Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GrapheneOS – Break Free from Google and Apple

blog.tomaszdunia.pl

Post reply on HN
Print view View original

771–780 of 967 posts

Re: GrapheneOS – Break Free from Google and Apple

#771

Post by JCattheATM »

nisten wrote: post #393

I switch from iPhone to a pixel 9 fold, and installed graphene after 2 weeks on stock android. Look, it's better than stock android overall, UI much more simplified even though it gives you a lot more security control, battery feels slightly longer, but there are drawbacks, i.e. twitter/x wouldn't install, neither would my bank's app. However from time to time I go to use iOS on the iphone and it just feels like bett…

> So keep that in mind if you're switching away from apple to it, as android still feels like decade plus old software.

I think this might just be what you're used to. Android doesn't feel old to me at all, conversely iOS always felt aged even when it was new with the lack of basic features it had for a long time.

Re: GrapheneOS – Break Free from Google and Apple

#772

Post by Hikikomori »

drnick1 wrote: post #537
rahkiin wrote: post #526

Earlier quoted context omitted.

That’s why for most transactions I do with a credit card in my country, you need an extra validation with the mobile app. It is mostly American websites that do not enable this functionality.

Yes, because we don't want these stupid locked down apps. Credit cards give buyers many protections, it's very easy to dispute an illegitimate transaction.

Europe mostly uses debit cards but also have most of those protections.

Re: GrapheneOS – Break Free from Google and Apple

#773

Post by BLKNSLVR »

HybridStatAnim8 wrote: post #664
BLKNSLVR wrote: post #184

Earlier quoted context omitted.

I'd also recommend to slowly migrate to GrapheneOS, getting to know where the boundaries are for specific apps. Once you've got your 'dailies' all up and running predictably, then you're good to go, but it could take a few days depending on how much spare time you have to find said boundaries. Having said that, I turn on most of the higher level security protections, which quite a few apps need exceptions from. But,…

I recommend dividing per persona rather than per app category.

Yes, the way I explained it was misleading, mainly because the different persona's tend to use different sets of apps. The personas, in general, are:

- Personal

- Work

- Sporting Club Committee

- Testing (kinda persona, for things I'm not sure of yet and don't want jumbled together with one of the other personas)

This is where it may become a pain, but for some people it may be worth it: sub-personas or topic-specific like streaming or finance or torrenting or porn or any other category you can think of if you want to keep certain things behind a boundary in case you need to share your phone (main profile) with friends or family members for whatever reason.

Re: GrapheneOS – Break Free from Google and Apple

#774

Post by the_pwner224 »

codethief wrote: post #154

I've used GrapheneOS on a Pixel 3a, 5, 8 and 10 Pro so far and it's worked really well. I couldn't imagine going back. The only things I'm missing (which don't exist in other OS'es either): - Being able to configure contact scopes in such a way that the app in question only gets access to the phone numbers of the contacts belonging to the label I specified, e.g. "WhatsApp", nothing more. Yes, one can of course add co…

> Being able to configure multiple VPNs at once, e.g. for Tailscale, ad filtering, blocking HackerNews during times when I should be doing something more productive

AdAway (in F-Droid) can block with /etc/hosts (no VPN involved) if you have root. The hosts blocking still works even when connected to a VPN. Aside from loading ad domain lists into /etc/hosts, it also allows you to specify custom domains to block - I personally have Reddit and HN in there :)

Re: GrapheneOS – Break Free from Google and Apple

#775

Post by DownrightNifty »

strcat wrote: post #615
palata wrote: post #91

Earlier quoted context omitted.

I have been using /e/OS for 5 years, and also GOS. My take is: - If your phone is supported by GOS, you should go for GOS. - If your phone is not supported by GOS, you should look carefully and compare between /e/OS and Stock Android. I had a Fairphone 3, and after 5 years, /e/OS was outdated by 4 years w.r.t. the manufacturer updates. In other words, Stock Android coming from Fairphone was more secure than /e/OS on…

> If your phone is not supported by GOS, you should look carefully and compare between /e/OS and Stock Android. If you have an iPhone that's still supported, you have strong privacy and security. If you have a phone that's not an iPhone and not supported by GrapheneOS then you likely have a phone with atrocious privacy and security regardless of OS choice. If people can afford to get a secure device with years of pro…

In what ways does LineageOS trail behind AOSP in terms of security? I looked at the comparison chart you linked elsewhere and the privacy/security sections only seem to list advantages over OEM Android (not AOSP), with the exception of secure boot [1], but AOSP (not OEM Android) doesn't have that out-of-the-box either. Unless you are comparing Lineage with OEM Android?

