this post was submitted on 20 Dec 2025
309 points (98.1% liked)

Privacy

43957 readers
355 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS
 

I'm considering the switch to GrapheneOS, so I watched this interview with one of the members of the GrapheneOS team, and honestly, I feel it was a great general introduction to it and touched on common features and misconceptions.

For those who don't know, it's one of the most secure and private mobile operating systems out there. Some things that I took away:

  1. They touched upon MAC randomization. I researched a bit on my own about what the need for it is. Apparently, it's standard practice to randomize MAC addresses when scanning WiFi connections. However, GrapheneOS (and Pixel firmware) are even better at this, as they make sure they don't leak any other identifiers when doing so. They also allow you to get a new random MAC for every connection that you make (not sure whether this is very useful, as this can cause problems). On a related note, even when WiFi/Bluetooth are "off," stock Android can still scan in the background to improve location accuracy (by matching visible networks/devices against Google's database). So basically, even with WiFi/Bluetooth off, Google still knows where you are. In GrapheneOS, this option is off by default.

  2. They have their own reverse proxies that they use to talk to Google on your behalf when needed.

  3. Apparently, in the USA you can be compelled to provide a fingerprint or Face ID. Courts have ruled this doesn't violate the 5th Amendment because it's physical, not testimonial. BUT you cannot be compelled to provide a password/PIN. That's considered testimonial evidence, protected by the 5th Amendment. GrapheneOS has a two-factor system where, after using your fingerprint, you still need to enter a PIN, so it helps with this. They also have a BFU state after reboot, which is the safest and requires you to enter your full passphrase.

you are viewing a single comment's thread
view the rest of the comments
[–] umbrella@lemmy.ml 10 points 4 days ago* (last edited 4 days ago) (4 children)

the only bad thing about graphene is that it needs an expensive pixel. and how they are mostly unobtanium.

[–] outbloodyrageous@mander.xyz 1 points 2 days ago (1 children)

That has been my major issue with Pixel along with their poor quality control. I hope the new OEM they are targeting will be more widely available worldwide and affordable enough for the average person

[–] umbrella@lemmy.ml 2 points 2 days ago* (last edited 2 days ago)

oh shit yeah, that too. i always forget their bad QC compared to their price.

[–] pmk@piefed.ca 6 points 3 days ago (1 children)

I got a pixel 9a for 370 euro in Sweden, which isn't too bad. You can get a good refurbished 7 for less and it will have support for years to come.

[–] umbrella@lemmy.ml 2 points 3 days ago* (last edited 3 days ago) (1 children)

i don't live on sweden though.

[–] pmk@piefed.ca 1 points 3 days ago (1 children)

How much is a refurbished pixel 8a in your country?

[–] umbrella@lemmy.ml 3 points 3 days ago* (last edited 3 days ago) (1 children)

i quickly looked it up and found used 9s, and it's about 5k.

could probably find better prices for a working one, but there won't be any miracles.

also found a 7 pro with a broken screen for 2k, kind of a steal for how much these go for tbh

but still, it's a broken phone for 2k and i don't think these screens are cheap either.

[–] pmk@piefed.ca 1 points 3 days ago (1 children)

The pro versions will be much more expensive than the "a" models (like 9a, 8a, 7a, etc), if you can find an "a"-phone, it will be cheaper. I would get at least an 8a, since they have support until 2030 or something like that, the 7a has support until 2027. The 6a is the oldest one which still has support, but only for a year or so more iirc.

[–] umbrella@lemmy.ml 1 points 3 days ago* (last edited 3 days ago) (1 children)

they don't sell here, so i rely on luck somewhat to find specific models in the used market from someone that paid the big price to import it. and usually people want to get their money's worth so they are mostly all chewed up, very old and deprecated, or unaffordable.

i debate investing on an old pixel to get a more private phone every time i need a new one, but so far always decided it's not worth the amount of money or hassle they want for them. i keep hoping for other manufacturers to adopt the more thorough pixel security, or for graphene to relax it's requirements a bit.

[–] pmk@piefed.ca 2 points 3 days ago (1 children)

Ah! I didn't know they didn't sell there, that changes things.

[–] umbrella@lemmy.ml 2 points 3 days ago* (last edited 3 days ago)

iirc they only sell in the us canada and europe, but i might be mistaken.

[–] Luffy879@lemmy.ml 6 points 3 days ago* (last edited 3 days ago) (1 children)

Just doing some TP math for you.

A xiamoi Redmi something something is about 130€. A pixel 8a is 370€ or a 9a 500€.

With the xiaomi, you are getting no security updates for more than a year. For a pixel 8a, you get 6 years and 7 with the 9a. Therefore, if you want to keep your phone up to date because your Banking app needs those to work, you are looking at about 65/71€ per year. Also, if you want to keep it longer, you can use it for longer, with the build quality and a battery change up to 10 years or so.

Also, anecdotally, those cheap phones are built like shit, run like shit, and you are genuinely better off buying a Samsung galaxy S7 and daily driving that. (Which I got when the S10 first came out, and BTW is still holding strong when I need a second phone in case I loose my pixel 7, after 6 years, unlike my huawei P30 which didn't last a year until it started getting to 100°C when being on, and lagging to the point of being unusable.)

[–] umbrella@lemmy.ml 1 points 3 days ago* (last edited 3 days ago)

pixels cost as much as an actually good used car here.

180 euro is basically minimum wage here. none of the phones you mentioned are affordable at all.

edit: just noticed it says 130 not 180, but still.

[–] bystander@lemmy.ca 2 points 3 days ago (1 children)

Wait? They are unobtainable now? What happened?

[–] umbrella@lemmy.ml 2 points 3 days ago* (last edited 3 days ago)

i'm not sure what the problem is, but they are crazy expensive and hard to find in south america, and probably many other places.