GrapheneOS vs LineageOS vs iodéOS
GrapheneOS vs LineageOS vs iodéOS
According to Comparison of Android-based Operating Systems, GrapheneOS seems to be better than LineageOS and iodéOS in every aspect.
I'm wondering if there is any downside of GrapheneOS. What am I giving up for using GrapheneOS instead of LineageOS and iodéOS (besides GrapheneOS only support pixel)?
In terms of privacy, security, customizability and functionality, which OS would you recommend and on what device would you recommend using it?
Answered questions
- Does LineageOS supports muti profile like GrapheneOS (I thought all AOSP supports multiprofile feature)
- yes lineageos.org/Introducing-the-…
- Does LineageOS supports full device encryption using some open source app? (like veracrypt)
- @https://lemmy.world/u/who@feddit.org Yes, full-device encryption is built in to Android these days.
- Can LineageOS supports Sandboxed Google Play with some tweaks?
- no
Some questions
- If there is backdoor planted in pixel (which in my opinion is very likely), then I guess the “risk of an adversary gaining physical access to the phone” is quite equal for both of OS?
- lemmy.world/u/upstroke4448@lem… - It is highly unlikely there is a backdoor in the Pixel. It’s just not worth the risk for Google. Not only are the phones highly scrutinized by experts but Google has a million other legal ways to get info off your phone for 99% of users who use the stock OS.
- @benjaminoakes lemmy.world/u/benjaminoakes (how do I @ another user in lemmy???) and I qoute "Graphene is likely to run into issues soon. They were relying on the AOSP source tree including Pixel-specific files. Google isn’t releasing those anymore, so GrapheneOS would have to reverse engineer or extract the needed files somehow."
- should I be concerned about this issue? Will it affect my experience in the next 5 years ? (I usually update my device in 5 year cycle)
thanks a million
like this
Signal – an ethical replacement for WhatsApp
Signal – an ethical replacement for WhatsApp
Moving from WhatsApp to Signal is an important action, right now. WhatsApp’s parent company, Meta, has been involved in several cases of election interference: America in 2016, Trinidad and Tobago …The Green Stars Project
adhocfungus likes this.
Bookmarks? Do you mean bookmarking a spot in a conversation?
Though the search function is surprisingly fast. My wife has gotten into the habbit of adding keywords if she suspects she might want to get to something later.
BBC pulls Gaza medics documentary due to impartiality concerns - BBC News
The [documentary] production company's founder, Ben de Pear, said earlier this week the BBC had "utterly failed" and that journalists were "being stymied and silenced".BBC News understands the decision to shelve the documentary was taken on Thursday, following public comments by De Pear at the Sheffield Documentary Festival, and another of the film's directors, journalist Ramita Navai, who appeared on Radio 4's Today discussing the war in Gaza.
Navai told the programme Israel had "become a rogue state that's committing war crimes and ethnic cleansing and mass murdering Palestinians". Israel has denied accusations of war crimes and genocide in Gaza.
TLDR: BBC refuses to run documentary about doctors in Gaza they comissioned because someone involved it is says Israel is committing ethnic cleansing. I think this is one of the most obvious examples on how biased the BBC is towards this situation.
BBC pulls Gaza medics documentary due to impartiality concerns
Gaza: Doctors Under Attack, which was due to air in February, was made by an independent company.Steven McIntosh (BBC News)
like this
If you wanna dig more into BBC Censorship and Bias Monbiot wrote a good column in May.
theguardian.com/commentisfree/…
The BBC is utterly beholden to the right. Why else would it fear an Evan Davis podcast about heat pumps?
The broadcaster behaves like Starmer’s government: suppress the left, cave to your critics, and undermine your own survival, writes Guardian columnist George MonbiotGeorge Monbiot (The Guardian)
Rubati 16 miliardi di account: cambiate le vostre password!
Rubati 16 miliardi di account: cambiate le vostre password!
Un leak enorme che contiene 16 miliardi di credenziali è finito online: è essenziale cambiare password quanto prima per dormire sonni tranquilli.Marco Pedrani (Tom's Hardware)
Insurance giant Aflac says a cybercrime group breached its systems and may have stolen data; source: the attack bears the hallmarks of Scattered Spider
Aflac Incorporated Discloses Cybersecurity Incident
On June 12, 2025, Aflac Incorporated (NYSE: AFL) identified suspicious activity on our network in the United States. We promptly initiated our cyber incident response protocols and stopped the...Aflac Newsroom
Insurance giant Aflac says a cybercrime group breached its systems and may have stolen data; source: the attack bears the hallmarks of Scattered Spider
Aflac Incorporated Discloses Cybersecurity Incident
On June 12, 2025, Aflac Incorporated (NYSE: AFL) identified suspicious activity on our network in the United States. We promptly initiated our cyber incident response protocols and stopped the...Aflac Newsroom
adhocfungus likes this.
Defending the Internet: How Cloudflare blocked a monumental 7.3 Tbps DDoS attack
Defending the Internet: How Cloudflare blocked a monumental 7.3 Tbps DDoS attack
In mid-May 2025, blocked the largest DDoS attack ever recorded: a staggering 7.3 terabits per second (Tbps).The Cloudflare Blog
Defending the Internet: How Cloudflare blocked a monumental 7.3 Tbps DDoS attack
Defending the Internet: How Cloudflare blocked a monumental 7.3 Tbps DDoS attack
In mid-May 2025, blocked the largest DDoS attack ever recorded: a staggering 7.3 terabits per second (Tbps).The Cloudflare Blog
like this
👋🏼 Bonjour à toustes,
Le groupe local d'Extinction Rébellion d'Auxerre se retrouve une fois par mois en présentiel et une fois par mois en visio pour une plus grande accessibilité à toustes sur notre territoire rural.
🖥️ Prochaine rencontre en visio : lundi 7 juillet à 19h30.
📧 Écrivez nous pour vous inscrire : auxerre@extinctionrebellion.fr
Au programme : Accueil, retour sur les actions passées et projets en cours.
Si vous voulez rejoindre XR dans l'Yonne, vous êtes les bienvenu·e·s à cette visio.
avec Amour & Rage ❤️🔥
Réunion mensuelle XR Auxerre
👋🏼 Bonjour à toustes,
Le groupe local d'Extinction Rébellion d'Auxerre se retrouve une fois par mois en présentiel et une fois par mois en visio pour une plus grande accessibilité à toustes sur notre territoire.
🗣️ Prochaine rencontre en présentiel : vendredi 27 juin à 19h00.
📧 Écrivez nous pour vous inscrire : auxerre@extinctionrebellion.fr
Au programme : Accueil, retour sur actions passées et projets en cours.
Si vous voulez rejoindre XR dans l'Yonne, vous êtes les bienvenu·e·s à cette réunion.
🍻 N'hésitez pas à venir avec quelque chose à boire, à manger, à partager...
avec Amour & Rage ❤️🔥
Signal – an ethical replacement for WhatsApp
Signal – an ethical replacement for WhatsApp
Moving from WhatsApp to Signal is an important action, right now. WhatsApp’s parent company, Meta, has been involved in several cases of election interference: America in 2016, Trinidad and Tobago …The Green Stars Project
like this
Basso Daniele doesn't like this.
Signal – an ethical replacement for WhatsApp
Signal – an ethical replacement for WhatsApp
Moving from WhatsApp to Signal is an important action, right now. WhatsApp’s parent company, Meta, has been involved in several cases of election interference: America in 2016, Trinidad and Tobago …The Green Stars Project
Okkervil River - I Am Very Far (2011)
A parte la collaborazione con Roky Erickson nel suo bellissimo True Love Cast All, gli Okkervil River mancavano dalla scena musicale da tre anni e questo nuovo album si preannunciava come un album ‘difficile’... Leggi e ascolta...
