Live data from Hacker News

GrapheneOS has been ported to Android 17

discuss.grapheneos.org

611–620 of 653 posts

Re: GrapheneOS has been ported to Android 17

#611
post #609

Earlier quoted context omitted.

>there are plenty of immutable OSs now among Linux distros, are they also limiting your freedom? By definition they very much can. For example SteamOS wipes all non system application (except flatpaks) on updates unless you disable read only mode. I use and enjoy GrapheneOS but there is no question that the security comes with the trade off of freedom. It's up to the user to decide if they prioritize one over the oth…

What about Fedora? Good security is about allowing everything you might want to do, but limiting what you don't want happening. Of course it's easier to just put up our hands and don't care about it, but I think we should strive for better security as we are no longer running 3 hand-started processes in a terminal, but 10s of thousands of unknown ones. Even if the processes themselves are trusted, they can easily hav…

>What about Fedora?

You still have sudo don't you? So still less secure but also more freedom than GOS.

>We are just lucky that desktop linux is not a popular target.

Its not only that. The fact that software is expected to be mostly installed and updated from trusted, vetted and signed repositories instead of google or root not being used willy nilly by all applications. Both of these basic usage differences are the reason why for all its security features windows will still be much less secure for the average user than even the most basic linux distro. 90% of security is low hanging fruit.

>I don't think a dead man’s switch on a lawn mower has reasonably limited anyone’s freedom

I'm very sure there have been not a small number of cases where such switches did limit freedom, even if you think they do more good than bad they are still there to limit something. The switch could prevent usage when faulty or otherwise prevent unofficial uses or just repairability.

Re: GrapheneOS has been ported to Android 17

#612
post #609

Earlier quoted context omitted.

What about Fedora? Good security is about allowing everything you might want to do, but limiting what you don't want happening. Of course it's easier to just put up our hands and don't care about it, but I think we should strive for better security as we are no longer running 3 hand-started processes in a terminal, but 10s of thousands of unknown ones. Even if the processes themselves are trusted, they can easily hav…

>What about Fedora? You still have sudo don't you? So still less secure but also more freedom than GOS. >We are just lucky that desktop linux is not a popular target. Its not only that. The fact that software is expected to be mostly installed and updated from trusted, vetted and signed repositories instead of google or root not being used willy nilly by all applications. Both of these basic usage differences are the…

> Its not only that. The fact that software is expected to be mostly installed and updated from trusted, vetted and signed repositories instead of google or root not being used willy nilly by all applications. Both of these basic usage differences are the reason why for all its security features windows will still be much less secure for the average user than even the most basic linux distro. 90% of security is low hanging fruit.

Well, don't be overly sure about how trustworthy these repositories are. Maintainers can't read all the 100s of millions of lines of code, and as mentioned, faulty programs can be just as bad when combined with non-trustworthy data.

Also, people often run random shell scripts (curl | sh), or npm install stuff -- this is arbitrary code execution with the users's full rights.

> 90% of security is low hanging fruit.

I agree here, but unfortunately still nothing is being done, with the exception of flatpak perhaps? And as for windows, among desktop OSs osx is in the best place in terms of security and even that is pretty behind compared to mobile OSs.

Re: GrapheneOS has been ported to Android 17

#614
post #569

Earlier quoted context omitted.

How to say "I work for a company too cheapass to provide work devices". Its all fun and games until the company gets hit with a lawsuit and discovery hits your phone and ALL your accounts, corporate and personal.

Some people don’t want to carry two devices and prefer BYOD, even if the company offers a work phone.

Its all fun and games until the company gets hit with a lawsuit and discovery hits your phone and ALL your accounts, corporate and personal.

Ive been through a corporate discovery when oracle sued a company I worked at. Im fucking glad that my work devices were purely owned by the company.

NEVER FUCKING LET WORK AND NONWORK STREAMS CROSS.

Re: GrapheneOS has been ported to Android 17

#615
post #320

permanent reminder that graphene and all other "alternatives to android" depend on extracted binary blobs. tons of them. which is the reason new (kernel) versions are such a chore/achievement.

The kernel drivers are fully open source and moving to new kernel branches is a standard part of the update process. Pixels are currently moving from 6.1 and 6.6 to 6.12 with Android 17 QPR2. This is part of the hardware requirements for GrapheneOS listed here: https://grapheneos.org/faq#future-devices

sigh. always this reply. go look at all the binary blobs in the source tree. you won't get modem, video out, touch, etc etc etc working without extracting eom drivers as binary.

also, there's ZERO mentions of drivers or binary blobs on that link!

Re: GrapheneOS has been ported to Android 17

#616
post #500

Earlier quoted context omitted.

And that's the unserious part, they really don't want anything to do with consumers despite making consumer products (gmail, Android, etc.) so you're always at the mercy of their automatic systems.

Google has historically always sucked at being a product company. Despite this, they're quite successful at it.

But when there was a battery/overheat issue with pixel 6a, I must say Google handled the fix / compensation surprisingly well. My sample size just being me, but very smooth process and compensation processed rapidly.

Re: GrapheneOS has been ported to Android 17

#617
post #567

Earlier quoted context omitted.

They're referring to the partnership between GrapheneOS and Motorola: https://motorolanews.com/motorola-three-new-b2b-solutions-at...

I'm aware. However, it is quite possible that they will only sell Graphene phones in certain countries considering their past behavior.

They could also just sell the phones with GrapheneOS already, as the final state of a GrapheneOS instalation has a locked bootloader.

I understand this is part of the reason only Pixel phones are supported - the ability to unlock, and then relock bootloader after install is seen as essential by their team, among other features and properties that only present together in the Pixel phones.

Re: GrapheneOS has been ported to Android 17

#618

I took the plunge into GrapheneOS a week ago. I picked up a new Pixel10 Pro and never even tried the stock OS (except to unlock the boot loader). I've got almost everything working the way I want. There were a few non-essential banking apps that won't install. The most annoying problem I had is when I tried to install Strava, which I cannot get working. The app installs, but it will not let me sign in. I guess I need…

"Strava is an American internet service for tracking physical exercise which incorporates social networking features." Sounds like spyware, to be honest.

I don’t know about the company’s ethics*, but the app is fine and it’s genuinely useful. For one thing, it has a map with the most popular running routes around you. And if you want to be part of an exercise community in the US or Europe (at least UK), it’s the only game in town. *Strava is one of the worst apps I’ve seen in terms of aggressively upselling you to a subscription. Genuinely infuriating.

Re: GrapheneOS has been ported to Android 17

#619

Earlier quoted context omitted.

I know a friend is using Strava on his Pixel 10 running graphene so there should be a way

There should be a way, but I have not yet found it, and I've spent some time on this. I've installed/uninstalled Strava about a dozen times, rebooted each time, tried various permissions, but stood my ground on some of the permissions. Should I give Strava access to my photos and my microphone? I'll never go that far.

Regarding the photos, the "storage scope" feature on Graphene should make that a non-issue. Microphone would be rough, but at least you would see a "microphone icon" show up on the top of the phone if an app was actually listening.

Re: GrapheneOS has been ported to Android 17

#620

ehh I'd happily pay to get Graphene on my Wacom Movinkpad Pro 14...

It does not support the requirements so no amount of money could get it running on that specific device. You'd need a completely different device.

Requirements: https://grapheneos.org/faq#future-devices

Post reply on HN