Email or username:

Password:

Forgot your password?
xeniax ⏚

Dear Fedi friends. I am choosing an alternative OS for my phone and looking into Graphene.

Does anyone here have any experience with Graphene? What do you think about it? What are the risks and benefits?

Would be so happy to hear your thoughts! Thanks

16 comments
Zak :1password:

@triskelion @Xeniax Ah, it's been great so far! Coming from iOS, it's been way easier than I expected it to be. Granted, I do still rely on some Google software. But I think that's totally fine.

Ian Campbell

@Xeniax I used Graphene for months as my main OS and still consider going back to it, but default to iOS for security. Quick points:

-Have a clear vision of what problem you're trying to solve by using GrapheneOS. If you install Graphene but don't change some other habits that may be related, its utility will be limited.

-Graphene is mostly viable, but certain apps simply won't work as they require validations that Graphene won't/can't pass. Mostly bank and other finance apps, but also Hulu.

Ian Campbell

@Xeniax

-Google Play Services vs. alternative app stores like F-droid have benefits and drawbacks. In particular, F-droid's signing mechanism has drawn criticism (including from outfits like Signal).

-One of the strongest controls I've instituted is using private DNS so I can see and control a lot of the calls the phone makes. Easy to set up with a service like NextDNS, but can also roll your own.

-If DNS feels a bit too far, check out PCAPDroid as it can provide some separate functions.

xeniax ⏚

@neurovagrant thanks a lot for your feedback. I'll read more about both options

Ian Campbell

@Xeniax No problem; if you have further questions, please feel free to hit me up.

Graphene's web installer is super convenient, btw. Really slick/easy install experience.

Thank you for your research work!

Plsik (born in 320 ppm)

@neurovagrant @Xeniax @Xeniax I would also like to use a more secure OS on my phone. I might even get around to installing it, but one thing is holding me back. I don't use new phones, it's beyond my financial means. I buy refurbished ones, for myself and my family. Graphene, Sailfish and the like have a very limited selection of devices, often ones that almost no one here uses. I don't even know anyone who uses minority brand phones.

xeniax ⏚

@neurovagrant thanks! I am usually threat-modelling before shifting to new tools, but this time I admit its more of a lifestyle/ethical choice for me.

silhouette

@Xeniax I have it installed on my Pixel 8, and it's been a pretty flawless experience so far.

Risks I would say is stuff like Google Pay that depends on SafetyNet doesn't work, i.e. your banking app might not (mine does).

Benefits are the security hardening improvements that protect against threats that are an issue even on a fully updated AOSP, and the increased isolation of apps and permission management.

It's in my opinion the most secure mobile OS, only iOS in lockdown mode is even in the same ball park.

@Xeniax I have it installed on my Pixel 8, and it's been a pretty flawless experience so far.

Risks I would say is stuff like Google Pay that depends on SafetyNet doesn't work, i.e. your banking app might not (mine does).

Benefits are the security hardening improvements that protect against threats that...

xeniax ⏚

@silhouette thanks a lot! I dont think my banking app needs google services so far. Need to check. But seems its the best option for a Pixel phone :)

Erpel

@Xeniax@mastodon.ml I think @kaia@brotka.st uses GrapehenOS and also installed it on the phone of their parents. Maybe she can write down her opinion.

lunya (cute) :neocat_floof:

@Xeniax@mastodon.ml I use grapheneos and I like it. you might have to prepare some stuff with your sim, everything else should work. as always check your bank apps tho

Justin (StayGrounded.online)

@Xeniax I've read that tap to pay functionality doesn't work, but that pretty much everything else does. You may want to try using F-Droid exclusively for a month or two before switching over.

stillgreenmoss

@Xeniax i hope feedback of why i did not choose graphene is welcome!

i did not choose graphene because the project has a history of public conflict with other individuals and organizations. i don't want to privilege any over the others by linking to them directly, but you can find information about this pretty quickly with an internet search, and some info on the history page of their website as well

Sam Hafferty

@Xeniax been using it for years and is pretty useful. The biggest issue I have run into is banking apps not working but usually the bank website in a mobile browser works just fine. Some other random apps like rideshare or transit will give a notification that says they will not run without google play services but usually they still work (sometimes I get a random crash but usually runs just fine) you can also choose to install a mirror of google play services as well if you want which would likely resolve those issues but I think banking apps would still be broken. Feels and runs really nicely overall and can't imagine going back to stock android.

@Xeniax been using it for years and is pretty useful. The biggest issue I have run into is banking apps not working but usually the bank website in a mobile browser works just fine. Some other random apps like rideshare or transit will give a notification that says they will not run without google play services but usually they still work (sometimes I get a random crash but usually runs just fine) you can also choose to install a mirror of google play services as well if you want which would likely...

Go Up