The one we can't talk about...
I don't get it ? Why can't we say it's name ?
this post was submitted on 28 Jun 2024
1 points (100.0% liked)
Privacy
36021 readers
10 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
Because GrapheneOS is a debatable triggering subject for some people. Basically the OS itself is amazing and very good. But the project leader is apparently arrogant and offensive. And offended a load of big known online personalities. Apparently he says his OS is the best and better then everyone else etc etc. So the question is: do you use and support a project where the product itself is amazing and just what the world needs, but where the project leader is offensive? Some say yes, some say no. = Controversial subject.
Personally I use GrapheneOS because I need a good camera and I like having a flagship modern phone. Currently I'm using a Pixel 7 Pro. I also like the privacy and security features that graphene offer. I don't see another project out there that can offer me the same. The product is good.
But the project leader is apparently arrogant and offensive.
"apparently"
Well yes exactly. It's all just big personalities online that say that these things happened. Who knows really what the guy is like. A few big names online say these things about him, but I personally have never had any Interaction with him. So it could all be true, or partly true, or not at all. I guess no smoke without fire.. but there is always 2 sides to every story.
The Google Pixel 4a is officially end-of-life and doesn't get any software and security updates anymore (https://endoflife.date/pixel).
What's the OS we can't talk about?
To be more helpful than the joke comments you've received so far, it's graphene OS that's causing a lot of controversy.
What's the controversy?
They claim their security measures are better then other custom ROMs.
Don't they all make that claim?
Hence the controversy! 🙂
Also, Graphene tend to act superior about it and it pisses people off.
That doesnt sound like a controversy, its bascially "btw, I use arch"
https://www.privacyguides.org/en/android/
There is no controversy. There's a lot of people memeing. I haven't seen a single security analysis, or survey of options, that didn't put GOS at the very top. Look at privacy guides, they say graphene is great, but if you can't use that divest is okay.
People may not like the leader, and the developers are very opinionated which turns other people off, but I don't think there's any questioning the pedigree and the level of security provided
Yes I agree. The product itself seems to be very good indeed. The problem people have is not with the product, but with the personality of the project leader. Personally I have used GrapheneOS for the past 3 months on a Pixel 7 Pro and I love it. My reason for choosing GrapheneOS was that I need a phone with a top quality camera, and I want a phone that is less than 3 years old. That alone sets GrapheneOS apart from many other projects as many only support older phones with low to mid range cameras. Then you have the privacy, security, and setting customization that graphene offers and it's a clear top choice for me. Even if the leader is arrogant as some say, his product is good, and exactly what I need at the moment. So with no other projects offering what is important to me, I choose graphene for 2024. It's solid.
Hannah Montana Android.
We don't talk about Hannah Montana Android.
Pixel 5 is end-of-life and shouldn't be used anymore due to lack of security patches for firmware and drivers.
I understand if your friend is on a budget and simply can't afford a non EOL phone but, they should really consider a 6th gen Pixel or better if they care at all about their data security.
Has there been a successful exploit against a phone with old firmware but modern Android security patches?
I am not sure if there is an example of that specific situation as it would be pretty odd for a phone to be receiving security patches but not firmware updates.
Anyway its not super relevant as the Pixel 5 does not receive firmware or security patches anymore.
OP also seems to be inferring he suggested to his friend to use a very specific security / privacy OS that does not recommend using that model phone anymore for the exact reasons I mentioned. Plus the model is only receiving partial support as a stop gap for users to have time to get a newer model and won't be supported much longer anyway.
Custom ROMs will receive upstream Android security patches but not patches from proprietary components (firmware). For instance, my Moto g7 power has Android security patches from May but the latest vendor security patch level is 2021. (I'm running Lineage OS) I'm curious to know if the older firmware is a problem. I don't think it is easily exploitable outside of government backdoors. Not that it matters much as I plan on keeping my phone until it dies.
Not sure where your getting your information but the Pixel 5 has not gotten Android updates or security updates in over 7 months.
There are tons of examples of exploits being used to target EOL phones as its common for people to not care about these updates, or be misinformed, so they are easy targets.
If OP or anyone else wants to use an EOL phone that's fine but, don't pretend its a smart security practice. Although even if I were to use an EOL phone, LineageOS doesn't have the greatest background and isn't really degoogled
You are still missing my point. All phones actively supported by Lineage OS get Android security patches. Those aren't vendor patches but they do patch the OS and sometimes the kernel.
For instance, the Pixel 5 was last updated June 28. https://wiki.lineageos.org/devices/panther/
Not to say that you should still buy it. However, if it cheap it might be worth it.
Also from the article you linked:
Although the incident forced LineageOS to take offline all its service, it did not impact the signing keys that authenticate distributions because they are stored on hosts separate from the main infrastructure.
Those are partial security patches (its not in the same ballpark as a non EOL phone).
Even non EOL phones are usually updated dangerously slow when it comes to LineageOS.
Some more sources, not sure why I'm even adding them as you seem hell bent to believe LineageOS is secure regardless of the facts.
https://eylenburg.github.io/android_comparison.htm
https://www.kuketz-blog.de/lineageos-weder-sicher-noch-datenschutzfreundlich-custom-roms-teil4/
If my device is so insecure why haven't I been compromised? Your "facts" are only important if it promotes Graphene OS.
Lmao putting facts in quotes does not makes them less true. Figures, that when confronted with reality you would immediately start relying on logical fallacies.
Just because you are more at risk of being compromised does not mean you will be compromised. This is obvious.
You don't have to respond if your just going to be a child about it.