Installed GrapheneOS for the first time
from clark@midwest.social to privacy@lemmy.ml on 15 Jul 2024 22:25
https://midwest.social/post/14551013

I have not any prior experience with installing custom ROMs, but after trying it out (and getting stuck, and googling and finding answers) I successfully did it. Below is my home screen if anybody is curious:

I use OpenBoard for my keyboard. Unfortunately I am still dependent on Play Store since some of the apps I need can only be found there. Sometimes it feels meaningless committing to this whole thing because I’m not perfectly private; then I think this is better than using a regular iPhone or Android phone.

So far I’m liking it. I am naturally inclined to feel hesitant about using this as my main phone and plugging in a SIM since it’s custom, but I’m slowly making the transition.

Feel free to share any beginners advice or your own experience using GOS for the first time. Cheers!

#privacy

threaded - newest

Username@feddit.de on 15 Jul 2024 22:41 next collapse

OpenBoard is no longer maintained. Heliboard is a good alternative.

I think Google Play on Graphene is a good compromise, since at least it does not have root access. Unfortunately it is very crippling to completely avoid Google on Android.

That being said, I heard others are using work profiles to isolate all apps using Google Play from their more private apps. I’m not doing that, but work profiles are nice for … well work apps.

clark@midwest.social on 15 Jul 2024 22:43 next collapse

Thanks for the heads-up!

JGrffn@lemmy.ml on 17 Jul 2024 00:00 collapse

As someone who has a profile only for Whatsapp (used to also be Instagram), a profile for banking & finances, a profile for some stuff that needs play services, and a profile for most other stuff (main profile)…don’t use profiles unless you’re only creating one more at the most, and you’re absolutely certain there’s no need to share information between the profiles.

Graphene has had a long-standing bug from upstream AOSP, if I recall correctly, where it’ll always ask for your pin when changing profiles, and only sometimes will it allow you to use your fingerprint or alternative methods to get into your profiles. I almost never get the fingerprint option for my main profile, and have to tap back from the pin input on other profiles to get the option to use fingerprint, and not always. They do sometimes push something that loosely resembles a fix, but it’ll go back to not working after another update.

Regarding communicating between profiles, that’s hard to pull off. The curveball of having to send screenshots from banking apps, say, confirming transactions, it’s made a lot worse with profiles. I’m currently relying on my nextcloud instance to upload screenshots from finances, then downloading those screenshots from nextcloud into my WhatsApp profile, just to send a proof of transfer to someone. I’m definitely not keeping my phone like this for much longer.

All else considered, however, I’m not going back to a ROM that doesn’t respect me as the owner of my device. I’m happy to have switched to graphene and I am here to stay.

clark@midwest.social on 17 Jul 2024 00:03 next collapse

Thank you for sharing this. Honestly, right now, I simply don’t feel a need to use profiles for my apps. I understand some people claim I probably should considering I use both FOSS and Google apps, but I’m just getting started with this whole privacy thing and I don’t feel like rushing. Using only one profile probably isn’t the absolute worst thing you could do, eh?

Stowaway@midwest.social on 17 Jul 2024 00:36 collapse

I was wondering about that. Seems like 90% of the time it flashes the finger print reader then fails and goes back to pin. Also 75% of the time can’t read my fingerprint reader when just unlocking but that’s not a grapheneos issue… :(

OhVenus_Baby@lemmy.ml on 15 Jul 2024 23:24 next collapse

Openboard updated for me recently. When did they stop maintaining it?

Username@feddit.de on 16 Jul 2024 00:19 collapse

github.com/openboard-team/openboard

Last commit is two years ago. I’d recommend checking what you have installed. A quick search on GPlay finds what appears to be a clone that may or may not leak user data.

OhVenus_Baby@lemmy.ml on 16 Jul 2024 02:24 collapse

version 1.4.5

org.dslul.openboard.inputmethod.latin versionCode 19

targetSdk 31 minSdk 19

Installed: May 8, 2024; 3:17 PM Updated: May 8, 2024; 3:17 PM

Is this an AHH SHIT moment or I’m good? Lol

washbasin@sh.itjust.works on 16 Jul 2024 02:39 next collapse

1.4.5 is the latest—and last—OpenBoard version, released 8/8/22 per app on F-Droid.

Did you fresh install it? Your log makes it look like you just installed it.

OhVenus_Baby@lemmy.ml on 16 Jul 2024 03:36 collapse

Yes I forgot I did. My phone bugged out one day about it. I don’t know why. Whats a good FLOSS alternative?

sunzu@kbin.run on 16 Jul 2024 05:11 next collapse

Heliboard is recently restarted sucessor

Futo is another option, I am not sure if it is Foss Lois rossmann backs it though

JustMarkov@lemmy.ml on 16 Jul 2024 07:34 collapse

I am not sure if it is Foss

It is not, just source-available:
gitlab.futo.org/keyboard/latinime/-/…/LICENSE.md

uzay@infosec.pub on 16 Jul 2024 08:31 collapse

I like FlorisBoard

Cube6392@beehaw.org on 16 Jul 2024 15:14 collapse

So I don’t want to tell you to panic but I can’t find anything about “dslul” or their version of openboard. The questions I have are as follows:

  1. How did you acquire this apk? (F-Droid, play store, obtainium, regular download?)
  2. Do you have hypatia installed? If not, can you install it and run a device scan to see if there’s any known malicious blobs on your device?
  3. Please take a look at heliboard. I know its weird to tell people they’re safer going with the most popular options, but legitimately we’re a pack animal. We do better when we look out for each other and this may be a case where it’s best to go to the version of this project that has the most eyes on it
OhVenus_Baby@lemmy.ml on 16 Jul 2024 21:08 next collapse

I use heliboard now downloaded today and deleted open board. I acquired openboard from Fdroid. Both times. I’ve never heard of hapatia. I will check it out momentarily.

