On my #pixel7 running #GrapheneOS, I like having these toggles as my first 8 in the quick setting menu (swipe down from the top). This allows me to quickly ensure my camera, mic, hotspot, all radios, etc. are OFF unless needed, then I can also easily turn them ON/OFF as needed.
Big shout out to #DivestOS team for creating the attached comparison tables! Seems like #bromite and #brave are most all-round secure & private mobile browsers.
If you're in the market for an Android OS that respects your privacy, has secure defaults, and still enables you to use Google apps and Play store apps on your own terms - I highly recommend it. Great experience using it so far.
Hat jemand von euch @delta auf @GrapheneOS laufen? Ich stelle gerade fest, dass die App dauernd beendet wird und wollte mal wissen, ob dies bei anderen auch so ist.
Debugging folgt hier später.
We currently sign our factory images releases with the signify tool from OpenBSD. It provides tiny signatures that are easy to verify on any distribution with signify in their repositories. This is much less important than in the past because you can verify the completed install.
While doing some digging I found this video expanding on the drama surrounding #GrapheneOS. This is an older video, but it eventually lead to the fallout between Louis Rossmann and the lead developer of the project. I don't have a dog in the fight since I'm only just dipping my toes into the world of custom #Android ROMs, but if this is the kind of behavior I can expect from GrapheneOS, I'll probably avoid it until they can prove they've matured.
Wechsel zu neuem Gerät, System (GrapheneOS) bleibt gleich. Hat jemand schon mal Seedvault genutzt, um seine gesamten (App-)Daten inkl. Einstellungen auf das neue Gerät zu kopieren? Wenn ja, wäre ein kurzer Erfahrungsbericht interessant.
A few days later, how am I feeling about my switch from stock Android to #GrapheneOS ?
Mixed bag. Overall glad I did it, but it also shows me how much more degoogling I need to do.
I think locking down RethinkDNS to "deny by default" and only unblocking specific apps to specific domains is working out well for me. I expected more problems, and I still occasionally need to go adjust the safelists, but it mostly works.