GrapheneOS has been around for a while, and it's a pretty neat piece of software.
  • Muffi@programming.dev
    0·
    2 months ago

    I would love to make the switch, but I am certain that absolutely zero of my government mandated apps will run on this thing.

      • Muffi@programming.dev
        0·
        2 months ago

        Mandated is the wrong word. “Required for absolutely everything” is more precise. In Denmark you need an app called “MitID” to do any kind of digital verification. You can’t do online purchases, banking or digital bureaucracy without it.

          • untorquer@lemmy.world
            0·
            2 months ago

            It’s not really. Much better then US’ lack of any one consistent system (or even lack of electronic option) and random OTP generators. But makes switching phone OS feel like a pretty big risk.

            • Dop@lemmy.world
              0·
              2 months ago

              I mean it may be pretty well done and thus ‘safe’ (curious if said app is open source?), but it sounds like you, as an individual, are tracked for most of your activities. Is cash still a mainstream option for payment?

              Also, it’s probably a costly stretch and really depends on your threat model, but could still have a phone with said app for any activity that requires it, and another one running GOS for a more private use.

              • untorquer@lemmy.world
                0·
                2 months ago

                You can still use cash. It’s just for electronic payments and ID verification. Though cash is exceedingly rare.

                A unified ID system just means you use the same login details for each government agency (tax office, dmv, healthcare, etc…) Instead of a different system for each. It’s also a stand in for a physical signature. It also ensures your data is consistent through the entire government as it’s the same database.

                I think it’s significantly more secure for the individual than in the US and, as far as tracking, it’s not like the US’ insecure identity verification systems make it more difficult to track you. The US makes it easier for others to steal you’re identity, and for you to get screwed because an employee misread your name on a net form they have to manually copy into their cobal database or whatever.

          • untorquer@lemmy.world
            0·
            2 months ago

            You can use a keychain OTP generator (in Norway). I have no clue how it generates verifiable codes. The phone app is more convenient, and to the point at hand, actually connected to the internet/NFC. In any case it’s factor 1 in a 2FA (And then some), so the same way any 2FA would work.

  • sweetpotato@lemmy.ml
    0·
    2 months ago

    For how long will the older pixel phones be supported? Is it worth it to buy a cheaper older model like pixel 6 and have graphene in it?

    Cause I’m not giving more than 200-300 for a phone. I’ll stick to cheap android phones that lack nothing compared to expensive phones for my needs.

    • Possibly linux@lemmy.zipEnglish
      0·
      2 months ago

      You can just run Lineage OS with MicroG or Calyx OS. If you have all Foss apps you probably don’t even need MicroG

      • toastal@lemmy.ml
        0·
        2 months ago

        5a is EoL so no headphone jack for you. This is a nonstarter for portable devices to me.

        • Dust0741@lemmy.world
          0·
          2 months ago

          USB C to AUX adapters work for me.

          Having a secure and up to date device should likely be more important

      • sweetpotato@lemmy.ml
        0·
        2 months ago

        Wait what do the android updates have to do with Graphene? Does the phone need to still be supported by Google and android for Graphene to be secure and work?

    • echolalia@lemmy.ml
      0·
      2 months ago

      Android auto also works fine for me. I haven’t used an android phone in years so I can only compair it to apple car play. There are extra configuration steps to make it work but its not hard (just have to read some messages and go through some menus)

      Apple car play “just works”.

  • M500@lemmy.mlEnglish
    0·
    2 months ago

    Can someone give an example of an app that doesn’t work? I always hear about apps that do work, but is it mostly banking or some other category that doesn’t work typically?

      • RvTV95XBeo@sh.itjust.works
        0·
        2 months ago

        <end of list>

        Some banking apps allegedly don’t work but i have never encountered one. If your bank has a mobile accessible website, it’s basically a non-issue.

        • ByteWelder@lemmy.ml
          0·
          2 months ago

          More specifically, Play Integrity API will fail on the Play Service integrity check. If I recall correctly, this is why Google Pay won’t work on GrapheneOS.

          Some banks require the app to be used as second factor to log into their website.

        • refalo@programming.dev
          0·
          2 months ago

          google wallet is not required to be tied to any bank accounts, and US does not even support NFC within banking apps.

          • RvTV95XBeo@sh.itjust.works
            0·
            2 months ago

            Both true statements. The banking apps that don’t work aren’t because google wallet doesn’t work, but because they use the same trust policies that Wallet requires in order to run (which GrapheneOS cannot meet because its not a “trusted” OS, per Google)

    • Broken@lemmy.ml
      0·
      2 months ago

      Like you said, banking apps. The logic behind that is they use google to security check their apps. A random non-bank example would be the slick deals app. Without play services it would just open then crash.

