this post was submitted on 31 Oct 2023
81 points (96.6% liked)

Privacy

32165 readers
980 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] TCB13 18 points 1 year ago* (last edited 1 year ago) (3 children)

As usual if you're looking to have any security (Verified boot) GrapheneOS + Pixel phone is the only options. I really don't get it how come people in places like this are okay with having a phone with all their personal data and logins without verified boot. Stolen / lost phone and game over.

[–] [email protected] 28 points 1 year ago* (last edited 1 year ago) (24 children)

Getting a Pixel just to have Graphene is not always an option. At least not a sensible one that factors in everything that's important when buying something.

My current phone still runs perfectly fine, so getting a new one feels like a massive waste, too.

load more comments (24 replies)
[–] citruslumps 2 points 1 year ago (2 children)

I need a new phone but I want one with a good battery.

Looking at pixels for gOS but worried about battery life compared to something like Moto Edge+ or Oppo 11.

[–] TCB13 3 points 1 year ago

I guess with the amount of spyware you will not be running on GrapheneOS will certainly help you with battery life.

load more comments (1 replies)
[–] [email protected] 16 points 1 year ago* (last edited 1 year ago) (6 children)

Only 2 problems I have with Graphene personally is the need to give Google money, which the irony is just too much, and no option for rooting. Otherwise it seems like a pretty good OS overall. In the meantime, while I wait for those options to be more flexible so I can have full control, I just use a rooted lineage os with all the extra Google stuff (ntp, DNS, etc) stripped and replaced with my own self hosted systems.

[–] [email protected] 15 points 1 year ago (1 children)

u can buy a pixel second hand.

[–] [email protected] 2 points 1 year ago (1 children)

Money is still going to Google cuz I bet the person selling it is going to use it towards a new pixel from Google.

load more comments (1 replies)
[–] [email protected] 9 points 1 year ago (3 children)

@Mikelius @Imprint9816 what do you need root for? it makes absolutely no sense to root GrapheneOS and they won't ever make that option available. It's a huge security risk and massively increases attack surface. If you want root so badly, stay with lineage. Giving Google money for a product they make isn't any different from buying a Samsung or Apple phone really.

[–] [email protected] 10 points 1 year ago* (last edited 1 year ago)

I've heard and seen folks say rooting Android is a huge security risk and adds an attack surface, but haven't seen anything to support the claims, really. Yes it's less secure for the average person, who doesn't know anything about security, to root an Android, but to say it's completely insecure without any supporting explanation (not you in particular, just in general when this is said) doesn't help. I like to imagine it like installing Linux and being told to trust the distribution you installed, but they disabled root and removed sudo because it's insecure.

The reason I root is actually for both security and privacy. Without it, I can't use custom firewall rules to restrict apps and system processes from reaching out to the internet or local network devices (AFWall+), have a local hosts setup (Adaway), run a VPN to my home network (Wireguard), and monitor all app network process calls (PCAPdroid) at the exact same time. It also prevents me from being able to create custom cron jobs and custom system changes I need that have only root access.

Being that I am also home 95% of the time with my phone on my person at all times, physical attack surface is less concerning for me, too.

With that all being said, the (assumed) excuse that "malware" is the security risk with root makes no sense to me because whether or not I have root access, phone malware probably doesn't need it in most cases since they're exploiting non-root things so that they can target the majority, not minority. Not to mention I rarely ever even install apps on the phone and most of my web surfing is done on my laptop, not my phone.

[–] [email protected] 9 points 1 year ago

there are some niche reasons to root, like just tweaking system things or using rooted-only apps

[–] [email protected] 4 points 1 year ago

from buying a Samsung or Apple phone really. fairphone! https://www.fairphone.com/en/

[–] [email protected] 4 points 1 year ago

I guess there's actually nothing stopping you from rooting: you say "nope" when they ask you to confirm re-locking the bootloader, and then do the usual shenanigans with patching and flashing boot partition.

However, it makes graphene a whole lot less grapheny since you can't re-lock the bootloader anymore (except if you sign modified stuff yourself and let vb know of your key, which sounds like too much of a hustle), which means you don't really need a pixel and graphene except for a few unique features mb.

load more comments (3 replies)
[–] [email protected] 14 points 1 year ago (1 children)
[–] [email protected] 3 points 1 year ago (2 children)
[–] [email protected] 2 points 1 year ago (1 children)

I mean from the privacy aspect.

[–] [email protected] 2 points 1 year ago (1 children)

What it offers? lineageOS is literally stripped aosp project with nothing on it just some essential apps of their own(I am on lineageOS, Whyred)

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago) (1 children)

No bs in form of additional apps, but the core system itself does very little in terms of improving privacy

[–] [email protected] 3 points 1 year ago (1 children)

yes sir i am sincerely asking what exceptional it does?

[–] [email protected] 6 points 1 year ago

Well, the table in the link OP posted does a good job of showcasing it

load more comments (1 replies)
[–] [email protected] 12 points 1 year ago* (last edited 1 year ago) (1 children)

DivestOS absolutely slaps. Well, all things considered

Edit: It's absolutely fantastic for what it is, and that is fact. Maintained by a single person, well documented, and doesn't promise more than it can deliver.

[–] [email protected] 3 points 1 year ago (2 children)

wow, never heard of it. do u use it?

[–] [email protected] 8 points 1 year ago* (last edited 1 year ago) (1 children)

I've been using it for almost two years now, and I like it a lot. (small disclaimer, I'm running it on a OnePlus 5T, which is one of their so-called golden devices that it runs best on)

It's pretty much the next best thing after Graphene, if you don't want to buy a Pixel.

The guy who maintains it does an excellent job of documenting issues, what works on what device, what the system itself can and can't do, it's very transparent.

He doesn't overpromise either, and explicitely states that getting a Pixel with Graphene is the better option overall. Greatly appreciate the honesty.

I'll use it for as long as he'll support my device, and then we'll see if I switch to Graphene.

One important thing though: While you can install microG, DivestOS doesn't officially support it, and while most things work, some don't. SafetyNet, for instance.

[–] [email protected] 3 points 1 year ago
[–] [email protected] 3 points 1 year ago (2 children)
load more comments (1 replies)
[–] ichbinjasokreativ 8 points 1 year ago (1 children)

Why is Graphene listed as Google play incompatible? They have far and away the best implementation of google play services if the user chooses to install them.

[–] [email protected] 13 points 1 year ago (4 children)

I think you read the column that says Google Pay compatible. It's talking about the tap to pay feature you can use with your credit card at merchants, rather than the play store.

Honestly, the tap to pay feature is what's keeping my from using one of the more privacy oriented ROMs or root. It's just too convenient.

load more comments (4 replies)
[–] [email protected] 3 points 1 year ago (1 children)
[–] [email protected] 5 points 1 year ago

proprietary blobs removed

load more comments
view more: next ›