How not to lose your job to AI
How not to lose your job to AI - 80,000 Hours
Around half of people are worried they'll lose their job to AI. And they're right to be concerned: AI can now complete real-world coding tasks on GitHub, generate photorealistic video, drive a taxi more safely than humans, and do accurate medical dia…80,000 Hours
How not to lose your job to AI
How not to lose your job to AI - 80,000 Hours
Around half of people are worried they'll lose their job to AI. And they're right to be concerned: AI can now complete real-world coding tasks on GitHub, generate photorealistic video, drive a taxi more safely than humans, and do accurate medical dia…80,000 Hours
Why is the manosphere on the rise? UN Women sounds the alarm over online misogyny
A growing network of online communities known collectively as the “manosphere” is emerging as a serious threat to gender equality, as toxic digital spaces increasingly influence real-world attitudes, behaviours, and policies, the UN agency dedicated to ending gender discrimination has warned.
Why is the manosphere on the rise? UN Women sounds the alarm over online misogyny
A growing network of online communities known collectively as the “manosphere” is emerging as a serious threat to gender equality, as toxic digital spaces increasingly influence real-world attitudes, behaviours, and policies, the UN agency dedicated …UN News
like this
Why is the manosphere on the rise? UN Women sounds the alarm over online misogyny
A growing network of online communities known collectively as the “manosphere” is emerging as a serious threat to gender equality, as toxic digital spaces increasingly influence real-world attitudes, behaviours, and policies, the UN agency dedicated to ending gender discrimination has warned.
Why is the manosphere on the rise? UN Women sounds the alarm over online misogyny
A growing network of online communities known collectively as the “manosphere” is emerging as a serious threat to gender equality, as toxic digital spaces increasingly influence real-world attitudes, behaviours, and policies, the UN agency dedicated …UN News
Happy 2nd Birthday Ani.Social! (+ PieFed announcement)
Happy 2nd birthday! o(≧∇≦o)
It's June 21 which means Ani.Social turns another year older! Thanks to everyone who has stuck around and to all the newcomers this month! Unfortunately, I never really tracked our stats but the last birthday post mentioned that we were just a bit under 1000 users and now we're at 1600 with 180+ active users per month! But this is a federated platform, so we have users from all over the Fediverse participating in our communities!
I partially started Ani.Social as a kind of personal research project. Learning about the Fediverse as a practical approach toward a democratic social media is really interesting. For the past four years of my life, I have also been generally obsessed with thinking about and consuming Japanese media more analytically and theoretically. So combining that and the Fediverse, Ani.Social was born!
It's been really interesting to learn about how different people consume this so-called "Japanese media" and what kinds of discourse are produced, especially from people who willingly spend time on alternative spaces like the Fediverse.
With that said...
PieFed announcement!
For the past month, I have been testing PieFed, another Reddit-like Fediverse platform. I think it has a lot of potential and its been receiving a lot of development efforts from the Lemmy community lately. Compared to Lemmy, it's both ahead and behind depending on which areas you look. What I particularly like about PieFed is how experimental it is, and that's sort of what I need to further my research.
Right now, PieFed has flairs, spoilers, polls, topics, feeds (like multireddits), better mod and reporting tools.
You can test the future Piefed instance at pt.nyaa.social/. The tentative instance domain is Nyaa.Social and will likely share themes with Ani.Social but hopefully it'll be broader than just "anime and its related industries".
I would like to know what other people think, and what kind of ideas we can explore in Nyaa.Social. I don't think it should simply be "an alternative to Lemmy" or "an alternative to Ani.Social." It's a great opportunity to do things differently, and see what works and what doesn't.
There's no official launch date for the new PieFed instance but the earliest you can expect it is July 7. In the meantime, I would like to gather as much feedback on what kind of platform this new instance could be.
Here are a few screenshots of what the place looks like at the moment:
I should mention that Ani.Social is not going anywhere! It will continue to run and it will still be my top priority to make it a stable and easy experience for everybody even after the PieFed instance launches.
Thanks again mods, posters, commenters, donors, lurkers, and everyone else! If you have questions, feel free to ask! Enjoy the summer season! (\^o\^)/
~~I have unpaid internship to do... (T_T)~~
PieFed - Open Source Federated Forum
A link aggregator, a forum, a hub of social interaction and information, built for the fediverse.PieFed
adhocfungus likes this.
Perovskite-based image sensors promise higher sensitivity and resolution than silicon
They use stacked transparent color sensors, like Foveon camera sensors used to.
