1247

TL;DR

  • Efforts like Graphene OS face increasing pressure from apps that refuse to run on non-standard Android.
  • The custom ROM project characterizes Google’s approach to device attestation as incomplete and flawed.
  • Graphene OS is prepared to take legal action if Google won’t let it pass Play Integrity checks.
top 50 comments
sorted by: hot top controversial new old
[-] MentalEdge@sopuli.xyz 356 points 1 month ago* (last edited 1 month ago)

Hell yes.

It's fucking open source, this is no different from games with intrusive anti-cheat refusing to run on Linux, except in this case it's not even a different OS.

It's monopolistic and anti-user.

load more comments (2 replies)
[-] umbrella@lemmy.ml 226 points 1 month ago* (last edited 1 month ago)

yeah. like my manufacturers' 3-year-old, full-o-spyware ROM is more secure than latest clean installed lineage.

they just want control, not security. and with banking apps becoming a necessity, i'm starting to be forced to return to stock.

[-] newproph@sh.itjust.works 51 points 1 month ago

graphene sandboxes Google services so they don't run as root on your device. I haven't encountered an app I can't get running on graphene yet and having Google play installed as non root is a far sight better than stock.

my biggest problem with lineage was compatibility with banking apps so I reluctantly switched but graphene is a solid choice in operating system for privacy and security.

load more comments (8 replies)
[-] TheLastOfHisName@lemmy.world 35 points 1 month ago

Myself, I use my bank's web portal via my mobile browser. Not as instant as an app, but it gets the job done.

[-] MSugarhill@discuss.tchncs.de 62 points 1 month ago

Culprit is: I need the phones app as second factor to log in to the web interface.

[-] pdxfed@lemmy.world 34 points 1 month ago

Yep been seeing more of that. Will just refuse to use it on my phone.

It's been clear for at least 10 years that apps are about data harvesting not making something more useful or easier to use or more universal than a mobile website.

load more comments (1 replies)
load more comments (2 replies)
[-] Cyyy@lemmy.world 23 points 1 month ago

same bs with apps not running jidt because root or apps not being visible in playstore because of it. Netflix isn't even showing up as existing in playstore just because i have root. it's nuts. and there are tons of apps like this.

load more comments (3 replies)
load more comments (12 replies)
[-] flop_leash_973@lemmy.world 208 points 1 month ago* (last edited 1 month ago)

The world of mobile phones is a real world example of what we avoided on the PC back in the day when the IBM BIOS got reverse engineered, allowing for someone to put out an IBM compatible PC without having to pay the tithe to big blue first. Not that IBM didn't do their level best to put those efforts in the ground with their lawyers and the courts as soon as they found out about it. Thankfully the legal system of the time didn't allow that to happen.

It has been pretty depressing to me that the tech literate have been so easily lulled into accepting such things in the name of "cool toys" and "security" virtually everywhere in modern life besides the PC/laptop/server spaces.

Phones, TV set top boxes, smart TVs, IoT gear. They are all a cesspit of locked down propitiatory and gate kept gardens where nothing happens without the gardens keeper getting a cut and having final say over everything.

This sort of control and gatekeeping from the likes of Google, Apple, and Qualcomm was not something that was hard to see coming a mile away, yet we all collectively let it happen anyway.

load more comments (6 replies)
[-] sbv@sh.itjust.works 186 points 1 month ago

Considering the lawsuits, now seems like a good time.

[-] SpiceDealer@lemmy.world 178 points 1 month ago

I really hope the GrapheneOS team succeed. Custom ROMs are reason I'm really into tech today. Coding, FOSS, Linux, etc. all that came from rooting my dad's HTC phone back in the day. Google shouldn't cannibalize its children.

[-] 01189998819991197253@infosec.pub 74 points 1 month ago

Google shouldn’t cannibalize its children.

load more comments (6 replies)
[-] androidisking@lemmy.world 123 points 1 month ago

Here's a harsh truth and a reality some tech users need to wake up to.

