this post was submitted on 25 Feb 2024
431 points (98.9% liked)

Privacy

33120 readers
1139 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I might have misunderstood this but is Android really trying to push this as tracking as a privacy upgrade, simply because it let's us choose which of our interests we want advertisers to have access to?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 9 points 11 months ago (1 children)

I mean, yeah. Use Android AOSP without Google.

[–] [email protected] 13 points 11 months ago (2 children)

AOSP is not a usable product and it is full of Google stuff. GrapheneOS and LineageOS (and derivates) make it usable.

GrapheneOS was the first at complete degoogling, others followed, but still have no secure solution for apps needing Google Play. MicroG is proprietary Google code, ran unsandboxed and still unreliable and less secure.

So GrapheneOS really is the only usable OS right now, it is FOSS (even in the BSD way that companies could make their proprietary fork) and other projects should base on it and weaken its security to make it run on existing other phones. This is still better than alternatives, but it is a hell of maintenance as all that security causes infinitely more bugs than just using AOSP (which is rock solid) and adding some apps lol.

Please donate to GrapheneOS, the project is not yet fully sustainable and they are doing incredible work.

[–] [email protected] 3 points 11 months ago (1 children)

Obviously by "google" were talking about proprietary blobs.

For example TOTP is great. There's no issue with the fact that it was developed by Google. Same with AOSP.

Any ROM doesn't have Google Play Services by default and therefore its google free in all the ways that matter

[–] [email protected] 1 points 11 months ago (1 children)

No some OS preinstall microG. Because only if the core is finished you can hash and sign it, if the user flashes some apps afterwards that doesnt work.

Btw ROM is read only memory, a tiny part of the firmware

[–] [email protected] 2 points 11 months ago (1 children)

MicroG is open source tho and only talks to Google if you explicitely activate it

[–] [email protected] 0 points 11 months ago (1 children)

No its not. They download Google Binaries which run as system apps and have privileged access.

They practice badness enumeration in some form, while their permission model (only activating what is needed) is a better approach but incomplete.

Any app that relies on Play has those libraries implemented, so they could show ads etc. on their own. But with microG they have a component with privileged system access, in contrast to sandboxed play where no component is privileged.

[–] [email protected] 2 points 11 months ago (1 children)

That's completely false, where did you get that info from?

[–] [email protected] 1 points 11 months ago

GrapheneOS discuss. Their Github repo looks like they actually have the sources for everything.