68
submitted 4 months ago* (last edited 4 months ago) by foremanguy92_@lemmy.ml to c/privacy@lemmy.ml

Hello, making this post to get some honest, and technical opinions about GrapheneOS. Please do not be bother by this question. No drama here pls 🙏. I've heard that there is some of the google code into the "sandbox" feature. Say your opinion below! 👇👇

top 50 comments
sorted by: hot top controversial new old
[-] CrypticCoffee@lemmy.ml 44 points 4 months ago

Well it's open source android, if the code is bad, it's jettisoned. While I cannot stand Google, not every line of code they write is trash.

The sandbox is good and you do not need to install Play if you do not want to. I use f droid where possible.

I want Linux Mobile but it is not ready yet. In the mean time, this is the best we have.

load more comments (9 replies)
[-] umbrella@lemmy.ml 22 points 4 months ago

if you have a pixel theres absolutely no reason why you shouldnt use it.

if you dont i dont think its worth to buy one just for graphene

load more comments (14 replies)
[-] StormWalker@lemmy.zip 22 points 4 months ago

I have been using GrapheneOS on a Pixel 7 Pro for 3 months now. I am BLOWN AWAY at how good it is. I have 3 user profiles. Main profile has no google services at all, and 95% of my apps are running there. Then I have a second user I can switch to that has sandboxed google services and my banking apps on it. I then have a third user that also has sandboxed google services running where I can install any random app that demands google services. (I have only 1 app on that user) . So 99.9% of the time my phone is running with no google services at all. (Side note: without even the sandboxed google services installed, apps need to be left open in the app switcher in order to receive notifications. If you swipe all your apps away, then you won't receive notifications. This is not a problem for me, as I just keep my messaging apps open in the app switcher. But if it is a problem for you, you would need to run the sandboxed google services).

I see GrapheneOS as a way of removing 99% of all the tracking, spyware and things that I dont like, while still having the convenience of having all the apps and features that are available on a regular smartphone.

There is a learning curve, and many settings to learn and customize. But definitely worth it.

To get a Pixel, instead of paying £900 for a new pixel 8 pro, I paid £300 for a second hand Pixel 7 Pro on eBay that was in perfect condition. So for £300 I now have a privacy phone and an AMAZING camera, which was very important for me the camera.

[-] springonion@discuss.online 18 points 4 months ago

GrapheneOS has something in store for everyone. The fully de-googled setup by the common definition a lot of people strive for is a fully supported configuration, it comes that way out of the box in fact, making zero connections to Google - unlike many other operating systems. But you can also transform it into a more "regular" phone by installing Google Play and all the bells and whistles and enjoy the benefits while still feeling save, thanks to the app sandbox applying to it. So you can take away its permissions and feel rest assured it can't snoop on you even if it wanted to. Or you take a middleground somewhere inbetween if that's your cup of tea; functionality is an important factor for many, and there's little you need to sacrifice.

load more comments (1 replies)
[-] Imprint9816@lemmy.dbzer0.com 12 points 4 months ago

Did you try reading through the FAQ?

load more comments (2 replies)
[-] fart_pickle@lemmy.world 7 points 4 months ago

I've been using GrapheneOS for over a year. I cannot complain about it, it works as advertised and it does it the best way possible. However, here's the list of things I find annoying/missing. Keep in mind, this is a subjective list.

  • some (quite a lot of for me) apps require Google Play Framework (or whatever the name is) to work properly
  • Aurora store tends to be unavailable randomly, which makes installation/updates difficult sometimes
  • some features are wonky, e.g. GrapheneOS has no issues with disabling wifi when leaving my home but I was never able to enable wifi when I'm back home.
  • default apps work ok-ish but it's far from good old iOS/Android experience
  • Android Auto experience was a shitshow for me
[-] GolfNovemberUniform@lemmy.ml 7 points 4 months ago

It's a middleground between a regular stock spyware ROM and a degoogled one with pretty good security thanks to lockable bootloader.

P. S. I can hear the drama coming unfortunately. This ROM's devs have haters.

[-] foremanguy92_@lemmy.ml 6 points 4 months ago

I've seen that you basically have two choice (more but not very relevant) GrapheneOS for security and /e/OS for privacy. Thoughts on it?