In numerous experiments, the researchers put the two prototypes, which differ in their readout technology, through their paces. Their results prove the advantages of perovskite: the sensors are more sensitive to light, more precise in color reproduction and can offer a significantly higher resolution than conventional silicon technology.The fact that each pixel captures all the light also eliminates some of the artifacts of digital photography, such as demosaicing and the moiré effect.
Perovskite-based image sensors promise higher sensitivity and resolution than silicon
Image sensors are built into every smartphone and every digital camera. They distinguish colors in a similar way to the human eye. In our retinas, individual cone cells recognize red, green and blue (RGB).ETH Zurich (Tech Xplore)
adhocfungus likes this.
Dual Boot dilemma
Hello there,
I just want to buy a new gaming system, laptop, because I want to be mobile. There is only one game I cant give up that is league of legends. So I'm searching a manufactor, which can handle dual boot perfectly. I mean everytime I boot into windows and want to reboot into linux again, so my entry is gone (refind, systems and grub). Maybe there is a brand which separate two OS Hardware wise or has a BIOS espacially for such a case?
like this
Sitting up and waiting.
Ahh, the auto generator just kicked on.
Google Meet, arriva in Italia la traduzione vocale in tempo reale
Google Meet, arriva in Italia la traduzione vocale in tempo reale: come funziona
Leggi su Sky TG24 l'articolo Google Meet, arriva in Italia la traduzione vocale in tempo reale: come funzionaRedazione Sky TG24 (Sky TG24)
BYD’s Profit Margin Looks Quite Good Amidst Price War Allegations
BYD's Profit Margin Looks Quite Good Amidst Price War Allegations - CleanTechnica
A hot topic in the EV world lately has been a reported “price war” controversy in China, and perhaps extending a bit beyond that. Some automakers have contended that BYD is engaged in an extreme, destructive price war.Zachary Shahan (CleanTechnica)
Linux and Foss Signal Group Chat
My friends and I are hosting a Linux and FOSS group chat to have some casual chat, help, and anything related to the topic really. We chose this platform to chat on to keep a privacy preserving way to engage with one another.
I really have no idea why everyone is bashing Signal so much here. None of the concerns listed seem even slightly technical.
The only problem I have with signal is that it is:
A. Centralized (which isn't explicitly a privacy concern, but a control concern in-line with linux and foss)
B. Requires a phone number to register.
It is quite private in spite of that, and goes to great lengths to achieve that privacy. It is what I see people in the security community consistently suggest.
However, if this is a public group, are we to really be that concerned about many of the considerations Signal tries to tackle? Worst case scenario a bad actor simply enters the chat and backs everything up.
It seems like our threat model is moreso in the way of general surveillance economy concerns (and perhaps to have a slightly less public entry).
In this case, point A and B become even more glaring! Why not something like an E2E encrypted Matrix chat?
Changement de chat : Nous vous proposons de quitter Matrix et de passer à Zulip
Oui, cela vous demandera de créer un énième compte sur un énième chat.
Pourquoi quitter Matrix ?
- ya troumille app et aucune ne supportent toute les fonctions dont thread, multicompte...
- le chiffrage est galère.
- les threads sont galères.
- personne ne peut créer de lui-même un sujet. Genre vous vouliez parlez de votre nouveau logo...vous ne pouvez pas créer un salon dédié.
- l'UI d'élément est malgré tous leur effort, est horrible à utiliser.
- le serveur synapse (matrix) est lourd à utiliser et gourmand en ressource.
Pourquoi Zulip ?
- meilleure organisation des discussions et vous serez en autonomie.
- discussion simultannéee avec 5 canaux différent.
- une seule app.
- c'est leger.
Ça vous demandera un temps d'adaptation. Mais comme PieFed et Lemmy, c'est le jour et la nuit.
‘Justice Will Prevail,’ Mahmoud Khalil Says as He Goes Free on Bail
Mr. Khalil, a Columbia graduate, had been held in Louisiana for over three months as the Trump administration sought to deport him. A judge found reason to believe it was retaliation for his pro-Palestinian speech.By Jonah E. Bromwich
June 20, 2025"On Friday, Judge Farbiarz rebuked the government mildly, noting that it had offered no evidence to suggest that Mr. Khalil was a danger to his community. The administration’s claims about his links to, or even sympathies for, Hamas have not been substantiated in court.
“He is not a danger to the community, period, full stop,” the judge said."
https://www.nytimes.com/2025/06/20/nyregion/mahmoud-khalil-release-order.html
‘Justice Will Prevail,’ Mahmoud Khalil Says as He Goes Free on Bail
cross-posted from: lemmy.ml/post/32025515
Mr. Khalil, a Columbia graduate, had been held in Louisiana for over three months as the Trump administration sought to deport him. A judge found reason to believe it was retaliation for his pro-Palestinian speech.By Jonah E. Bromwich
June 20, 2025"On Friday, Judge Farbiarz rebuked the government mildly, noting that it had offered no evidence to suggest that Mr. Khalil was a danger to his community. The administration’s claims about his links to, or even sympathies for, Hamas have not been substantiated in court.
“He is not a danger to the community, period, full stop,” the judge said."
adhocfungus likes this.
‘Justice Will Prevail,’ Mahmoud Khalil Says as He Goes Free on Bail
cross-posted from: lemmy.ml/post/32025515
Mr. Khalil, a Columbia graduate, had been held in Louisiana for over three months as the Trump administration sought to deport him. A judge found reason to believe it was retaliation for his pro-Palestinian speech.By Jonah E. Bromwich
June 20, 2025"On Friday, Judge Farbiarz rebuked the government mildly, noting that it had offered no evidence to suggest that Mr. Khalil was a danger to his community. The administration’s claims about his links to, or even sympathies for, Hamas have not been substantiated in court.
“He is not a danger to the community, period, full stop,” the judge said."
‘Justice Will Prevail,’ Mahmoud Khalil Says as He Goes Free on Bail
Mr. Khalil, a Columbia graduate, had been held in Louisiana for over three months as the Trump administration sought to deport him. A judge found reason to believe it was retaliation for his pro-Palestinian speech.
By Jonah E. Bromwich
June 20, 2025
"On Friday, Judge Farbiarz rebuked the government mildly, noting that it had offered no evidence to suggest that Mr. Khalil was a danger to his community. The administration’s claims about his links to, or even sympathies for, Hamas have not been substantiated in court.
“He is not a danger to the community, period, full stop,” the judge said."
https://www.nytimes.com/2025/06/20/nyregion/mahmoud-khalil-release-order.html
This Week in Plasma: Plasma 6.4 has arrived!
This Week in Plasma: Plasma 6.4 has arrived!
Welcome to a new issue of This Week in Plasma! Every week we cover the highlights of what’s happening in the world of KDE Plasma and its associated apps like Discover, System Monitor, and more.This Week in Plasma: Plasma 6.4 has arrived!
like this
2025 Bluecoats Homecoming Welcome Reception & Ensemble Rehearsal
The 2025 drum corps season begins!
The Bluecoats start their 2025 season with their annual Homecoming weekend at Mount Union University, opening their evening ensemble rehearsal with an alumni reception in the press box.
After I eat too many hors-d’oeuvres, I will head down to the field level for my first Drum Corps World assignment of 2025. Unlike my previous assignments, where I wrote the show review, this is my first photography assignment for DCW!
If you plan to be at Kehres Stadium next Friday, let me know by clicking on the event link below.
mobilizon.us/events/7a75c321-1…
2025 Bluecoats Homecoming Welcome Reception & Ensemble Rehearsal
Kick-off homecoming weekend with us! Watch ensemble, enjoy light hors-d'oeuvres in the press box, and help buy the drum corps cold drinks!mobilizon.us
Hellfire103
in reply to Holeheadou92984 • • •The only real downsides of GOS are that it only supports Pixels, and that it doesn't support microG (I can see the appeal of Sandboxed Play Services, but I would personally have preferred microG).
I would only recommend three groups of devices:
FrostyPolicy
in reply to Hellfire103 • • •Holeheadou92984
in reply to FrostyPolicy • • •FrostyPolicy
in reply to Hellfire103 • • •Kami
in reply to FrostyPolicy • • •Holeheadou92984
in reply to Hellfire103 • • •Holeheadou92984
in reply to Hellfire103 • • •Can u explain why you would recommend Fairphones and TeraCubes?
In terms of customizability, what limitations does GrapheneOS have aside from not supporting microG? Also, is it possible to install tools like Magisk on GrapheneOS? I’m not entirely sure what Magisk is, but it is always helpful to have more option.
thanks a lot!
Hellfire103
in reply to Holeheadou92984 • • •Fairphones and TeraCubes are ethical hardware. Fairtrade, repairable, and possibly open-source (I'll have to double-check that).
GrapheneOS is customisable, yes, but LineageOS is moreso.
Magisk is a tool used to root Android devices (essentially adding an
su
binary to give the user root access). However, this makes the system inherently less secure, and undermines the whole point of GrapheneOS.Holeheadou92984
in reply to Hellfire103 • • •I guess I'm going to buy 2 devices one for GrapheneOS with only Open Source app installed and one for LineageOS for using app that doesn't work on GrapheneOS.
Thanks a lot
unixcat
in reply to Holeheadou92984 • • •Holeheadou92984
in reply to unixcat • • •typhoon
in reply to Hellfire103 • • •Hellfire103
in reply to typhoon • • •I'll probably switch to LineageOS and harden it myself if GOS starts floundering, but that would be purely to get my money's worth out of the hardware.
After that, I'd go for my alternative setup of dumb-ish phone + laptop + refurbished iPod.
land
in reply to Holeheadou92984 • • •Holeheadou92984
in reply to land • • •land
in reply to Holeheadou92984 • • •Holeheadou92984
in reply to land • • •CoyoteFacts
in reply to Holeheadou92984 • • •relic4322
in reply to Holeheadou92984 • • •Ive only started looking into these. GrapheneOS looks cool, but being stuck with only the Pixel is kinda annoying and google is being shitty about supporting it. Removing drivers and squashing git commits, making it harder to support.
I need to look at the others to see how they fair.
upstroke4448
in reply to Holeheadou92984 • • •There really isn't much comparison.
Graphene only supports Pixels because it is the best phone for hardware security. If you choose to use a different phone you have already accepted a less secure device.
Sandboxed Google Play is going to offer the most compatibility as it allows you to access the main app store in the Android eco system without giving up privileged access to your phone. Devices that use Micro G or regular play store can't make that claim. Which is a massive privacy issue.
Since Graphene OS works with other launchers there really is not a difference in customizability.
I'd love to be able to say there is a good competitor for GOS but none of the other custom ROMs actually focus on Privacy/Security and most are dishonest about that fact. Divest OS was one of the few other ROMs that was honest about what it was so it was sad when the dev moved on.
I'd also note that threat model matters. Not everyone needs top notch security or privacy. There are good reasons to not use GOS, but better privacy/security isn't one. The obvious one is opportunity, whether it's regional or financial, Pixels can be a pain to get.
Holeheadou92984
in reply to upstroke4448 • • •ManyThanks!
I still have a few questions:
- Does LineageOS supports muti profile like GrapheneOS (I thought all AOSP supports multiprofile feature)
- Can LineageOS supports Sandboxed Google Play with some tweaks?
- Does LineageOS supports full device encryption using some open source app? (like veracrypt on windows)
- If there is backdoor planted in pixel (which in my opinion is very likely), then I guess the "risk of an adversary gaining physical access to the phone" is quite equal for both of OS?
upstroke4448
in reply to Holeheadou92984 • • •I'll answer what I know.
LineageOS doesn't have anything like sandboxed Google Play. That is a flagship feature of GOS.
It is highly unlikely there is a backdoor in the Pixel. It's just not worth the risk for Google. Not only are the phones highly scrutinized by experts but Google has a million other legal ways to get info off your phone for 99% of users who use the stock OS.