Google has never cared about open-source. They have never cared about user-choice/user freedom. They could easily tomorrow make Android closed-source and that would be the end of Android. It has always been about control. Apple got that authoritarian idea correct long ago by locking down the entire OS.

Google is allowing open-source modding only because there's a large community out there that cares and wants it to thrive. And since it runs on Linux, it would make Google look VERY bad if they removed bootloader unlocking, open source, removed features that causes issues for custom roms.

Google doesn't care you YOU. If they really cared, they wouldn't be slowly removing features or adding anti-user features that in the long run, don't benefit anyone but them.

I'm glad the government declared them a convicted monopoly. I'm still ashamed it took them this long to finally go through with it.

What an insane world we live in.

load more comments (4 replies)
[-] jhdeval@lemmy.world 101 points 1 month ago

Here's my take which i have not seen in this thread. When you buy your hardware it is yours you should be allowed to do with it as you please. If you want to wipe the device and install another ROM or os you should be able to. Much like the recent fight for "right to repair" not allowing you to do what you want with your property should not be allowed. As long as the manufacturer blocks your ability to do what you want with your hardware it isn't really your hardware.

[-] gerbler@lemmy.world 36 points 1 month ago* (last edited 1 month ago)

Furthermore, if the manufacturer wants to pretend that they're selling you a perpetual license to use the hardware or whatever legal bullshit they came up with on the back of a cocktail napkin between lines of coke then they can't advertise using the words buy, own or anything similar without explicitly indicating in the largest font that you aren't the owner of the product.

[-] lemmyvore@feddit.nl 26 points 1 month ago

Unfortunately that line of thinking stops at the divide between hardware and software. You can legally make a phone manufacturer let you unlock a phone's bootloader so you can install other software, and you can forbid them from denying hardware warranty because you installed other software. Both of which apply in the EU.

But you can't make them have their software support or play nice with the other software that you install.

You also can't force manufacturers to open up drivers if they're under NDAs and proprietary licensing (which they often are, due to extensive cross licensing because everybody's owning patents that can lead to everybody suing everybody if they were ever used).

load more comments (3 replies)
[-] lupec@lemm.ee 95 points 1 month ago

Wow, I legit just ordered a used pixel yesterday to give graphene a try lol. Uncanny timing!

Anyhow, that's great news! I can really see the EU sinking its teeth into this if nothing else.

[-] Andromxda@lemmy.dbzer0.com 29 points 1 month ago

Thankfully there are FOSS alternatives for apps like Authy. I recommend Aegis

For your banking app, you can use this list to check if it's compatible: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

Using the web app might also be an option.

load more comments (1 replies)
load more comments (29 replies)
[-] archchan@lemmy.ml 87 points 1 month ago

I wish you could slap a custom rom on whatever phone you want and it Just Works™ like you can slap linux on any PC, but instead we get apps that potentially don't work, locked bootloaders, push notifications tied to Google Play Services, and whatever else. You can put Lineage on the EU version of my phone but not the US version because fuck you. I hate how corpo centric phones have become. Like Google shouldn't be allowed to hijack my entire screen for an ad or an app update. The entire modern definition of "sideloading" is BS, apps have access by default to things that they really don't need, and why do I need to use ADB to purge your pre-installed bloatware ffs

Not cool.

[-] anon5621@lemmy.ml 26 points 1 month ago

We can get same experience quite soon on laptops too when arm laptops&desktop will arrive toensd users.It gonna be lock down same as phones nowdays.

[-] fuzzzerd@programming.dev 15 points 1 month ago

I do not like this prediction, because it seems like a plausible reality. Which would be awful.

load more comments (1 replies)
[-] sfxrlz@lemmy.world 14 points 1 month ago

Yeah it would’ve been like that for pcs too if they weren’t around for quite longer.

load more comments (5 replies)
[-] ArkyonVeil@lemmy.dbzer0.com 70 points 1 month ago* (last edited 1 month ago)

I've been tired of "modern" security doing nothing but annoy people. Recently, a Portuguese bank "innovated" by exclusively allowing login only on a mobile device. Yes, a clean web browser with 3FA is not "secure" enough, has to be done on a mobile device. Clearly, desktop PCs are too insecure to conduct transactions.

