Live data from Hacker News

GrapheneOS – Break Free from Google and Apple

blog.tomaszdunia.pl

491–500 of 967 posts

Re: GrapheneOS – Break Free from Google and Apple

#493
post #128

GrapheneOS' approach is to focus more on security than privacy, because they believe increased security leads to increased privacy. Unfortunately, that means their hardware requirements pretty much limit the hardware that you can run it on (currently only the Pixel phone range). Worse, it also means they stop supporting a device when it reaches End-Of-Life as software security updates stop for it (see How long can Gr…

The whole reason why GrapheneOS is superior to its alternative is because they do all that. I also with they could support non-Google phones, but that's a problem coming from the manufacturers, not from GrapheneOS. My understanding is that there are close to half a million GrapheneOS users. And many potential users don't want to buy a Google phone. So it feels like it is starting to become worth considering for manuf…

> The whole reason why GrapheneOS is superior to its alternative is because they do all that.

What is "its alternative"?

> I also wish they could support non-Google phones, but that's a problem coming from the manufacturers, not from GrapheneOS.

The manufacturers aren't blocking the installing of GrapheneOS...

Re: GrapheneOS – Break Free from Google and Apple

#494

Earlier quoted context omitted.

> when you can just open the thing in a website anyway. I can use my bank on some linux distro Unfortunately not. I'm in the UK. Two of my personal banks, all four business banks that I need to use, and several credit cards, require authentication using their phone app to confirm login on their website. None of those I've seen are using TOTP or SMS, for which I could use a general security service. All use their own…

> require authentication using their phone app And banks often have their apps region locked, so if you live abroad or have accounts in more than one country, you’re fucked.

Cough cough, Nationwide UK. I emailed them, they said they had no plans to make the Nationwide UK app available globally on the iOS App Store.

Re: GrapheneOS – Break Free from Google and Apple

#495

Been using this for about a year on a p9 pro. It works very well. I hear the google tap to pay does not work, but I've never tried it. However Vipps with their tap to pay works fine. BankID works but not with biometric login, which some things require IIRC. And for some reason DnB private works fine, but you are not allowed in on the corp app. It's mind boggingly stupid that they lock down apps like this, when you ca…

> BankID works but not with biometric login Do you use any authenticator apps such as Okta? My org requires biometrics when using Okta on my phone.

I use microsoft authenticator, in its own work profile for work. I also use fingerprint login for Nordea, the Proton Suite, my personal 2fa program. Biometric works great on the Pixel 9A, at least, and it was fine on the 8 Pro when I had it.

The BankID thing is a SW quirk on their end, but generic fingerprint seems works great across the ecosystem.

Re: GrapheneOS – Break Free from Google and Apple

#496

Google is so much engrained in our lives that we can't really break free. You can't just don't use youtube and for that you need a google account.These projects are nice and good for tinkering, but can't use this as a dialy driver.

Why do I need a Google account for Youtube? It seems I can watch nearly any video I want without logging in. Moreover there are anonymity proxies like Invidious.

Re: GrapheneOS – Break Free from Google and Apple

#497

Earlier quoted context omitted.

I can understand relying on an OEM to provide hardware support for a given model - but I'm finding it hard to understand why they're unable to continue supporting a release just because the upstream removes support for something. I'm not even really sure what you mean by "manufacturer updates". The more I hear about this project, the less is sounds like an alternative OS and more it sounds like a thin skin around wha…

They rely on manufacturer support for device firmware, just like anyone else.

Debian surely doesn't depend on Lenovo or Asus to release OS updates for my laptop. Apparently it's not "everyone else" that needs this but it's some sort of dependency for mobile (qualcomm?) devices

I have trouble understanding why this is different on mobile devices. People keep speaking of blobs but that doesn't seem to be a thing in laptop/desktop hardware, unless they mean something like the firmware running on your wifi card and uefi chip? But those can be interfaced with from any kernel version, afaik, so I don't get it

Re: GrapheneOS – Break Free from Google and Apple

#498

Earlier quoted context omitted.

I always ask them if they have root/admin on their computer. Then follow up playing dumb with "shouldn't we lock out PCs too?". Watching them stammer is worth the 30 second aside.

Locking down PCs is easy: just set a random password.

Just blow the right hardware fuses and secure boot will be forced with a key that doesn't (or can't) exist.

Re: GrapheneOS – Break Free from Google and Apple

#499
post #425
post #375

Earlier quoted context omitted.

It's not very important but what are you referring to with "it is not" ? AOSP is Android (it's in the name) so I don't get it. Are you talking about blobs re Pixel devices?

No, I really meant that AOSP is not Android. Android builds on top of AOSP. I elaborated here: https://news.ycombinator.com/item?id=47047167

Well. I do get your point and I am aware of the situation and how Google pivoted away from a truly open source OS by systematically moving components like the keyboard to separate closed source apps. The fact remains though that it's Android Open Source Project where all Android systems are based on. It's become sort of a GNU/Linux kind of distinction where the "certified" Android is AOSP + Google. Though the situation is not that clear because there are other Android based phones that do not contain the Google layer but are still Android.

Re: GrapheneOS – Break Free from Google and Apple

#500

And once you are on GrapheneOS, break free from your proprietary watch ecosystem and switch to GadgetBridge ( https://gadgetbridge.org/ ) I run a Thinkpad with NixOS and KDE, a Pixel 9 with GrapheneOS, and an Amazfit watch paired with GadgetBridge on my phone. It's a testament to the hard work of the FOSS maintainers of these projects, and the spirit of open source, that everything works flawlessly together without a…

I tried GadgetBridge because it cannot sync the activity files (.fit and/or .gpx) so I still had to plug the watch into a computer to keep the actual data. So I ended installing ActivityLog2[0] to do something with the files I had to have on desktop and GadgetBridge was of little use because relying on GadgetBridge without actually syncing the files might make me forget about doing the backup to a device I control (G…

Under settings->automations->auto export, you have "Auto export zip" where you can specify export interval. The zip file includes all the data (personally, I only see .fit files) from your app. For sync, you might have to use something like syncthing.
Post reply on HN