Username@feddit.de on 19 Jul 2024 00:27 collapse

So I don’t want to tell you to panic but I can’t find anything about “dslul” or their version of openboard.

It’s the app id from F-droid, so I would assume it is legit: f-droid.org/…/org.dslul.openboard.inputmethod.lat…

Cube6392@beehaw.org on 19 Jul 2024 00:50 collapse

Interesting! I assume then that dslul was the original developer. Weird I wasn’t able to turn up anything at all… Well… Not that weird given that internet search is broken

pineapplelover@lemm.ee on 16 Jul 2024 02:57 next collapse

I use Gboard with network permissions toggled off

fleet@lemmy.ca on 16 Jul 2024 03:30 next collapse

I’m using a work profile for Google Play. It was surprisingly easy to setup and there are few guides around. But basically you install Shelter, then clone Apps to the work profile. Open up Apps on the work profile and install google play services normally.

muntedcrocodile@lemm.ee on 16 Jul 2024 04:38 next collapse

I found a separate profile with google play was too much of a pain in the ass unfortunatly.

SeekPie@lemm.ee on 16 Jul 2024 15:34 next collapse

To install apps from the Play Store you could maybe look at Aurora Store?

communism@lemmy.ml on 16 Jul 2024 22:30 collapse

Unfortunately it is very crippling to completely avoid Google on Android.

Tbh if you don’t do mobile gaming, I think this is entirely doable. I say this as someone who uses Aurora Store for about 3 or 4 odd apps. I could live without them on my phone, but I just choose not to for the convenience of having a mobile client for some proprietary services I use. And I don’t have Google Play services at all.

Linsensuppe@feddit.org on 15 Jul 2024 22:42 next collapse

Every step you take towards a more private digital life is essential. I mean you have to start somewhere right? And the phone is in my opinion the biggest privacy thread out there. I am not on GrapheneOS but I’m considering switching soon.

windlas@lemmy.ca on 15 Jul 2024 22:55 collapse

I switched over a year ago and have no regrets. It does everything I want (including android auto now) and gives me at least a little but more privacy than a stock android image.

The more people who use it the more impetus there is to further develop it.

Give it a go! Its a great.

land@lemmy.ml on 15 Jul 2024 22:44 next collapse

Aurora store and F-droid will be your besties, you don’t need play store unless you have purchased something.

[deleted] on 15 Jul 2024 22:53 next collapse
.
Grippler@feddit.dk on 15 Jul 2024 23:09 next collapse

Is it really a massive inconvenience? I would hardly even call it a minor inconvenience. I get a notification maybe twice per week that there are updates pending, and I just accept them in bulk. Your life must be absolutely perfect and ridiculously easy if that simple infrequent action can be classified as a massive inconvenience.

There are much more annoying things when de-googling and using graphene OS than this IMO. This hardly even registers as annoying. Not being able to use my government 2FA app or NFC payments, now that is massive inconvenience.

Inui@lemmy.ml on 15 Jul 2024 23:15 next collapse

Okay, smuglord. It’s a massive inconvenience compared to doing literally nothing. And it heavily depends on what apps you use and how often they update.

[deleted] on 15 Jul 2024 23:18 collapse
.
IDew@lemm.ee on 16 Jul 2024 00:02 collapse

To me I love to have control over what I update, I agree with it not being inconvenient. For other it might so it’s not really necessary to be mean about it!

Rogue1633@discuss.tchncs.de on 15 Jul 2024 23:12 next collapse

Unfortunately I’m experiencing the same thing :( Not too big of a deal for me to do manual updates once every two weeks or so but still an annoyance

DaGeek247@fedia.io on 15 Jul 2024 23:17 collapse

Automatic updates were added about six months ago. https://gitlab.com/AuroraOSS/AuroraStore/-/issues/719

They've been working well enough for me.

[deleted] on 15 Jul 2024 23:18 collapse
.
IDew@lemm.ee on 16 Jul 2024 00:04 next collapse

I suggest Droid-ify over the F-Droid store for ease of use, but both work fine

possiblylinux127@lemmy.zip on 16 Jul 2024 01:42 collapse

I personally like the F-droid app way better. It is pretty polished and has the benefit of being first party

Cube6392@beehaw.org on 17 Jul 2024 23:22 collapse

The latest f-droid release has been causing me headaches and I’ve switched (for the time being) to droid-ify. Which also has some headaches but no show stoppers. Of the two, I can definitely say I prefer f-droid. I hope this helps someone find what they want in an app installing app

muntedcrocodile@lemm.ee on 16 Jul 2024 04:39 next collapse

I like neo store

communism@lemmy.ml on 16 Jul 2024 22:45 collapse

You don’t need Play Store if you’ve purchased something. I had to use a paid app for a few years and installed it through Aurora. You can install paid apps on Aurora if you log into the google account you bought it on.

land@lemmy.ml on 16 Jul 2024 23:26 collapse

Thanks for the heads up.

