this post was submitted on 05 Feb 2024
78 points (100.0% liked)

DeGoogle Yourself

197 readers
1 users here now

A community for those that would like to get away from Google.

Here you may post anything related to DeGoogling, why we should do it or good software alternatives!

Rules

  1. Be respectful even in disagreement

  2. No advertising unless it is very relevent and justified. Do not do this excessively.

  3. No low value posts / memes. We or you need to learn, or discuss something.

Related communities

!privacyguides@lemmy.one !privacy@lemmy.ml !privatelife@lemmy.ml !linuxphones@lemmy.ml !fossdroid@social.fossware.space !fdroid@lemmy.ml

founded 4 years ago
MODERATORS
 

About a week ago, I finally made the decision to flash GrapheneOS on my Pixel 6. I've been thinking about moving to GrapheneOS for months but was afraid to do so because of missing functionalities or app incompatibility that would result in my Pixel 6 becoming unusable. Even though I could just re-flash stock Android should I encounter those issues, I didn't want to bother.

However, last week, I decided to set aside my fears and made the move to GrapheneOS. Whatever fears or concerns I had about missing functionalities or app incompatibilities were completely unfounded. Flashing of GrapheneOS was really easy, thanks to the instructions they provided on their website. The sandboxed Google Play environment still allowed me to download the key apps I needed, whether it be the mobile game that I'm currently playing or a smart home app (e.g. Ring) or a banking app (e.g. Chase). They all worked as expected, though my banking apps required me to turn on Exploit Protection Compatibility Mode, something that was explained to me in one of the Graphene Discussion Boards. Android Auto was another app that I needed for driving, and thanks to the latest update that was made by the GrapheneOS makers, I had no issues in setting up Android Auto to work with my car. That was a huge relief for me!

That being said, there is one thing that is not working, but it's not that important of a feature for me, and that is NFC. Prior to making the move, I did not use NFC that much for payments, although my car app did have a Remote Key function that relied on NFC. As far as I can tell, it looks like NFC is not usable in GrapheneOS. There's probably a good security and/or privacy reason for this, but I do wish something could be implemented for it, as it can be quite convenient. Again, it's not that important of a feature for me to have right now...more of a "nice to have" feature...but I wonder if the GrapheneOS developers are looking into this.

Anyways, it's only been a week since I made the move. I'm sure more use cases will come up the more I use GrapheneOS, and instead of fear, I find myself excited at testing out more apps and functionalities on the OS. Traveling is one scenario I have not yet tried, but that's because I'm not leaving town to go anywhere. That's one set of scenarios that I look forward to trying out.

If anyone has any other advices or information they have about their experience with GrapheneOS, I would welcome it. And for those who are still undecided about moving to GrapheneOS, I hope this post relieves some of your anxieties or worries about making the transition.

top 39 comments
sorted by: hot top controversial new old
[–] ninjan@lemmy.mildgrim.com 27 points 7 months ago

NFC for security related things relies on certificates that belong to Google. GrapheneOS / LineageOS etc could make their own and put forward to the banks/credit card companies/car companies etc but the likelihood that they'd get them signed and approved is basically nil.

Pretty much the same core issue that means you can't run streaming services at 4K outside mainstream devices like Chromecast or Nvidia Shield etc. You can't make it work on a HTPC or a cheap Android TV stick from AliExpress, because it lacks the certificates to authenticate to Netflix etc. As well as HDCP and other DRM which is needed.

[–] dracs@programming.dev 12 points 7 months ago

I swapped to it at the start of the year. I've been really enjoying it so far. I'm down to a single app which requires Google Play Services installed. As it's only one app I've created a second profile specifically for it and only have Google services installed in that one. I've disallowed it running in the background too, so my phone is never running the services outside the brief times I need to use the app.

Losing contactless payments was a minor inconvenience, but I picked up one of the cases which can fit a couple of cards inside as an alternative.

[–] TheaoneAndOnly27@kbin.social 11 points 7 months ago (1 children)

I've been really considering switching to grapheneOs, But I'm a therapist and we have to use Google voice for our office numbers. Does Google voice still ring through if it's in a sandboxed environment?

[–] jjlinux@lemmy.ml 1 points 6 months ago

It does, you have nothing to worry about.

[–] chemicalwonka@discuss.tchncs.de 8 points 7 months ago (2 children)

My only problem with GrapheneOS is when I record the screen on Vanadium browser it doesn't capture the audio

I'd like to see some features as:

  1. Block Screenshot whole system

  2. True Black Mode to make the most of the OLED screen

  3. Extreme Power Saving

  4. Block recharging when it reaches 80% to preserve battery health

[–] any1th3r3@lemmy.ca 4 points 7 months ago (1 children)
  1. Although not OOTB, I can recommend SaverTuner for that.
[–] chemicalwonka@discuss.tchncs.de 2 points 7 months ago

I don't know if is a good option because I need to use adb to write some settings this could break the security model of the system but thanks for your recommendation

[–] dataprolet@lemmy.dbzer0.com 2 points 7 months ago (1 children)
[–] chemicalwonka@discuss.tchncs.de 4 points 7 months ago* (last edited 7 months ago) (1 children)

my Pixel 6 doesn't stop charge when reaches 80% and there is not an option to enable this feature

[–] dataprolet@lemmy.dbzer0.com 2 points 7 months ago

Nobody said it would.

[–] kilgore_trout@feddit.it 7 points 7 months ago (1 children)

NFC works, you just cannot use it for Google Pay.

Why would you use Google Pay if you care about privacy? It's not like credit cards have been decommissioned.