[1] https://eylenburg.github.io/android_comparison.htm

Re: GrapheneOS – Break Free from Google and Apple

#776

Post by natterangell »

mtlmtlmtlmtl wrote: post #551
bergheim wrote: post #105

Been using this for about a year on a p9 pro. It works very well. I hear the google tap to pay does not work, but I've never tried it. However Vipps with their tap to pay works fine. BankID works but not with biometric login, which some things require IIRC. And for some reason DnB private works fine, but you are not allowed in on the corp app. It's mind boggingly stupid that they lock down apps like this, when you ca…

About BankID: There was a regression in the app back in june that broke the app entirely. Back then I emailed the developers complaining about it, and their response indicated that there was no deliberate attempt at breaking BankID on GrapheneOS, and the specific developer who replied to me said he was a fan of the OS. Biometric login was also confirmed to work around the same time. I can however confirm that it does…

Fwiw, biometric login works fine for me. You need to install something like DuckDuckGo or Brave and set as default browser during setup. And only Google Password manager works for storing the passkey.

Re: GrapheneOS – Break Free from Google and Apple

#777

Post by natterangell »

bergheim wrote: post #105

Been using this for about a year on a p9 pro. It works very well. I hear the google tap to pay does not work, but I've never tried it. However Vipps with their tap to pay works fine. BankID works but not with biometric login, which some things require IIRC. And for some reason DnB private works fine, but you are not allowed in on the corp app. It's mind boggingly stupid that they lock down apps like this, when you ca…

[dead]

Re: GrapheneOS – Break Free from Google and Apple

#778

Post by linux_modder »

strcat wrote: post #691
nisten wrote: post #393

I switch from iPhone to a pixel 9 fold, and installed graphene after 2 weeks on stock android. Look, it's better than stock android overall, UI much more simplified even though it gives you a lot more security control, battery feels slightly longer, but there are drawbacks, i.e. twitter/x wouldn't install, neither would my bank's app. However from time to time I go to use iOS on the iphone and it just feels like bett…

You can bypass Play Store restrictions on app installs by using Aurora Store. There's a high chance your banking app can be used but it may require toggling the per-app exploit protection compatibility mode. Most banking apps work on GrapheneOS. X is one of extremely few apps disallowing using a non-Google-certified OS but it only partially disallows it in their store listing which can be worked around and for regula…

Aurora store is a horrible placeabo. Not only is it using other folks anonymized accounts, which violates several privacy laws internationally it also still has the Google libraries in their apks like everything else. You are not gaining any privacy or security using Aurora Store or F Droid for that matter but are indeed opening up more attack surface in the supply chain that ends at your device.

Re: GrapheneOS – Break Free from Google and Apple

#779

Post by linux_modder »

8K832d7tNmiQ wrote: post #83
axegon_ wrote: post #78

For some (and other not-so) obvious reasons I switched to Graphene a few weeks ago. For years I've been pushing towards de-cloudifying my digital life and there were several reasons for it: On one hand it was the constant content subscription which gave me 0 guarantees that what I am interested in will still be available the next morning, even though I've paid for it, and the other was, you guessed it, the idiotic LL…

Check out FUTO Keyboard, It has swipe-typing feature.

FUTO has many issues, beyond licensing like it's lack of privacy features.

Re: GrapheneOS – Break Free from Google and Apple

#780

Post by rglynn »

fodmap wrote: post #142
bergheim wrote: post #105

Been using this for about a year on a p9 pro. It works very well. I hear the google tap to pay does not work, but I've never tried it. However Vipps with their tap to pay works fine. BankID works but not with biometric login, which some things require IIRC. And for some reason DnB private works fine, but you are not allowed in on the corp app. It's mind boggingly stupid that they lock down apps like this, when you ca…

> It's mind boggingly stupid that they lock down apps like this, when you can just open the thing in a website anyway. I can use my bank on some linux distro... Not in Spain. I can access my bank's website but I can't do anything without their bank app. Even sometimes they require to confirm my identity using their app in order to access their website. I have several linux phones but I can only do banking with their…

Other than the inconvenience, is there any privacy risk in just having a separate device purely for those apps and nothing else?

Or is it more of a principle to resist this being forced on us?

Post reply on HN