Qkall@lemmy.ml on 15 Jul 2024 22:50 next collapse

Have you checked out this?

f-droid.org/packages/com.aurora.store/

clark@midwest.social on 15 Jul 2024 22:53 collapse

Yes. The reason I don’t use Aurora is because I’ve heard it’s instable sometimes and uses many anonymous Google accounts in order to install apps. I feel safer using my own burner account for that.

tuxec@infosec.pub on 15 Jul 2024 22:57 collapse

You can also use your own Google account in Aurora store.

clark@midwest.social on 15 Jul 2024 23:01 collapse

Interesting. I’ll check this out later.

IDew@lemm.ee on 15 Jul 2024 23:59 collapse

Definitely do! I also suggest Droid-ify for FOSS apps :)

tuxec@infosec.pub on 18 Jul 2024 08:45 collapse

There is also Neo Store which can be used as a F-Droid client.

Rogue1633@discuss.tchncs.de on 15 Jul 2024 23:13 next collapse

Today I learned that Vanadium has a search widget, so thanks for the post :D

IDew@lemm.ee on 16 Jul 2024 00:07 collapse

It gets me wondering, I have never use a search bar widget in my life and I find them rather setting in the way… My search bar is just 1 tap away inside Firefox, which is also on the desktop… I’ve not seen many people around me use it

Do people really use it?

Rogue1633@discuss.tchncs.de on 16 Jul 2024 00:24 collapse

Well I used to use it when I was still using normal Android. When I open Vanadium I get greeted with the last page I visited and I get distracted from that, so a search widget helps me.

IDew@lemm.ee on 16 Jul 2024 09:24 collapse

Makes sense. Whenever I open Firefox, of opens on the (empty) homescreen where I can start typing in the URL bar right away. But everyone has got their own ways!

BurningTurtle@feddit.org on 15 Jul 2024 23:18 next collapse

You can use the aurora store for most of your play store need’s.

OhVenus_Baby@lemmy.ml on 15 Jul 2024 23:23 next collapse

Should be all, its simply a frontend. I have never seen an app be “missing” so to say.

BurningTurtle@feddit.org on 15 Jul 2024 23:30 next collapse

I was referring to features, like adding money to your account. Not that they are needed in aurora.

Oneser@lemm.ee on 16 Jul 2024 00:33 next collapse

Some apps are not available in my Google store due to geoblocking. Can aurora circumvent this? Or is it a front end of the “local” google play store?

OhVenus_Baby@lemmy.ml on 16 Jul 2024 02:22 collapse

A reputable VPN can block this. I’m not sure if the store can solely. I don’t believe so. If your blocked for any reason you need a good VPN. ****

Oneser@lemm.ee on 16 Jul 2024 10:47 collapse

You are correct, re-loading the aurora store after shifting my vpn to the target country (and anonymous login) seems to change the aurora storefront too :)

Honytawk@lemmy.zip on 16 Jul 2024 12:58 collapse

Nah, I prefer F-droid wherever I can. The mentioning when an app has anti-features is so helpful.

But Aurora is a great second option.

Cube6392@beehaw.org on 16 Jul 2024 15:20 collapse

Yeah I use play store because I have to have some stuff furnished from play store for work but aurora store is a great way to acquire those apps you do need to get through life but that aren’t open source

lisquid420@lemm.ee on 16 Jul 2024 06:58 collapse

vouch for aurora store being awesome

synapse1278@lemmy.world on 15 Jul 2024 23:20 next collapse

What are your concerns regarding using your SIM card?

clark@midwest.social on 15 Jul 2024 23:38 collapse

It’s actually nothing but beginner paranoia. Will it work properly even on a custom ROM, is the main question spinning in my head.

synthsalad@mycelial.nexus on 15 Jul 2024 23:42 next collapse

No reason it wouldn’t as far as I know, assuming your hardware is compatible.

JoyfulCodingGuy@lemmy.ml on 15 Jul 2024 23:44 next collapse

Works for me on Verizon and has for 5+ years. Google Fi even works as I’ve tried that with a different phone on GrapheneOS.

Codilingus@sh.itjust.works on 16 Jul 2024 01:28 collapse

When I last used Graphene, it was on a pixel 4 XL, and I used a Google Fi sim card just fine. Texting, specifically MMS was borked, group chats would just be massive sentences of spaghetti letters. Other than that though, issue free.

oleorun@real.lemmy.fan on 16 Jul 2024 03:57 collapse

Same issues here. I love GOS but I need basic things like SMS/MMS/RCS to work, and right now they just don’t.

