@ josh Just put out a great PSA for those still using # CalyxOs on their phone : privacy@fedia.io

@ josh Just put out a great PSA for those still using # CalyxOs on their phone (closednetwork.social)

submitted 1 year ago by simon@closednetwork.social to c/privacy@fedia.io

19 comments fedilink hide all child comments

@josh Just put out a great PSA for those still using #CalyxOs on their phone. Now’s the time to consider switching to @GrapheneOS for ultimate mobile #privacy and #security youtu.be/oTp8cTPH8g4?si=GboChm

all 19 comments

sorted by: hot top controversial new old

[–] Smarshak@sociale.network 1 point 1 year ago (18 children)

@simon @josh @GrapheneOS Unfortunately, not everybody is owning a pixel phone nor is willing to buy it in the future. I appreciate GrapheneOS is becoming the gold standard for security but alternatives should exist. While waiting for CalyxOS to be back (if ever), I've personally switched to IodéOS.

hideshow 18 child comments

[–] GrapheneOS@grapheneos.social 1 point 1 year ago (16 children)

@Smarshak @simon @josh GrapheneOS is a privacy project. Protecting user privacy requires providing current privacy and security patches along with protecting against exploitation of unknown vulnerabilities. Those other options lack the bare minimum.See eylenburg.github.io/android_co as a starting point.Pixels are currently the only devices with reasonable security combined with proper support for another OS. The other devices CalyxOS supported such as Fairphones lack basic updates and protections.

parent

hideshow 16 child comments

[–] GrapheneOS@grapheneos.social 1 point 1 year ago (15 children)

@Smarshak @simon @josh GrapheneOS is working with a major OEM towards a subset of their future devices meeting all of the requirements listed at grapheneos.org/faq#future-devi to be able to support GrapheneOS. The reason we don't support a device like the Fairphone 5 is because it lacks important security patches, lacks basic security functionality including having no secure element and it would not be possible to protect users well from widespread commercial exploit tools regardless of what we did.

parent

hideshow 15 child comments

[–] trogluur@social.linux.pizza 1 point 1 year ago

@GrapheneOS Do you have any information about the partnership with this OEM and what the device(s) will be like?The reason I ask is because my current phone has stopped receiving updates and I'm looking to switch to a GrapheneOS one, but I don't want to give up the SD card slot and headphone jack my current phone has. If these devices are gonna have them, it's an instant buy for me.

parent

[–] Smarshak@sociale.network 1 point 1 year ago (13 children)

@GrapheneOS @simon @josh I value that and myself also I'm looking forward to your next partnership. My point is that not everyone needs the same level of security or privacy (or is willing to accept the required tradeoffs) so other choices that are not plain Google or Apple are possible, with limitation. If I actually need super security, I won't be carrying any smartphone with me anyhow...

parent

hideshow 13 child comments

[–] GrapheneOS@grapheneos.social 1 point 1 year ago (2 children)

@Smarshak @simon @josh Having patches for known severe privacy and security vulnerabilities is the bare minimum. Having the basic Android privacy and security features intact is also the bare minimum. You're describing having basic privacy and security as being super advanced when it isn't. A device which is not patching serious privacy and security after the coordinated disclosure date isn't safe.

parent

hideshow 2 child comments

[–] Smarshak@sociale.network 1 point 1 year ago (1 child)

@GrapheneOS @simon @josh So you're telling that anything that isn't a pixel.is not secure?

parent

hideshow 1 child comment

[–] simon@closednetwork.social [S] 1 point 1 year ago

@Smarshak @GrapheneOS @josh That’s not what anyone is saying, but there certainly are varying degrees and trade offs between hardware security between different devices and chipsets.

parent

[–] simon@closednetwork.social [S] 1 point 1 year ago (9 children)

@Smarshak @GrapheneOS @josh It’s not just about “super security” it’s about having sovereignty over your technology rather than your technology controlling you. Same reason to self host with Nextcloud versus using Google Drive or Apple iCloud. I’m not telling you how to live your life but it’s not “just” about security. It’s about not letting others profit off of your data. What trade offs are you ok with?

parent

hideshow 9 child comments

[–] Smarshak@sociale.network 1 point 1 year ago (8 children)

@simon @GrapheneOS @josh I'm not saying anything different. Anyone should be aware of limitations and compromises they are willing to face. Not everyone can afford pixel phones + grapheneOS combo though but still some privacy can be achieved.

parent

hideshow 8 child comments

[–] GrapheneOS@grapheneos.social 1 point 1 year ago (7 children)

@Smarshak @simon @josh A used iPhone or Pixel is the option that's cheap and reasonably secure. The vast majority of Android devices do not provide the basics for security with or without using an alternate OS. Most alternate OSes don't keep up with basic privacy/security patches themselves. They still depend on the devices getting proper support too, which is generally not happening. Not having current privacy and security patches long after the coordinated disclosure is far below bare minimum.

parent

hideshow 7 child comments

[–] Smarshak@sociale.network 1 point 1 year ago

@GrapheneOS @simon @josh That would be perfect, if only Pixel had replaceable batteries. Does not make much sense to buy a used phone when the battery hardly last more than 2 years (new). Unless you're willing to change phone frequently, which is neither good for your wallet nor sustainable for the the environment.

parent

[–] f@ieji.de 1 point 1 year ago (4 children)

@GrapheneOS @Smarshak @simon @josh What are you on?? Apple now??? This is contradictory advice to your own post! grapheneos.social/@GrapheneOS/

parent

hideshow 4 child comments

[–] josh@sideofburritos.social 1 point 1 year ago (2 children)

@f @GrapheneOS @Smarshak @simon You listed a bunch of people in your reply, who are you directing that at?

parent

hideshow 2 child comments

[–] f@ieji.de 1 point 1 year ago (1 child)

@josh My bad, it was directed at Graphene's rather odd answer...

parent

hideshow 1 child comment

[–] GrapheneOS@grapheneos.social 1 point 1 year ago

@f @josh We said a used iPhone or Pixel that's still supported is a cheap way to obtain a reasonably secure device. It was not a recommendation to use an iPhone over GrapheneOS. A device not receiving basic privacy and security patches is not a reasonable private/secure device for anyone and is not the path people should take regardless of their threat model. Android Security Bulletin patches are a bare minimum and a very low bar. Those are not the full Android security patches.

parent

[–] GrapheneOS@grapheneos.social 1 point 1 year ago

@f @Smarshak @simon @josh We said a used iPhone or Pixel that's still supported is a cheap way to obtain a reasonably secure device. It was not a recommendation to use an iPhone over GrapheneOS. A device not receiving basic privacy and security patches is not a reasonable private/secure device for anyone and is not the path people should take regardless of their threat model. Android Security Bulletin patches are a bare minimum and a very low bar. Those are not the full Android security patches.

parent

[–] xyhhx@nso.group 1 point 1 year ago

@GrapheneOS yup. i got my pixel 9 for $300 cad still in the box on a local marketplace site (kijiji)you can find in-box second hand phones around christmas for (comparatively) dirt cheap!@Smarshak @simon @josh

parent

[–] josh@sideofburritos.social 1 point 1 year ago

@Smarshak @simon @GrapheneOS I understand, but I only recommend things that I am personally willing to use. I don't want to recommend something that I wouldn't use myself.

parent