Live data from Hacker News

GrapheneOS – Break Free from Google and Apple

blog.tomaszdunia.pl

671–680 of 967 posts

Re: GrapheneOS – Break Free from Google and Apple

#671

Earlier quoted context omitted.

Graphene is supposedly working with a major OEM manufacturer to have future device support independent of google, on a flagship device. It's been in the works for awhile but it's very exciting. https://www.androidauthority.com/graphene-os-major-android-o...

I hope it's Fairphone.

Its not.

Re: GrapheneOS – Break Free from Google and Apple

#672
post #493
post #128

Earlier quoted context omitted.

The whole reason why GrapheneOS is superior to its alternative is because they do all that. I also with they could support non-Google phones, but that's a problem coming from the manufacturers, not from GrapheneOS. My understanding is that there are close to half a million GrapheneOS users. And many potential users don't want to buy a Google phone. So it feels like it is starting to become worth considering for manuf…

> The whole reason why GrapheneOS is superior to its alternative is because they do all that. What is "its alternative"? > I also wish they could support non-Google phones, but that's a problem coming from the manufacturers, not from GrapheneOS. The manufacturers aren't blocking the installing of GrapheneOS...

> What is "its alternative"?

I meant alternativeS, sorry. Well, anything AOSP-based that is not Android.

> The manufacturers aren't blocking the installing of GrapheneOS...

Of course they are not. But they produce hardware that is not secure enough for GrapheneOS to consider. I wish they saw value in GrapheneOS and produced hardware that met their requirements.

It's actually weird, because I'm convinced that it's completely worth it: just add those requirements to the design of one new model, and a potential of hundreds of thousands of people may buy it just for GrapheneOS.

Re: GrapheneOS – Break Free from Google and Apple

#673
post #333

Earlier quoted context omitted.

You can use labels for contact scope.

You might want to read my comment again. :) If you use labels, the app will have full access to the associated contacts, not just to their names & phone numbers.

I'm annoyed at everyone who shares my name, phone number and any other details with Meta. I never consented to it. The behavior of their app slurping up your contacts database is despicable.

This doesn't answer your question, but in case it helps for others out there: it's possible to use WhatsApp with no access whatsoever to your contacts and I used it that way for years. Connecting with people is slightly jankier but it still works.

Re: GrapheneOS – Break Free from Google and Apple

#674

Earlier quoted context omitted.

Graphene is supposedly working with a major OEM manufacturer to have future device support independent of google, on a flagship device. It's been in the works for awhile but it's very exciting. https://www.androidauthority.com/graphene-os-major-android-o...

I hope it's Fairphone.

The tea leaves are indicating Motorola.

Re: GrapheneOS – Break Free from Google and Apple

#675
The biggest hold-back for me is that, here in Australia, Google Wallet (aka Google Pay) is the only way you can do tap credit card payments that I know of. Can't with Paypal. Not with any banking apps that I know of.

It's just so damned convenient. And the recording of transactions on the phone saves me having to collect paper receipts.

Re: GrapheneOS – Break Free from Google and Apple

#676
post #599

Earlier quoted context omitted.

GOS has minimum hardware requirements and most of the available smartphones don't meet them

That's like saying Tulip blocked the installation of Vista because they didn't install enough RAM to run it The OS makers don't have to go out of their way to support a device they don't want to (that's the beauty of open source passion projects), but it's also not like any manufacturer (that allows bootloader unlocking or ships an unlocked bootloader) is blocking GrapheneOS or anyone else from doing it, which the qu…

> That's like saying Tulip blocked

I agree, but you are the one who talked about "blocking". I did not :-).

Re: GrapheneOS – Break Free from Google and Apple

#677
post #204

And once you are on GrapheneOS, break free from your proprietary watch ecosystem and switch to GadgetBridge ( https://gadgetbridge.org/ ) I run a Thinkpad with NixOS and KDE, a Pixel 9 with GrapheneOS, and an Amazfit watch paired with GadgetBridge on my phone. It's a testament to the hard work of the FOSS maintainers of these projects, and the spirit of open source, that everything works flawlessly together without a…

> And once you are on GrapheneOS, break free from your proprietary watch ecosystem and switch to GadgetBridge Then switch back to Google/Apple after half a year when you discover that you can’t run - your banking app - any government app - the app required to access large sports events - the pandemic tracking app without which you can’t enter an airport - various other random apps because they ALL detect that you’re…

Most banking apps work perfectly, most government apps work perfectly, etc. It is only an exceptionally small subset of apps using anticompetitive measures such as play integrity.

Also, do not leave your bootloader unlocked. That is an incomplete GOS install and you will need to lock it to secure your device. Not locking it is both insecure and will make a much higher number of apps fail.

Re: GrapheneOS – Break Free from Google and Apple

#678

GrapheneOS needs at least the modem blob provided by the OEM. It runs as root, it has full network control. Same could go for other "drivers" like wifi+bluetooth. Privacy is more a dream than a real thing.

No, that's a misconception. GrapheneOS has only ever supported devices where the cellular radio is isolated from the OS and unprivileged. It does not have access to memory it hasn't been permitted to access by GrapheneOS. Wi-Fi, Bluetooth, NFC, UWB, etc. are isolated components too. Our hardware requirements are listed in our FAQ and require proper isolation for radios:

https://grapheneos.org/faq#future-devices

8th, 9th and 10th gen Pixels provide our full set of requirements with 7 years of support from launch. 6th and 7th gen Pixels are missing the ARMv9 security features including the extremely important hardware memory tagging (MTE) feature we heavily use to protect against exploitation. Even the first devices we supported back in 2014 including the Nexus 5 had isolation for the cellular radio but similar isolation for Wi-Fi/Bluetooth started with the Nexus 5X.

Re: GrapheneOS – Break Free from Google and Apple

#679
post #270

Earlier quoted context omitted.

You can lock the bootloader again with GrapheneOS and many banking apps work.

You won't pass Google Play hardware attestation that way, and you won't find a bank in Europe or the UK that doesn't require that to log on to their website within five years.

You pass basic, but not device or strong integrity. This is purely googles fault and is an artificial limitation that requires regulatory restrictions.

Re: GrapheneOS – Break Free from Google and Apple

#680

Earlier quoted context omitted.

GOS has minimum hardware requirements and most of the available smartphones don't meet them

This is a contradiction. There is nothing "minimal" about a requirement that excludes every device but one. Also some people (me) value independence from Google more than the highest degree of security (which relies on Google hardware).

> This is a contradiction. There is nothing "minimal" about a requirement that excludes every device but one.

I don't get your logic. Requirements are a choice. It's very easy to create requirements that exclude every device but one.

Example: "It has to be the Samsung Galaxy S23". Done.

Now you can disagree with those requirements, but that's completely different from saying that the requirements are wrong.

Post reply on HN