I know that GrapheneOS has a lot of security features that make it basically impossible to compromise your phone. And that it has a lot of control over permissions and has some privacy features. But it also has a Google Services compatibility that would allow you to use Google services, which would allow Google to harvest a lot of data from you; much less data, but still some. Now OSes like CalyxOS or Lineage have microG which in addition to giving you the APIs, it uses less battery and has the ability to use Mozilla network location to stop google from getting that data. CalyxOS and Lineage don’t have the crazy hardening modifications that GrapheneOS has, but Android is already crazy secure compared to something like Windows or Linux without a properly configured SELinux or AppArmor. Why have Graphene over Calyx?
Sandboxed Google play service is actually more secure than MicroG.
So does MicroG. Actually that’s kind of the point of both. Google play services exist to provide, well, Google play services like push notification which uses the Google servers. That’s the case with Sandboxed Google play and GrapheneOS.
Yes. Pre-installed. That’s kind of a problem if you don’t want to use them in a specific profile. Also it’s quite a security issue since it needs signature spoofing to work which is insecure by definition.
That alone doesn’t stop Google from getting your location data. Only not giving the your location data does this. On GrapheneOS you do this by… not enabling the location permission for any Google services including the play services.
Also by default GrapheneOS already uses GrapheneOS servers for location data and you can set your own proxy in the location settings
That’s basically everything about it. Yes, battery life is an issue on GrapheneOS with sandboxed Google play service, but well, at least it just has the permissions of a normal app. Not a privileged system app that pretends to be another app to work.
Yeah but those are the issues that I have. The idea is to have a private phone where you don’t have to worry about Google harvesting your data and keeping it forever. But when you have an OS that has all these features and then use the Google services that take all that data, what is the point?
According to the last paragraph here, the spoofing at least in Calyx is limited to only microG. It’s less secure than a sandboxed thing, but I don’t think it’s gonna be that bad.
Removed by mod
It’s true that you can choose not to give Google the location data or any other thing for that matter, but wouldn’t that hinder the functionality of the apps that need it? I believe there is no choice here, unless I’m missing something.
If you want to use something like Pokemon Go or whatever, your data is going to go to Google. Or if you use apps that use the Google notification servers, wouldn’t Google be able to use that data (I don’t know if they’re able to actually read the notifications, I’m just assuming).
I’m not shilling for OEM ROMs or attacking anything, but I wanna feel actually justified in the hassle and potential downgrade of the digital experience when I move to another ROM.
Removed by mod
Sure the security is good and all but what about the privacy aspect? That’s what I worry about. Like I said, I believe Android is secure enough as is, but the dependence on all the Google services is what makes it less private. Using Graphene sure does increase security, but it cannot do much in terms of being private.
It can reduce the amount of data that goes to Google. But if you use non-privacy-respecting apps, then you’re SOL. My question is that, given all of the privacy issues that Graphene doesn’t (and probably cannot) address, does it still make sense to install from a privacy standpoint?
Removed by mod
That’s the main thing. I can easily use another email provider with no issues, I can install another OS that respects my privacy. But what if my dumbfuck friends and family use something like snapchat, instagram, or facebook messenger to communicate? I tried to tell them to use signal before but they wouldn’t listen. And I’m not about to stop messaging them anytime soon. And if I use those services, wouldn’t those companies have a good profile on me? Making the effort to be more private pretty useless.
Removed by mod
It isn’t less private than MicroG and Sandboxed so Google gets even less data
deleted by creator
That’s why on Android, apps have to request the location permission to have access to Bluetooth, WiFi and cellular networks and their signal strengths. No app has that information unless you explicitly allow it
deleted by creator
But that needs to be built in to it on a hardware level. Sure the cell towers know where you are though
deleted by creator
In this case, faraday bag might be useful