Live data from Hacker News

GrapheneOS – Break Free from Google and Apple

blog.tomaszdunia.pl

571–580 of 967 posts

Re: GrapheneOS – Break Free from Google and Apple

#571

One thing that is a game changer on GrapheneOS is the network toggle for apps. Turn off network access for your keyboard, camera app, calculator, files, etc.

Definitely one of the best features to have this in the native UI, though it's also possible in other ways

If anyone wants this without GrapheneOS: https://f-droid.org/packages/dev.ukanth.ufirewall

If anyone wants this without GrapheneOS and without root: https://f-droid.org/packages/net.kollnig.missioncontrol.fdro...

Re: GrapheneOS – Break Free from Google and Apple

#572
post #50

Many are complaining about banking app compatability, but I've never felt compelled to use anything other than my browser for banking. What's the big deal with the banking apps? Am missing out on some huge advantage here?

Depositing checks by taking a picture of them.

If I knew what a cheque even looks like, that might be a benefit

Re: GrapheneOS – Break Free from Google and Apple

#573

I use and appreciate GrapheneOS due to it being one of, if not the best, option we currently have. That said, I do not like how much the project depends on Google. - GrapheneOS is based on Android, which is solely developed by Google. - GrapheneOS only supports Google Pixel devices. Thankfully, they are working on partnering with a different manufacturer, but details are still very limited. - They recommend using the…

> It also does not have an ad blocker

It does have a network-level ad blocker. What it doesn't have is a blocker which modifies/injects Javascript into pages, which iiuc is the main reason that the blocker doesn't help with ads on YouTube much, or pages which employ similar techniques.

> They recommend against using Firefox.

To clarify: they recommend against Firefox Mobile because it didn't support site isolation until last month's v147 updates. I don't know if the goalpost has moved since, but in any case: there's nothing on Graphene that would prevent you from using Firefox.

Re: GrapheneOS – Break Free from Google and Apple

#574

Been using this for about a year on a p9 pro. It works very well. I hear the google tap to pay does not work, but I've never tried it. However Vipps with their tap to pay works fine. BankID works but not with biometric login, which some things require IIRC. And for some reason DnB private works fine, but you are not allowed in on the corp app. It's mind boggingly stupid that they lock down apps like this, when you ca…

A collegue of mine was tech lead at a large online bank. For the mobile app, the first and foremost threat that security auditors would find was "The app runs on a rooted phone!!!". Security theater at its finest, checkboxes gotta be checked. The irony is that the devs were using rooted phones for QA and debugging.

Meanwhile, it's probably A-OK for the app to run on a phone that hasn't received security updates for 5 years.

I don't get it. If they're worried about liability, why not check the security patch level and refuse to run on phones that aren't up to date?

I'm guessing it's because there are a lot of phones floating around that aren't updated (probably far more than are rooted), and they're willing to pretend to be secure when it impacts a small number of users but not willing to pretend to be secure when it impacts many users.

Re: GrapheneOS – Break Free from Google and Apple

#575
post #174

What is the smallest phone that Graphene will run on? I would love to switch but these massive pixel phones are a no go for me.

Maybe an old Pixel with an old version of GrapheneOS, but at that point you're losing most of the security benefits and, depending on your goals, you may be better served with a small phone running a different OS

Re: GrapheneOS – Break Free from Google and Apple

#577

Should be noted that in order for OEM unlocking toggle to work, you need to turn on WiFi and connect to the internet.

Huh, and here I thought Google was one of the few manufacturers left that simply support it on their hardware. So it depends on some cloud service being alive.

Do you know if it's the same for Fairphone or Shiftphone? Or is there another manufacturer that doesn't require this?

I've recently bought a new phone so it's not relevant for me anymore but when I next go looking, it can factor into it. As it was, I had Google marked in my spreadsheet as the most accessible unlock method together with brands like Oneplus and Fairphone

Re: GrapheneOS – Break Free from Google and Apple

#578

Earlier quoted context omitted.

This should be illegal that the government forces people into apps controlled by private, commercial entities. I call such a government corrupt. Here in central Europe I can still access the bank website fine without smartphone. I need a physical device to yield a TAN though, but I can access and do online transactions fine. So I think something is wrong with the spanish government. People need to protest.

> This should be illegal that the government forces people into apps controlled by private, commercial entities. I call such a government corrupt. Or how about schools requiring parents to use WhatsApp to receive updates and information? Luckily my ex forwards to me the important stuff, but not everyone is as lucky to have an ex like mine ))

If the government (or school) is going to require us to have a smartphone in order to access critical government information, then we should demand that the government provide us with a compatible smartphone.

Re: GrapheneOS – Break Free from Google and Apple

#579

I personally tend to own two Phones. One all-day carry GrapheneOS device (Pixel 8) and an older WiFi and at home only iPhone for all payment and ensurance stuff. This is inconvenient in some ways, but at least it is sort of privacy as good as it gets while still being able to run official apps when I need them at home. To de-google the phone, I use F-Droid as primary App store, Aurora as fallback for non-f-droid Apps…

I like your recommendations mostly, just wanted to point out that Organic Maps has had a falling out with the Open Source community that built it, so I wouldn't use that anymore. The community fork is called 'CoMaps' now.

Re: GrapheneOS – Break Free from Google and Apple

#580

After reading this blog post, going to grapheneos's site, and browsing a half-dozen or so pages that I thought might show me what it looked like... I cannot find a single image of it. GrapheneOS team, I'm begging you... Hire or recruit one person with advertising or copy-for-public-consumption experience. Just one.

Answered 2h ago before your comment: https://news.ycombinator.com/item?id=47047720

Saving a click, it looks like any bare Android without vendor customisations. You just get extra settings like turning off network per app

I don't disagree that some screenshots might be good marketing

Post reply on HN