61–70 of 415 posts
There's absolutely no reason to use /e/ when GrapheneOS exists. https://eylenburg.github.io/android_comparison.htm
Not everything have to be perfect. For some user, /e/ is more approachable (Friendly and colorful UI) I could not get my mother to use GrapheneOS, /e/ is a lot simpler. Still miles better than to use a Default ROM from most OEM.
This seems like the worst of both worlds.
Earlier quoted context omitted.
Hmmm, It seems to require the WebUSB API: https://caniuse.com/?search=webusb
If the site can detect that it can't use WebUSB, it can give you instructions on how to download and flash the mobile OS, not tell you to fuck off. Compare: https://wiki.lineageos.org/devices/tokay/
It's the specific functionality needed here that Firefox lacks that makes the /e/ page show the warning, unlike the lineage page that does not have the problem in the first place.
Earlier quoted context omitted.
Hmmm, It seems to require the WebUSB API: https://caniuse.com/?search=webusb
If the site can detect that it can't use WebUSB, it can give you instructions on how to download and flash the mobile OS, not tell you to fuck off. Compare: https://wiki.lineageos.org/devices/tokay/
Earlier quoted context omitted.
Yes fortunately we have browser alternatives. But on mobile, my bank and my government force me to use the Android/iOS duopoly.
How do they do that? I'm not doubting that, it's an honest question. I understand how this works on Apple phones but I don't understand why an identity or attestation service cannot be replaced by another one by the alternative operating system when the hardware is not controlled by Google. Does Google have keys in tamper-proof chips? How else would those banks determine their apps are on the right phone? Or do those…
* is this device rooted, is it an unsigned build ?
* Device is signed, but is it part of the blessed signing keys ? is play services untampered with ?
* Additional checks over the lifetime of the device.
You could fully trust the results of Play Integrity on device, but you can also send the returned token to your server, and your server then contacts play integrity to validate that token. So unless you know how to spoof those encrypted tokens, you won't go very far.
https://developer.android.com/google/play/integrity/overview
Earlier quoted context omitted.
> We should focus our efforts on truly open platforms. But currently AOSP is very much open. That's also what the GrapheneOS devs say and why they want to continue using Android. Until it becomes clear that they will completely stop releasing the source code under a free software license i dont see why one should not use Android.
AOSP dev went private, and Google is slower and slower at releasing the source, now twice a year. Worse, many stock apps like the Dialer and Gallery went closed-source years ago. But the source isn't the point, it's the governance. Just like Chrome, having the source is not enough to guarantee an open platform. Sure you can disable telemetry flags. But you cannot afford to maintain an important feature Google wants t…
I wonder how this compares to GrapheneOS in practice. >Operated by Murena, your Murena Workspace account @murena.io is at the centre of the ecosystem, allowing to store, back up and retrieve your data safely on remote servers. This sounds like their version is somewhat married to Murena. While probably better than Google, still not independent. They're also advertising features such as "hiding your IP address [...] w…
You can do this on any other android device using an app like Orbot or Tor VPN beta
I get the appeal of degoogling, but this seems to just be replacing that with alternatives run by another commercial company, just one I've never heard of before.
Why does it even need "One account for your privacy" ... "Operated by Murena, your Murena Workspace account @murena.io is at the centre of the ecosystem" when it'd be even better to have everything on-device without an account at all.
Even more, Murena seems to be owned by Qwant who seem to be in the business of selling a search engine, and while they currently claim to be all about user privacy, this is basically exactly how Google started nearly 30 years ago.
I wonder if they'd be happy if, for instance, somebody took this system and debundled Murena and switched it to using duckduckgo. Would they embrace that too, or sue them into oblivion?
EDIT: maybe I was too hasty. I've just seen that it's open source and it seems like you can self-host the required cloud parts: https://gitlab.e.foundation/e/infra/ecloud-selfhosting
The irony of advertising a privacy-enabled de-googled system, and then telling me that my Firefox browser is not support, and that I should use Edge, Opera or Chrome instead.... Browsing: https://e.foundation/installer/ Reply: https://imgur.com/a/al1Q9DM
Which is in my opinion a fairly reasonable take.
But given the current situation, I would assume that the companies providing WebUSB tools like installers would also spend a few moments to create e.g. a Python script that would do the same thing but locally. So that anyone unwilling to use WebUSB within their browser can have a vetted and transparent way to get the same thing done.