Do not really understand how Android sandboxing works for system apps.

    • The Hobbyist@lemmy.zip
      link
      fedilink
      arrow-up
      17
      arrow-down
      2
      ·
      3 years ago

      “Good” really depends on what you’re after. Do not use CalyxOS if you care about security. They are significantly behind in implementing security patches, regularly. You are in some way more vulnerable with CalyxOS than regular android on a pixel because you would get security updates faster on pixel. Additionally, the network permission of GrapheneOS is a paramount security and privacy feature. Also, GrapheneOS takes over all location services requests even if you use google services, making sure that even if google services are installed, google only gets location info whenever the location request is for the google services, not all/any services or apps on your phone. There are additional points too, but CalyxOS, while I don’t want to bash them, should not be considered a secure OS the same way GraphemeOS is.

      • Possibly linux@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        11
        ·
        3 years ago

        The problem with Graphene os is that it is unethical. I want my device to be fully free or as free as it possibly can be. Graphene doesn’t see to care about that.

        Calyx is a bit better because it is a little stricter on software. Probably the best solution is to only install a apps you need and only get them from F-droid.

        • shabi@lemmy.fenbushi.site
          link
          fedilink
          arrow-up
          11
          arrow-down
          2
          ·
          3 years ago

          How is GrapheneOS unethical? How isn’t it as free as CalyxOS? Basically everything they add to the OS can be disabled. Personally, I’d say GrapheneOS and CalyxOS are the same in this regard.

          How is CalyxOS stricter on software? With GrapheneOS, a user can opt to only use F-Droid to install everything too if they wanted to.

      • Possibly linux@lemmy.zip
        link
        fedilink
        English
        arrow-up
        4
        ·
        3 years ago

        Divest os is much more free in terms of software freedom. They minimize binary blobs and keep everything clean. They also maintain mull browser.

            • miss_brainfart@lemmy.ml
              link
              fedilink
              arrow-up
              2
              ·
              3 years ago

              The only problem I have with it is one I have with Custom ROMs in general:

              The Camera API to make use of all the lenses modern phones have. There is one single app that can somewhat hook into it for me to use my second lens, and it’s extremely unstable to the point of being functionally useless.

        • TheAnonymouseJoker@lemmy.ml
          link
          fedilink
          arrow-up
          3
          arrow-down
          1
          ·
          3 years ago

          DivestOS dev bans anyone that criticises GrapheneOS on the orders of Daniel Micay. An excerpt from my GrapheneOS expose few months ago:

          DIVESTOS DEVELOPER BANNING ME ON MICAY’S ORDERS OTHERWISE HE WILL INITIATE A SOCIAL MEDIA HARASSMENT CAMPAIGN AGAINST DIVESTOS

          Yes, this happened, and this is my favourite part as far as everything GrapheneOS head/mods have done to date. As dramatic as it sounds, Micay in realtime, in DivestOS’ XMPP chatroom, was accusing me of the typical “harassment ringleader campaign” BS, and ordered DivestOS/Mull developer (these are his aliases) SubZer0Carnage/Tad/SkewedZeppelin that if I was not banned immediately, DivestOS and him would face social media targeted campaign and DivestOS will have to forcibly pull off any borrowed GrapheneOS code. DivestOS developer dusted his hands off me, since he does not like me apparently for liking some closed source software and he benefits off of the crybully. Also, unlike the crybully, I have never harassed or harmed anyone because I have a moral conscience to not be an abusive asshole on internet, so he will face no issues on my end.

          Screenshot 1: https://i.imgur.com/Al65uTZ.jpg

          Screenshot 2 continuation: https://i.imgur.com/mT8W9pa.jpg

    • JackGreenEarth@lemm.ee
      link
      fedilink
      arrow-up
      6
      ·
      3 years ago

      Everyone talks about custom ROMs, it’s so fucking annoying not a single one is supported on my Motorola g73. Next phone I’m getting is a fairphone, and I’ll dual boot a custom Android ROM and postmarket OS.

    • Skimmer@lemmy.zip
      link
      fedilink
      arrow-up
      6
      arrow-down
      1
      ·
      edit-2
      3 years ago

      I recommend checking this table out.

      CalyxOS misses the mark imo. It does a couple things well (such as its improved Dialer app, and the ability for hotspots/tethered devices to be able to use the phone’s VPN/Tor) that I hope to see other projects adopt, but beyond that, it just doesn’t seem to stack up.

      I’m not trying to bash them or anything because at the end of the day, they clearly have good intentions which I can respect, but I do hope they improve on a lot of things, because in its current state, CalyxOS just doesn’t even compare to GrapheneOS or DivestOS.

      • nosnahc@jlai.lu
        link
        fedilink
        arrow-up
        2
        ·
        3 years ago

        The only thing which stop me to install Graphene is that I need some apps that I’m not sure will work with this os

        • Skimmer@lemmy.zip
          link
          fedilink
          arrow-up
          3
          ·
          3 years ago

          GrapheneOS has pretty much perfect app compatibility. I don’t think I’ve ever ran into an issue in around a year of using it as my daily driver.

          Most apps function without Play Services, but you may lose some functionality like notifications, and a couple apps do very rarely genuinely break. But, that’s where Sandboxed Play Services comes in, which you can even put in an entirely separate user profile if you want to, so that you can still safely use those apps.

          But yeah, I’ve personally had no issues with app compatibility. Even my bank app works perfectly on Graphene (didn’t even require Play Services either!).