Codilingus@sh.itjust.works on 16 Jul 2024 06:25 next collapse

Damn, not even RCS works?! I’m back to stock Android on a 6 Pro because I don’t have the energy, and can’t be fucked to deal with tech problems that often.

Andromxda@lemmy.dbzer0.com on 16 Jul 2024 14:21 next collapse
synapse1278@lemmy.world on 16 Jul 2024 14:38 collapse

RCS works with my Pixel 7

Codilingus@sh.itjust.works on 16 Jul 2024 18:59 collapse

OK, yea a feature that uses data not working didn’t make sense.

Andromxda@lemmy.dbzer0.com on 16 Jul 2024 14:20 collapse

Some people apparently got it to work. Maybe check this thread on the Graphene forum: …grapheneos.org/…/1353-using-rcs-with-google-mess…

Codilingus@sh.itjust.works on 16 Jul 2024 22:19 collapse

Thank you! It was interesting skimming that thread.

MigratingtoLemmy@lemmy.world on 15 Jul 2024 23:29 next collapse

I think I can live without playstore completely but I might need K-9 with Google emails for some stuff on my device, so I guess I’m not escaping Google spying on my IP address anytime soon. Other than that, I don’t use Google or apps from the playstore at all

communism@lemmy.ml on 17 Jul 2024 00:32 collapse

I guess I’m not escaping Google spying on my IP address anytime soon

Use a VPN. No reason not to if you’re concerned about privacy—otherwise you have no privacy as your ISP can monitor you. If cost is an issue, ProtonVPN has a free tier, otherwise I recommend Mullvad as an affordable and really reliable and decent option imo. I found ProtonVPN’s connection to be kind of volatile when I used it (I paid for it too, on the highest tier). Mullvad has always been super reliable though. Whenever I’ve had connectivity issues it’s always been because of whatever network I’m connected to, not because of Mullvad.

MigratingtoLemmy@lemmy.world on 17 Jul 2024 01:57 collapse

Yeah I probably should but the WiFi at work doesn’t let wireguard through (I have a wireguard server running on a VPS)

EveryMuffinIsNowEncrypted@lemmy.blahaj.zone on 15 Jul 2024 23:44 next collapse

I’d love to try out GrapheneOS (or another OS), but I can’t afford a second phone, and there’s no way I’m gonna dive head-first into something entirely unfamiliar to me when it’s my only method for telephony.

IDew@lemm.ee on 15 Jul 2024 23:55 next collapse

It does function just like any other phone so far I’ve tested. No app that simply doesn’t work. And if it doesn’t, you can simply exploit the GOS hardening in settings to improve compatibility. You overall have more control over any app, which I like

K4mpfie@feddit.de on 16 Jul 2024 07:05 collapse

One of my biggest concern is banking apps not working. Is that still an issue with Custom ROMs? Edit: Nevermind, answerd below

Facebones@reddthat.com on 16 Jul 2024 07:46 collapse

I can add that ive also had 100% success with that setting, but I’ve only needed it 2 or 3 times.

mdd@lemm.ee on 16 Jul 2024 00:27 next collapse

I feel the same. If I try to install a different ROM and it falls I could be without a phone for a bit.

EveryMuffinIsNowEncrypted@lemmy.blahaj.zone on 16 Jul 2024 01:16 next collapse

Exactly.

Freuks@lemmy.ml on 16 Jul 2024 01:49 collapse

Gos installation can’tbe easier, they have WebUI installation

IDew@lemm.ee on 16 Jul 2024 09:33 collapse

I was shocked to find out that the hardest part of the installation was finding a Chromium based browser on PC lol

All you have to do to install GrapheneOS is press one button in the WebUI. No other ‘ROM’ has been easier to install.

Andromxda@lemmy.dbzer0.com on 16 Jul 2024 14:17 collapse

You can also use a Chromium-based browser on another Android device

communism@lemmy.ml on 16 Jul 2024 22:47 next collapse

It is really similar to stock android in terms of functionality. It’s just degoogled and hardened. It’s designed to be user-friendly and not for tech-savvy people (though tech-savvy-friendly—which is part of being user-friendly imo). I promise you you can use it out of the box once installed just like a stock android install. The only thing to be aware of is to install some kind of package manager like fdroid or aurora store, or even grapheneos’s unprivileged google play store, to get apps, unless you just want to use the stock apps it comes with i guess in which case you probably shouldn’t waste money on a smartphone.

EveryMuffinIsNowEncrypted@lemmy.blahaj.zone on 17 Jul 2024 21:56 collapse

Really? That’s awesome! I think I’ll check it out. :)

 


Edit: …Seriously? They only support Pixel devices? Wow. Fuck this.

communism@lemmy.ml on 17 Jul 2024 22:54 collapse

Yes, only Pixels are officially supported. If you want to add support for other devices, it’s a foss project and you’re welcome to write the code yourself. For other devices there are other degoogled OSes you can use. Graphene is generally considered the most secure but if you have another phone you can install one of the other AOSP forks or turn it into a linux phone or something

Cube6392@beehaw.org on 17 Jul 2024 23:31 collapse

Its also worth noting Graphene’s focus on pixel devices stems from those devices having more easily secured hardware. Which android fork you decide to use will depend on your particular use case. I wound up going with a Pixel and Graphene for android auto. But if you’re someone with existing hardware that you want to set up with a degoogled os, there’s e/os, lineageos, CalyxOS, iodé, and, if you wanna get really weird, postmarket os. Having done a deep dive into this I can honestly day there’s no single OSFA answer to this.

