Andromxda

joined 7 months ago
[–] [email protected] 0 points 3 months ago

A month is not a reasonable time for ASB, go talk to any AOSP engineer who designed this system. ASB patches specifically exist to quickly respond to emerging threats, in order to keep your system secure and free of vulnerabilites.

You linked to https://source.android.com/docs/security/features

Either you read the documentation, understand the Android security model and accept the fact that 1 month is not a reasonable time for ASB patches, or you continue to spread misinformation. I'm not quite sure if it's because of a lack of understanding, or simply because of ignorance. As Hanlon’s Razor goes:

Never attribute to malice that which is adequately explained by stupidity

[–] [email protected] 2 points 3 months ago* (last edited 3 months ago)

the real benefit is the clean system. The base system has only a handful of apps and it is solid system you can customize and use.

Oh, you mean just like GrapheneOS? Weird, when we were talking about CalyxOS you liked the fact that it comes pre-installed with a bunch of stuff.

Why do your "arguments" make so little sense?

[–] [email protected] 1 points 3 months ago

It absolutely isn't as secure as AOSP, and I just linked you to a source that explains this

But once again, for some reason you refuse to accept facts

[–] [email protected] 1 points 3 months ago (2 children)

I already explained to you that this is not true

https://lemmy.dbzer0.com/comment/12579929

But you don't seem to accept facts

[–] [email protected] 1 points 3 months ago* (last edited 3 months ago) (4 children)
[–] [email protected] 3 points 3 months ago* (last edited 3 months ago) (4 children)

Running third-party code with root privileges is absolutely not a good idea. It completely breaks the Android security model. Android (as well as basically any modern, secure mobile OS) is built on and designed around the principle of least privilege. microG also bypasses SELinux MAC policies, which makes it even less secure, increasing attack surface and potentially making it easier to exploit.

[–] [email protected] 3 points 3 months ago (4 children)

Stay away from both Fairphone and /e/OS/Murena. Fairphone fails hardware security in the most miserable way, and fundamentally breaks Android Verified Boot, while /e/OS is based on the highly insecure LineageOS, and it further rolls back security, while also repeatedly missing important security patches.

Also, 600 dollars is absolutely not cheap for a smartphone, and it's especially not with it considering that both the hardware and software are highly insecure.

A Pixel can be purchased for much less, while being superior in every way.

[–] [email protected] 8 points 3 months ago* (last edited 3 months ago)

The Pixel 6a is really cheap on the used market, and it still gets updates for at least 3 years.

The 7a isn't that expensive either. I recommend staying away from Fairphones, Murena or /e/OS as these are highly insecure, and the companies behind them have repeatedly proven that they don't give even the slightest fuck about the security of their users. They don't publish important Android security patches on time, and Fairphone even managed to fully break Android Verified Boot, by signing their ROM with the publicly available (!!!) AOSP test private signing keys. It should have been impossible to pass verification, but the vendor conducting the verification seems to be just as incompetent.

A used Pixel with GrapheneOS is your best option, while still being affordable.

[–] [email protected] 29 points 3 months ago (1 children)

Thankfully there are FOSS alternatives for apps like Authy. I recommend Aegis

For your banking app, you can use this list to check if it's compatible: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

Using the web app might also be an option.

[–] [email protected] 2 points 3 months ago

Thanks for the recommendation

[–] [email protected] 4 points 3 months ago

(Point is everything is subjective)

No it's not. You can build a very secure OS and deliver updates quickly, while still ensuring stability. GrapheneOS has proven it over many years. If you prefer to use CalyxOS which rolls back AOSP security and often misses ASB patches, that's your choice.

view more: ‹ prev next ›