idle_zealot
15 hours ago
I really appreciate having a non-Google Android OS, free of Play services and other lock-in, and use Graphene on my own Pixel. The focus on security and hardening is also appreciated, but I wish the project were more ambitious in terms of actually improving on Android in terms of usability, features, and overall experience. As-is it feels like a barebones AOSP with all the security improvements existing as a sort of hypothetical improvement in the background.
whatsupdog
6 hours ago
Why is this the most top voted comment? Do a lot of people really feel this way? Honestly, I feel it's ridiculous to expect this from Graphene OS. It's a privacy focused OS. If you want shiny features there is iOS.
AntiqueFig
5 hours ago
I mean there could be a middle ground between no shiny features at all and iOS.
Vilhelmina
2 hours ago
There are 15 degoogled custom ROMs listed in the wiki at https://customromhardware.miraheze.org so saying this is a binary choice is just wrong.
ysnp
6 hours ago
They are already stretched a bit in terms of doing what they are comfortable and best at which is implementing privacy and security enhancements in AOSP and maintaining them across AOSP changes and upgrades (or getting them upstreamed if palatable to Google/AOSP).
They have made major usability improvements like eSIM support and network-based location. They have also been forced to work on things due to unrelenting popular demand like Android Auto support, sandboxed-google-play and the compatibility layer and Google Messages & RCS support.. to the cost of working on other security/privacy enhancements. At the end of the day, this is more a question of resources available.
I think the task of usability, features and overall experience is better delegated to another group of developers who might then contribute those improvements to GrapheneOS as well in an ideal world.
idle_zealot
5 hours ago
> I think the task of usability, features and overall experience is better delegated to another group of developers who might then contribute those improvements to GrapheneOS as well in an ideal world
I agree completely. I don't expect one small team to carry the weight of building an ideal OS. I'm just disappointed that while there's loads of work being done spinning up interesting desktop OSes with new paradigms for UX and system management, the same can't be said of the mobile space. Everything there is basically some slight variation on iOS.
rldjbpin
5 hours ago
> I wish the project were more ambitious in terms of actually improving on Android in terms of usability, features, and overall experience.
i agree with the sentiment, but not for the features part. just getting the core functionality working across devices (securely of course) is already a lot of tedious work. just look at the dearth of supported devices that do not run a specific soc or from a famous brand.
for vast majority of features, one can personalize themselves by getting apps. most don't need rooting or any technical know-how. it will be unproductive to spend time ricing the os for users when they got their own personal preferences regardless. which is why it is fine to focus on getting the core things right first.
npteljes
6 hours ago
What does Android need "in terms of usability, features, and overall experience"? I personally don't feel that anything is missing. I'd love a denser battery maybe.
idle_zealot
5 hours ago
I'd like to see some experimentation with core system UI, like the notification/quick settings thing. I'm not convinced the weird double-pull-down hybrid thing Android uses is a good design. I'd love to see some experimentation on a multitasking system that isn't clunky and inconsistent. Some of the tweaks Samsung puts in their Android spin could be nice. I'm not expecting a security-focused team to work on this stuff, but it's too bad that nobody is. I feel like we've settled on a pretty lousy core mobile operating system paradigm, and just generally wish people were experimenting and iterating on a variety of ideas.
jampekka
4 hours ago
A lot of people get Pixel and other "vanilla Android" phones to avoid spins like Samsung's.
npteljes
2 hours ago
I see what you mean, but GrapheneOS has completely different goals. Simply put, Graphene strives to be a secure, degoogled Android. Other than that, it has the same goal as the Pixel phones: to be as close to mainline Android as possible.
udev4096
8 hours ago
It would be a complete waste of time for devs to focus on making the AOSP apps pretty. I don't really get the hate, AOSP apps are completely fine and it's not like you have to look at it all the time
jeroenhd
5 hours ago
AOSP apps look and work terrible in my opinion. The music player hasn't changed since what, Android 2?
