this post was submitted on 27 Jan 2025
86 points (100.0% liked)

Privacy

800 readers
57 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I'm looking to get a custom ROM that has good compatibility with my device. Would you recommend /e/? I couldn't find a tutorial on how to install it with Linux but I don't think it should be that hard to figure out.

you are viewing a single comment's thread
view the rest of the comments
[–] Imprint9816@lemmy.dbzer0.com 8 points 1 month ago* (last edited 1 month ago) (2 children)

Hard truth: outside of GrapheneOS there is very little security and privacy gains from a custom Android OS over stock.

From best to worst:

Graphene OS

iOS

Stock Android / non rooted custom OS

Branded stock android

Rooted phones of any type

EOL phones

[–] asudox@lemmy.asudox.dev 23 points 1 month ago (2 children)
[–] Imprint9816@lemmy.dbzer0.com 4 points 1 month ago* (last edited 1 month ago) (4 children)

Sorry its true. The app sandboxing and private relay alone are better then anything stock or these lower tier custom android os provide.

[–] skarn@discuss.tchncs.de 3 points 1 month ago (1 children)

That seems like an overly black and white position over something that can be either quite valid or entirely nonsense depending on the situation and/or threat model.

[–] Imprint9816@lemmy.dbzer0.com 3 points 1 month ago* (last edited 1 month ago) (1 children)

Something's are just more secure and private then others. That's just a fact. For example, as of now GrapheneOS is the most secure and private consumer mobile OS. There is no gray area.

Now whether your threat model requires it, can be much less black and white.

But users here tend to gamify privacy and think they should get whatever the "best" one is. They tend to do whatever the most upvoted github list tells them to do.

Rarely do I see someone like yourself, who considers threat model.

[–] skarn@discuss.tchncs.de 5 points 1 month ago* (last edited 1 month ago) (1 children)

GrapheneOS wins, but whether iOS is more private than CalyxOS or /e/OS I think is very gray, and depends on the threat model, and on most devices they are going to be a significant improvement in privacy, and often security, over stock Android.

And privacy may not be the only consideration when choosing a device.

Since my threat model includes mainly surveillance capitalism (and no evil maids or targeted attacks) I don't particularly feel like trusting a big tech that's running their own targeted advertisement system.

[–] Imprint9816@lemmy.dbzer0.com 2 points 1 month ago* (last edited 1 month ago) (1 children)

Personally I think if you look at what privacy features CalyxOS actually offers or read reviews from someone like kuketz you realize its pretty lacking in both privacy and security.

What Calyx does offer is a decently degoogled experience for people who don't have the budget, access, or want for a Pixel with GOS.

I understand your issues with Apple, that's fair. OTOH I think their offerings, such as private relay, RCS messaging by default, properly implemented sandboxing are objectively better privacy features then what most android operating systems can offer. They also are much more reliable in terms of security updates.

I also have had issues with Calyx using pretty obvious lies to market themselves such as saying the OS can't be tampered without your knowledge. Not that Apple doesn't have its fair share of blemishes.

[–] skarn@discuss.tchncs.de 1 points 1 month ago (1 children)

And you think degoogling offers no obvious benefits in terms of privacy?

[–] Imprint9816@lemmy.dbzer0.com 1 points 1 month ago (1 children)

I do. I think its a bit overblown as none of these operating systems are completely degoogled.

I think its much better to focus on things like not having apps with privileged access this includes, a lot of peoples go to play services replacement, MicroG.

[–] skarn@discuss.tchncs.de 1 points 1 month ago

I can empirically say, that just switching from stock to a degoogled ROM gave me a significant battery boost. I have no idea what that thing was doing in the background, but it's already doing a lot less of that.

For microG... Until UnifiedPush becomes more widespread the choice between having your notifications go through FCM and halving your battery life is going to be a tricky one.

[–] asudox@lemmy.asudox.dev 2 points 1 month ago* (last edited 1 month ago) (1 children)

I'm pretty sure you implied that the ranking was based on security and privacy. I don't see the privacy benefits of using iOS over a custom privacy OS.

[–] Imprint9816@lemmy.dbzer0.com 2 points 1 month ago* (last edited 1 month ago) (1 children)

Do your research then. I'm not here to hand hold you through this.

Privacyguides.org is a great place to start for beginners.

Their forum is also a much more informed community then what you will find here or god forbid r/privacy

load more comments (2 replies)
[–] Psyhackological@lemmy.ml 2 points 1 month ago (1 children)

Yeah I would put it #1.

Why?When a mobile hardware is only from Apple.

[–] skarn@discuss.tchncs.de 4 points 1 month ago (1 children)

I have read this several times, and still have no clue what you're trying to say.

[–] Psyhackological@lemmy.ml 1 points 3 weeks ago

iOS should be number one when limiting hardware only made by Apple.

[–] SitD@lemy.lol 5 points 1 month ago (1 children)

root allows system-wide adblocking. thus more privacy, not less privacy

[–] Imprint9816@lemmy.dbzer0.com 4 points 1 month ago (2 children)

Root also adds massive attack surface which easily outweighs those benefits. Not to mention non rooted DNS solutions provide a similar benefit.

[–] Spider89@lemm.ee 9 points 1 month ago (1 children)
[–] Imprint9816@lemmy.dbzer0.com 3 points 1 month ago* (last edited 1 month ago) (1 children)

That's idiotic. Your data being insecure is inherently not private.

They are two sides of the same coin.

[–] asudox@lemmy.asudox.dev 1 points 1 month ago* (last edited 1 month ago) (1 children)

So more security equals more privacy? Is that why iOS is second in your rankings?

[–] Imprint9816@lemmy.dbzer0.com 1 points 1 month ago* (last edited 1 month ago) (1 children)

Not necessarily, there are tons of things that are very secure but not at all private.

But.. having a massive attack surface and known security issues and thinking your data is somehow private because you use a FOSS application is silly.

EDIT to answer your edit: partly. I mean regular timely security updates seems to be a struggle for most of these android OS but also because it provides a bunch of privacy by default options that these other android ROMs don't such as a private relay, default RCS messaging, and makes them easy for users.

[–] asudox@lemmy.asudox.dev 1 points 1 month ago (6 children)

You do have a good point. However, I can’t consider a proprietary operating system like iOS truly private. It may be secure (certainly more so than stock Android and some random custom Android based ones) but if I can’t be sure that my operating system isn’t spying on me, then security alone doesn’t matter much for me tbh. Apple’s operating systems are no exception to this.

So, in a ranking that considers both security AND privacy, iOS being the second one is questionable. However, if the ranking is based solely on security, then I have no issue with it.

load more comments (6 replies)
[–] SitD@lemy.lol 2 points 1 month ago (1 children)

Windows is rooted by design, and that's completely fine by everyone and their dog

[–] Imprint9816@lemmy.dbzer0.com 3 points 1 month ago* (last edited 1 month ago)

Lol nobody is calling windows secure or private. Nobody even mentioned it.

Companies literally pay thousands of dollars a year in hardware and enterprise software to make up for its deficiencies.