Thought on Graphene?
from foremanguy92_@lemmy.ml to privacy@lemmy.ml on 29 Jun 2024 12:17
https://lemmy.ml/post/17426630
from foremanguy92_@lemmy.ml to privacy@lemmy.ml on 29 Jun 2024 12:17
https://lemmy.ml/post/17426630
Hello, making this post to get some honest, and technical opinions about GrapheneOS. Please do not be bother by this question. No drama here pls đ. Iâve heard that there is some of the google code into the âsandboxâ feature. Say your opinion below! đđ
#privacy
threaded - newest
Itâs a middleground between a regular stock spyware ROM and a degoogled one with pretty good security thanks to lockable bootloader.
P. S. I can hear the drama coming unfortunately. This ROMâs devs have haters.
Iâve seen that you basically have two choice (more but not very relevant) GrapheneOS for security and /e/OS for privacy. Thoughts on it?
/e/OS is not for privacy but more for anonymization. It has a built in VPN and a ton of spoofing stuff afaik. Itâs closer to Qubes if you ask me. And I heard it had proprietary software so ehh itâs made to make you look like the most average internet user so you can search anonymously. I donât have enough information about this ROM but I wouldnât use it on my main device.
Why you wouldnât use it on main device?
Convenience, proprietary software and because itâs not completely degoogled. I use LineageOS on my device and Iâm happy with it. I can use Qubes or a VPN if I want an anonymous search.
LineageOS is more degoogled than others like eOS?
LineageOS actually seems to be getting less degoogled recently. Theyâre adding stuff for better Google apps support (that can be installed manually). But I believe itâs as degoogled as reasonable custom ROMs get. Not much advanced privacy/anonymization features though and no stuff like Play Integrity support obviously. Itâs a ROM for these who donât need gapps at all. And if you do, just buy a second hand device with the stock ROM and put your banking apps there. Play Integrity doesnât work well on any custom ROMs now anyways.
EDIT: also EOS is EndeavourOS that is a Linux distro.
Like the other reply said, Lineage doesnât do a whole lot in terms of degoogling. I quite enjoy DivestOS, itâs a project that takes Lineage as a base and strips out as much Google and proprietary code as possible.
In fact, itâs so Google-free that neither sandboxed Play Services nor MicroG are officially supported, though the latter can still be installed and used just fine, though with a few drawbacks.
Same as Lineage, it runs on more devices, but certain features like bootloader relocking depend on the phone.
Microg has drawbacks?
Edit: sorry that's a question. What are they?
Some stuff wonât work such as android auto
E often falls behind on patch levels, see the page here divestos.org/pages/patch_history
DivestOS is the most thoroughly degoogled of the android ROMs (it removes the most proprietary binary blobs). DivestOS is also decently security hardened, better security hardening than any other Android ROM other than GrapheneOS. But since it removes more of these proprietary blobs, it further reduces the attack surface of the ROM. Both GOS and DivestOS are good options. As commented by another user, /e/OS falls behind on security updates often, which is quite bad for a security or privacy focused OS.
Itâs not a ROM
I think you may be right but everyoneâs used to calling it a ROM. Now with increasing popularity of EROFS it makes more sense to call it that way.
What is it?
Itâs a different OS, based on AOSP
Thereâs a lot of false information in your statements, GrapheneOS is not spyware, and it does a better job at degoogling than any other ROM mentioned in this thread, the only one that comes close is DivestOS, and no eOS is NOT like QubesâŚ
GOS wanted to reduce the attack surface as much as possible so they removed all the unecessary Bloat, it doesnât even ship with wallpapers !!
This list is not exhaustive and covers a tiny bit of the differences between these custom ROMs but itâs a good place to start
eylenburg.github.io/android_comparison.htm
What I meant by a âmiddlegroundâ is that GOS has gapps, even though they are sandboxed. There is no way it can be more degoogled than LOS or any other fully vanilla ROM thatâs actually degoogled.
Thatâs also not accurate, GOS comes fully degoogled, and doesnât include any GAPPS or Google Play services, you have to install them yourself if you want compatibility with Google Apps or some banking apps
Thatâs just false, even LOS isnât fully degoogled and it still connects to Google in the background for necessary connectivity checks ( e.g. DNS ) and Esim activation for example
Oh ok then. If it has a vanilla version then it is degoogled and can be more degoogled than LOS. What I meant was if GOS was microg only, it couldnât be as degoogled as LOS because LOS is vanilla. Still itâs a shame that LOS canât find a better supporter than Google.
