Live data from Hacker News

LineageOS 22

lineageos.org

91–100 of 166 posts

Re: LineageOS 22

#92
post #32

Earlier quoted context omitted.

What would be the attack vectors for malware on a tablet? I’m genuinely curious how crucial updates are for older devices.

For example, there could be a web-based attack that would target unpatched webviews. This could be a maliciously prepared webpage or image on the web, favicon etc, and this piece of data could be distributed by an ad network, for example. So, browsing the internet with an out of date browser or webview could pose this risk. Another issue is escalation. Again, we are in a speculative realm, but if a device is affected…

[deleted]

Re: LineageOS 22

#93
post #89

Earlier quoted context omitted.

The kernel side of drivers is already published under a FLOSS license, it's just that the code quality is usually subpar and the important changes are crammed into a tarball together with (sometimes) millions of other lines of changed code. The sources for the matching userspace binaries (which are usually the issue for Android version bumps) are usually under NDA by the component manufacturer and can not be released…

Is the kennel driver code not available for the Community to take over the process of mainlining? If that gets done then surely the user-side code will work with all future kennels that contain the driver?

The user-side will work with all kernels that contain the matching driver, but the user-side will not necessarily work on future Android versions without modification.

Re: LineageOS 22

#94
post #83
post #73

How's LineageOS with WhatsApp, Signal and random banking apps these days? Or let me put it another way: anyone running LineageOS but struggled to run any essential apps? (I don't care about games or whatever, I mean the apps you need to get around in life).

Whatsapp and Signal are fine. Random banking apps suck because their myopic and incompetent policies around custom OSes. Especially here in Germany where banks and even tech company management see internet as a magic, totally untrustworthy new curiosity. Combined with the overall extreme risk-averse society, basically none of the bank apps from big banks work with custom OSes. All require various levels of "hacking".…

Anecdote: I develop an app for a bank at my job in Germany and I was forced to implement root detection because of some annoying pentest. Everyone agreed that it was just security theater + checkbox compliance but it "had to be done"...

Re: LineageOS 22

#95
I bought a 1yo (new in box) OnePlus 11 5G last year and immediately installed LineageOS on it. Great, modern daily driver. My next phone, in many years, will also run LineageOS on day one.

Re: LineageOS 22

#96

Earlier quoted context omitted.

I managed to unlock a xiaomi redmi note 9. The bootloader unlock tool only work on windows and on intel based computers (don't ask me why). I had to reinstall temporarily a windows on a computer to do that. But this is really a brand to avoid at all cost anyway. Also these smartphones come super bloated out of the box with apps phoning home constantly, and super unreliables. 2 members of my houshold owned one and on…

You get profiled when you sign up for unlocking a xiaomi. In order to use the official windows-only tool: You make a xiaomi account, wait a month or more, then put an internet connected sim card that receives an sms verification and try to unlock, if it fails, you wait a day to try again. You can unlock about 3 devices at most every 6 months with one account. They found a balance that is easy enough for tech saavy us…

The "general population" is probably better off buying an unlocked device on the used market. Wipe it with a new LineageOS install and there should be no real concerns.

Re: LineageOS 22

#97
post #61

> Android 15 introduced several complex changes under the hood... > Android’s move to trunk-based development, and the subsequent growth in size of Android’s QPRs (Quarterly Platform Releases) have made our job magnitudes harder! As a byproduct we must rebase our entire code-base every 3 months. > Sadly, Google also has a habit of introducing deprecations or outright removing code that older devices rely on with litt…

> Google trying new tactics to move Android from open-source to "source available, lol"? It seems to be the opposite - more of AOSP internal development moving out into the open. QPR's are getting more frequent releases than the old AOSP code-drops. (Tbh I do think that AOSP has always had way too much churn for a sensible system. A Linux phone should just work, and share as much of its codebase as possible with Linu…

Android is not "a Linux phone", it just happens to use Linux kernel under the hood. What you're saying was always an explicit anti-goal.

Re: LineageOS 22

#98
post #73

How's LineageOS with WhatsApp, Signal and random banking apps these days? Or let me put it another way: anyone running LineageOS but struggled to run any essential apps? (I don't care about games or whatever, I mean the apps you need to get around in life).

they work fine if you don't root the install. if you do root, banking apps and Disney plus won't work, everything else is fine.

Re: LineageOS 22

#99
Love to see the ongoing progress here, but I'm really starting to worry that the growth of attestation on Android will make using custom ROMs like LineageOS impossible in future.

Is there any way we can fight this? Feels like there must be some EU/US consumer rights or digital market legislation somewhere that could be used to more directly object to organizations like banks saying "your phone works just fine but we actively block you from using it" especially as mobile apps become more and more obligatory for banking. It's a huge problem just in e-waste of old devices that work fine but can't be used because of the lack of updates.

Just one legal case upholding this somewhere would put a huge red flag over it and significantly discourage the whole trend.

Re: LineageOS 22

#100

Love to see the ongoing progress here, but I'm really starting to worry that the growth of attestation on Android will make using custom ROMs like LineageOS impossible in future. Is there any way we can fight this? Feels like there must be some EU/US consumer rights or digital market legislation somewhere that could be used to more directly object to organizations like banks saying "your phone works just fine but we…

Yeah, running GrapheneOS, this has been a big headache for me. And it's incredibly stupid too.

The app won't work natively due to a lack of attestation, so I have to fire up the browser and user the service.... Exactly how is that more anti-abuse than just using an app without attestation? It's security theater and has no basis in reality.

Post reply on HN