Live data from Hacker News

GrapheneOS – A privacy and security-focused mobile OS with Android compatibility

grapheneos.org

1–10 of 186 posts

Re: GrapheneOS – A privacy and security-focused mobile OS with Android compatibility

#3
A very condensed version of the messy CopperheadOS implosion is: https://en.wikipedia.org/wiki/CopperheadOS#History

It's good that the tech person is moving on, but Android doesn't seem a great starting point if privacy&security are the top priorities (as opposed to remaining captive in the Android camp, with some belief that you're a bit more secure than default).

Re: GrapheneOS – A privacy and security-focused mobile OS with Android compatibility

#4

Security focused and Android in the same sentence? All I can say is good luck with various firmware, custom services and drivers.

From the link- "In the current early stage of the project, GrapheneOS provides production releases for the Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3 and Pixel 3 XL. It will support other devices in the future, but devices are carefully chosen based on their merits rather than the project aiming to have broad device support. Broad device support is counter to the aims of the project, and the project will eventually be engaging in hardware and firmware level improvements rather than only offering suggestions and bug reports upstream for those areas."

Re: GrapheneOS – A privacy and security-focused mobile OS with Android compatibility

#5
Creator of CopperheadOS [0] and now GrapheneOS, Daniel Micay, was a prolific contributor to rustlang-core [1] but did rub off the rustlang community the wrong way? If I'm not mistaken he has a history of contributing to Arch Linux, as well.

What happened with CopperheadOS was unfortunate [2]. I hope Daniel [3] is able to work on GrapheneOS on his own terms [4]. The work that was done had garnered a lot of following and there's hope, given his exploits in the past, that he'd be able to steer this non-profit to heights where industry leaders building SilentCircle [5] and CyanogenMod failed.

Sure will be following the project from afar and routing for its success.

Good luck Daniel.

[0] https://www.reddit.com/r/CopperheadOS/comments/8qdnn3/goodby...

[1] https://news.ycombinator.com/item?id=9551937#9552769

[2] https://news.ycombinator.com/item?id=17289536

[3] https://news.ycombinator.com/user?id=strcat

[4] https://news.ycombinator.com/item?id=19501643#19559969

[5] https://news.ycombinator.com/item?id=12047219

Re: GrapheneOS – A privacy and security-focused mobile OS with Android compatibility

#7
post #3

A very condensed version of the messy CopperheadOS implosion is: https://en.wikipedia.org/wiki/CopperheadOS#History It's good that the tech person is moving on, but Android doesn't seem a great starting point if privacy&security are the top priorities (as opposed to remaining captive in the Android camp, with some belief that you're a bit more secure than default).

Well their long term goal is evidently moving to a microkernel based based OS rather than Linux. This seems like a lofty goal if they aren't for instance planning on switching to Fuschia (which may replace Android all together). Also its not like there are a lot of open mobile stacks that don't involve basically creating a ecosystem from scratch, aside from the Librem phone by Purism which is trying to integrate with the existing Debian/GNU Linux ecosystem.

Re: GrapheneOS – A privacy and security-focused mobile OS with Android compatibility

#8

Security focused and Android in the same sentence? All I can say is good luck with various firmware, custom services and drivers.

From the link- "In the current early stage of the project, GrapheneOS provides production releases for the Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3 and Pixel 3 XL. It will support other devices in the future, but devices are carefully chosen based on their merits rather than the project aiming to have broad device support. Broad device support is counter to the aims of the project, and the project will eventuall…

Don’t even those phones feature a cellular modem that shares memory with the CPU? In that case, they remain insecure.

Re: GrapheneOS – A privacy and security-focused mobile OS with Android compatibility

#9

Earlier quoted context omitted.

From the link- "In the current early stage of the project, GrapheneOS provides production releases for the Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3 and Pixel 3 XL. It will support other devices in the future, but devices are carefully chosen based on their merits rather than the project aiming to have broad device support. Broad device support is counter to the aims of the project, and the project will eventuall…

Don’t even those phones feature a cellular modem that shares memory with the CPU? In that case, they remain insecure.

May have been an issue in the past. Daniel claims that modern Pixel devices (among others) use IOMMU to control which memory segments the baseband device can access, and if implemented correctly it should only allow what is necessary for device->driver communication.

I do think more research is needed.

Re: GrapheneOS – A privacy and security-focused mobile OS with Android compatibility

#10
Librem seems to have the correct way forward, reject the big mess of Android and catch up to it with completely Open pieces.

https://puri.sm/products/librem-5/

They're making good progress and I can't wait to be able to update my handheld device with mainline pieces for as long as anyone who still uses one cares to update it. Currently my Samsung Android device is at Dec 2018 patchlevel and nothing I can do about it.

Post reply on HN