      Many apps use play services for their notification system. So for instance, proton mail works fine but notifications do not.

      NFC is not supported, so anything that uses that won’t work.

      Not an app, but I was surprised that widgets don’t work unless you’re in the primary profile. Technically they work on any profile, but they randomly get deleted, and frequently. It’s a known bug that probably will never get fixed because the source of it comes from stock android.

      I will mention that you can have a profile running play services, which gives you access to many apps that wouldnt normally work. And it’s sandboxed so it has less impact on your information (I don’t know all the specifics but it does limit in some way how much it can snoop into the rest of the OS). Then you can also set up granular controls on your apps to limit them from snooping.

      • M500@lemmy.mlEnglish
        0·
        2 months ago

        Thanks! I don’t think this will work for me. Where I live, most of the payments are made directly through banking apps by scanning a qr-code.

        • Broken@lemmy.ml
          0·
          2 months ago

          Yeah, that’s why I mentioned having a secondary profile. Some stuff like bank apps you just can’t get away from so a profile with play services running is a workable solution. If you have a pixel phone already, you can give it a shot. One very nice feature of GOS is that it’s super easy to install - and uninstall if it’s not for you.

    • featured [he/him]@lemmygrad.ml
      0·
      2 months ago

      Random applications that use the play integrity API won’t work on any third party OSes or ROMs. For example I tried to install some Intuit app on my GOS Pixel a while back (credit karma I think?) and it didn’t work at all

    • sartalon@lemmy.world
      0·
      2 months ago

      I’ve almost never had an issue. Like ever, unless I forget to set my phone on a charger when I went to bed. And even then, it would just be in the single digits by the end of the second night.

      I think I’ve had my phone die on me twice since I’ve had it (Pixel 6 Pro).

        • sartalon@lemmy.world
          0·
          2 months ago

          Great. I don’t need that. That’s not even close to a selling point.

          I guess if I needed to hike without a power source for a week, it would be.

            • sartalon@lemmy.world
              0·
              2 months ago

              I disagree. I think that claiming something “sucks balls” because it will only last two days of normal use before dying, if you don’t charge it all all, is absolutely ludicrous.

              If I just text and leave my screen dim, I could get a whole week out of my phone. But that’s not why I got a smart phone. I got a smart phone so I could use it, not see how long I could get the battery to last.

                • sartalon@lemmy.world
                  0·
                  2 months ago

                  For the record, I looked it up. The pixel falls in line with most other mainstream phones. Depending on the model it can be in the lower half, sometimes upper half, but always top ten.

                  Your phone seems to be specifically designed for ruggedness and battery life.

                  In fact of all the reviews I can find, about your phone they essentially say: it works ok as a phone but hey, I can throw it against a wall and it has awesome battery life.

                  So calling out the Pixel specifically and using the Oukitel as a metric is just straight up fuckery.

                  That’s the kind of crap that needs to be left on Reddit. Go back there to post your gatekeeping bullshit.

  • soFanzy@lemmy.world
    0·
    2 months ago

    I love graphene as much as the next guy, but this article is pretty terrible. Badly researched, just spitting out talking points that are either flat out wrong, not the point of graphene or just scratching the surface. Look up the graphene homepage, if you actually want useful info.

  • shapis@lemmy.ml
    0·
    2 months ago

    Tried to switch to graphene for a bit. Way too many apps don’t work in it.

  • QuizzaciousOtter@lemm.ee
    0·
    2 months ago

    While it’s not nearly as customizable as an Ubuntu kernel, it’s still easy to make your GrapheneOS look and feel exactly how you want it to, within reason.

    WTF is it supposed to mean?

          • Euphoma@lemmy.mlEnglish
            0·
            2 months ago

            The university that I’m at is trying to get new students to use a digital student id that uses google wallet for scanning I think. They aren’t giving any new students physical student id’s unless they need it for something that doesn’t work with the digital ones.

            So yeah some people do need google wallet.

            • dubyakay@lemmy.ca
              0·
              2 months ago

              Google Wallet works though. It’s just NFC and credit card payments that don’t. If you can add tickets and passes with barcodes, student ID will work.

        • Dop@lemmy.world
          0·
          2 months ago

          Why not? You van set up a separate profile and install gplay services so pretty much anything would work under these conditions I assume

          • experbia@lemmy.world
            0·
            2 months ago

            “I assume” is doing a lot of heavy lifting here.

            as someone who runs GrapheneOS and looked into the possibility of doing contactless payments: no. it simply does not work. all the contactless payment apps can somehow detect you’re not running the stock OS for the phone and choose to lock themselves down.

            cashapp and venmo will also freeze your accounts almost immediately upon installation and login and, in my case with cashapp, insinuate you may be reported to law enforcement for fraud when you appeal with info about your phone lmao

    • pirat@lemmy.world
      0·
      2 months ago

      I’m not sure how to read the Plexus entries, and they don’t seem to be clickable. Would you mind explaining how to use the site in a meaningful way?

  • Lightscription@lemmy.world
    0·
    2 months ago

    Unfortunately, Tinder doesn’t work and that is helpful to get in touch with the ladies. That app is too hell bent on location data which GOS handles more privately.

    NFC should work, it is just scheduled to be deactivated after 3 months if not used for security reasons.

    I think GOS is very user friendly and has many positive privacy and security enhancements. I would like to see if they can surpass sandboxed Google Play and officially support other repositories and updaters like Accrescent. Also, a standard way of securing traffic beyond encrypted DNS would be good such as a tor client like Orbot.

    Looking into the Veilid ecosystem might also be a source for further development ideas.

      • Lightscription@lemmy.world
        0·
        2 months ago

        I am sure you are trying to be funny, but I am serious. They won’t let me reproduce in the US.

        I am not gay or bi. I don’t like men. When priests molest little boys (or the FD and PD for that matter; I have verified the convictions) or men get anally raped in prisons (or by the Chicago PD or IDF: also fact) are you still pro-gay?

        Fascists use gay to be homophobic against straights. There are violent and abusive gay men. This clown f-ed little boys and young men —> https://en.wikipedia.org/wiki/John_Wayne_Gacy

        • frostprophet@infosec.pubEnglish
          0·
          2 months ago

          Here’s some completely unrelated crap

          ArE yOU StILL prO GAY!!??

          Yes? People should have the right to be gay

          CW: SA

          The fact that some men rape and assault other people has nothing to do with anyone else being gay or not.

          It would also be helpful for you to know that most pedophiles who attack boys (and probably the men doing the raping in prison) are actually straight. [1] Again, nothing to do with gay.

          Wtf are you on lol

          [1] https://www.splcenter.org/fighting-hate/intelligence-report/2011/10-anti-gay-myths-debunked

          Anti-gay activists who make that claim allege that all men who molest male children should be seen as homosexual. But research by A. Nicholas Groth, a pioneer in the field of sexual abuse of children, shows that is not so. Groth found that there are two types of child molesters: fixated and regressive. The fixated child molester — the stereotypical pedophile — cannot be considered homosexual or heterosexual because “he often finds adults of either sex repulsive” and often molests children of both sexes. Regressive child molesters are generally attracted to other adults, but may “regress” to focusing on children when confronted with stressful situations. Groth found, as Herek notes, that the majority of regressed offenders were heterosexual in their adult relationships.

          The Child Molestation Research & Prevention Institute notes that 90% of child molesters target children in their network of family and friends, and the majority are men married to women. Most child molesters, therefore, are not gay people lingering outside schools waiting to snatch children from the playground, as much religious-right rhetoric suggests.

          They won’t let me reproduce

          I have a lot of questions but the answer to those questions is probably incel bs so I’m not gonna start haha

          • Lightscription@lemmy.world
            0·
            2 months ago

            You being gay is totally alright. But hurting little boys and sexually abusing men is not. There is a big difference between (bad faith) bullying and violent actions and consenting and respectful adult behavior.

  • ZebraGoose@sh.itjust.works
    0·
    2 months ago

    Here’s a summary of the article and the seven key points mentioned about switching to GrapheneOS:

    Summary: The article discusses GrapheneOS, a secure, privacy-focused mobile operating system based on Android. It highlights the benefits of switching to GrapheneOS, its features, compatibility, and user experience. The article also addresses potential concerns and provides information on reverting to standard Android if desired.

    The seven things you should know before switching to GrapheneOS:

    1. Compatibility: Currently only supported on Google Pixel devices (Pixel 3 or newer) due to their strong hardware-based security features.

    2. App compatibility: Most apps are compatible, but some may require alternatives. A sandboxed version of Google Play can be installed for popular apps.

    3. User interface: Similar to standard Android, but with enhanced privacy controls and a decluttered, ad-free experience.

    4. Regular updates: Frequent security updates are provided to protect against the latest threats.

    5. Community support: A dedicated community of users and developers is available to offer help and tips.

    6. Reversibility: It’s possible to switch back to standard Android if you don’t like GrapheneOS.

    7. Privacy and security features: Includes end-to-end encryption, revocable permissions, randomized MAC addresses, and strict app data access controls.