1
@ josh Just put out a great PSA for those still using # CalyxOs on their phone (closednetwork.social)
submitted 1 year ago by to c/privacy@fedia.io
19 comments fedilink hide all child comments
 

@josh Just put out a great PSA for those still using #CalyxOs on their phone. Now’s the time to consider switching to @GrapheneOS for ultimate mobile #privacy and #security youtu.be/oTp8cTPH8g4?si=GboChm

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 1 year ago (15 children)

@Smarshak @simon @josh GrapheneOS is working with a major OEM towards a subset of their future devices meeting all of the requirements listed at grapheneos.org/faq#future-devi to be able to support GrapheneOS. The reason we don't support a device like the Fairphone 5 is because it lacks important security patches, lacks basic security functionality including having no secure element and it would not be possible to protect users well from widespread commercial exploit tools regardless of what we did.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 15 child comments
    •
  • [–] 1 point 1 year ago

    @GrapheneOS Do you have any information about the partnership with this OEM and what the device(s) will be like?The reason I ask is because my current phone has stopped receiving updates and I'm looking to switch to a GrapheneOS one, but I don't want to give up the SD card slot and headphone jack my current phone has. If these devices are gonna have them, it's an instant buy for me.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 1 year ago (13 children)

    @GrapheneOS @simon @josh I value that and myself also I'm looking forward to your next partnership. My point is that not everyone needs the same level of security or privacy (or is willing to accept the required tradeoffs) so other choices that are not plain Google or Apple are possible, with limitation. If I actually need super security, I won't be carrying any smartphone with me anyhow...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 13 child comments
    •
  • [–] [S] 1 point 1 year ago (9 children)

    @Smarshak @GrapheneOS @josh It’s not just about “super security” it’s about having sovereignty over your technology rather than your technology controlling you. Same reason to self host with Nextcloud versus using Google Drive or Apple iCloud. I’m not telling you how to live your life but it’s not “just” about security. It’s about not letting others profit off of your data. What trade offs are you ok with?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 1 point 1 year ago (8 children)

    @simon @GrapheneOS @josh I'm not saying anything different. Anyone should be aware of limitations and compromises they are willing to face. Not everyone can afford pixel phones + grapheneOS combo though but still some privacy can be achieved.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 1 point 1 year ago (7 children)

    @Smarshak @simon @josh A used iPhone or Pixel is the option that's cheap and reasonably secure. The vast majority of Android devices do not provide the basics for security with or without using an alternate OS. Most alternate OSes don't keep up with basic privacy/security patches themselves. They still depend on the devices getting proper support too, which is generally not happening. Not having current privacy and security patches long after the coordinated disclosure is far below bare minimum.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 1 point 1 year ago

    @GrapheneOS yup. i got my pixel 9 for $300 cad still in the box on a local marketplace site (kijiji)you can find in-box second hand phones around christmas for (comparatively) dirt cheap!@Smarshak @simon @josh

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 1 year ago (4 children)

    @GrapheneOS @Smarshak @simon @josh What are you on?? Apple now??? This is contradictory advice to your own post! grapheneos.social/@GrapheneOS/

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 1 year ago

    @f @Smarshak @simon @josh We said a used iPhone or Pixel that's still supported is a cheap way to obtain a reasonably secure device. It was not a recommendation to use an iPhone over GrapheneOS. A device not receiving basic privacy and security patches is not a reasonable private/secure device for anyone and is not the path people should take regardless of their threat model. Android Security Bulletin patches are a bare minimum and a very low bar. Those are not the full Android security patches.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 1 year ago (2 children)

    @f @GrapheneOS @Smarshak @simon You listed a bunch of people in your reply, who are you directing that at?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    @josh My bad, it was directed at Graphene's rather odd answer...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago

    @f @josh We said a used iPhone or Pixel that's still supported is a cheap way to obtain a reasonably secure device. It was not a recommendation to use an iPhone over GrapheneOS. A device not receiving basic privacy and security patches is not a reasonable private/secure device for anyone and is not the path people should take regardless of their threat model. Android Security Bulletin patches are a bare minimum and a very low bar. Those are not the full Android security patches.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 1 year ago

    @GrapheneOS @simon @josh That would be perfect, if only Pixel had replaceable batteries. Does not make much sense to buy a used phone when the battery hardly last more than 2 years (new). Unless you're willing to change phone frequently, which is neither good for your wallet nor sustainable for the the environment.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 1 year ago (2 children)

    @Smarshak @simon @josh Having patches for known severe privacy and security vulnerabilities is the bare minimum. Having the basic Android privacy and security features intact is also the bare minimum. You're describing having basic privacy and security as being super advanced when it isn't. A device which is not patching serious privacy and security after the coordinated disclosure date isn't safe.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •