top | item 45550820

(no title)

lollobomb | 4 months ago

I use Graphene OS and I like it a lot, but 1) I have the feeling that, with Android's Decree coming, they are counting their days left to live. Unfortunately they built an amazing OS on very shaky foundations, it's not their fault, it's the mobile OS ecosystem that sucks. And 2) They (or, better, their benevolent dictator) tend to be very silly when it comes to threat modeling, as in "my way is the only one that makes sense". Personally, I prefer to use a browser like Firefox that allows me to block every annoying ads and to customize my experience as I want, rather than a super-secure fully isolated browser like Vanadium that a) does not replace Chrome anyway for many websites that require strong attestations (e.g. Wise's verification works on GOS with Chrome but not with Vanadium), and b) it's still based on Chromium, so still built on shaky Google foundations. With Mozilla's questionable choices over time, I keep my fingers crossed for Ladybird or Servo, or similar.

discuss

order

xvv|4 months ago

> they are counting their days left to live

The Graphene team has seemingly partnered with an OEM, who is releasing binary security patches for them already (with source code available after embargo lifts). Hardware does not seem too far away at this point either.

fsflover|4 months ago

AFAIK they will still be using Android and Chrome.

privacyking|4 months ago

That OEM phone is literally years away.

Sophira|4 months ago

While I don't disagree that Google are going to be targetting GrapheneOS and other OSes, the decree you're referring to only applies to "certified Android devices" - devices which run a Google-vetted version of Android and that come with Google Play pre-installed. OSes like GrapheneOS are not currently affected by this, as any device running it is not a "certified Android device" by definition.

This is not a reason to sit idly back, of course. GrapheneOS is in danger, as you say - it's just not necessarily from this particular decree.

privacyking|4 months ago

Given that their OS requires a pixel phone and google is not releasing a) updated drivers b) updated source code for the latest release

their days are indeed numbered.

As for not being a certified android device and being unaffected. That is not true. There will be chilling effects that result in much less FOSS app development for Android, and whether or not an OS is certified is irrelevant in that regard.

Groxx|4 months ago

by "decree" do you mean developer verification, or something else? because verification won't affect them (or any other fork) even slightly

whatshisface|4 months ago

If google is doing something as drastic as intervening in the installation of all apps, they're not likely to sell phones with unlocked bootloaders - the pixels that GrapheneOS currently depends on 100% - much longer.