Genghis

@Genghis@monero.town

This profile is from a federated server and may be incomplete. Browse more on the original instance.

A cyberattack forces a big US health system to divert ambulances and take records offline (abcnews.go.com)

A cyberattack on the Ascension health system operating in 19 states across the U.S. forced some of its 140 hospitals to divert ambulances, caused patients to postpone medical tests and blocked online access to patient records...

Genghis,

Nostr is awesome. I’m hoping it grows much further.

Switching back to Android (GrapheneOS), anything cool I've been missing out on?

Long story short: I don’t like iOS but have been using an iPhone for a couple years due to lack of personally viable hardware options on the Android side of things. I’ve gotten tired of waiting and found a good deal on an open box Pixel 8 Pro which arrives in a few days, I’ll be installing GrapheneOS on it....

Genghis,

Aurora Store isnt needed because of Graphene’s Sandboxed Google Play Services.

Obtainium app is best for installing APKs from github, fdroid, etc because of the auto updates.

My favorite feature of GOS is the scopes for contacts, storage, and MTE support on Pixel 8

Genghis,

Why is a windows computer not my computer? makes no sense

pitching an idea

I have written before about the need to stabilize the Monero price to promote wider usage. My idea is to create a service like i mentioned in that post where a product would be listed with a stable price for a week at a time and reserves would be kept to keep the price stable while the spot price is below the stable price. I...

Genghis,

it needs organic stability and you’re also comparing the stability with fiat.

Galaxy S8 with work profile. Normal profile shows Play Protect certified, but work profile not?

So…yeah. Just this issue. My ancient trusty S8, which has been with me for quite a few years, is my BYOD work phone. It has been for a while, too. But seems now it’s not compliant with the company policies. After some checking, it seems the Play Store is reporting (settings - about) not to be Play Protect certified. But the...

Everyone should stop using microsofts github and look for better alternatives.

Github isn’t good enough . Everyone should look for more privacy , security based alternatives and support them . You should not give big corpos any more of your money . Besides it goes against every fiber of ethics of foss dev’s . I know most people will not agree with me because it’s hard to make the switch or github is...

Genghis,

Everything should work perfectly fine.

Just make sure you know which apps are not supported on GOS such as Netflix, Hulu, Cash App, etc because of the Play Integrity API. Don’t be afraid to use the Play Store as well. Its treated like any other app on the system so it isn’t highly privileged.

Also, one thing that was a problem for me at first was the restore solution (and backup solution). You will have to transfer your files from an external drive whether its the cloud or a local one.

Feel free to join the GrapheneOS Discord/Matrix/Telegram server and ask more questions because they’re very knowledgeable people that can support you.

Genghis,

The desktop security model is insecure in general. Phone OSes are much more secure.

Reasonable desktop OS to use is Qubes, Fedora, MacOS, ChromeOS, or Windows pro/enterprise (hardened)

Phones are much more secure especially the Pixel 8/pro with MTE immensely reducing remote exploitation. GrapheneOS is the only distro that enables MTE by default and recently implemented it in their Vanadium browser.

Secure phones (secure elements are important): IPhones and Pixels (GrapheneOS or stock)

Also yes, Chromium is much more secure on Linux than Gecko based browsers because of its great internal sandboxing and site isolation. Firefox on Windows is catching up though, but still bad on desktop Linux and android.

This all doesn’t matter if you’re running an EoL device. Make sure your receiving official security and firmware updates.

that’s about it

Genghis,

A lot of the security work on Linux is being done by Google. It’s highly unlikely they are putting backdoors in their products.

My internal fight over what device to buy

Hello there! This is my problem: I’m going to buy a new smartphone, and I’d really like to degoogle myself as much as possible. The idea would be to buy a device compatible with LineageOS, but… Supported devices are usually older models, and often there are newer devices with better specs for the same price, that does not...

Genghis,

I recommend you purchase a Google Pixel 6a or above (minimum security support ends July 2027) and flash GrapheneOS. (Pixel 8/pro preferred)

Aurora Store doesn’t avoid Google since a lot of the apps from the play store include Google’s SDK and libraries. microG also doesn’t avoid Google as it is still running proprietary Google code and has more privacy/security weaknesses

Sandboxed Google Mobile Services is a much better implementation which is featured in GrapheneOS. The services are not privileged and is treated like any other app. They don’t downgrade privacy or security unlike the other alternatives.

There are much more privacy and security benefits using GOS. Here is a 3rd party comparison between different mobile OS.

Genghis,

microG runs Google Play code just like Aurora Store. It is not fully open source. Here’s more information.. It is still connecting to Googles propriety servers.

microG requires Signature Spoofing and alternative OSes usually ship with microG as a privileged system app. This increases the attack surface as it is not confined by the regular sandbox rules.

Now you’re using a privileged component, which downloads and executes Google code in that privileged unprotected context, and which talks to Google servers because otherwise, how would FCM work for example?

Despite doing both of those things, MicroG doesn’t have the same app compatibility as Sandboxed Google Play despite the extra access it has on your device. Even in some magical universe MicroG worked without talking to Google servers or running Google code (again, in a privileged context), the apps you’re actually using it with (the apps depending on Google Play) have Google code in them.

Genghis,

You can always connect a USB stick or card reader with an SD card via USB-OTG

I will recommend you do use a phone that still receives security updates (Not EoL) because I don’t want you to lose out on security just to deGoogle.

If you are strict on having an SD card slot and your phone is still receiving support, you should use StockOS to receive firmware updates as soon as possible. If the phone you decide to get is EoL, the least bad option would be DivestOS (fork of LineageOS)

Again, I would advise not using an EoL phone.

It's never been a better time to switch to Firefox on Android (www.androidpolice.com)

The final push to start using Firefox over Chrome on Android might finally be thanks to the enormous selection of add-ons (Firefox’s version of extensions) coming out next month. Chrome doesn’t offer native support for extensions in its mobile app. Also, better security.

Genghis, (edited )

I would use Firefox on Android but I’m waiting until the security is on par with Chromium such as having internal sandboxing and site isolation.

Also since Firefox doesn’t have a WebView implementation, it has to be used with the Chromium based one so it doesn’t make sense for me to use two browser engines.

Genghis,

The only secure phone operating systems are either grapheneOS or stock. All the others usually are behind security updates.

For migration, I would just use a USB C drive and transfer files.

Genghis,

AOSP does get security updates first because GrapheneOS is based on unmodified AOSP. They are quick to port over updates though and they have extra features like hardened malloc and better user profile support.

Non pixel phones aren’t secure because GrapheneOS doesn’t support them. They aren’t secure because they either don’t have secure elements, broken verified boot, or don’t properly support alternative operating systems. This makes phones like OnePlus, Fairphone, etc not secure enough for GrapheneOS.

DivestOS I would say is the least worst option when it comes to supporting EoL phones. They’re at least honest about what they do and don’t provide unlike what other OSes do. On their website, they tell you they aren’t a secure OS and they can only try their best to reduce harm on an EoL device. DivestOS Security.

Genghis,

Please do not tell me you use Mull over Vanadium

Genghis,

Passkeys are replacing MFA and passwords.

Genghis,

Have you tried enabling the Exploit protection compatibility mode on the PF app setting info page?

Genghis,

I just use the AOSP messenger. If I used google play services, I would switch to Google messages because of RCS and it looks much nicer.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • thenastyranch
  • rosin
  • GTA5RPClips
  • osvaldo12
  • love
  • Youngstown
  • slotface
  • khanakhh
  • everett
  • kavyap
  • mdbf
  • DreamBathrooms
  • ngwrru68w68
  • provamag3
  • magazineikmin
  • InstantRegret
  • normalnudes
  • tacticalgear
  • cubers
  • ethstaker
  • modclub
  • cisconetworking
  • Durango
  • anitta
  • Leos
  • tester
  • JUstTest
  • All magazines