This is about to change since LOS are about to include MicroG by default in future releases⌠Or so I heard from some Mastodon users who shared screenshots about an LOS update that installed MicroG
GOS is private and secure more than any other ROM, but once you install the Unprivileged play store you lose some of that privacy while retaining security, MicroG is private but not as secure
Wdym?
Should I bet all my savings this isnât gonna happen? Just donât trust unverified rumors and never ever spread them as the truth.
ROMs without network support.
I believe LOS uses Google stuff because they get money for doing it, especially for making it the default search engine in the default browser.
How did you know itâs not the truthâŚbecause I implied it wasnât⌠and I donât see it as something that couldnât happen, people asked for MicroG support for yearsâŚ
Iâm not a huge fan of trolling
I can tell you no Open source ROM gets funds by Google, unless if itâs a program⌠For example GOS received many rewards for discovering vulnerabilities in AOSP
Sorry but this sounds like youâre defending yourself because you know you spread rumors or maybe even complete misinformation.
There was no trolling. You said itâs the best ROM for security. I told you of a better one. Saying âbest ROM for securityâ was more of an act of trolling than my response.
Idk. I heard that Lineage receives money from Google so I said that but, in contrary to you, I didnât say that Iâm sure of it. I just said âI believe itâs the caseâ.
Alright then, itâs been fun chatting with you
Well itâs open source android, if the code is bad, itâs jettisoned. While I cannot stand Google, not every line of code they write is trash.
The sandbox is good and you do not need to install Play if you do not want to. I use f droid where possible.
I want Linux Mobile but it is not ready yet. In the mean time, this is the best we have.
Okay but all the apps developed for android will now being useless?
What do you mean?
You can use sandboxes play store if you wish.
So you will have to emulate all this apps? Like Iâm not talking about these on the play store like games or others, Iâm talking about the great apps that you can find on fdroid
Depends on what you are referring to. If Linux Mobile, Android apps can be run on Waydroid and there is a compatibility layer like Wine available. However, for Linux Mobile, youâll open up Gnome and KDE apps. In Plasma, you have kirigami which enables convergent apps (that work on desktop, mobile and tablet). As it matures, more apps will be developed that supports it.
The world and ecosystem now doesnât define the ecosystems of the future.
It is full of proprietary software. I wouldnât call it that open.
You really have 0 understanding on how all this works đ
Do you? It ships proprietary Google services and encourages closed source solutions. Not only that, but the original developer is convinced that he is the only source of truth.
It actually doesnât.
It is the open source code. You can optionally install Google play in a restrictive sandbox if you wish. You do not have to.
I cannot disagree with the last sentence. He has his fair share of issues, but it doesnât take away from his ability or contributions.
It does not âshipâ them. They are available at your option. Other solutions to solve the google problem such as MicroG have/had several security issues. My favourite was when they leaked user passwords.
Did you try reading through the FAQ?
No and now Iâve answers to a lot of my questions
Its always better to try and get firsthand knowledge through the FAQ then rely on, possibly inaccurate, Lemmy users. I would also seek answers on their official forum over Lemmy as well.
Everything on Android is half-assed but thatâs not Grapheneâs fault.
Right
Left
Even more right đ
Its all google code what are you talking about.
I assume they mean proprietary code blobs.
GrapheneOS has something in store for everyone. The fully de-googled setup by the common definition a lot of people strive for is a fully supported configuration, it comes that way out of the box in fact, making zero connections to Google - unlike many other operating systems. But you can also transform it into a more âregularâ phone by installing Google Play and all the bells and whistles and enjoy the benefits while still feeling save, thanks to the app sandbox applying to it. So you can take away its permissions and feel rest assured it canât snoop on you even if it wanted to. Or you take a middleground somewhere inbetween if thatâs your cup of tea; functionality is an important factor for many, and thereâs little you need to sacrifice.
