• John Richard@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    4
    ·
    16 hours ago

    Time to finally move to GrapheneOS. Hope they finish polishing it, including things like automated backups. I’m going to donate to them. They have consistently proved themselves to be a legitimate project.

      • John Richard@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        2
        ·
        edit-2
        12 hours ago

        They have an amazing reputation on open source. I think you’re conflating reputation on open source with reputation because of their willingness to understand & criticize issues with some other open source products. The issues with F-Droid’s security model have long been known & discussed by other prominent developers. It is why Obtanium has become increasingly popular. Heck, it is even mentioned on Privacy Guides. Their criticism towards Firefox is to my knowledge more specific to the Android security model & the reality is that Chromium provides significantly better sandboxing there. That isn’t an attack on Firefox itself but design choices or lack or commitment to the fundamentals, which Mozilla has routinely engaged in with Pocket, reselling Mullvad while breaking their browser support for tab container VPN integration if a user has Mullvad installed, their recent AI push, etc. But again they are specifically evaluating & criticizing the security or technical decisions in such instances. Likewise, it is fair to hate on Manifestat v3 used in newer Chrome extensions because not all the v2 features were supported out of the box, but there is no question that the security model in Manifest v2 was significantly worse & would be very easy for a malicious developer to have intercepted & logged all the requests. Manifest v3 solves that & they have uBlock Origin Lite now. I hope to see further improvements in this area. But criticizing the decisions of an open source project, especially as it pertains to security, does not make them anti-open source.

        • pkjqpg1h@lemmy.zipOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 hours ago

          F-Droid’s security model has long been known and discussed by other prominent developers.

          Yeah, by privsec.dev (which is owned by a GrapheneOS employee and ex-developer: akc3n and TommyTran732),

          and madaidan (who is a GrapheneOS fan),

          and Privacy Guides (there are many GrapheneOS developers in this project).

          Just give me up-to-date information about F-Droid from someone not related to GrapheneOS.


          They have uBlock Origin Lite now.

          Yeah, a handicapped version of uBlock Origin.

          And you really believe that they killed V2 for security? If you do, I have a cheap bridge for you.

          But criticizing the decisions of an open-source project

          If they smear projects that are a real choice for quitting Google and Microsoft (which are F-Droid, Firefox, and Linux), of course I’ll criticize.

    • skuzz@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      3
      ·
      15 hours ago

      What Google has been doing to Android the past few years puts the future of Graphene in jeopardy. Especially with closing off third-party access to the binary blobs needed to enable newer Pixel hardware.

    • Maestro@fedia.io
      link
      fedilink
      arrow-up
      2
      ·
      16 hours ago

      Is it possible to try Graphene out, like dual booting on PCs? Without throwing the existing Android setup away or bricking it?

      • frongt@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        16 hours ago

        Yes, but I don’t know if it works with grapheneos. You can live-boot an image with fastboot boot boot.img. You need the grapheneos img file obviously, and a working fastboot connection, and an unlocked bootloader. Usually unlocking the bootloader means wiping the device before you can do anything else though.

        If you have a pixel, grapheneos should work just fine. Except adding payment cards to Google wallet (non-payment cards and digital tickets work fine though). Some apps may refuse to work on uncertified devices. RCS support depends on your carrier. Outside of those things, though, literally everything else I’ve done has worked.