Live data from Hacker News

GrapheneOS is the only Android OS providing full security patches

grapheneos.social

101–110 of 467 posts

Re: GrapheneOS is the only Android OS providing full security patches

#101
Great, so this means that the only way to get an Android release that's up-to-date on security patches is a binary-only distro - either Google Pixel, or the GrapheneOS preview channel.

Just wonderful. Google should know better than this, shame on the other OEMs that forced this mess.

Re: GrapheneOS is the only Android OS providing full security patches

#102
post #16

Earlier quoted context omitted.

Take a look at Jolla and Sailfish OS. https://news.ycombinator.com/item?id=46162368 https://sailfishos.org

https://liberux.net/ looks promising as well.

WARNING: This is a Kickstarter device still, and needed funding to even create a proof of concept device last time it was discussed (extensively). It's a Flagship phone device and price, but with only the oldest of pans on how it's actually going to deliver some on of the promises.

Re: GrapheneOS is the only Android OS providing full security patches

#103
post #38

Why was it that in the early PC days, IBM was unable to keep a lid on 'IBM compatible', allowing for the PC interoperability explosion, yet today, almost every phone has closed drivers, closed and locked bootloaders, and almost complete corporate control over our devices? Why are there not yet a plethora of phones on the market that allow anyone to install their OS of choice?

You're getting a lot of indirect responses. If you've ever tried to mod your android phone the answer is simple. Its google play services and hardware attestation for things like banking websites. Its really easy to make a custom rom but hard to do serious "real life" stuff; companies don't want to make it easy. To most regular users, if they cant download apps from the google play store, and they can't use venmo\cas…

This just shows that the barrier of entry of a new phone OS is more than $0. You can pay app developers to port their apps off of play services, you can pay developers to add support for your attestation keys. Considering how many billions of dollars Android makes for Google, there is a room for a return on investment for an alternate OS to enable investments into a new OS.

Re: GrapheneOS is the only Android OS providing full security patches

#104
post #45
post #16

Earlier quoted context omitted.

Take a look at Jolla and Sailfish OS. https://news.ycombinator.com/item?id=46162368 https://sailfishos.org

FWIW, Jolla just announced a new phone: https://commerce.jolla.com/products/jolla-phone-preorder

It was discussed here when it was announced. I believe it was determined the hardware is an ultra-low-budget Aliexpress design that normally retails for ~$100 that they had custom built with a mic cutoff switch added to it (probably the cause of a large portion of the hardware price increase). I dont remember the specifics, but even thr most optimistic were pretty sure it won't get hardware vendor support for even a full year based on the specific processor it contains.

Re: GrapheneOS is the only Android OS providing full security patches

#105
post #34

Samsung Androids are not safe? Big surprise there! /s

Given what they choose to ship with their phones in some regions, id say that Samsung absolutely doesn't care about the security of their customers of they can get away with it.

Re: GrapheneOS is the only Android OS providing full security patches

#106

Earlier quoted context omitted.

> I'm not knowledgeable enough -- what would it take to escape the Apple/Google duopoly? At this point? Reliable emulation that can run 99% of Android apps, to provide a bridge until the platform is interesting enough for people to develop for it "natively". I think the easiest way to do that would be to run Android in a VM.

Why not run Android directly, such as using Graphene OS. It's decades ahead in both OS architecture, developer tools, and developers compared to non Android based Linux operating systems.

Graphene uses the Google codebase, so Google is choosing its long-term development strategy and standards it will support. It's like choosing Chromium to escape Chrome.

Re: GrapheneOS is the only Android OS providing full security patches

#107
post #49
post #43

Earlier quoted context omitted.

You might also be interested in Jolla Phone https://news.ycombinator.com/item?id=46162368

If you're stateside and want a shipping Linux phone today, [FuriLabs]( http://furilabs.com ) is another option. Graphene is in a class of its own compared to both of these though and there's frankly no reason to bother unless you're trying to improve those ecosystems.

Thanks! I had no idea that this existed. Unfortunately, the specs aren't great, especially when compared to Jolla's offering. Oh well.

I'm quite enthusiastic about Graphene's OEM partnership,though.

Re: GrapheneOS is the only Android OS providing full security patches

#108
post #60

Earlier quoted context omitted.

I'm not knowledgeable enough -- what would it take to escape the Apple/Google duopoly? I'm imagining a future where you buy a smartphone and when you do the first configuration, it asks you which services provider you want to use. Google and Apple are probably at the top of the list, but at the bottom there is "custom..." where you can specify the IP or host.domain of your own self-hosted setup. Then, when you downlo…

Any one of us here could learn the skills to design a smartphone. It won't necessarily be good, but I remember that years ago, someone made one with a touchscreen hat and GSM hat atop a Raspberry Pi, rubber-banded to a power bank. I'm sure any one of us HN users could do this. And it worked. Quality only goes up from there. The problem is it won't run any apps, so you'll need to carry this open-source secure phone in…

This is not as simple as you're saying. Making a new phone not relying on proprietary drivers tied to Android is impossible without a huge effort: https://news.ycombinator.com/item?id=21656355

Re: GrapheneOS is the only Android OS providing full security patches

#109

Earlier quoted context omitted.

Oh that's one of the best news in the smartphone world in a long time. It's impossible to escape the Apple/Google duopoly but at least GrapheneOS makes the most out of Android regarding privacy. I still wish we could get some kind of low resource, stable and mature Android clone instead of Google needlessly increasing complexity but this will over time break app compatibility (Google will make sure of it) Edit: I do…

I'm not knowledgeable enough -- what would it take to escape the Apple/Google duopoly? I'm imagining a future where you buy a smartphone and when you do the first configuration, it asks you which services provider you want to use. Google and Apple are probably at the top of the list, but at the bottom there is "custom..." where you can specify the IP or host.domain of your own self-hosted setup. Then, when you downlo…

You can escape the duopoly by using a GNI/Linux phone, Librem 5 or Pinephone, but don't expect any support from Google or Apple for them. I'm using the former as a daily driver.

Re: GrapheneOS is the only Android OS providing full security patches

#110

https://tbot.substack.com/p/grapheneos-new-oem-partnership > GrapheneOS has officially confirmed a major new hardware partnership—one that marks the end of its long-standing Pixel exclusivity. According to the team, work with a major Android OEM began in June and is now moving toward the development of a next-generation smartphone built to meet GrapheneOS’ strict privacy and security standards.

Has the OEM in question been revealed yet? Likely not one of the major OEMs because they all lock their bootloaders. I'm crossing my fingers it's Fairphone but that's because I love my FP5. The GrapheneOS devs have been pretty harsh towards Fairphone because of their slow updates.

The most likely contenders are OnePlus, Motorola, and HMD.

> "It is a big enough OEM that there is good chance you may have owned a device from them in the past."

I think this takes Nothing out of contention.

Post reply on HN