I am a long term GrapheneOS user and would like to talk about it. r/privacy on the redditland blocks custom OS discussions which I think is very bad for user privacy, and I hope this post will be useful to anyone who are in the hunt for better privacy.
Nowadays smartphones are a much bigger threats to our privacy and Desktop systems, and unfortunately manufacturers has designed them to be locked down devices with no user freedom. You can’t just “install Linux” on most smartphones and it is horrible. And most preloaded systems spy on us like crazy. That was why I specifically bought a pixel and loaded GOS onto it.
According to https://grapheneos.org/features , they start from base AOSP’s latest version, imptoves upon it’s security and significantly hardens it. There’s hardened_malloc to.prevent against exploitation, disabling lots of debugging features, disabling USB-c data, hardening the Linux kernel and system apps etc. They even block accessing the hardware identifiers of the phone so that apps cannot detect whqt phone you’re using. That means with Tor and zero permissions given, apps are anonymous.
Compatibility with apps are best in Custom ROMs but there are still that can’t work, especially if they enforce device integrity. Very few apps usually enforce that tho. Also their community isn’t the friendliest but you can get help. Just don’t try and engage too much or have too many debates.
Anyone else here use GrapheneOS, or any other privacy ROMs? What is your experience? Do you disagree on any point? Let’s have a discussion!
I post someone’s comment on a controversial topic about google and GOS. I saved it because that’s exactly how I feel.
Step 1 of installing GrapheneOS for de-googling your life: Buy a Google Pixel phone
Look - I know, I know. I get it. Google allows you to unlock the bootloader while maintaining the phone’s unique and excellent hardware security features. The argument makes sense. It is compelling. Other manufacturers do not give you this freedom. I am not arguing about that. I have a Pixel phone running GrapheneOS myself.
However… It is just so very obviously ironic that one needs to trust Google’s hardware and purchase a Google product to de-google their life through GrapheneOS. I think that it is a perfectly valid position for someone to raise their eyebrows, laugh, and remain skeptical of the concept either because they do not want to support Google at all, or because they simply will not trust Google’s hardware.
The reason why I think that this is “controversial” is because I have seen multiple instances of someone pointing out the irony, followed by someone getting defensive about it and making use of the technical security arguments in an attempt to patch up the irony.
Yeah it’s ironic but what is the alternative? At least we CAN remove Google’s known spyware from the device, and there’s no evidence of firmware level spying. If you get Samsung, or some chinese crap, you can’t remove Google period, and you might get spied by the manufacturer as a cherry on top. There is no way to have a perfect solution, well unless Samsung starts to provide Custom ROM support or something.
With the lack of any other viable option, I struggle to see the point of the arguement.
I’m pretty sure that every Android Lemmy user has a Custom ROM installed on their device. Currently daily driving GrapheneOS on my Pixel 7 Pro.
I feel called out…
I’ve been using it for just over 2 years now and am very happy with it. I am curious about CalyxOS though. While I don’t think I’d switch I’d be interested in a technical deep dive comparison between the 2.
I have the pleasure of using GrapheneOS. I can’t imagine using anything else. It was also the first (widely used) custom Android distribution to adopt Android 15. As far as I can tell, almost no others support Android 15 yet.
I’ve been on GrapheneOS for 4 years or so. I’ve tried CalyxOS every now and then, but always end up coming back to GrapheneOS. I find it simple, private, secure and free of BS. CalyxOS does come with some stuff preinstalled, which doesn’t really appeal to me, and I trust the sandboxes Google Play model much more that MicroG.
About the devs, I really haven’t had any issues that I have not been able to resolve myself, so my interaction with the is non-existing. I have read some posts with interactions with them, and they do seem to be hostile towards anything that is not 100% aligned with their train of thought, which I find stupid, to say the least. But regardless of how rude they may be, I feel GOS literally has no competition in the Android landscape in terms of privacy and security.
Pixel 6a with GrapheneOS here. Been using for about a year and a half, and loving it.
I don’t like the fingerpront sensor. Other than that it works great for me.
Exact same setup here! Almost no problems. Also loving it
A simple search will tell you a ton of people here use GrapheneOS and other custom ROMs. Are you karma farming?
I’ve been using it for many months and I like it a lot. Only one of my banking apps doesn’t work.
Currently my main issue is that webauthn stopped working after an update. And the community support hasn’t been helpful.
I wish they had better documentation in general.
I had daily drove it for years, but recently started testing the water with iOS. Still have GOS on my secondary devices though.
Personally for me the most important thing in Android is automatic native call recording. If GrapheneOS gets that, I will consider buying a Google Pixel device.
Also, banking and other apps should stop using Play Integrity API.
Last 4 or so phones have all been GrapheneOS (I’m not buying new phones all the time to be clear; I use phones till they break; I’m just a long-time user) and yeah I’ve really had no problems to speak of. I currently have a separate profile with Play services for certain apps, and also just to isolate non-privacy-respecting apps that I have to have installed for whatever reason.
Almost all the apps I use are FOSS apps who are aware that a significant amount of their userbase will be using various AOSP forks so I’ve not run into any app compatibility issues. Even back when I used banking apps, I’d used 4 different banks’ apps on GrapheneOS and all of them worked completely fine. Now I don’t have a banking app because I won’t install proprietary software unless I actually have to for some reason, and I can bank on the web just fine.
Do you have difficulties running pokemon go (if you do play it) and/or banking apps?
Banking apps works for me, they have a list at privsec.dev check that out first.
I’m buying a Pixel, I’ll try it soon. But for now I like LineageOS+MicroG very much.
MicroG doesn’t have as much compatibility as Sandboxed Pkay. Also I think LineageOS is not as patched and kept up to date, maybe try DivestOS or CalyxOS (both forks of Lineage)
I am waiting for the LineageOS port for my SM-A536B.
‘vy’yvvy’'vy’vyy’v
