410
submitted 6 months ago by fne8w2ah@lemmy.world to c/android@lemmy.world
you are viewing a single comment's thread
view the rest of the comments
[-] Shyfer@ttrpg.network 41 points 6 months ago

Is Graphene OS good? Any downsides? I need to get a new phone soon.

[-] DaddleDew@lemmy.world 40 points 6 months ago

I switched to it a year ago and I like it. The biggest draw for me is it gives me back control and ownership over my phone. It gives you actual and thorough control over what apps can do on your phone including Google's apps, which on other typical Android OS are being given all or most permissions with no ability for you to deny access to any of them.

To gain almost all the functionality of a regular Android OS you can install Google Play Services and run it sandboxed, which means it will only do what you allow it to do and access only what you will allow it to access, which for me is the bare minimum before things stop working too much for my tastes.

Besides Android auto for now, the only thing that won't work for me on it is my banking app, probably because of all the security checks involved in it. But I just use the browser-based online service to do my banking operations instead.

[-] keefshape@lemmy.ca 23 points 6 months ago

I got my banking app working by going into App Info for it, and toggling this to on.

[-] Salix@sh.itjust.works 8 points 6 months ago

This is also what I use to get 3 banking apps working

[-] TWeaK@lemm.ee 8 points 6 months ago

Banking apps can usually be defeated by Magisk in Zygist mode, then you use the deny list to hide things from the app. Some might check with Google for security, which is much more difficult and maybe even impossible to circumvent, but in my experience these days they work fine.

[-] Salix@sh.itjust.works 4 points 6 months ago

Don't you need to root to use Magisk? You can't root in GrapheneOS

[-] jvrava9@lemmy.dbzer0.com 5 points 6 months ago

You can tho its not advised

[-] TWeaK@lemm.ee 0 points 6 months ago

Magisk is how you get root.

Magisk also allows app spoofing, which may be something of a security risk, but using it to bypass things like banking app checks is one of the benefits. Personally, I like having root, and to me the benefits are worth the risk.

It may even be that GrapheneOS uses a little bit of Magisk's type of functionality. At least, that's how LineageOS4MicroG works - you need app spoofing to install MicroG, however this ROM comes with it preinstalled but disabled for anything else, so it closes the security hole. However, you probably can't defeat Google's SafetyNet with MicroG anymore.

[-] iturnedintoanewt@lemm.ee 3 points 6 months ago

I never managed to get MS "company portal" to successfully create a work profile. I had to give up in the end.

[-] lseif@sopuli.xyz 2 points 6 months ago

if you dont mind me asking, which banking app do you use? have you checked out the privsec.dev compatibility report?

[-] DaddleDew@lemmy.world 2 points 6 months ago

My banking app is in the list and already has a number of reports against it reporting the same problem I have with it. Exploit protection compatibility mode was already enabled on my phone. The app just freezes upon startup ever since an update that rolled in later last year and as I said, this problem has already been reported by other users.

[-] lseif@sopuli.xyz 1 points 6 months ago

:( thats annoying. i assume you have google play services installed.

its a good thing your bank doesnt enforce using the mobile app, like mine...

[-] iturnedintoanewt@lemm.ee 1 points 6 months ago

I never managed to get MS "company portal" to successfully create a work profile. I had to give up in the end.

[-] TWeaK@lemm.ee 0 points 6 months ago

Banking apps can usually be defeated by Magisk in Zygist mode, then you use the deny list to hide things from the app. Some might check with Google for security, which is much more difficult and maybe even impossible to circumvent, but in my experience these days they work fine.

load more comments (1 replies)
[-] wesker@lemmy.sdf.org 13 points 6 months ago

I think it's great, and have been daily driving it for I think almost 3 years now. With the addition of sandboxed Google Play services, there's little it can't handle.

[-] pHr34kY@lemmy.world 10 points 6 months ago* (last edited 6 months ago)

I'm running it. Bank apps and Safety net things (like Pokemon Go) all work. Aside from Android Auto, Google Pay refuses to work.

So, there's no downsides.

Actually, Google Translate didn't play ball when I tried it. I miss that one.

[-] Shyfer@ttrpg.network 5 points 6 months ago

I really like Android Auto so I'll probably wait until they at least get that working to change. I wonder if Samsung Pay works on there...

[-] KmlSlmk64@lemmy.world 2 points 6 months ago

I would guess that Samsung pay relies on Knox, which gets disabled by blowing an e-fuse, when you run a custom os. But maybe I'm wrong.

[-] vox@sopuli.xyz 2 points 6 months ago* (last edited 6 months ago)

ah, that's a shame. I'm heavily relying on google pay (also BLIK, but I'm usingboth polish and Ukrainian cards, and blik is a poland-only thingy) since i only have virtual credit cards right now. having everything (bank cards, govt ids etcs) on my phone is just too convinient to give up like that

[-] DreamlandLividity@lemmy.world 2 points 6 months ago

I was concerned with this myself and planned to just add a physical card under my phone case, but I was suprised how little difference using the card normally made.

And if you care about privacy, you probably shouldn't make your purchases using a google app.

[-] pHr34kY@lemmy.world 3 points 6 months ago

That's the vibe I got from it. It took longer to activate the app than it took to get a card out of my wallet. It had the potential to fail if my battery was flat. Google could track my shopping habits.

So, that's a pass.

[-] pricklypearbear@lemmy.world 8 points 6 months ago

From my experience, its overall good. Its basically stock android, meaning no google smart features and apps by default, with more control over apps and google services. But for caution, some apps may break. You will have to mess around with the app settings to fix them. Also some apps will not work such as the google wallet app due to the OS not being acknowledged as official by google.

In short, its a more security focused OS that may require more involvement in configuration.

[-] Strawberry@lemmy.blahaj.zone 1 points 6 months ago

is there any way to do NFC payments with grapheneos?

[-] quentangle@lemmy.world 2 points 6 months ago

Google Wallet didn't work last time I checked, but contactless payments worked perfectly well by setting my banking app as the payment app.

Not all banking apps work due to the system integrity checks they do. Support for your banking app can probably be confirmed here.

[-] Strawberry@lemmy.blahaj.zone 1 points 6 months ago

Confirmed my app works on GrapheneOS but doesn't seem to implement payment functionality. Guess they rely on google/apple/samsung pay 🤦

Now that I know this is a thing any banking app can just do, I am so disappointed in the predominance of "digital wallets"

[-] quentangle@lemmy.world 1 points 6 months ago* (last edited 6 months ago)

That's a shame. I wouldn't bet on Google Pay ever working on GrapheneOS.

[-] FractalsInfinite@sh.itjust.works 8 points 6 months ago* (last edited 6 months ago)

Upsides: Everything just works, no google tracking, creating a google account is optional and its easy to setup

Downsides: You aren't able to automatically backup the internal storage of apps without a lot of work (external files such as photos and documents are fine though)

I've been using it for about 1.5 years, I would recommend using it if possible

[-] helenslunch@feddit.nl 6 points 6 months ago* (last edited 6 months ago)

Biggest downside is you lose Android Auto haha

But also pretty much all the Pixel-specific features like Call Screen, Hold For Me and many more.

Other than that it's fantastic and easy to install.

I still use Google Contacts, Camera, Photos and GBoard, all with internet connectivity disabled.

[-] cyborganism@lemmy.ca 6 points 6 months ago

Doesn't it only support Pixel phones?

[-] FractalsInfinite@sh.itjust.works 3 points 6 months ago* (last edited 6 months ago)

Yes, if you want an alternative that supports more phones, look into Calyx OS

[-] EddyBot@lemmy.world 2 points 6 months ago

I love CalyxOS but they don't support Android Auto at the moment if this a dealbreaker for anyone

[-] Kingofthezyx@lemm.ee 1 points 6 months ago

I used the Google to destroy the Google

[-] Contort3860@links.hackliberty.org 5 points 6 months ago

Get a Pixel and give it a shot. If it doesn't work for you the Pixels have amazing support in the custom ROM community so you'll be able to find something you like for sure.

[-] ripley@lemmy.world 4 points 6 months ago

I just moved from a Samsung - migration was a lot of manual work for me. Whether it's worth it depends on how much the increased security and control are worth to you. They were to me - I haven't had any issues otherwise.

[-] lseif@sopuli.xyz 3 points 6 months ago

i, for one, only have good things to say about it, EXCEPT device support (which is not GOS's fault)

[-] Dehydrated@lemmy.world 2 points 6 months ago

GrapheneOS is probably the best, most private and secure Android ROM out there. I can only recommend it.

[-] TWeaK@lemm.ee 1 points 6 months ago

The only real downside is that the developers are divas. Also, there's something to be said about the security of a Google manufactured device and thinking your custom firmware protects you from them, however really that's true of any device, and the security benefits of sandboxing and other features may outweigh this.

[-] Uranium3006@kbin.social 8 points 6 months ago

google's shit is literally malware

[-] thefartographer@lemm.ee 2 points 6 months ago

You can't get an infection if you're a virus

[-] Shyfer@ttrpg.network 2 points 6 months ago
[-] gavin_01@lemmy.world 4 points 6 months ago

Louis Rossmann explains it well in his video here

[-] TWeaK@lemm.ee 4 points 6 months ago

I'm pretty sure there have been stories going back years before this, but yeah that's a good example.

[-] helenslunch@feddit.nl 3 points 6 months ago

The lead dev has left the project. He was responsible for pretty much all of that. Presumably that is why.

[-] raldone01@lemmy.world 1 points 6 months ago* (last edited 6 months ago)
this post was submitted on 03 Jan 2024
410 points (98.6% liked)

Android

26849 readers
132 users here now

DROID DOES

Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


1. All posts must be relevant to Android devices/operating system.


2. Posts cannot be illegal or NSFW material.


3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.


4. Non-whitelisted bots will be banned.


5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.


6. Memes are not allowed to be posts, but are allowed in the comments.


7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.


8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.


Community Resources:


We are Android girls*,

In our Lemmy.world.

The back is plastic,

It's fantastic.

*Well, not just girls: people of all gender identities are welcomed here.


Our Partner Communities:

!android@lemmy.ml


founded 1 year ago
MODERATORS