[-] Lemongrab@lemmy.one 8 points 4 months ago

DivestOS is the most thoroughly degoogled of the android ROMs (it removes the most proprietary binary blobs). DivestOS is also decently security hardened, better security hardening than any other Android ROM other than GrapheneOS. But since it removes more of these proprietary blobs, it further reduces the attack surface of the ROM. Both GOS and DivestOS are good options. As commented by another user, /e/OS falls behind on security updates often, which is quite bad for a security or privacy focused OS.

[-] GolfNovemberUniform@lemmy.ml 7 points 4 months ago

/e/OS is not for privacy but more for anonymization. It has a built in VPN and a ton of spoofing stuff afaik. It's closer to Qubes if you ask me. And I heard it had proprietary software so ehh it's made to make you look like the most average internet user so you can search anonymously. I don't have enough information about this ROM but I wouldn't use it on my main device.

[-] foremanguy92_@lemmy.ml 5 points 4 months ago

Why you wouldn't use it on main device?

[-] GolfNovemberUniform@lemmy.ml 5 points 4 months ago

Convenience, proprietary software and because it's not completely degoogled. I use LineageOS on my device and I'm happy with it. I can use Qubes or a VPN if I want an anonymous search.

[-] foremanguy92_@lemmy.ml 4 points 4 months ago

LineageOS is more degoogled than others like eOS?

[-] miss_brainfarts@lemmy.blahaj.zone 9 points 4 months ago

Like the other reply said, Lineage doesn't do a whole lot in terms of degoogling. I quite enjoy DivestOS, it's a project that takes Lineage as a base and strips out as much Google and proprietary code as possible.
In fact, it's so Google-free that neither sandboxed Play Services nor MicroG are officially supported, though the latter can still be installed and used just fine, though with a few drawbacks.

Same as Lineage, it runs on more devices, but certain features like bootloader relocking depend on the phone.

[-] sunzu@kbin.run 3 points 4 months ago* (last edited 4 months ago)

Microg has drawbacks?

Edit: sorry that's a question. What are they?

[-] Cube6392@beehaw.org 2 points 4 months ago

Some stuff won't work such as android auto

load more comments (1 replies)
[-] Cheradenine@sh.itjust.works 5 points 4 months ago

E often falls behind on patch levels, see the page here https://divestos.org/pages/patch_history

[-] bloubz@lemmygrad.ml 4 points 4 months ago
[-] sunzu@kbin.run 2 points 4 months ago
[-] bloubz@lemmygrad.ml 4 points 4 months ago

It's a different OS, based on AOSP

load more comments (1 replies)
[-] electro1@infosec.pub 2 points 4 months ago* (last edited 4 months ago)

There's a lot of false information in your statements, GrapheneOS is not spyware, and it does a better job at degoogling than any other ROM mentioned in this thread, the only one that comes close is DivestOS, and no eOS is NOT like Qubes...

GOS wanted to reduce the attack surface as much as possible so they removed all the unecessary Bloat, it doesn't even ship with wallpapers !!

This list is not exhaustive and covers a tiny bit of the differences between these custom ROMs but it's a good place to start

https://eylenburg.github.io/android_comparison.htm

[-] GolfNovemberUniform@lemmy.ml 2 points 4 months ago

What I meant by a "middleground" is that GOS has gapps, even though they are sandboxed. There is no way it can be more degoogled than LOS or any other fully vanilla ROM that's actually degoogled.

[-] electro1@infosec.pub 2 points 4 months ago

That's also not accurate, GOS comes fully degoogled, and doesn't include any GAPPS or Google Play services, you have to install them yourself if you want compatibility with Google Apps or some banking apps

even though they are sandboxed. There is no way it can be more degoogled than LOS

That's just false, even LOS isn't fully degoogled and it still connects to Google in the background for necessary connectivity checks ( e.g. DNS ) and Esim activation for example

load more comments (6 replies)
[-] oranki@lemmy.world 6 points 4 months ago

Not much to comment on the technical side, but quite a bit of things get upstreamed or reported from GrapheneOS. I believe they really know what they're doing. You can ignore the rest if you don't care for the general opinion.

Yes, there's probably Google code in the sandbox feature, it's basically the stock Android userland app sandbox. The magic is the compatibility layer that allows Google apps to run as regular userland apps.

...I bought a Pixel 7a, just so I could try GrapheneOS.

Installed it straight after unboxing, with Play services. Ended up using it pretty much like any Android phone. Installation is simple using the web installer. On recent versions, even Android Auto works, so the only thing you're really giving up is NFC payments. Some banking apps may don't work, but I'm lucky (or rather not unlucky) that the ones I use do. I believe those rare apps are somewhat lazily developed, and rely / trust on Google to do security for them.

Some months later, I went back to the stock ROM, mostly for comparison. Stock Pixel OS has a lot of appealing features, but most of those are just "nice to have" things. Stayed on stock for a few months, but the plethora of obscure Google "privacy settings" put me back to GrapheneOS, and finally off Google. Reverting to stock was also simple, just as easy as flashing GrapheneOS.

Now I don't have Play services at all anymore, and have cleared most Google services (gmail, photos, drive...) so at least not much new data will go there. I do use Google Camera, and have Photos installed since I think the post-processing happens in Photos. Both have network permission denied, which is one of the nicest added features of GrapheneOS. The stock GOS camera is OK, but that's one thing I think Google does better, though this is a subjective thing.

The only thing I kind of miss is Google's find my phone stuff. Even though it's quite invasive, I have needed it once and it resulted in me getting a lost phone back. A simple solution is not to lose your phone.

Apart from the per-app network permission, another really nice feature in GrapheneOS are the settings to toggle WiFi and Bluetooth off automatically. Why these are not in any "official" ROM tells a tall tale about how much they care about your privacy. The auto reboot if not unlocked in a while also brings some assurance regarding losing your phone, at least the storage will automatically back in encrypted unlocked state.

Vanadium might be the best browser I know for Android. Pretty much Chrome without all the things that make Chrome one of the worst browsers. Vanadium's point is security, privacy (e.g. adblockers) is not the main focus. I'm not sure if there actually even is adblock features bundled nowadays.

If you want all the nice modern bells and whistles, stay on some other OS. If the benefits above appeal to you, there's really not much you give up in the end with GrapheneOS. It requires a bit more technical mindset, but not really even technical know-how. I haven't noticed bugs or broken stuff anywhere, with or without Play services. Android Auto (requires Play services) gets stuck sometimes, but that may also be my low-tier car too.

The "sandboxed" Google Play refers to the apps running as user installed apps vs the system-wide root-access-to-everything apps they are on stock. The same limitations you can apply to any other app you install apply to GSF apps too. So even if you install Play services, you are severely limiting the scope of data Google gets from you. It's a solid middle ground between full degoogling and stock OS.

I'm not even an Android app developer, and will gladly admit technical mistakes. If you want something negative, the vocal minority of GOS users is really vocal and really full of themselves.

[-] geneva_convenience@lemmy.ml 5 points 4 months ago

Louis Rossman got threatened by the GrapheneOS dev

load more comments (2 replies)
[-] heleos@lemm.ee 3 points 4 months ago

I used it for quite a while, but with most of the Google apps. One morning RCS chat stopped working and would not reconnect, since I use RCS for texting most people I'm back on stock for now. I know it's not graphenes fault, but I didn't want to have to keep dealing with Google randomly disabling stuff. Up until then, everything worked as it was described

[-] wulpo@aussie.zone 7 points 4 months ago

FYI, there's a workaround for RCS in the graphene forums. Graphene changed some defaults to block IMEI reading (a hidden permission), which RCS needs in order to activate...

https://discuss.grapheneos.org/d/1353-using-rcs-with-google-messages-on-grapheneos/308

That should take you to the post that worked for me.

load more comments (1 replies)
load more comments (1 replies)
load more comments
view more: next ›
this post was submitted on 29 Jun 2024
68 points (89.5% liked)

Privacy

32103 readers
713 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS