Im considering buying a new phone and i don’t really consider a Pixel. I really like Fairphones approach, with the self repairable stuff. Even though they don‘t have a headphone jack. But well… I can’t change it. I’ll definitely go with the adapter over wireless headphones.
But to my question: What private OSes are there? Fairphone sells FP4s with eOS, how is that? And does it work on the FP5? GrapheneOS only works on Google Pixels right?
May i know why you do not like the pixel phones?
I dont know. Its not that I dislike pixels, I just liked the concept of Fairphones. And I just never thought about google phones because I thought google and privacy don’t match, even if I have a different OS installed.
They are expensive and I don’t want to give money to Google
they sometimes retail at a loss around the holiday season.
They are expensive
Sometimes you get what you pay for, and…
I don’t want to give money to Google
I get that, but your purchase (the entire Pixel department, to be honest) is a drop in the ocean to their profits. They won’t notice you not buying one at all. You’re handicapping yourself in the mobile security arena (not being able to install GrapheneOS) to take the high ground and not effect a tech giant.
That aside, if you really don’t want to give Google, buy one from a reseller and not from the Google Store.
If you don’t want to give money to Google, why not take money from Google?
Then, once you’ve offset enough money, then you can buy a Pixel at an overall loss on Google’s side.
They are way cheaper than fairphones where I live.
Sorry I wasn’t comparing to fairphones. I was comparing the minimum you’d have to pay for a phone that has everything you could possibly need with the only difference being a not-that-great camera. So like a budget Xiaomi phone that I use.
I highly encourage everyone to buy their pixel phones for grapheneos secondhand. there’s enough pixel fanbois out there you should be able to deprive any corporation of the money of your sale by buying a like new condition last generation pixel (Like an 8 now that the 8a and 9 are out)
Recently bought a used Pixel for just under $200.
I refuse to buy new when a 1-2 year old flagship is 1/3 the price of new.
Especially since when was the last time you got a phone that impressed you? Like phones haven’t been getting better they’ve been getting more gimmicky
Yeah that’s not a bad idea
Yup. Bought a secondhand 7a for ~$250. Maybe I should have looked for an 8, but honestly I don’t think the 7a is too bad all considered.
I’m on CalyxOS, it works great. Locked bootloader, ability to block connection of devices when screen is locked (defeating cellebrite’s method of choice), work profiles and firewalls etc.
I use MicroG LineageOS which is in my opinion comparable with graphene os and is supported by a lot more devices.
Graphene and Lineage are the most uncomparable custom roms. Have and look at security and privacy and the type of Google Play handling.
See https://eylenburg.github.io/android_comparison.htm to geht a first idea
There are several degoogled OS options for the Fairphone models, with different levels of degoogling and privacy: LineageOS, CalyxOS, DivestOS, iodéOS and /e/OS.
Most of these are based on LineageOS (I understand that CalyxOS isn’t, but I might be wrong). I personally use iodéOS and I like the helpful developers, the ability to remove / replace any of the apps preinstalled with the system, and the iodé blocker which blocks trackers, adds and any connection you want to at a system level.
Personally, and thanks to some comparison charts, Graphene is the best, followed by DivestOS for most devices. Others are weaker, and Calyx is not useful as we have stronger Graphene.
Graphene does only work on the pixel devices. What makes it special is that you can lock the bootloader again after installing it, which with things like lineage, you cannot do. I have never used /e/OS but i use lineage as my daily and it can be installed on FP
What makes it special is that you can lock the bootloader again after installing it
I’m not sure why this is considered special. You can also re-lock the bootloader with CalyxOS, iodéOS and DivestOS. This is a Pixel thing, not a GrapheneOS thing.
Okay, I was not aware of that, so thanks for the information.
It’s also possible to relock the bootloader on a handful of Motorola and fairphones, at least as part of the Calyx install procedure
Honestly trusting the bootloader feels very risky
Ok what is your alternative? Android Verified Boot with a secure hardware keystore like the Google Titan M2 is basically the best thing you can get.
Strong encryption with a password you know only. The password should have a high enthropy
This is unrelated. You want to familiarize yourself with the concept of OS integrity and how it is different from data encryption. You can have a passphrase that encrypts your data alongside having access to these hardware features.
In that case, have fun coding up your own bootloader and flashing it onto the device. If you can’t trust the bootloader, then you can’t trust anything at all from the operating system that sits on top of it, because it could be compromised. If you can’t trust a bootloader, then the only thing you can trust is a pen and a piece of paper.
True but it feels like obscurity via obscurity.
A huge park of the bootloader stack is opensource…
https://android.googlesource.com/platform/system/core/+/master/fastboot/
why dont we just put uefi on phones
Phones don’t use an IBM-PC architecture. You’d need a phone based on an architecture phones aren’t usually based on or You’d need to re-engineer UEFI to work for an architecture it wasn’t designed for
UEFI has supported ARM for years now…
And “phones don’t use UEFI”
I’d be more worried about the ROM that runs before the bootloader that you can’t inspect, or possible hardware implants if you don’t trust the bootloader shipped to you from the vendor.
I don’t trust it not to be flawed
GrapheneOS uses pixels because not even Google employees can break into it.
Yes. Insider Attack Resistance is pretty awesome.
It has very minimal code and its implemented in a robust manner. Unlike UEFI and the desktop implementation of secure boot, it does work well and it has not yet been exploited on pixels. Its way better to have any kind of OS integrity check than none.
Yeah Fairphones all are fair and whatnot until you find out their software isn’t fair and they don’t give a shit about managing security properly nor collaborating with others such as GrapheneOS.
CalyxOS is another one. Some consider fairphone problematic
Can you explain that? Why is Fairphone problematic?
Well, whether anything is problematic or not is highly subjective.
Do you consider no headphone jack to be problematic? Or that some think it was done intentionally to push their wireless headphones?
What about the use of slave labor? After realizing it was impossible to get away from that, they tweaked their slogan from a fair phone to a “fairer” phone.
How about the high price and little demand?
See what I mean? One person’s problem is not everyone’s.
I do consider the missing headphone jack a problem, but are other brands better? I did not research any of this, bit don‘t other brands do the same. Considering this, I think Fairphone is one of the better phone producers. Im not saying they are the best or that they do nothing wrong. And please correct me if I’m wrong, I think the high prices come from the higher loans and better quality materials than other brands.
What does any of this have to do with Fairphone? You can apply every single one of these criticisms to the rest of the industry and it would be way more relevant than it is with Fairphone.
It seems some people will not accept paying more for an ethically superior product unless it is literally perfect in every single ethical aspect. If it’s not perfect, then this company that is vastly superior to all its competitors when it comes to ethics is somehow the villain. This is braindead logic.
I think the point is, why avoid buying a more mainstream phone like a pixel if even fairphone can’t avoid slave labour? The two big reasons why people go for fairphones is ethicality of the manufacturing process (labour and environmental impact) and modularity/fixability. If their labour is unethical then that means they lose one of their most important appeals. The horrific treatment of miners in the global south is easily one of if not the most significant issue with modern phone manufacture.
That’s not a point. This is not a case of all or nothing. You seem to have been raised with some kind of Disney fantasy land ideals about good and bad but the reality is that nothing is perfect including ethical consumerism. We simply look for the better or best alternative and that is currently Fairphone. That’s an objective fact.
Where did I say it was all or nothing. I don’t think you’re reading anything me or the other person is saying
why avoid buying a more mainstream phone like a pixel if even fairphone can’t avoid slave labour?
You acknowledged yourself that Fairphone is also environmentally superior to its competitors, such as Google, yet apparently this doesn’t matter to you when it comes time to purchase. Your logic seems to assume that because Fairphone is not perfect, it is therefore no better ethically than a company like Google. That is an all or nothing mentality.
deleted by creator
/e/OS is often a month or more behind on Android updates (including security). Unacceptable I think.
Some info about patch history here: https://www.divestos.org/pages/patch_history
General comparison table of Android ROM features: https://eylenburg.github.io/android_comparison.htm
Don’t forget iodéOS!
DivestOS is a good option
What about de-googled andpid? Is that private/secure?
No given the recent Cellebrite leak. You’re only secure if you use Pixel 6 and after, stock or GOS.
Of course that mostly only apply if you put government into your threat model.
That’s a threat to any device. Also the pixel scored way better than many other devices
Yes, GrapheneOS only works on Pixel devices, because the project has some pretty extensive hardware security requirements: https://grapheneos.org/faq#future-devices
The Fairphone is a highly insecure device, which comes nowhere close to the (hardware) security of a Pixel. On top of that, the Fairphone company doesn’t even know how to maintain their own Fairphone OS. The verified boot implementation is fundamentally broken and very misleading, since it’s signed with the publically available (!!!) AOSP test private keys. This is such a blatant disregard of security practices, that should have made it impossible to certify their devices. It’s not a surprise either that Fairphone regularly misses important Android security patches, or delivers them months later. That’s also why GrapheneOS will never support devices like the Fairphone. There are more issues with Fairphone’s misleading update policy that I haven’t covered in detail.
I highly recommend against purchasing such insecure, and poorly maintained hardware. DivestOS is the best option for “damage control”, if you already own a Fairphone. Its developer actually cares about users and their security, and the OS is properly signed.
I’ve never heard of Fairphone and have only barely heard of DivestOS.
FP4 with CalyxOS works perfectly.
Fairphones can also run CalyxOS if you want to look into that
I use CalyxOS on my FP4. I have been happy. Almost 2 years now.
