, and that is a surprisingly huge amount of apps that people want