Therefore, because one does not trust their mobile device. One simply spun up a clean Pixel VM, shared my data with Google and just did their work there. Peak security.

[-] selokichtli@lemmy.ml 20 points 1 month ago

They are steamrolling usability for elder people with that kind of security measures. I can't understand how they can get away with this, those bastards.

[-] WhatYouNeed@lemmy.world 19 points 1 month ago

Does the bank staff all work on mobiles?

load more comments (1 replies)
load more comments (5 replies)
[-] Blackmist@feddit.uk 61 points 1 month ago

Even without the custom ROMs, the whole Android ecosystem is a colossal fucking mess.

I've got old apps that won't work any more. It's not even compatible with itself.

People give Windows a load of shit, and deservedly so for some of it, but it's a million times more usable than Android when you want shit to "just work".

[-] Tja@programming.dev 23 points 1 month ago

Same with iOS, I don't know why you are singling out Android here. My favorite game back when I used an iPad stopped working after certain update. It was a puzzle with rails and colored trains, can't remember the name now.

Windows and Linux are quite a lot better in this regard.

load more comments (3 replies)
[-] FutileRecipe@lemmy.world 18 points 1 month ago

I've got old apps that won't work any more.

I'm actually for this. The bar to entry for the Play Store is too low with too many low quality and unmaintained apps. I'm all for booting insecure and super old apps. They cheapen the ecosystem.

[-] Blackmist@feddit.uk 17 points 1 month ago

Well that's all very well, but I've got a bathroom speaker I can no longer access.

So how about instead of Daddy Google deciding what's best for everyone, they let things run and give you a warning?

Hell, I've even got games I've paid for that are now gone. Honestly, fuck them for even thinking that's acceptable.

load more comments (16 replies)
load more comments (20 replies)
[-] mlg@lemmy.world 59 points 1 month ago

I hope some OEM (especially those opposed to google) picks up and develops mainline linux like Pine Phone. There are already several mobile UXs and distros with prebuilt images available as well, and it has been shown multiple times that Android apps can run fairly easily on linux. It would be a big risk, but I think it'd at least find a market success like the Steam Deck.

Android in its current state is the same as Chromebooks. A glorified walled garden of google's crappy choices & DRM which just so happens to run on the Linux kernel because it's free. People downvote me for this, but I maintain that even Dalvik and the android runtime itself is an inefficient relic of 10+ years ago when mobile devices had at most 2gb of ram and a tiny low power ARM processor.

It runs like complete crap sometimes on modern devices despite huge advancements in the underlying tech. It feels like a knockoff JVM which is already a known memory hog.

On top of that, it sticks with single kernel releases with proprietary OEM binaries so you have devices out here running on kernels as old as 3.x because no custom ROM will be able to recompile the device modules for a newer kernel.

It is almost hilarious to me that Moonshell, a multimedia homebrew software for the Nintendo DS (4mb of RAM), has more complete features, file compatibility, and better UI design than at least 95% of the music apps on Google Play. And it was written by literally one guy. I was honestly surprised at just how many music players lacked functionality as basic as supporting m3u playlists.

[-] erwan@lemmy.ml 33 points 1 month ago

The problem of being stuck on an old kernel isn't because of Google or Android, but because of chip makers (e.g. Qualcomm) not providing drivers.

load more comments (1 replies)
[-] _bonbon_@lemm.ee 24 points 1 month ago

I feel that the mobile world is ripe for disruption. There has not been excitement for new devices in a while from me and my friends who are all into tech. I remember 00s and early 10s where we used to discuss new devices all the time.

Most of us are STUCK with Apple and Google because they have both built walled gardens. It is not just the apps, it is also moving away from open standards, moving away from even files. e.g., 10 years ago mp4 files used to hold all the metadata related to a TV Show/Movie so if you put that into a device (iTunes for example) it'll have all the metadata, now this info is in a separate database. SMS for all it's flaws was open, now google wants us to believe RCS is also open (LOL).