EveryMuffinIsNowEncrypted@lemmy.blahaj.zone on 18 Jul 2024 00:27 collapse

I did not realize there were other forks besides Graphene and LineageOS.

In any case, thanks for the info. I guess I’ll have to shop around.

Longmactoppedup@aussie.zone on 17 Jul 2024 02:28 collapse

Ironically it was when the stock android upgrade on my pixel 7 completely bricked my phone (due to the multiple user profiles bug) that I decided to jump in to Graphene head first.

Compared to my experience running random ROMs on Samsungs back in the era of galaxy note 1 to 4, Graphene installer was so easy!

Sivilian@lemmy.zip on 15 Jul 2024 23:52 next collapse

I have been using lots of the different private keyboards that have been out for a while but FUTO just came out with a amazing Keyboard that has better then Google Voice typing.

Codilingus@sh.itjust.works on 16 Jul 2024 00:55 next collapse

futo.org/keyboard

Been using that for a few days now, I’ll never go back to AOSP, gboard, heli, nor anything else. Saw a video of who I think is the head of futo, giving a no fucks given presentation, says he’s tired of non google keyboards that make it feel like your typing drunk. Website has a QR code to add the Futo repo to fdroid, ez pz.

Fuzzy_Red_Panda@lemm.ee on 16 Jul 2024 04:36 next collapse

What don’t you like about HeliBoard? I have it and FUTO both installed, but I prefer HeliBoard due to its ‘hold space bar to move cursor’ option. Then I use FUTO for the occasional SpeechToText.

Codilingus@sh.itjust.works on 16 Jul 2024 04:49 next collapse

I didn’t dislike Heli, just my accuracy to hit the correct key felt immediately better using Futo.

Fuzzy_Red_Panda@lemm.ee on 16 Jul 2024 04:51 collapse

Ooh in that case I may try using it for typing again. My typing accuracy on Heliboard is abysmal.

null@slrpnk.net on 16 Jul 2024 18:05 collapse

Can confirm I had the exact same experience moving from Heli to Futo. Immediately noticed I was way more accurate, better swipe and predictions too.

Codilingus@sh.itjust.works on 17 Jul 2024 00:33 collapse

Good to know it wasn’t placebo! 😅

KrapKake@lemmy.world on 16 Jul 2024 12:33 collapse

Futo also has the hold space bar to move cursor by default. I just wish it had single hand mode.

Fuzzy_Red_Panda@lemm.ee on 16 Jul 2024 17:57 collapse

OMG thank you I didn’t know that!

I kept pressing and holding and got annoyed that the change keyboard dialog would pop up. Pressing and moving is the secret!

Andromxda@lemmy.dbzer0.com on 16 Jul 2024 07:49 collapse

Unfortunately not FOSS

Hellmo_Luciferrari@lemm.ee on 16 Jul 2024 17:58 collapse

Gitlab

Which they state is a fork of LatinIME

communism@lemmy.ml on 16 Jul 2024 22:43 next collapse

Source available is not the same as FOSS. Being able to access the source code is only a precondition to software being considered free. Their licence is not a FOSS licence.

Hellmo_Luciferrari@lemm.ee on 16 Jul 2024 22:53 collapse

I wasn’t meaning to conflate the two, as I see your point. I didn’t claim it was FOSS, just that the source was available.

I know for me, I don’t mind using software that is licensed so that it doesn’t directly fall under FOSS. I just like the availability to view the source vs closed source software being a total black box.

I have no plans to monetize their work, nor fork it, only use it.

Andromxda@lemmy.dbzer0.com on 16 Jul 2024 23:09 collapse

Well that’s the difference between source-available software, open source software and free software. FUTO’s license may be source-available, but it’s not open source.

FOSS stands for Free & Open Source Software. FUTO is neither free software nor open source.

Hellmo_Luciferrari@lemm.ee on 17 Jul 2024 14:16 collapse

I understand that. I didn’t call FUTO FOSS…

WhiteBerry@lemmy.ml on 16 Jul 2024 00:59 next collapse

Sorry for the noob question, but are you able to access your banking apps with GrapheneOS? If so, how?

CrabAndBroom@lemmy.ml on 16 Jul 2024 01:06 next collapse

For me, going into the app info and enabling “Exploit protection compatibility mode” worked for banking.