Thats good to know. Thanks for sharing
I used it for quite a while, but with most of the Google apps. One morning RCS chat stopped working and would not reconnect, since I use RCS for texting most people Iâm back on stock for now. I know itâs not graphenes fault, but I didnât want to have to keep dealing with Google randomly disabling stuff. Up until then, everything worked as it was described
FYI, thereâs a workaround for RCS in the graphene forums. Graphene changed some defaults to block IMEI reading (a hidden permission), which RCS needs in order to activateâŚ
discuss.grapheneos.org/d/âŚ/308
That should take you to the post that worked for me.
Will look into it, thank you!
if you have a pixel theres absolutely no reason why you shouldnt use it.
if you dont i dont think its worth to buy one just for graphene
There a lot of ethical reasons to not use it. Also the community tends to be a bit toxic.
Name only one reason that is relevant from a technical standpoint.
I said ethical not technical. Anyway from a technical perspective Graphene os is only supported on a handful of devices so it is off the table for many people.
What are the ethical reasons to not use it?
None. This person doesnât know what they are talking about and they try to discredit the project based on their personal views and demonize the dev team.
By this logic rpiOS sucks because its only supported on Raspberry PIs. Only Pixel hardware meets the security requirements of Graphene.
Raspberry Pis suck in general as they lack open firmware. You are stuck with the Raspberry Pi kernel and all of its blobs. âSecurity requirementsâ is something Microsoft says about Windows 11. If you are concerned about security your best bet is stock software as it is maintained by Google.
Again, you demonstrate that you donât have the sufficient knowledge. There is no commerical device with open-source firmware. âSecurity Requirementsâ are not some kind of marketing bullshit as you seem to think. Grapheneâs can be found here: grapheneos.org/faq#future-devices
I doubt you understand what any of them mean, since you seemingly think Windows 11 requirements are just random things that are just there to hurt you.
You thinking that Stock Google devices are more secure than GOS simply shows that you fundamentally lack the understanding of how things work. They are built on the same core but Graphene has massively reduced attack surface and fewer ways to exploit remotely. And then we didnât even talk about the hardened kernel and such.
I wouldnât try to discredit projects I donât know anything about if I were you.
www.fsf.org/resources/hw/single-board-computers (2021)
pine64.org/documentation/ROCK64/
Pine64 boards rarely need proprietary software and they donât need it to boot like the raspberry pi does. However, that is a discussion for another time.
You are also illustrating my point. The Graphene community has a my way or the highway mentality. As it turns out stock will often be more secure as it will have the latest security updates and will have less people handing it in general so less risk of supply chain attack from a bad actor in the community. However, this is a non issue. I find a lot of the so called security holes to be fairly mild as they require very specific targeting to exploit.
In general, the people around Graphene os and Divest OS are very toxic. In the F-droid board meeting the issue was brought up that the is censorship is promotion happing for Divest OS. People who criticized Divest OS were getting banned. The person who brought this complaint has a page where they go over there beliefs and bring forward evidence. I think they are a bit harsh but they do have a point.
opinionplatform.org
Could you elaborate on the ethical part, please?
Most likely talking about how the lead developer had a mental health crisis and lost his marbles. From what Iâve heard, he has stepped off to take care of that and the project is still going great.
They encourage proprietary software and locked down systems. For instance, they use Google play services instead of microG and they promote the play store. I personally think that F-droid apps are much better from both an software freedom perspective and a privacy perspective. Iâm not against people installing proprietary apps as I realize sometimes that is unavoidable but they could at least encourage the use of Foss. Graphene could simply have both F-droid and Aurora store by default and on setup explain the difference. They could even allow the install of Play services instead. However, they donât even really try. They focus on security which at the end of the day is subjective.
Plenty reasons to not use it on a pixelâŚI had horrible compatibility with all sorts of banking apps, government 2FA and traffic warning systems, to the point where they just couldnât work at all. Their sandboxed play services breaks a shitload of day to day convenience and even necessities to increase privacy.
this is a problem with all ROMs, actually.
banking apps especially do everything in their power to block every phone that isnât stock.
I like it
Toxic culture run by someone who is questionable at best. Honestly I donât see a need for it. It is certainly not the only option.
Not the only one but its factually the best one. Questionable to me is your expertise on this topic when you deter people from using the best option, based on your unrelated, subjective, non-technical views.
