Graphene does only work on the pixel devices. What makes it special is that you can lock the bootloader again after installing it, which with things like lineage, you cannot do. I have never used /e/OS but i use lineage as my daily and it can be installed on FP
this post was submitted on 20 Jul 2024
90 points (95.9% liked)
Privacy
32165 readers
169 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
What makes it special is that you can lock the bootloader again after installing it
I'm not sure why this is considered special. You can also re-lock the bootloader with CalyxOS, iodéOS and DivestOS. This is a Pixel thing, not a GrapheneOS thing.
It's also possible to relock the bootloader on a handful of Motorola and fairphones, at least as part of the Calyx install procedure
Okay, I was not aware of that, so thanks for the information.
load more comments
(13 replies)
Yes, GrapheneOS only works on Pixel devices, because the project has some pretty extensive hardware security requirements: https://grapheneos.org/faq#future-devices
The Fairphone is a highly insecure device, which comes nowhere close to the (hardware) security of a Pixel. On top of that, the Fairphone company doesn't even know how to maintain their own Fairphone OS. The verified boot implementation is fundamentally broken and very misleading, since it's signed with the publicly available (!!!) AOSP test private keys. This is such a blatant disregard of security practices, that should have made it impossible to certify their devices. It's not a surprise either that Fairphone regularly misses important Android security patches, or delivers them months later. That's also why GrapheneOS will never support devices like the Fairphone. There are more issues with Fairphone's misleading update policy that I haven't covered in detail.
I highly recommend against purchasing such insecure, and poorly maintained hardware. DivestOS is the best option for "damage control", if you already own a Fairphone. Its developer actually cares about users and their security, and the OS is properly signed.
DivestOS is the way to go.
I'm on CalyxOS, it works great. Locked bootloader, ability to block connection of devices when screen is locked (defeating cellebrite's method of choice), work profiles and firewalls etc.
Fairphones can also run CalyxOS if you want to look into that
There are several degoogled OS options for the Fairphone models, with different levels of degoogling and privacy: LineageOS, CalyxOS, DivestOS, iodéOS and /e/OS.
Most of these are based on LineageOS (I understand that CalyxOS isn't, but I might be wrong). I personally use iodéOS and I like the helpful developers, the ability to remove / replace any of the apps preinstalled with the system, and the iodé blocker which blocks trackers, adds and any connection you want to at a system level.
load more comments
(1 replies)
There are only a few to consider. /e/os if you want it easy or DivestOS if you want it most secure and private. All the other possibilities have disadvantages compared to these.
Please be aware that you should buy FP5 as FP4 has huge hardware issues and the support is a dissapointment. And yes, /e/ is available for FP5 (but not via easy installer, but it's not hard to flash it yourself)
/e/ is announced as 'degoogled' but that's not 100 % true (and not nearly as well). For example MicroG connects to Google as well as connectivity backup check. Patch level is far behind AOSP. The App Lounge uses clean APK for some apps which is very risky. Communication is a problem and they do not react like they should for example when Mike Kuketz analysed /e/ and found several problems.
The community is huge and they support many devices.
DivestOS is better in most points but is managed by one person alone. MicroG is not included by default (if you need it) and multi sim support is a problem.
You can disable microg connecting to google servers, but basically you get a standard gms free experience, with most apps simply not working from play store. They list in the wiki how and why they connect to google: https://github.com/microg/GmsCore/wiki/Google-Network-Connections
A completely google free experience would be unusable for "normal" people, so they somewhat right as they target "normal" users. I also don't like /e/, but because they are deliberately obfuscating a lot of things in their documentation, and they try to sell their os as something genuine, but it's mostly just AOSP with microG.
CalyxOS is another one. Some consider fairphone problematic
Can you explain that? Why is Fairphone problematic?
Well, whether anything is problematic or not is highly subjective.
Do you consider no headphone jack to be problematic? Or that some think it was done intentionally to push their wireless headphones?
What about the use of slave labor? After realizing it was impossible to get away from that, they tweaked their slogan from a fair phone to a "fairer" phone.
How about the high price and little demand?
See what I mean? One person's problem is not everyone's.
I do consider the missing headphone jack a problem, but are other brands better? I did not research any of this, but don‘t other brands do the same. Considering this, I think Fairphone is one of the better phone producers. Im not saying they are the best or that they do nothing wrong. And please correct me if I’m wrong, I think the high prices come from the higher loans and better quality materials than other brands.
What does any of this have to do with Fairphone? You can apply every single one of these criticisms to the rest of the industry and it would be way more relevant than it is with Fairphone.
It seems some people will not accept paying more for an ethically superior product unless it is literally perfect in every single ethical aspect. If it's not perfect, then this company that is vastly superior to all its competitors when it comes to ethics is somehow the villain. This is braindead logic.
load more comments
(7 replies)
If I had a Fairphone I'd use CalyxOS or DivestOS. They seem to be the best for privacy and security out of the OS that Fairphone supports.
FP4 with CalyxOS works perfectly.
Depending on your linux knowledge, you may want to use real linux (postmarketOS). But beware, the amount of things that require closed source OSs like android or ios isnt 0. banking apps for example arent accepting of non proprietary phones yet. I dont know about emulation though.
For emulation there is Waydroid. I've never tried to run bank apps with it, but everything else worked smoothly.
Thanks for mentioning it. I heard about waydroid but havent tried it yet.
I've used it in multi windows mode with a libhoudini (installed thru a script, I think it was this) (had no luck with libndk) on desktop (x86) because some android apps are not compiled for x86. No need for it on an arm device.
If you have a dual gpu setup, enable software render because it got issue with dual gpus (see here).
I daily drove a Oneplus 6 with PostmarketOS for a few months. While it was very cool and gave me a bunch of freedom compared to android, I missed things like always having proper mobile UIs and a working camera. It is my understanding that the fairphone 4 is in a similar state of support, if a bit worse. Can recommend it though if you like using linux and don't need banking or a camera from your phone.
load more comments
(3 replies)
load more comments
(6 replies)
DivestOS is a good option
May i know why you do not like the pixel phones?
They are expensive and I don't want to give money to Google
They are expensive
Sometimes you get what you pay for, and...
I don't want to give money to Google
I get that, but your purchase (the entire Pixel department, to be honest) is a drop in the ocean to their profits. They won't notice you not buying one at all. You're handicapping yourself in the mobile security arena (not being able to install GrapheneOS) to take the high ground and not effect a tech giant.
That aside, if you really don't want to give Google, buy one from a reseller and not from the Google Store.
they sometimes retail at a loss around the holiday season.
load more comments
(3 replies)
load more comments
(1 replies)
I use MicroG LineageOS which is in my opinion comparable with graphene os and is supported by a lot more devices.
Graphene and Lineage are the most uncomparable custom roms. Have and look at security and privacy and the type of Google Play handling.
See https://eylenburg.github.io/android_comparison.htm to geht a first idea
load more comments
(1 replies)
I use CalyxOS on my FP4. I have been happy. Almost 2 years now.
What about de-googled android? Is that private/secure?
No given the recent Cellebrite leak. You're only secure if you use Pixel 6 and after, stock or GOS.
Of course that mostly only apply if you put government into your threat model.
That's a threat to any device. Also the pixel scored way better than many other devices
view more: next ›