TL;DR
- Efforts like Graphene OS face increasing pressure from apps that refuse to run on non-standard Android.
- The custom ROM project characterizes Google’s approach to device attestation as incomplete and flawed.
- Graphene OS is prepared to take legal action if Google won’t let it pass Play Integrity checks.
Wow, I legit just ordered a used pixel yesterday to give graphene a try lol. Uncanny timing!
Anyhow, that’s great news! I can really see the EU sinking its teeth into this if nothing else.
Thankfully there are FOSS alternatives for apps like Authy. I recommend Aegis
For your banking app, you can use this list to check if it’s compatible: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/
Using the web app might also be an option.
Thanks for the tips, I’m a happy Aegis user already! Thankfully, my main bank explicitly doesn’t care about custom roms and I’m thinking I’ll just cut ties with the ones who do and let them know that was the reason at this point. Worst case scenario, I still have my locked down old phone.
I would totally buy a Pixel too but apparently most Pixels here are black market and the IMEIs are banned so I don’t wanna risk getting one that can’t connect to cell networks
Oof that’s scary. Good thing I have a decent enough return window to at least make sure stuff like that isn’t the case, at least.
I’ve been using graphene for years at this point and it’s the best operating system I’ve ever had on a phone. Before this my favorite phone was a jail broken iPhone 5c. I even got a pixel tablet to take notes on for college recently and put graphene on it as well.
Only thing Google has right atm is leaving the bootloader on their phones unlockable.
I plan on doing the same thing, any tips on finding cheap recent-ish Pixels?
The Pixel 6a is really cheap on the used market, and it still gets updates for at least 3 years.
The 7a isn’t that expensive either. I recommend staying away from Fairphones, Murena or /e/OS as these are highly insecure, and the companies behind them have repeatedly proven that they don’t give even the slightest fuck about the security of their users. They don’t publish important Android security patches on time, and Fairphone even managed to fully break Android Verified Boot, by signing their ROM with the publicly available (!!!) AOSP test private signing keys. It should have been impossible to pass verification, but the vendor conducting the verification seems to be just as incompetent.
A used Pixel with GrapheneOS is your best option, while still being affordable.
A brand new Murena Fairphone 4 (North America) is about $600 brand new, IIRC. I’ve been on one for the last 6 months and it’s excellent.
Stay away from both Fairphone and /e/OS/Murena. Fairphone fails hardware security in the most miserable way, and fundamentally breaks Android Verified Boot, while /e/OS is based on the highly insecure LineageOS, and it further rolls back security, while also repeatedly missing important security patches.
Also, 600 dollars is absolutely not cheap for a smartphone, and it’s especially not with it considering that both the hardware and software are highly insecure.
A Pixel can be purchased for much less, while being superior in every way.
Lineage OS is highly insecure ?
Yes, it is much worse than stock Android
https://madaidans-insecurities.github.io/android.html#lineageos
https://eylenburg.github.io/android_comparison.htm
Thanks, I’ll check it out. I’ve installed lineage since it was Cyanogenmod on secondary devices for years. I dedicate them for audiobook playback and music playback. I’ll look in to it.
That kind of usage should be fine, it doesn’t really matter. Just wouldn’t use it for my primary mobile device.
I’m planning on flashing my One Plus 9 Pro with Murena’s ROM. I’m working on getting de-googlefied.
Perhaps consider DivestOS as well if it’s supported, seems to be a way tidier package when it comes to security and privacy.
Thanks for the recommendation!
I would totally buy a Pixel too but apparently most Pixels here are black market and the IMEIs are banned so I don’t wanna risk getting one that can’t connect to cell networks.
Welcome! I’ve been on it for a month or so and I’m still so thrilled
Enjoy! For future reference I’d recommend just getting the latest Pixel as you’ll get the longest software support. E.g. a Pixel 8a is supported till May 2031, which is plenty of time to get a lot of usage out of your phone.
Right, I’d love to spring up for a 8th gen pixel but I live in an unsupported region and my currency is worth fuck all so I’ll have to make do with a secondhand 7 pro lol. Still fantastic longevity all things considered.
Ouch, that hits me right in the 7Pro feels lol. Make do, indeed, lolol.
Honestly, I don’t really need my phone for much so as long as the battery hasn’t degraded too much I’ll be more than happy!
At the price of the Pixel 8a, I would suggest getting the Pixel 8 instead.
Personally I’m fine with 8as’ specs and don’t need any of the extra features of the Pixel 8 so I’d prefer to save the money and get an 8a. Plus 8as are supported for longer. Nothing wrong with getting an 8 instead if that’s what you want though