There isnât a factual"best" one as peoples needs vary completely. Thatâs why I say the Graphene community is toxic. They are convinced that there is only one way to do things.
Graphene is useless to me because I have no need or want for a Pixel or even a new phone. How can it be the âbestâ for me if I canât even use it? As it turns out there is no right answer. It might work for you but that doesnât make it the best for everyone.
Sour grapes
Can you elaborate on that? What do you mean?
The person you are referring to did actually step down as lead developer⌠Best to be more informed before making claims. Could you elaborate on why you consider it toxic? Iâve yet to find the Graphene community toxic myself.
They still have a lot of control though. Also I find that Graphene community thinks it is better than everyone else. I donât have a problem with people being proud the problem is that Graphene is spreading false information like every other ROM is insecure. Thatâs not the case especially in terms of security as anything but stock is less secure. From a privacy perspective non google is better than Google but everyone seems to skip over that. People will say âLineage OS uses Google DNSâ but in reality your ISP could be using Google DNS the key it to setup Private DNS which takes only a few minutes to do. Graphene isnât the only option. In reality there are tradeoffs everywhere.
The fact that the larger community only knows of Graphene OS and stock is a bit scary.
They will never be more toxic than proprietary software.
I donât trust the google kernel when it comes to privacy or security. You think with how many people use Android and with how bad actors Google are they wouldnât put a backdoor somewhere?
Right
its open source and well audited, so no I donât think they have it backdoored. they get all the into they want from people using google play services at a privileged level, running chrome, and using their other dozen services that come bundled with stock android
Unless you want to tell me that the Android kernel is the first OS kernel without bugs, it takes at the very least one bug to be left intentionally unfixed and shared with the feds to introduce a backdoor. I wouldnât consider it infeasible with how large the android kernel is, and how high a barrier of entry kernel dev is. If the bug is found, just move to the next one. Normally I wouldnât be so paranoid, but this is Google weâre dealing with, on one of, if not the most popular kernels on the planet.
Not much to comment on the technical side, but quite a bit of things get upstreamed or reported from GrapheneOS. I believe they really know what theyâre doing. You can ignore the rest if you donât care for the general opinion.
Yes, thereâs probably Google code in the sandbox feature, itâs basically the stock Android userland app sandbox. The magic is the compatibility layer that allows Google apps to run as regular userland apps.
...
I bought a Pixel 7a, just so I could try GrapheneOS. Installed it straight after unboxing, with Play services. Ended up using it pretty much like any Android phone. Installation is simple using the web installer. On recent versions, even Android Auto works, so the only thing youâre really giving up is NFC payments. Some banking apps may donât work, but Iâm lucky (or rather not unlucky) that the ones I use do. I believe those rare apps are somewhat lazily developed, and rely / trust on Google to do security for them. Some months later, I went back to the stock ROM, mostly for comparison. Stock Pixel OS has a lot of appealing features, but most of those are just ânice to haveâ things. Stayed on stock for a few months, but the plethora of obscure Google âprivacy settingsâ put me back to GrapheneOS, and finally off Google. Reverting to stock was also simple, just as easy as flashing GrapheneOS. Now I donât have Play services at all anymore, and have cleared most Google services (gmail, photos, driveâŚ) so at least not much new data will go there. I do use Google Camera, and have Photos installed since I think the post-processing happens in Photos. Both have network permission denied, which is one of the nicest added features of GrapheneOS. The stock GOS camera is OK, but thatâs one thing I think Google does better, though this is a subjective thing. The only thing I kind of miss is Googleâs find my phone stuff. Even though itâs quite invasive, I have needed it once and it resulted in me getting a lost phone back. A simple solution is not to lose your phone. Apart from the per-app network permission, another really nice feature in GrapheneOS are the settings to toggle WiFi and Bluetooth off automatically. Why these are not in any âofficialâ ROM tells a tall tale about how much they care about your privacy. The auto reboot if not unlocked in a while also brings some assurance regarding losing your phone, at least the storage will automatically back in encrypted unlocked state. Vanadium might be the best browser I know for Android. Pretty much Chrome without all the things that make Chrome one of the worst browsers. Vanadiumâs point is security, privacy (e.g. adblockers) is not the main focus. Iâm not sure if there actually even is adblock features bundled nowadays. If you want all the nice modern bells and whistles, stay on some other OS. If the benefits above appeal to you, thereâs really not much you give up in the end with GrapheneOS. It requires a bit more technical mindset, but not really even technical know-how. I havenât noticed bugs or broken stuff anywhere, with or without Play services. Android Auto (requires Play services) gets stuck sometimes, but that may also be my low-tier car too. The âsandboxedâ Google Play refers to the apps running as user installed apps vs the system-wide root-access-to-everything apps they are on stock. The same limitations you can apply to any other app you install apply to GSF apps too. So even if you install Play services, you are severely limiting the scope of data Google gets from you. Itâs a solid middle ground between full degoogling and stock OS. Iâm not even an Android app developer, and will gladly admit technical mistakes. If you want something negative, the vocal minority of GOS users is really vocal and really full of themselves.
