ELI5: Why use /e/OS over Graphene? This isn't a rhetorical rant; I'm genuinely curious.
Edit: See below. I misphrased this question.
ELI5: Why use /e/OS over Graphene? This isn't a rhetorical rant; I'm genuinely curious.
Edit: See below. I misphrased this question.
I am interested. If anyone out there has one in the US, I would like to hear your opinons about it
I have the Fairphone 6 (not the plus) running /e/os. It's pleasant enough that when I had to use a vanilla android tablet I was kind of like (is this how you people live?! 😄 this is awful!)
I dont have this newest gen6 plus, just the slightly less new gen6 with e/os, but I wouldn't imagine the difference is huge. Has generally worked about as well as any regular android phone Ive had, with a few minor annoyances like the "paste" button for text often being invisible, such that I just have to press where it should be to make it work.
I have the Fairphone 6 with /e/os (dumbest name and annoying to type IMHO) and though i love it, I don't trust the business side of Murena. In one recent patch, they removed the seedvault backup app and replaced it with their own backup solution that depends on their own cloud service. Another point is that the support overall is chaotic between Fairphone (the hardware) and Murena. I literally was told to raise tickets to both companies when my WiFi stopped working properly because of the mentioned patch (still no fix - only a the compromises privacy).
No Verizon support makes it incompatible with my absolutely essential truly unlimited data via their Visible subsidiary. My job takes me away from home far too much to go without it.
I want to love this but I can't compromise my security for this device. If y'all ever add MTE and the other features required by Graphene I'll be the first in line
Fair enough. But too many people think privacy and security are the same thing.
GrapheneOS is dedicated to both privacy and security, whereas e/os (while it does have some security improvements over stock android) is much more focused on the privacy side of things.
Yeah, same for me. I'm sure I'm on top of CIA's list of "people to hack" so no security compromises for me.
I get the sense this is sarcastic lol. In my opinion though, privacy without security isn't very useful. Yes I can avoid corporate or government spying when I'm in physical control of a device like this, but what if I get arrested on some false pretenses and they use cellebrite to gain access? Or the same at an airport when traveling? If you're any form of political dissident, activist, or a member of a marginalized group, being targeted this way is a very real possibility. And as soon as that insecure but "private" device is out of your hands, all that data is free game for the govt.
This is why threat modeling is important.
but what if I get arrested on some false pretenses and they use cellebrite to gain access?
Chances are they can clone the eMMC and wait for a CVE. Or threaten or hold you until you cave. If a lawsuit is your only recourse, I would expect any constitutional barriers to be ignored in practice. Your best bet is to never end up being an explicit target, which may be more difficult for certain individuals.
My threat model considers dragnet surveillance as the primary threat, so I'd compromise on surviving dirty maid type attacks in favor of reducing the information my device gives out.
Obviously if your device is being actively exploited, you cannot be private. But your security requirements increase greatly if your data footprint indicates to them that you warrant targeted scrutiny.
100% agree with you, for who I am and what I do I know that I need a device that is as tamper resistant as possible with the smallest attack surface feasible. That goes for remote execution as much as the evil maid scenario. But this is entirely catered to my threat model and risk tolerance. And sure there is the possibility of the rubber hose cryptanalysis but that doesn't mean we should give up on securing as much as possible on the device side. It's the swiss cheese model and we're plugging a hole at a time lol
I advocate for everybody to use as secure a device as practical, and for these mitigations to be the default, but I'm fundamentally speaking for myself in this thread with my stance on fairphone and /e/OS right now. I want to support repairability and ethical supply chains too without compromising on my more core tech needs
Or you have a funny picture of Vance on your phone and immigration doesn't allow you in
political dissident, activist, or a member of a marginalized group
or a journalist or a politician. Vast majority of people aren't any of those and don't have to worry about cellebrite. Most people here that talk like Graphene OS is their only option really just need deGoogled device, not the most secure phone in the world.
all 45 comments