Andromxda@lemmy.dbzer0.com on 16 Jul 2024 14:16 next collapse

Most apps should work with no issues. There’s a compatibility list at privsec.dev/…/banking-applications-compatibility-…

communism@lemmy.ml on 16 Jul 2024 22:50 collapse

I’ve used four different banking apps (admittedly banks which may not operate in your country, but they’re popular enough in my country) on GrapheneOS no problems. I currently don’t have a banking app installed because I don’t need one and it’s probably spyware. I just do my digital banking in my web browser. But if you want to install a banking app, it should work completely fine, save for notifications—a lot of proprietary apps seem to rely on Play services for notifications 🤷‍♀️

Upstream7564@discuss.tchncs.de on 16 Jul 2024 01:14 next collapse

Checkout Heliboard, it’s a fork of the discontinued Openboard which fixes a lot of it’s bugs and adds new features and improvements:

github.com/Helium314/HeliBoard

It’s avaible on F-Droid and IzzyOnDroid

TheSun@slrpnk.net on 16 Jul 2024 01:37 next collapse

Look into the user profiles feature to further isolate any play store apps you still use. I have one profile called gshit and thats the only one I install anything non-opensource on from the Aurora store.

This prevents any playstore apps from accessing say photos, contacts, messages, etc on your main profile.

PS. If you don’t like the stock launcher either you should check out KISS launcher (minimal mode)

iturnedintoanewt@lemm.ee on 16 Jul 2024 01:59 collapse

Didn’t the Aurora store get their anonymous profiles killed? You still need to login right?

TheSun@slrpnk.net on 16 Jul 2024 02:01 next collapse

Hmmm nope I just updated some apps yesterday. I had to uninstall and reinstall Aurora store cause it wasnt showing the anonymous option anymore, but after that it popped up and worked like normal, no sign in.

BearOfaTime@lemm.ee on 16 Jul 2024 02:11 next collapse

Logging in via Aurora can get your Google account banned.

Only read about it once or twice, so take that warning with a grain of salt.

IDew@lemm.ee on 16 Jul 2024 09:30 collapse

I’m glad if they take my account down for me, actually

Ilandar@aussie.zone on 16 Jul 2024 04:19 next collapse

No, anonymous logins work fine.

Facebones@reddthat.com on 16 Jul 2024 07:41 collapse

No issues here.

sic_semper_tyrannis@lemmy.today on 16 Jul 2024 02:54 next collapse

Don’t forget to change your DNS provider to something such as NextDNS for added benefits

Facebones@reddthat.com on 16 Jul 2024 07:50 collapse

Does it have any benefits over just running pihole, other than reliability?

zer0squar3d@lemmy.dbzer0.com on 16 Jul 2024 08:03 next collapse

You aren’t always home, therefore when you aren’t home it’s useful.

en1gma@lemmy.ml on 16 Jul 2024 10:41 next collapse

I have not yet looked into the DNS topic. What are the risks if I use the provider’s default DNS? Or what are the advantages of using a different DNS?

ivn@jlai.lu on 16 Jul 2024 12:11 collapse

ISP DNS servers often lies, depending on your country, a lot do DNS blocking so it’s a way to evade basic censorship. Also some alternative DNS can lie in useful ways, for adblocking or malware protection. You can also check mullvad DNS.

Andromxda@lemmy.dbzer0.com on 16 Jul 2024 14:24 collapse

NextDNS even let’s you customize your DNS filter. You can choose which blocklists you want to use, and you can manually whitelist/blacklist individual domains. It also has other cool features like parental controls and malware protection.

toastal@lemmy.ml on 16 Jul 2024 14:26 next collapse

You might be underestimating the OP

Hellmo_Luciferrari@lemm.ee on 16 Jul 2024 14:41 collapse

You can still use PiHole as your DNS when not home if you setup a VPN. For me that was the route I went.

vox@sopuli.xyz on 16 Jul 2024 17:47 collapse

or you can allow public authenticated access to dns over https… (just don’t expose the raw udp dns server, it’s a really bad idea)
(not sure if DoT can also support auth, but if it does that’s great because android supports dot natively)

Hellmo_Luciferrari@lemm.ee on 16 Jul 2024 18:03 collapse

I know I don’t want to open up any more ports than I have to, but you’re right, that does sound like another alternative to setting up VPN.

Since I access more than just my pihole when connected to my home network. And because I want access to my home services, and don’t want to open up access to the public, opening one port and connecting to VPN is the way to do it. I have one port opened up for my VPN, and in order to connect you have to have my IP or my domain pointed at the IP, and you have to have a Wireguard profile setup, and know what port is open. So that does help a tad bit with my security concerns.

Edit: how would I go about that if I felt so inclined? Any tips?

Andromxda@lemmy.dbzer0.com on 16 Jul 2024 14:13 collapse

It also works when using cellular data or connecting to a different Wi-Fi network. Your Pi-Hole only works when you’re at home or when you VPN into your home network

Facebones@reddthat.com on 16 Jul 2024 14:58 collapse

Fair. I always assumed I could just point to it while I’m out, but i also haven’t put a lot of thought into it yet lol

Andromxda@lemmy.dbzer0.com on 16 Jul 2024 23:16 collapse

I mean you technically could expose the Pi-Hole from your home network on the internet, but I don’t recommend it. A VPN (either a simple WireGuard setup or something more fancy like NetBird, ZeroTier or Tailscale) could work, but I think NextDNS is the easier solution. Alternatively you could look into running your Pi-Hole on a VPS with WireHole.

pineapplelover@lemm.ee on 16 Jul 2024 02:57 next collapse

Aurora store is also pretty cool. You can download from there without a google account.

HappyTimeHarry@lemm.ee on 16 Jul 2024 05:43 next collapse

Even if apps you use depend on play store one of the things you can do on GrapheneOS is temporarily disable it and only turn it back on when apps refuse to run, another option is just keeping those apps in a separate work profile.

answersplease77@lemmy.world on 16 Jul 2024 09:29 collapse

all android phones can temporarily disable an app until you turn it back on.

magi@lemmy.blahaj.zone on 16 Jul 2024 13:33 next collapse

Not google services

HappyTimeHarry@lemm.ee on 16 Jul 2024 13:35 next collapse

Not all of them can disable google play service apps

refalo@programming.dev on 17 Jul 2024 08:35 collapse

I would argue you shouldn’t be using those apps in the first place since they all contain proprietary blobs (yes that includes Signal, see Molly-FOSS for a non-blobbed fork).

Andromxda@lemmy.dbzer0.com on 17 Jul 2024 10:35 next collapse

Molly also includes other useful features like database encryption and UnifiedPush support.

refalo@programming.dev on 17 Jul 2024 19:01 collapse

Yes but for me it is a non-starter for legal reasons because screenshots do not work with fingerprint lock turned on. I don’t understand why the user cannot choose to enable this or not like other apps can (including Signal).

HappyTimeHarry@lemm.ee on 17 Jul 2024 11:52 collapse

Absolutely, my suggestion was just for folks who have apps that still require play services, not everyone can avoid it, but you can minimize usage if you do need them.

Andromxda@lemmy.dbzer0.com on 16 Jul 2024 14:11 collapse

No, that only applies to (some, not all) system apps. GrapheneOS allows this for all (including user-installed apps): grapheneos.org/features#user-installed-apps-can-b…

refalo@programming.dev on 17 Jul 2024 00:38 next collapse

adb shell pm disable-user PACKAGE_NAME

worked for me with Signal on a stock pixel

Andromxda@lemmy.dbzer0.com on 17 Jul 2024 08:28 collapse

Sure you can do it through adb, but Graphene exposes this option in the settings. They also recommend against enabling developer settings and using adb for security reasons.

refalo@programming.dev on 17 Jul 2024 08:34 collapse

But you said “no” before… I was just showing that it is indeed possible with non-system apps.

Andromxda@lemmy.dbzer0.com on 17 Jul 2024 10:34 collapse

Yeah you’re right, I didn’t think of adb while writing that comment. It’s not possible through the settings is what I meant.

answersplease77@lemmy.world on 17 Jul 2024 08:18 collapse

yes also including uaer apps: for example I can disable whatsapp by putting it in deep sleep and disabling its allowed network for extra measures, then it wont ring, wont update store version, wont recive calls, nor messages all while I’m online watching youtube for 2 hrs, then I can enable allow mock location and once online I’ll appear in brussel. btw I all non-rooted Androids can but Apple Users cant do any of that with their phones

Facebones@reddthat.com on 16 Jul 2024 08:02 next collapse

Welcome! My experience has been seamless, I think most of the idiosyncrasies have been covered in other comments already but Ive had zero issues with base functionality “out the box”

DieserTypMatthias@lemmy.ml on 16 Jul 2024 11:01 next collapse

I’m still waiting on LineageOS being ported on my phone (SM-A536B).

possiblylinux127@lemmy.zip on 16 Jul 2024 21:16 collapse

You are welcome to work on it. However, Samsung devices are a absolute pain to work with.

DieserTypMatthias@lemmy.ml on 17 Jul 2024 06:58 collapse

Yes, I know that, and I tried porting it to PostmarketOS, but the build failed miserably.

possiblylinux127@lemmy.zip on 17 Jul 2024 14:56 collapse

You need to mainline the kernel for Linux systems. That is a very difficult job

g1ya777@lemmy.world on 16 Jul 2024 13:09 next collapse

I just keep Play store installed with all permissions disabled, including network, and use Aurora store instead.

clark@midwest.social on 16 Jul 2024 14:12 collapse

What is the main difference between using Play Store and Aurora store (logged in with your Google account)?

yonder@sh.itjust.works on 16 Jul 2024 14:30 next collapse

Aurora store has a cleaner interface with no ads and can be used without a google account.

clark@midwest.social on 16 Jul 2024 14:31 collapse

I’m more curious about the privacy aspect of using Aurora over Play, especially considering since I will be logged into my G account.

yonder@sh.itjust.works on 16 Jul 2024 14:39 next collapse

When starting Aurora, you can choose between an anonymous account or your own. You can still use the anonymous option even if you are logged in to other services with google. If you go logged on anyways, I guess Google will not know your every tap with Aurora? I would think logged in, google play store and aurora would be comparable (not private).

clark@midwest.social on 16 Jul 2024 15:29 collapse

Do you know if it’s safe to download banking apps from third party stores (in this case Aurora)?

yonder@sh.itjust.works on 16 Jul 2024 15:52 next collapse

I do not know on a technical level.