I have been using GrapheneOS on a Pixel 7 Pro for 3 months now. I am BLOWN AWAY at how good it is. I have 3 user profiles. Main profile has no google services at all, and 95% of my apps are running there. Then I have a second user I can switch to that has sandboxed google services and my banking apps on it. I then have a third user that also has sandboxed google services running where I can install any random app that demands google services. (I have only 1 app on that user) . So 99.9% of the time my phone is running with no google services at all. (Side note: without even the sandboxed google services installed, apps need to be left open in the app switcher in order to receive notifications. If you swipe all your apps away, then you wonât receive notifications. This is not a problem for me, as I just keep my messaging apps open in the app switcher. But if it is a problem for you, you would need to run the sandboxed google services).
I see GrapheneOS as a way of removing 99% of all the tracking, spyware and things that I dont like, while still having the convenience of having all the apps and features that are available on a regular smartphone.
There is a learning curve, and many settings to learn and customize. But definitely worth it.
To get a Pixel, instead of paying ÂŁ900 for a new pixel 8 pro, I paid ÂŁ300 for a second hand Pixel 7 Pro on eBay that was in perfect condition. So for ÂŁ300 I now have a privacy phone and an AMAZING camera, which was very important for me the camera.
Iâve been using GrapheneOS for over a year. I cannot complain about it, it works as advertised and it does it the best way possible. However, hereâs the list of things I find annoying/missing. Keep in mind, this is a subjective list.
Thereâs also CalyxOS, low drama and very reliable. www.calyxos.org
@RubberElectrons @privacy @foremanguy92_
I've been using CalyxOS for a year now and I like it so much. I also tried GrapheneOS but I consider that sandboxed apps are harder to manage than microG in Calyx. I chose simplicity.
Can it run problem bank apps? I need a bank auth app for work as the bank stopped fobs and it just would not run on LineageOS. It refused to run because âthe phone is insecureâ. I tried Magisk hiding stuff and MicroG, and a number of way of tricking methods. Thatâs why I ended up on GrapheneOS, as a compromise without feeling too compromised. Everything seams to think itâs on a normal Android phone, but Iâve sandboxed the Google tentacles. But it would be better if mandating OS wasnât allowed. If I want to run a âinsecureâ phone, thatâs my âproblemâ.
Agreed, it shouldnât be their problem. But, I am using applications just fine that are sensitive to root, even device attestation, but I donât recommend attestation just out of principle.
Even pokemon go seem to run ok with just micro g and aurora.
Calyx is unfortunately pretty slow to release security patches, uses privileged apps with root access like microG and the F-Droid privileged extension by default and doesnât really provide any unique features. All of the privacy features of Calyx are either already present or can be easily replicated in a better form on GrapheneOS. Take Datura Firewall, itâs yet another privileged app with root access which adds unnecessary attack surface, and is less secure than the Graphene equivalent. GrapheneOS implements a network permission toggle, which is embedded in Androidâs native permission manager and uses the INTERNET permission to restrict network access. It disables both direct and indirect network access, including the local device network (localhost). GrapheneOS also has a bunch of unique security features, that canât be found on any other Android ROM, like for example a hardened memory allocator, hardened kernel, secure app spawning, improved SELInux policies, Duress PIN/Password, driver-level USB-C control, Storage Scopes, Contact Scopes and soon App Communication Scopes. GrapheneOS also includes Sandboxed Google Play services, a better GMS implementation than microG, which doesnât require root and has better app compatibility.
All your points are true, yet still depend on Google in sandboxed form. That negates everything else for me, who wants a reasonably secure device that works out of the box and also respects my privacy.
If a nation-state wants into my phone, itâs delusional to believe even graphene can hold them off, you need real opsec for that, and unfortunately all Iâve seen thus far from graphene guys is cosplaying that the NSA wants your porn selfies.
Graphene and micro g? Cool. Sandboxed Google? Nope.
Graphene doesnât âdependâ on Sandboxed Play services. In fact, itâs not installed by default, and it is totally optional. Also, Sandboxed Play services doesnât make your device less secure in any way, it can be installed as a normal user app, you can fully control access to sensitive parts of your device like the microphone, camera, location, etc. through the Android permission manager, and Play services donât have any special permissions, since itâs not installed as a system app. As far as Iâm aware (correct me if Iâm wrong) you canât remove microG on Calyx, since itâs installed as a system app and even granted root privileges. microG is a cheap, hacked together workaround, which requires root to function correctly. This greatly expanded attack surface makes it inherently insecure. microG also requires proprietary Google code to be run, in order to work (most of microG is open source, but it still uses some Google blobs). As far as Iâm aware, this Google code is not sandboxed, and simply executed as a child process of microG (which runs as root), meaning that this Google blob is also run as root. This makes microG much more insecure than Sandboxed Google Play services, and it potentially gives Google much greater access to your device compared to the sandboxed approach.
The GrapheneOS team never claims that their OS is âNSA-proofâ, but they actually look at which parts of the OS are commonly exploited by (nation-state) hackers, and massively improve them. As you can see in this spreadsheet, created by Googleâs Project Zero, most vulnerabilities in Android come from memory corruption. Thatâs why GrapheneOSâs biggest and most important feature is their custom hardened memory allocator. It protects against most memory-related exploits, and is even stronger when used on a device with hardware memory tagging, which is the reason why GrapheneOS currently only supports Google Pixel devices.
Another significant security feature is secure app spawning. Creating new processes via exec (instead of using the traditional Zygote model on Android) randomizes the initial memory layout, which also helps to defend against memory-related vulnerabilities. The aspects I just mentioned are important protections about malware/remote code execution.
GrapheneOS also protects your device against physical attacks, e.g. by implementing a driver-based control mechanism for the USB-C port, making it impossible to connect to the device while itâs locked. This protects against forensic data extraction, e.g. using Cellebrite or XRY hardware.
Graphene even has a feature that protects you, when you are forced to give up your password. The Duress feature letâs you set a second PIN/password, which will cause the device to entirely wipe all the encryption keys, which are used for unlocking the device, from the secure element. This process is irreversible, canât be interrupted and happens instantaneously, making the data impossible to recover.
No one claims that GrapheneOS is 100% secure and will absolutely protect you against NSA hackers, but it is by far the best and most secure mobile OS thatâs currently out there. It is easy to use for everyone, and secure enough to be used by high-profile targets like Edward Snowden.
Good OPSEC includes a secure operating system. Calyx is not security focused whatsoever, it rolls back standard AOSP security features, significantly increases attack surface, and doesnât release security patches regularly.
Happy cake day btw!
Sorry, âgoogle blobsâ? A lot of work went into MicroG, and I think itâs a shame that youâd minimize so much good work to reimplement the lynchpin of Googleâs control on your devices.
At this point Iâll presume youâre just misinformed, as no proprietary google code operates within microG unless you decide to run with device attestation, and there itâs running as a sandboxed service. At any other time, you are able to run open source code which spoofs your device details to Google, and spoofs google to all these other closed source apps in a reliable and readable, much smaller codebase.
Honestly, the irony of running blobs, when one is completely closed source vs the other which is fully open. Hahaha.
Louis Rossman got threatened by the GrapheneOS dev
And is GrapheneOS Dev threatened by Louis Rossman?
No the dev is very sensitive to criticism www.youtube.com/watch?v=4To-F6W1NT0
Ask me when the NSA knocks at your door, what I think about it? I think itâs a big honeypot.
Think about it, if you were the NSA or the CIA would you push a privacy oriented OS? Honeypot vibes get stronger