There's a reason ROMs like LineageOS develop their own alternatives. Most ROMs seem to use those open source alternatives rather than the apps Google abandoned with AOSP.
whatshisface
7 hours ago
Anyone who doesn't like how they look has an absolute right to fix it and no right at all to complain. ;-)
monooso
6 hours ago
They have every right to complain. They don't have any right to expect their complaints to be acted upon.
bestouff
7 hours ago
You can't fix GrapheneOS. It's not LineageOS.
whatshisface
6 hours ago
I'm not sure what you mean. They do have a secret key used for hardware attestation, but to my knowledge it's not supported anywhere and your own build would pass attestation just as well. For apps outside the core you wouldn't even have to do that much - just fork them and install your own.
esseph
13 hours ago
What more do you want your phone to do at this point?
beeflet
13 hours ago
work in 10 years
tasuki
3 hours ago
I'm with you, but we're not far from that?
I had my previous cheapo Chinese phone for 7 years. Only bought new one this year because the battery was gone and the display had some scratches. The photos are a little nicer I guess?
mxmilkiib
6 hours ago
an in-built stylus + swipe input to help avoid RSI
Kudos
4 hours ago
Swipe input isn't the responsibility of the OS. Just install a keyboard that offers it.
jojobas
13 hours ago
While this is awesome, I'm kinda skeptical on the premise on two points.
Almost nobody cares about privacy, and this is going to be super expensive. I might be fine with paying extra, but the economy might not work out, like it didn't for Blackphone. Fairphone is barely alive as well. Seeing as phones are just source of ad money Google can drop the prices on their phones as well.
Some European countries and banks already require crap like Play Integrity for essential apps. So far it's possible to hold out, but for how much longer?
zerof1l
6 hours ago
GrapheneOS user here. Every single banking and financial app I use works. Both European ones and non-European. Some require changing per-app settings, but nothing crazy. There's a good chance that your banking app will work.
https://github.com/PrivSec-dev/banking-apps-compat-report
https://privsec.dev/posts/android/banking-applications-compa...
cookiengineer
7 hours ago
Maybe the real focus should be treating Android as a single purpose environment rather than your real/life depending one.
Maybe the better approach would be focusing on getting postmarketOS to work, and use an emulation or recompilation layer that is running Android in a box (pun intended). Anbox and others were still too painful to use for daily usage, but maybe you can get rid of everything except the things that Play Integrity checks against? Maybe we can make waydroid work?
throawayonthe
6 hours ago
why not the other way around? aosp already has a much better security posture, already runs almost everything virtualised, and will soon run 'desktop linux' apps in a vm
in fact statements from graphene suggest they hope to eventually move away from linux on the host
jojobas
7 hours ago
Doesn't play integrity verify the hardware among other things?
throawayonthe
7 hours ago
it won't be a special graphene phone, they are working with the OEM to make their next flagship meet graphene's security requirements; it'll just be another phone they support that isn't a pixel
XorNot
13 hours ago
This is the real problem: I need my phone to work with my bank. So whatever we're doing, that's the bar to clear.
nebula8804
8 hours ago
Buy the cheapest updatable phone that will work for your bank(probably a used iPhone) and use a free OS for everything else.
dns_snek
7 hours ago
No, I don't want to buy, take care of, and carry around 2 devices at all times. I'm not a drug dealer.
drnick1
4 hours ago
You don't have to carry two phones. The idea is that the second phone stays home powered off and is used as an access token for the bank's website. There is no reason to carry it around. Pay cash in stores or use a credit card when cash is inconvenient.
dns_snek
4 hours ago
I think this is a pretty outdated view of banking. I open a banking app at least a few times a day. In the EU just about every online transaction has to be approved in the app, we also use various payment apps for quick person to person transfers, use the app to generate disposable virtual cards for online purchases, etc.
I could cut myself off from the modern financial world and just use online banking like it's 2010 but that's a pretty big ask.
sharts
4 hours ago
Not a drug dealer but perhaps a bank dealer
mfru
5 hours ago
so only drug dealers use two phones?
dns_snek
4 hours ago
Pretty much, yes. Drug dealers and people who are getting paid to carry a second device for work by their employer. I am neither.
kytazo
4 hours ago
I use 3 banks, they all work as well. Plus they're all on a separate user profile, which makes it even more secure.