Midnight1938@reddthat.com on 16 Jul 2024 16:11 collapse

It does download from google (servers), so it is safe enough

clark@midwest.social on 16 Jul 2024 16:22 collapse

I have heard Aurora is more insecure and you can risk getting your Google account blacklisted or banned using it. Do you have any experience with this or know how common it is?

Midnight1938@reddthat.com on 16 Jul 2024 17:11 next collapse

Thats easy, use the anonymous accounts. Only use your real one to install paid apps you already have (i dont) then logout

communism@lemmy.ml on 16 Jul 2024 22:26 next collapse

If it’s of any help, I (n=1) used one of my personal google accounts with Aurora Store for years because I had one paid app I needed. On my latest phone I now use anon accounts because I no longer need that one app. But for the years I was logged in, I was never banned or anything. What I did, when I needed to purchase the app, I did it on a separate google account to my usual one I use for youtube and gdrive (I know, bad, I don’t really use gdrive anymore but I haven’t migrated the files I already have on there accumulated for years, and every time I start using a private youtube frontend it never sticks and I forget about it quickly. sorry lol). So if I got banned I would only lose a purchase and not anything else.

ArcaneSlime@lemmy.dbzer0.com on 18 Jul 2024 23:01 collapse

Banking apps hate working without google play services btw, mostly they don’t work at all. It’s really best (for privacy) to just use the mobile site or a laptop, but if you need the app I’d look into setting up a second user profile for google bullshit and installing google services and the banking app there, rather than your main profile. Also check out graphene’s matrix rooms for any help you may need, they’re quick.

But yes you can get banned, anonymous on aurora always unless you have a paid app like the others have said.

shekau@lemmy.today on 17 Jul 2024 00:58 collapse

Just dont use your personal g acc (obviously), and its fine.

clark@midwest.social on 17 Jul 2024 11:51 collapse

Excuse my ignorance, but why not use your own G account?

shekau@lemmy.today on 18 Jul 2024 12:33 collapse

By not using your own g account I meant not using account that is assigned to your identity or account that you use for official things.

Unless you have some purchases on there and you want to use these, but you shouldnt use your own account for that in the first place.

communism@lemmy.ml on 16 Jul 2024 22:22 collapse

Aurora is a foss wrapper with fewer anti-features like ads. You could trust the client more ig if you’re using Aurora. I use F-Droid for most things and then Aurora for like 3 apps I’m not willing to give up and have no foss alternatives. I mostly just use Aurora out of principle for the apps I can’t get from F-Droid, but also I guess out of a lack of trust for Google (which I suppose is related to the principle of not using proprietary software anyway)

communism@lemmy.ml on 17 Jul 2024 00:33 next collapse

I recommend you use GrapheneOS as your daily driver. There’s not really any reason not to. I have been for years and never had trouble.

Templa@beehaw.org on 17 Jul 2024 01:31 next collapse

I’m curious why no one recommending FlorisBoard.

I’ve been using GraoheneOS as my daily driver for months now. I still have issues with things that need Google Localization (car sharing program in my city for example) and I’ve had a few banking apps complaining when being installed from the Aurora Store.

I miss having my cards on my phone quite a lot.

lseif@sopuli.xyz on 17 Jul 2024 02:14 next collapse

+1 for this, but i will mention that suggestions/autocorrect is not stable yet if that matters for people.

sparkle@lemm.ee on 17 Jul 2024 02:39 collapse

Suggestions/autocorrect will likely come within the next 2 months when 0.5 releases

It’s also easily customizable and will likely have an in-app layout editor by 0.6

lseif@sopuli.xyz on 17 Jul 2024 06:51 collapse

hopefully i can move clipboard buttons too.

Cube6392@beehaw.org on 17 Jul 2024 23:17 next collapse

I tried Floris board. Its particular rough patches are deal breakers for me, but I’m sure my keyboard of choice has rough patches that would be deal breakers for potential Floris board users. I hope some people see your comment and give it a try. It seems like a promising project

marcie@lemmy.ml on 18 Jul 2024 00:55 collapse

FUTO Keyboard is really nice imo

lseif@sopuli.xyz on 17 Jul 2024 02:13 next collapse

Sometimes it feels meaningless committing to this whole thing because I’m not perfectly private

every small change matters

Cube6392@beehaw.org on 17 Jul 2024 23:15 collapse

Exactly. I don’t even think of myself as having escaped surveillance capitalism. I’ve made it less lucrative though. All that data they’re mining? I’ve done a little bit of work to make sure the mines are tapped out. I’m gonna keep working to convince others that there’s value in doing the same. Its all part of telling these greedy shitheads we won’t accept their global destruction anymore

jawsua@lemmy.one on 17 Jul 2024 02:49 next collapse

Check out Heliboard (also on F-Droid) and follow the instructions to enable gesture typing. I also suggest Futo for on-device voice to text.

What specific apps are you using that you can’t deal going away from? Other than some social media or gamr or something. Even then it seems like there are replacements a lot of the time

Dop@lemmy.world on 17 Jul 2024 15:53 next collapse

You can set up multiple user profile and install the play services in only 1 profile if you want to jeep other profile more private

calmluck9349@infosec.pub on 24 Jul 2024 04:14 collapse

Futo keyboard. Its the best.