349
I am super nervous, so close to jumping to GrapheneOS. (lemmy.fedioasis.cc)
submitted 8 months ago by to c/privacy@lemmy.ml
106 comments fedilink hide all child comments
 
An image of the fastboot unlock bootloader confirmation.
you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 8 months ago (6 children)

Just go for it. You can always go back to stock if you dont like it.

My advice: dont make it too complicate. GOS has a lot of different securities and you can choose whatever you want to do with your phone. Some examples::

  • you can run the whole thing on 1 profile

  • 1 main profile and 1 secondary for Google

  • 1 main profile for admin and several secondary profiles each with their own private space... .

and so on and on. I like to think of GOS similar to Archlinux. You can choose your way, but if things go south , a extremely complicate setup will make it very difficult to diagnose and maintain.

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 4 points 8 months ago (5 children)

    If you could tell me the logic behind using the different securities... I'm working on figuring out graphene and using it as a daily driver. Currently I've got my owner profile which is the one with Google Play. I'll just push the apps to my daily driver...

    What would you suggest?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 3 points 8 months ago (3 children)

    What would you suggest?

    Not OP, but here's an answer for your consideration.

    Assuming you are not currently being hunted by well resourced scary people...

    It seems to me that even using a single user profile on GrapheneOS already provides dramatically better security and privacy outcomes than any other mobile device option, anyway.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 8 months ago (2 children)

    I don't think I'm being hunted or resourced... But realistically speaking I'm just tired of not having control of my data.

    I'm more just trying to figure out the most effective setup. Because I am going to need certain apps I'm going to get from the Google store. I don't need them all the time, what I really need to understand is which profile should I have the Google Play store on. Should I have it on a secondary profile or the owner profile.

    I don't intend on using the profile with Google Play on it daily.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 7 months ago (1 child)

    another solution for you is no profiles, just the main + Private Space. In main you dont use any Google stuff. In your private space (setup with a different unlock method from your screenlock), you sign in and get your Google stuff. I havent tried it but it sounds ok...Not sure about transferring files though. E.g. what if I have a news article in Vanadium in mainland and want to share it to my contacts in Private Spac? Or the reverse: I got a pdf from whatsapp in Private Space and want to store it in my main's folder?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 7 months ago

    @pinball_wizard@lemmy.zip was correct: Even a single GOS profile is already much better than normal Android. You can read up all the security stuff GOS offers in Settings/Security and Privacy. A lot of those features are already much better than stock Android, e.g. strict control over USB c, spawn app securely, wifi/BT auto off...etc.

    As to your question about logic in using diff securities, GOS is the only OS that allows you to have many profiles. These profiles are completely isolated from each other. You have your own keylock, user for each profile. That is much more powerful that stuff like Peivate Space (stock Android has) or even Samsung Secure Folder. So I want to make the best use for these features...

    That and we have too much personal and sensitive stuff on our phones nowdays. I'm not talking about normal stuff like emails and photos. I meant online banking apps, identity card app that each country for some reasons force citizens to install...And everything else, literally everything has an app.

    Anyway......

    Initially i went with: 1 owner profile (the one you started originally), 1 media profile, 1 bank profile and 1 daily profile. You know like completely compartmentalize your life.

    This works BUT there is a lot of inconvenience. .E.g. if i see an article in Vanadium in daily and want to share it to whatsapp/viber/signal which live in media, i cant.

    So I then went with: 1 owner profile and 1 sensitive profile...So all the things that are very important to me like banks, IC app I put in sensitive. .Everything else I put in owner. Note: in sensitive profile, I do not user fingerprint; I set a long password for that.

    Hope that helps.

  • permalink
  • fedilink
  • source
  • parent