Andromxda

joined 8 months ago
MODERATOR OF
[–] Andromxda@lemmy.dbzer0.com 1 points 3 months ago (2 children)

I already explained to you that this is not true

https://lemmy.dbzer0.com/comment/12579929

But you don't seem to accept facts

[–] Andromxda@lemmy.dbzer0.com 1 points 3 months ago* (last edited 3 months ago) (4 children)
[–] Andromxda@lemmy.dbzer0.com 3 points 3 months ago* (last edited 3 months ago) (4 children)

Running third-party code with root privileges is absolutely not a good idea. It completely breaks the Android security model. Android (as well as basically any modern, secure mobile OS) is built on and designed around the principle of least privilege. microG also bypasses SELinux MAC policies, which makes it even less secure, increasing attack surface and potentially making it easier to exploit.

[–] Andromxda@lemmy.dbzer0.com 3 points 3 months ago (4 children)

Stay away from both Fairphone and /e/OS/Murena. Fairphone fails hardware security in the most miserable way, and fundamentally breaks Android Verified Boot, while /e/OS is based on the highly insecure LineageOS, and it further rolls back security, while also repeatedly missing important security patches.

Also, 600 dollars is absolutely not cheap for a smartphone, and it's especially not with it considering that both the hardware and software are highly insecure.

A Pixel can be purchased for much less, while being superior in every way.

[–] Andromxda@lemmy.dbzer0.com 8 points 3 months ago* (last edited 3 months ago)

The Pixel 6a is really cheap on the used market, and it still gets updates for at least 3 years.

The 7a isn't that expensive either. I recommend staying away from Fairphones, Murena or /e/OS as these are highly insecure, and the companies behind them have repeatedly proven that they don't give even the slightest fuck about the security of their users. They don't publish important Android security patches on time, and Fairphone even managed to fully break Android Verified Boot, by signing their ROM with the publicly available (!!!) AOSP test private signing keys. It should have been impossible to pass verification, but the vendor conducting the verification seems to be just as incompetent.

A used Pixel with GrapheneOS is your best option, while still being affordable.

[–] Andromxda@lemmy.dbzer0.com 29 points 3 months ago (1 children)

Thankfully there are FOSS alternatives for apps like Authy. I recommend Aegis

For your banking app, you can use this list to check if it's compatible: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

Using the web app might also be an option.

[–] Andromxda@lemmy.dbzer0.com 2 points 3 months ago

Thanks for the recommendation

[–] Andromxda@lemmy.dbzer0.com 4 points 3 months ago

(Point is everything is subjective)

No it's not. You can build a very secure OS and deliver updates quickly, while still ensuring stability. GrapheneOS has proven it over many years. If you prefer to use CalyxOS which rolls back AOSP security and often misses ASB patches, that's your choice.

[–] Andromxda@lemmy.dbzer0.com 3 points 3 months ago (1 children)

I'm literally responding to a guy who spreads conspiracy theories, telling him to stop with this bullshit

[–] Andromxda@lemmy.dbzer0.com 3 points 3 months ago

You summed it up really well

[–] Andromxda@lemmy.dbzer0.com 3 points 3 months ago

You need security to have privacy and freedom. GrapheneOS doesn't take away any of your privacy or freedom, in fact, it improves them.

[–] Andromxda@lemmy.dbzer0.com 3 points 3 months ago

Nothing is secure. Everything has risks.

Obviously. But relativizing everything doesn't help whatsoever with understanding the true risks associated with specific insecurities. You can read more about the issues with LineageOS at https://madaidans-insecurities.github.io/android.html#lineageos

view more: ‹ prev next ›