[–] heygooberman@lemmy.today 6 points 7 months ago* (last edited 7 months ago) (1 children)

Oh, I don't use Google Pay with NFC. Prior to flashing GOS on my Pixel 6, the only time I used NFC was to unlock my car when I didn't have the physical key fob with me. That was done through my car manufacturer's mobile app (BMW). However, when I went to set up the digital key after flashing GOS, the app told me that it couldn't set up the digital key, because I was using an unsupported version of Android.

[–] kilgore_trout@feddit.it 6 points 7 months ago (1 children)

Sorry, I replied to you but was reading another comment.

The fault is not of GrapheneOS, but of reliance on Google Play Services

[–] heygooberman@lemmy.today 2 points 7 months ago

That's alright!

Yeah, I think there's another comment on this post that mentioned the same thing.

[–] guyrocket@kbin.social 5 points 7 months ago (3 children)

I'm in a similar place as the OP.

One question I have is about Vanadium. This is chrome based, right? Is it really the best/most secure browser? Aren't the better secured flavors of Firefox better (LibreWolf, Fennic, etc.)?

[–] z3rOR0ne@lemmy.ml 10 points 7 months ago (1 children)

The GrapheneOS team has written extensively on why they advise against the use of Firefox in their Usage Guide.

[–] heygooberman@lemmy.today 4 points 7 months ago* (last edited 7 months ago) (1 children)

You beat me to it! I was gonna mention the same thing. However, I don't think it may be that big of a deal if you use Firefox or some flavor of it. The one term I often hear about GrapheneOS and other AOSPs like it is "threat model", and depending on that model, you may not necessarily be impacted if you decide to use something other than the stock browser.

That's not to say the GrapheneOS developers are wrong in their Usage Guide. I'm sure they looked into this extensively, hence the usage guide.

[–] z3rOR0ne@lemmy.ml 0 points 7 months ago

I personally use both Mull and Vanadium depending on what I'm doing.

I use Mull with NoScript to just browse. If I need JS or need to log in (very very rare), I use Vanadium. This is the compromise I make.

[–] thejevans@lemmy.ml 7 points 7 months ago (1 children)

It depends. I use GrapheneOS to avoid Google as much as possible, not to be the most secure thing in the world. I use Firefox with addons for a much less annoying browsing experience.

[–] LoveSausage@lemmy.ml 1 points 7 months ago* (last edited 7 months ago) (2 children)

If you are using Firefox on android you are using Firefox AND Chrome. Webview is chrome whatever browser you use. So using Firefox double the attack surface and weakens security since Firefox is not properly sandboxed.

[–] cabbage@piefed.social 2 points 7 months ago (1 children)
[–] LoveSausage@lemmy.ml 3 points 7 months ago* (last edited 7 months ago) (1 children)

If you open a link in an app you are using the webview , gecko is not a webview. As Firefox says: "Google does not allow a third party to implement the System WebView and the GeckoView API is not compatible with the WebView API in a very meaningful way unfortunately, so this is not possible."

[–] cabbage@piefed.social 3 points 7 months ago

Ah, I thought you were implying that FireFox itself depends on Chrome for rendering.

I feel like I'm not exposed to vebview particularly often when using my phone though, maybe in part because I dislike it and tend to actively avoid it in my workflow.

[–] thejevans@lemmy.ml 1 points 7 months ago (1 children)

Sure. That's fine. My point was that your goals matter to determine if something is good or not. My goals involve no ads, dark reader, and script blocking for better user experience.

[–] LoveSausage@lemmy.ml 1 points 7 months ago

Sorry answered on yours instead of op thread

[–] Quereller@lemmy.one 1 points 7 months ago (1 children)

The GrapheneOS devs largely prefer their chromium based browser. I however decided for me that a combination of the URLCheck and Mull apps fits my needs best.

[–] guyrocket@kbin.social 1 points 7 months ago (1 children)

Could you kindly explain why it meets your needs best?

[–] Quereller@lemmy.one 1 points 7 months ago

Ok, I try. So URLcheck is just nice to review what you have clicked and maybe remove some tracking.

I prefer Mull because I have the impression I get better privacy. First, there is Adblock and other extensions which ( I think) I can't use in Vanadium. And second, I use a feature to delete just any history/ cookie etc. on app close. I think this option is also not available.

[–] Shamot@jlai.lu 4 points 7 months ago (2 children)

I have no problem using NFC with GrapheneOS on a Pixel 4A.

[–] heygooberman@lemmy.today 5 points 7 months ago (1 children)

What's your use case for NFC on your Pixel 4A?

[–] Shamot@jlai.lu 3 points 7 months ago

I just used it to try some NFC-proof wallets, scanning my bank card with and without the wallet. I don't use it everyday.

[–] smeg@feddit.uk 1 points 7 months ago

I think NFC is fine, it's the proprietary parts of Google Pay that GrapheneOS can't do

[–] shortwavesurfer@monero.town 4 points 7 months ago (1 children)

Odd, I have used NFC before on lineage OS, but not for payments, obviously.

[–] bradboimler@startrek.website 6 points 7 months ago

This only affects payments using nfc as graphene os certificate would not match Googles.

[–] livestreamedcollapse@lemmy.ml 2 points 7 months ago

The one thing I've had issues with has been sending files to other devices over Bluetooth, but receiving hasn't been a problem. Has anyone else had this issue & been able to fix it?

[–] pescetarian@lemmy.ml 1 points 7 months ago

Аnd all your privacy ends when you insert a SIM card into your phone. Not sarcasm, but kind of....

[–] EponymousBosh 1 points 7 months ago

I've been using GrapheneOS for a couple years now, both with and without the Google compatability apps. I vastly prefer without, but I'm lucky in that my credit union's app will function without Google.