Kudos
4 hours ago
I use 4 different banks, they all work with GrapheneOS.
foresto
12 hours ago
Is there something important in banking apps that cannot be done with a web browser?
Gee101
12 hours ago
My bank uses the banking app for auth if I try and login via a browser.
HPsquared
12 hours ago
Barclays in the UK offer (or used to) a hardware device with a keypad allowing the user to do a challenge-response using the bank card's chip and PIN. Not sure if they still do, though.
Edit: https://en.wikipedia.org/wiki/Chip_Authentication_Program
potamic
8 hours ago
What if one doesn't own an android/iphone device? Banking is a fundamental need, so most countries regulate them to cater to a wide range of users. In this case it's possible that the bank could be compelled to provide you a 2FA device if you don't have one.
distances
8 hours ago
I don't think there is such regulation. Many banks simply do not have any other means of authentication any more. They can't give out 2FA devices because their systems just don't support them.
pjmlp
7 hours ago
Good luck with that, in Germany many public transport operators are moving into app based tickets for the monthly/yearly subscriptions.
You can still get a plastic card, however it requires paying extra and some additional forms, the reasoning being it is not environment friendly.
majirdulb
7 hours ago
Do they offer a physical 2FA device? Mine does and it's really useful
array_key_first
11 hours ago
That's because they're stupid or doing something suspicious, probably both.
There's legitimately zero reason to allow 2FA only on your own propreitary app. You can't even make a financial argument - allowing other TOTP methods is cheaper because now you don't need an app!
buzer
8 hours ago
Unfortunately the EU regulation makes the truly user controlled 2FA methods essentially non-compliant.
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...
> Article 7 Requirements of the elements categorised as possession
> 1. Payment service providers shall adopt measures to mitigate the risk that the elements of strong customer authentication categorised as possession are used by unauthorised parties.
> 2. The use by the payer of those elements shall be subject to measures designed to prevent replication of the elements.
jojobas
7 hours ago
This says something along the lines of "it should be hard to extract the TOTP secret".
However if you can get so far as to get the secret from the TOTP app, you can as well back up the entire phone and restore elsewhere, can't you?
nh2
3 hours ago
No, because phones that lock keys in hardware effectively prevent that, and that works only with hardware that prevents its owners from having full control an doing what they want with their hardware.
"Unextractable keys" works with hardware that you don't "truly own".
weikju
10 hours ago
> That's because they're stupid or doing something suspicious, probably both
Small comfort for whoever needs to use that bank. This is the disconnect geeks and Free Software needs to bridge to make any headway.
exe34
7 hours ago
it costs basically nothing to change banks. you sign up to a new one and they transfer your account and direct debits. you just tell your employer where to send your next salary payment.
ForHackernews
14 hours ago
You might like /e/OS. It's less secure/hardened than Graphene, but offers a de-Googled Android with a focus on privacy and usability.
user2722
13 hours ago
It uses microG which has its own set of issues, though.
cookiengineer
7 hours ago
And it's a 1:1 copy of LineageOS, so there's that.
ysnp
7 hours ago
The base operating system is quite far behind on app compatibility, privacy and "deGoogling" in comparison to GrapheneOS https://eylenburg.github.io/android_comparison.htm.
ForHackernews
5 hours ago
/e/OS blocks trackers in apps out of the box. AFAIK Graphene doesn't do anything similar.
ysnp
4 hours ago
Because the technicalities of accomplishing something like that are quite complicated from what I understand. If an app has the necessary permissions and network access, almost anything you try to stop it from transmitting data about the platform and data about its usage is futile.
You're firing a starting pistol for a race to the bottom where app developers just end up sending all that information to their own first-party servers instead to be shared with whoever they wanted to anyway.
GrapheneOS absolutely tries to deal with the root of the issue, by giving the user control over sensors and network permissions that return fake/simulated data to keep the app running while denying access to data in the first place. Or contact scopes and storage scopes which restrict access to contact information or storage locations in the first place. As you can imagine, more are planned like location scopes, app communication scopes etc.