Nostr Web Client

It's not that suss. Do you think GrapheneOS is malicious? Have you read the FAQ?

I don't think thestinger is malicious. I think he has a different security model. He trusts different parties for different reasons, parties that I absolutely do not trust. It is a simple misalignment.

I'm calling for neutral country hardware. I would welcome open source GrapheneOS on neutral country hardware. I think there has been quite a ramp-up of monetary support for GrapheneOS so I think they should be able to do that.

The things he listed that *must* be in a phone he will support are cherry picked as the things Google phones have. Other hardware vendors have other things, which he doesn't list as "missing from GrapheneOS".

Reply to this note

Please Login to reply.

Discussion

Deleted Account 1y ago 💬 1

Didn't Micay step down? Have you read the FAQ? Do you think GrapheneOS is malicious?

Mike Dilger ☑️ 1y ago 💬 1

I had not heard. No I don't think it is malicious. But you have to trust hardware, and if you don't trust Google hardware you can't use it.

Deleted Account 1y ago 💬 1

These are direct links to sections in the FAQ. Maybe you didn't read them before you created your original note.

https://grapheneos.org/faq#future-devices

https://grapheneos.org/faq#when-devices

Mike Dilger ☑️ 1y ago 💬 1

If I had a sat for the number of people who have accused me of not reading the FAQ I'd be retired on a beach somewhere right now. It is starting to really piss me off that people are not understanding what I am saying and having such shallow and accusatory reactions to what I am saying.

Deleted Account 1y ago 💬 2

I understand what you're saying. It's written clearly. The FAQ answers your questions and is clear about what you said was suss. Maybe other people aren't understanding what you're saying because of how you're communicating your thoughts. Am I really being shallow or accusatory? I never said you didn't read the FAQ. You also admitted that you didn't know Micay stepped down basically a year ago.

"Many other devices are supported by GrapheneOS at a source level, and it can be built for them without modifications to the existing GrapheneOS source tree."

Maybe you can help.

Mike Dilger ☑️ 1y ago

I shouldn't have gotten so upset when people pointed me to the FAQ. I asked "Why does GrapheneOS run only on Google Pixel phones?" in my original post and people pointed out that the FAQ answers that question. That is fair enough I guess. I should mark rhetorical questions as rhetorical somehow next time so people don't miss point.

> "Many other devices are supported by GrapheneOS at a source level, and it can be built for them without modifications to the existing GrapheneOS source tree."

Now that is on point. I don't recall reading that part. So I guess your assucation "Maybe you didn't read them" wasn't entirely untrue.

As for Micay stepping down, I'm reading that he was harassed and SWATted. That is not cool. He's got odd social skills but for fucks sake. I feel bad for him.

🦄Onigirl🐹🐉 1y ago 💬 2

I can understand the frustration because it seems limiting. But once u switch, you don't go back. Another rabbit hole if you like to join ;)

Mike Dilger ☑️ 1y ago

I've been using GrapheneOS since day 1, because I was using CopperheadOS for several years until the point that Daniel Micay burned the signing keys.

So I don't need to make any switch. I have a Google Pixel 8. And I'll keep using GrapheneOS for the time being.

But I have moods. Sometimes I get really paranoid about Google and Intel processors (more than other companies). I was really paranoid about Google at the time when I made the post. I thought "what if the explanations for why it only works on Google hardware are a lie?" I thought "Anybody can make explanations, they might not be true!"

Turns out you can lock the bootloader on LOTS of hardware that is not Google hardware. And the long list of features that MUST be on the phone to be supported are really not all necessary IMHO for the phone to be plenty secure. So call me a skeptic, but I'm still just not sure, and I don't have the time to dig into it.

Also Daniel Micay seems to be clinically paranoid and accusatory of all kinds of harrassment he doesn't actually receive, and that instability itself is kinda worrying. I like my developers to be paranoid, but not to the level that they can't function with other people. Before even CopperheadOS he was sort-of run off from the Rust community for making drama. They say he stepped down, but he's still the guy producing most of the commits. I hope he gets and stays well, but should I trust the OS? I dunno. I'm trusting it because I don't have a better option (I could read the source, compile myself, compare to AOSP and LineageOS and other AOSP projects, but that would take a year).

🦄Onigirl🐹🐉 1y ago

Highly agreed, its good to be a little paranoid instead of blindly agreeing to everything. Perhaps, its time to do some open heart surgery (as in open up the device and investigate). Might even be able to convince dell to make some parts? As I see them as the way lesser evil compared to apple or IBM. ;( rescrap solana phone? I havent read up on their specs but it didn't look promising