this post was submitted on 29 Jun 2024
66 points (89.3% liked)

Privacy

31833 readers
113 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
66
submitted 4 months ago* (last edited 4 months ago) by foremanguy92_@lemmy.ml to c/privacy@lemmy.ml
 

Hello, making this post to get some honest, and technical opinions about GrapheneOS. Please do not be bother by this question. No drama here pls ๐Ÿ™. I've heard that there is some of the google code into the "sandbox" feature. Say your opinion below! ๐Ÿ‘‡๐Ÿ‘‡

you are viewing a single comment's thread
view the rest of the comments
[โ€“] GolfNovemberUniform@lemmy.ml 7 points 4 months ago (3 children)

It's a middleground between a regular stock spyware ROM and a degoogled one with pretty good security thanks to lockable bootloader.

P. S. I can hear the drama coming unfortunately. This ROM's devs have haters.

[โ€“] foremanguy92_@lemmy.ml 6 points 4 months ago (3 children)

I've seen that you basically have two choice (more but not very relevant) GrapheneOS for security and /e/OS for privacy. Thoughts on it?

[โ€“] Lemongrab@lemmy.one 8 points 4 months ago

DivestOS is the most thoroughly degoogled of the android ROMs (it removes the most proprietary binary blobs). DivestOS is also decently security hardened, better security hardening than any other Android ROM other than GrapheneOS. But since it removes more of these proprietary blobs, it further reduces the attack surface of the ROM. Both GOS and DivestOS are good options. As commented by another user, /e/OS falls behind on security updates often, which is quite bad for a security or privacy focused OS.

[โ€“] GolfNovemberUniform@lemmy.ml 7 points 4 months ago (1 children)

/e/OS is not for privacy but more for anonymization. It has a built in VPN and a ton of spoofing stuff afaik. It's closer to Qubes if you ask me. And I heard it had proprietary software so ehh it's made to make you look like the most average internet user so you can search anonymously. I don't have enough information about this ROM but I wouldn't use it on my main device.

[โ€“] foremanguy92_@lemmy.ml 5 points 4 months ago (1 children)

Why you wouldn't use it on main device?

[โ€“] GolfNovemberUniform@lemmy.ml 5 points 4 months ago (1 children)

Convenience, proprietary software and because it's not completely degoogled. I use LineageOS on my device and I'm happy with it. I can use Qubes or a VPN if I want an anonymous search.

[โ€“] foremanguy92_@lemmy.ml 4 points 4 months ago (2 children)

LineageOS is more degoogled than others like eOS?

[โ€“] miss_brainfarts@lemmy.blahaj.zone 9 points 4 months ago (1 children)

Like the other reply said, Lineage doesn't do a whole lot in terms of degoogling. I quite enjoy DivestOS, it's a project that takes Lineage as a base and strips out as much Google and proprietary code as possible.
In fact, it's so Google-free that neither sandboxed Play Services nor MicroG are officially supported, though the latter can still be installed and used just fine, though with a few drawbacks.

Same as Lineage, it runs on more devices, but certain features like bootloader relocking depend on the phone.

[โ€“] sunzu@kbin.run 3 points 4 months ago* (last edited 4 months ago) (1 children)

Microg has drawbacks?

Edit: sorry that's a question. What are they?

[โ€“] Cube6392@beehaw.org 2 points 4 months ago

Some stuff won't work such as android auto

[โ€“] GolfNovemberUniform@lemmy.ml 2 points 4 months ago* (last edited 4 months ago)

LineageOS actually seems to be getting less degoogled recently. They're adding stuff for better Google apps support (that can be installed manually). But I believe it's as degoogled as reasonable custom ROMs get. Not much advanced privacy/anonymization features though and no stuff like Play Integrity support obviously. It's a ROM for these who don't need gapps at all. And if you do, just buy a second hand device with the stock ROM and put your banking apps there. Play Integrity doesn't work well on any custom ROMs now anyways.

EDIT: also EOS is EndeavourOS that is a Linux distro.

[โ€“] Cheradenine@sh.itjust.works 5 points 4 months ago

E often falls behind on patch levels, see the page here https://divestos.org/pages/patch_history

[โ€“] bloubz@lemmygrad.ml 4 points 4 months ago (2 children)
[โ€“] sunzu@kbin.run 2 points 4 months ago (1 children)
[โ€“] bloubz@lemmygrad.ml 4 points 4 months ago

It's a different OS, based on AOSP

[โ€“] GolfNovemberUniform@lemmy.ml -1 points 4 months ago

I think you may be right but everyone's used to calling it a ROM. Now with increasing popularity of EROFS it makes more sense to call it that way.

[โ€“] electro1@infosec.pub 2 points 4 months ago* (last edited 4 months ago) (1 children)

There's a lot of false information in your statements, GrapheneOS is not spyware, and it does a better job at degoogling than any other ROM mentioned in this thread, the only one that comes close is DivestOS, and no eOS is NOT like Qubes...

GOS wanted to reduce the attack surface as much as possible so they removed all the unecessary Bloat, it doesn't even ship with wallpapers !!

This list is not exhaustive and covers a tiny bit of the differences between these custom ROMs but it's a good place to start

https://eylenburg.github.io/android_comparison.htm

[โ€“] GolfNovemberUniform@lemmy.ml 2 points 4 months ago (1 children)

What I meant by a "middleground" is that GOS has gapps, even though they are sandboxed. There is no way it can be more degoogled than LOS or any other fully vanilla ROM that's actually degoogled.

[โ€“] electro1@infosec.pub 2 points 4 months ago (1 children)

That's also not accurate, GOS comes fully degoogled, and doesn't include any GAPPS or Google Play services, you have to install them yourself if you want compatibility with Google Apps or some banking apps

even though they are sandboxed. There is no way it can be more degoogled than LOS

That's just false, even LOS isn't fully degoogled and it still connects to Google in the background for necessary connectivity checks ( e.g. DNS ) and Esim activation for example

[โ€“] GolfNovemberUniform@lemmy.ml 0 points 4 months ago* (last edited 4 months ago) (1 children)

Oh ok then. If it has a vanilla version then it is degoogled and can be more degoogled than LOS. What I meant was if GOS was microg only, it couldn't be as degoogled as LOS because LOS is vanilla. Still it's a shame that LOS can't find a better supporter than Google.

[โ€“] electro1@infosec.pub 2 points 4 months ago (1 children)

it couldn't be as degoogled as LOS because LOS is vanilla

This is about to change since LOS are about to include MicroG by default in future releases.. Or so I heard from some Mastodon users who shared screenshots about an LOS update that installed MicroG

GOS is private and secure more than any other ROM, but once you install the Unprivileged play store you lose some of that privacy while retaining security, MicroG is private but not as secure

Still it's a shame that LOS can't find a better supporter than Google

Wdym?

[โ€“] GolfNovemberUniform@lemmy.ml 1 points 4 months ago (1 children)

This is about to change since LOS are about to include MicroG by default in future releases

Should I bet all my savings this isn't gonna happen? Just don't trust unverified rumors and never ever spread them as the truth.

more than any other ROM

ROMs without network support.

Wdym?

I believe LOS uses Google stuff because they get money for doing it, especially for making it the default search engine in the default browser.

[โ€“] electro1@infosec.pub 1 points 4 months ago* (last edited 4 months ago) (1 children)

never ever spread them as the truth.

How did you know it's not the truth...because I implied it wasn't.. and I don't see it as something that couldn't happen, people asked for MicroG support for years..

ROMs without network support.

I'm not a huge fan of trolling

because they get money for doing it,

I can tell you no Open source ROM gets funds by Google, unless if it's a program... For example GOS received many rewards for discovering vulnerabilities in AOSP

[โ€“] GolfNovemberUniform@lemmy.ml 0 points 4 months ago* (last edited 4 months ago) (1 children)

How did you know it's not the truth...because I implied it wasn't.. and I don't see it as something that couldn't happen, people asked for MicroG support for years..

Sorry but this sounds like you're defending yourself because you know you spread rumors or maybe even complete misinformation.

I'm not a huge fan of trolling

There was no trolling. You said it's the best ROM for security. I told you of a better one. Saying "best ROM for security" was more of an act of trolling than my response.

I can tell you no Open source ROM gets funds by Google, unless if it's a program...

Idk. I heard that Lineage receives money from Google so I said that but, in contrary to you, I didn't say that I'm sure of it. I just said "I believe it's the case".

[โ€“] electro1@infosec.pub 1 points 4 months ago

Alright then, it's been fun chatting with you