This has led to a basic degradation in all the basics, echoing your example that it is impossible to find a decent music app.

Even apples own music has has ACTIVELY DEGRADED. Bottom bar of apple music app was "Albums", "Songs", "Artists", and "Playlists" and YOU COULD CHANGE THE BOTTOM BAR. Now it is literally "Home" == Ads, "Browse" == Ads (pls buy apple music), "Search" == Ads. and LITERALLY only 1 page called "Library" where you can access your own purchased library. Same happened with apple books.

Android has seen similar shitty stuff, I remember being excited about actually FUN android games, tiny thief, vector, cut the rope, where is my water, etc. Now it is all ads, paywall nonsense.

Not to mention the Today page of the Playstore ACTUALLY USED TO BE USEFULL for highlighting some apps. And is not LITERALLY ONLY F***** ADS.

I feel/hope/pray that we have a SteveJobs 2007 type iPhone event around the corner, because everyone is ready for it.

load more comments (3 replies)
load more comments (1 replies)
[-] Wildly_Utilize@infosec.pub 45 points 1 month ago* (last edited 1 month ago)

Recently moved to graphene couldn't be happier

I don't care about these apps but it will only get worse over time if not addressed. I could see things as simple as Spotify, Netflix, etc. Refusing to run

I don't use those services either but that's not a future I want

[-] FutileRecipe@lemmy.world 32 points 1 month ago

I could see things as simple as...

Last I heard, the McDonalds' app doesn't work, of all things.

https://discuss.grapheneos.org/d/9123-the-mcdonalds-app-doesnt-work/

load more comments (3 replies)
[-] towerful@programming.dev 35 points 1 month ago

The only reason I stopped using grapheneOS was because Google contactless payment didn't work.
Loved everything else about graphene tho

load more comments (34 replies)
[-] mrvictory1@lemmy.world 34 points 1 month ago* (last edited 1 month ago)

I just want to buy a Linux laptop with VoLTE and be done with the product line "smart phone". Unfortunately there is no such device (to my knowledge) and the only device that comes close is PinePhone Pro with docking station.

load more comments (5 replies)
[-] xavier666@lemm.ee 32 points 1 month ago

More power to them

[-] jabjoe@feddit.uk 23 points 1 month ago

Why does this call the problem by it's name, monopoly.

Android is another area Google are abusing their monopoly. Sure the phone market is a duopoly, but that doesn't help. Apple is even more locked down and user abusing.

Lots of app companies, like bank apps, think locking their apps to only work on official Android is best for security, but that compounds the monopoly. It's also arguably less secure!

load more comments (2 replies)
[-] JCreazy@midwest.social 20 points 1 month ago

I'm running Graphene OS and its been solid. A few issues here and there with app compatibility but it is fantastic.

[-] yamanii@lemmy.world 19 points 1 month ago

We’ve started the process of talking to regulators and they’re interested.

Oh that's great, they aren't actually suing since that would be a pretty big money pit, they are going straight to regulators, something can happen.

load more comments (1 replies)
[-] SaharaMaleikuhm@feddit.org 19 points 1 month ago

It's high time we break apart all those large tech companies!

[-] avidamoeba@lemmy.ca 19 points 1 month ago* (last edited 1 month ago)

Spin off the Android team into a nonprofit. I'm pretty sure OEMs would be all over funding that.

load more comments (3 replies)
[-] bitwolf@lemmy.one 19 points 4 weeks ago* (last edited 4 weeks ago)

Really the only thing holding me back from switching to GrapheneOS is that some of my apps fail CTS.

If a proper pathway is defined for custom ROMs I'd switch in a heartbeat.

Hoping this initiative leads to a reasonable outcome.

[-] xia 17 points 4 weeks ago* (last edited 4 weeks ago)

What gets me is the "this phone cant be trusted" message on boot. Implying OEM roms are trustworthy, but nothing i choose or create could possibly be.

load more comments
view more: next ›
this post was submitted on 11 Aug 2024
1247 points (99.1% liked)

Technology

57944 readers
3175 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS