e7
e76e7052
e76e705283775febf3d5f4f97662648582d42ff822435924f21a47c8d46c5921

Iโ€™ve heard there are openstreetmap based navigation apps, and from my (non-expert) reading of the GrapheneOS faqs yesterday, phone location services donโ€™t depend on identifying you to Google servers

Not built into the OS. However if you need to, you can use sandboxed Play Services along with the Google app and Google Lens.

Google and Google Lens would require network.

Due to the last point some people prefer to restrict this to a secondary user profile.

Then there are Open Source alternatives one of which is:

https://github.com/SubhamTyagi/android-ocr

For something in between (still using Google libraries but offline):

https://github.com/TechNikh/Android-Open-Lens-OCR-Text-Scanner

These are not personal or project recommendations however, I am providing these as they've been discussed in our [Matrix] Community. I don't personally use any and only you know what you're willing to do with your device yet I hope this has been helpful to start your considerations.

Very very cool. Thank you, once again! Iโ€™m thinking about the things my wife and I do with our phones and conveniences weโ€™d missโ€ฆ seems like mostly small (IMO) usability tradeoffs for far greater independence and privacy.

It is fantastic to hear you're considering GrapheneOS for your device. Please if you have any questions at all reach out to me and I will be more than happy to provide any up to date information/answers that you might have, should the documentation on our site not cover it.

Just as an FYI...

GrapheneOS and CalyxOS are much different. GrapheneOS is a hardened OS with substantial privacy and security improvements:

https://grapheneos.org/features

CalyxOS is not a hardened OS. It substantially reduces security. It recently went 2 months not shipping standard security patches.

Compatibility with Android apps on GrapheneOS is also much different. GrapheneOS provides our sandboxed Google Play compatibility layer:

https://grapheneos.org/usage#sandboxed-google-play

Can run the vast majority of Play Store apps on GrapheneOS, but not CalyxOS with the problematic microG approach.

CalyxOS is closer to LineageOS they both share the same issue above and they both always use multiple Google services too while giving them privileged access even if users don't use microG. It would be wrong to imply they don't use Google services. microG is of course an implementation of Google services. GrapheneOS doesn't use Google services by default.

To clarify further they always use Google services even without microG. They use Google for connectivity checks, network time, attestation key provisioning, SUPL, DNS fallback (LineageOS only), PSDS (Pixel 6 and 7), eSIM activation and more enabled by default.

https://blog.privacyguides.org/2022/04/21/grapheneos-or-calyxos/ is a 3rd party article explaining some of the substantial differences between GrapheneOS and CalyxOS. It's a common misconception that they're similar. CalyxOS is far more similar to LineageOS than GrapheneOS. There are many other alternate OSes available.

https://privsec.dev/posts/android/choosing-your-android-based-operating-system/ is another article about privacy and security differences between alternative Android-based operating systems.

PrivSec also have a community resource for banking apps that work on GrapheneOS that can be contributed too, make sure to check the issue tracker too for submissions that might not be on the list yet.

https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

So, Iโ€™m reading through https://grapheneos.org/faq#security-and-privacy and see โ€œthe baseband is isolated on all of the officially supported devicesโ€ โ€ฆ were GrapheneOS Pixels effected by the Samsung baseband remote code execution vulnerabilities Project Zero disclosed earlier this year?

It is fantastic to hear you're considering GrapheneOS for your device. Please if you have any questions at all reach out to me and I will be more than happy to provide any up to date information/answers that you might have, should the documentation on our site not cover it.

Just as an FYI...

GrapheneOS and CalyxOS are much different. GrapheneOS is a hardened OS with substantial privacy and security improvements:

https://grapheneos.org/features

CalyxOS is not a hardened OS. It substantially reduces security. It recently went 2 months not shipping standard security patches.

Compatibility with Android apps on GrapheneOS is also much different. GrapheneOS provides our sandboxed Google Play compatibility layer:

https://grapheneos.org/usage#sandboxed-google-play

Can run the vast majority of Play Store apps on GrapheneOS, but not CalyxOS with the problematic microG approach.

CalyxOS is closer to LineageOS they both share the same issue above and they both always use multiple Google services too while giving them privileged access even if users don't use microG. It would be wrong to imply they don't use Google services. microG is of course an implementation of Google services. GrapheneOS doesn't use Google services by default.

To clarify further they always use Google services even without microG. They use Google for connectivity checks, network time, attestation key provisioning, SUPL, DNS fallback (LineageOS only), PSDS (Pixel 6 and 7), eSIM activation and more enabled by default.

https://blog.privacyguides.org/2022/04/21/grapheneos-or-calyxos/ is a 3rd party article explaining some of the substantial differences between GrapheneOS and CalyxOS. It's a common misconception that they're similar. CalyxOS is far more similar to LineageOS than GrapheneOS. There are many other alternate OSes available.

https://privsec.dev/posts/android/choosing-your-android-based-operating-system/ is another article about privacy and security differences between alternative Android-based operating systems.

PrivSec also have a community resource for banking apps that work on GrapheneOS that can be contributed too, make sure to check the issue tracker too for submissions that might not be on the list yet.

https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

Thanks! I am leaning toward graphene. :)

Very happy to share. Freely have I received, freely I give!

Appreciate you sharing your perspective. Iโ€™ve been trying not to be a โ€œheavyโ€ phone user - so that helps in general but things like photo-taking and photo-backup and photo-viewing have been the tarpits that keep me. Software like immich and photoprism may be changing that for me though.

Some of the recent nasty bugs in android world have spooked me (โ€œacropolypseโ€ - and the 5G modem/WiFi calling bug specifically.)

Iโ€™ll keep thinking about it. ๐Ÿค”

๐Ÿ˜‚ Happy Easter, unable-to-recalibrate-the-calendar friend