Holeheadou92984
in reply to upstroke4448 • • •skarn
in reply to upstroke4448 • • •upstroke4448
in reply to skarn • • •Not at all. Sandboxed google play is...sandboxed. Micro G has privelged access to your phone. That is a massive canyon in the difference of access you are giving an app.
Its the primary privacy reason why standard Google Play is such a privacy nightmare.
The only difference with Micro G is your shifting trust from Google to Micro G. Which is fine if that's what your threat model allows but it doesn't erase the issue.
skarn
in reply to upstroke4448 • • •The reason why Google Play Services is such a privacy nightmare is that it's malicious, and it's privileged.
The recent revelation of how Yandex/Facebook were tracking us through anonymous sessions shows just how much damage can be done with unprivileged apps.
Unlike Play Services, MicroG will do only what it has to (or nothing, if you decide to forgo using all google services). While doing so, it will still minimize the data sent, and spoof what it can to reduce fingerprinting.
As far as I can tell, MicroG seems to be reasonably well trusted. All objections I could find to MicroG are either based on principle, like yours, or on FUD. I have yet to find any mention of actual issues with MicroG.
Yes, it's privileged, and if you reduce the issue of running privileged code an issue of trust, either microG is about as trustworthy as your android ROM (which runs a lot of privileged code on your device). You ROM, minus a few patches, come 99% from Google after all, but you place a lot of trust in the GOS team to sanitize and patch that up. It's OK, I don't disagree.
So once we establish that MicroG is not malicious, running it privileged may be less than optimal, but it's only an issue in terms of attack surface.
Which is not nothing.
With all this being said, I expect that the threat model that regard as an obvious advantage running know malicious code, though unprivileged, over non-malicious privileged code, are going to be few and far between.
upstroke4448
in reply to skarn • • •Trust does not fix the core privacy issue of allowing an app to have privileged access to your phone.
As I said before, if your threat model allows you to decide your fine with Micro G having that access, good for you. That isn't a remedy for the actual issue. Its just deciding to ignore it. Trust is much easier to break and abuse then a sandbox.
It seems we differ on the value of trust in this situation. To me, no app is ever trust worthy enough for that type of access. Especially for something like play store access where there are other non privileged ways (aurora store, third party apk mirrors, etc) to access the apps from the play store if you really feel Google is malicious.
skarn
in reply to upstroke4448 • • •There about a gazillion background services in your phone right now having privileged access. Have you taken a look at those? Do you know what they do?
MicroG does not give you access to the play store. Like, not at all. If you think Aurora store is a replacement for microG or Google Play Services you have no idea what you're talking about.
upstroke4448
in reply to skarn • • •Lol trying to conflate system apps vital to an OS and privelged apps like Micro G is about as bad faith an argument as it gets.
Your playing semantics. Both sandboxed google play and micro g are ways to get around Google Play services but only GOS implementation actually solves the main privacy issue.
The reason I mentioned aurora is because a lot of user install micro g so they can use the play store as it requires play services or a substitution. This was obvious in context.
who
in reply to Holeheadou92984 • • •GrapheneOS is better in principle, but it requires that you (directly or indirectly) give money to Google and depend on Google-controlled hardware, both of which are dealbreakers for some people.
GrapheneOS also depends on hardware support files from Google, which are no longer readily available, making its future unclear.
LineageOS supports a greater variety of devices. The privacy/hardening features aren't as strong as GrapheneOS, but many people find it good enough when:
Android 16 and Pixel Support
calyxos.orgHoleheadou92984
in reply to who • • •ManyThanks!
I still have a few questions:
- Does LineageOS supports muti profile like GrapheneOS (I thought all AOSP supports multiprofile feature)
- Can LineageOS supports Sandboxed Google Play with some tweaks?
- Does LineageOS supports full device encryption using some open source app? (like veracrypt on windows)
- If there is backdoor planted in pixel (which in my opinion is very likely), then I guess the “risk of an adversary gaining physical access to the phone” is quite equal for both of OS?
who
in reply to Holeheadou92984 • • •Introducing the LineageSDK
lineageos.orgHoleheadou92984
in reply to who • • •typhoon
in reply to Holeheadou92984 • • •Holeheadou92984
in reply to typhoon • • •