Comment by palata

6 months ago

> supports Graphene but there are too many trade-offs there

What are the tradeoffs? I have been following GrapheneOS for a while, and it doesn't seem like there are many tradeoffs.

> OpenStreetMap is still really hard to use and gives bad directions.

OpenStreetMap is a database, and most commercial services that are not Google use it. E.g. Uber or Lyft.

You just need to find an app that you like. CoMaps is nice, OSMAnd has a lot of feature but the UX is harder. And of course you can contribute to OSM and make it even better than it is! You'll see it's a great community!

I use https://brouter.de/brouter-web on my laptop. Someone told me that you can use brouter as the nav engine for Osmand and thus greatly improve speed and accuracy for navigation, but I have not yet tried this.

And I recently installed GMaps WV from Fdroid as a wrapper for Google Maps. It gives current traffic information but I don't really know if it is even close to gmaps.

Can you use GrapheneOS with your bank app? With a digital wallet for NFC cards? With Uber or Lyft? (Asking seriously, not rhetorically.)

  • My understanding from looking into this two years ago is that it's hit or miss for banks (depending on if they opt into device attestation stuff), no for NFC / Google Wallet, and yes for Uber / Lyft.

    Apparently the common workaround for the Google Wallet stuff is to pair a GrapheneOS phone with a stock Android smartwatch.

    Edit: Here's some additional information on banking apps: https://privsec.dev/posts/android/banking-applications-compa...

    Apparently the common recommendation these days is to use Curve Pay as a virtual card provider on GrapheneOS, which can then route to arbitrary underlying cards. And evidently Google Wallet does work for things that aren't payment cards (airline tickets, transit passes, etc.) on GrapheneOS.

  • I use Graphene but with Google play store app. Here in Europe my banking apps and 2fa apps (SecureGo) work flawlessly. NFC cards work with PassAndroid and FOSSwallet, both from Fdroid. I've had issues installing rather new games via the play store, but most often it takes a couple of tries or a waiting period to work in the end.

  • Yes, these would be my concerns as well. In the past, I would install custom ROMs. Then I stopped doing that and would only root my device. But of late, way, way too many apps refuse to work if rooted (apps that used to be fine with it before).

    Now I just accept life as it is.

  • Contactless payments is the the big one that doesn't work and probably won't. You can do in app payments via Google pay though

    Many banking apps work fine though not all.

    • Luckily my German bank (Volksbank) has its own NFC app on Android. Much maligned years ago when it was announced (why can't they just let me use Google Pay??), I at least have come to the conclusion that it has granted me a freedom that Google does not.

      2 replies →

  • I've been running GrapheneOS for over a year and have had zero issues with 3 different banks, and all credit cards. I'm sure there are issues with some banks, but I've never seen them. I don't use Google Wallet, and never wanted to so if that's a consideration...

  • My friend uses a pretty hardened (as per him; I didn't indulge him when he wanted to give me the gory details) Graphene setup on his few years old Pixel.

    Bank apps - as per him none work. Uber (no Lyft here; other taxi apps) work flawless. Payment apps, he said is a coin toss. On his phone even WhatsApp doesn't work. He anyway prefers Signal (which prob. nobody else uses in his circle except maybe me who has it installed on a secondary phone) or plain SMS. Basically most of the "normal" apps that add integrity checks don't work but he is fine with that.

    • Re: the bank apps: that really depends on the bank and the country. I live in a eu-west country and there are afaik no apps that do not run on Graphene (which did suprise me I must admit).

      Whatsapp can work if you use sandboxed Google Play (I still use a Google account, I just don't want gplay to have effectively root on my device).

      Depending on the level of integrity check your app might just work. Gory details: https://grapheneos.org/articles/attestation-compatibility-gu...

      And like others said: no contactless payment, but I dont use that personally anyway.

> What are the tradeoffs?

As others point out, my main worry is about banking and NFC. I use NFC payments on my phone a lot, especially for the bus. Getting an Android Smartwatch just for that kind of defeats de-Googling haha.

I will probably try out Graphene at some point but that seems like a multi-day project to get it set up, find the tradeoffs, determine if they're worth it, and then potentially switch back to Android.

I also worry about the future of Graphene with AOSP going more closed/private: https://www.androidauthority.com/google-android-development-...

> OSMAnd has a lot of feature but the UX is harder

OSMAnd was the one I tried and it bordered on unusable. I'll try out CoMaps, somebody else suggested Mapy.

  • > my main worry is about banking and NFC

    This may be useful: https://privsec.dev/posts/android/banking-applications-compa...

    > I also worry about the future of Graphene with AOSP going more closed/private

    I don't think it's AOSP going more closed, but rather the evolution of the Pixels line. GrapheneOS wants the ability to unlock the bootloader, install their own key and relock the bootloader. Google could technically stop supporting that for the Pixels (just like many (most?) manufacturers do), but they haven't said anything about it.

    GrapheneOS has mentioned talks with a major manufacturer. I wonder if it will be a Graphene phone (which sounds very tricky) or if it could be something like Huawei or Samsung offering to unlock/relock the bootloader and committing to providing the features necessary for GrapheneOS. The latter would be amazing.

    > OSMAnd was the one I tried and it bordered on unusable.

    I love it. But if that's your feeling, definitely try CoMaps: in terms of UX it's on the other end of the spectrum :-).

  • There is also Calyx, which is also a privacy friendly Android distribution. It uses open source versions of Google Services. With my Pixel 8a on Calyx I can use NFC to pay with my Credit Card.

    • > It uses open source versions of Google Services.

      Microg, right? I don't think this is more private than the Google Services, is it? It's just open source, but it can phone home just the same?

      > With my Pixel 8a on Calyx

      Any reason you haven't tried GrapheneOS, given that you already have a Pixel? I have /e/OS because it's the only alternative Android that runs on my FairPhone 3, but I've come to realise that it's actually worse than the Stock Android in terms of security. I really would like to go with GrapheneOS, and I wish more manufacturers made this possible.

  • Osmand is great but it has a bit of a learning curve. It's much more powerful than Google maps though so all these features need a bit of navigating. It probably should have a simple mode for most users.

Someone showed me OSMAnd recently while we were hiking. I installed it as soon as I got home. Great for hiking.

Then last week I used it for navigation (on a phone with no SIM card).

Absolutely. Terrible.

Worst navigation app I've seen. Told me to make a turn at an intersection that did not allow turns. Then at another intersection, it told me to "Turn left", but the display clearly showed it going straight. I'm guessing that the straight road probably is angled 1 degree or something at the intersection and the app was viewing that as a turn.

  • For an open source Android app for OpenStreetMap data, I like Organic Maps, and it normally works great with locally-cached maps. I've had better luck with it than with Google Maps or Apple Maps on phones.

    (Though, I should mention that twice in the last year I've had Organic Maps become hopelessly confused about where I was, and where I should go. Both times, it had gotten a good GPS location, but then got confused while being out for an extended period of time, like maybe it was dead-reckoning only after that initial lock.)

  • This is a really interesting feedback. I've used OSMand for maybe five years, and never had issues like you're describing. I've always felt that the search was absolutely awful, so I used Google Maps for that and then put the points of interest into my map. Nevertheless, I find the display particularly dense and confusing to configure, and so I also have been using Organic Maps lately, which may provide a simplified experience that's a bit more polished.

    I wonder if there was some issue with the map data in the area you were driving in that led to the issues you experienced. I've used OSMand in Belize, Mexico, California, Connecticut, New York, New Hampshire, Vermont, and Maine and had a good experience, especially with the offline maps.

  • > Told me to make a turn at an intersection that did not allow turns.

    That's an OpenStreetMap bug, the intersection likely isn't marked as not allowing turns. If you put a note (OSMAnd calls them OSM Notes) on the map someone will fix it when they can.

  • On top of the OsmAnd user experience being a little rough (it can do a lot, but not gracefully) it relies on accurate OSM data underneath. So the best thing to do is at least make a Note on OSM, or edit it yourself, and mark that intersection as having a no-turns-allowed restriction.

    Even Google is relying on user submissions to keep its stuff accurate these days, they just have money to pay editors and reviewers.

  • I get similar navigation issues with Google maps. I still use Google maps for driving because the live traffic is important to me, but other posts on here mention other apps with live traffic so I'll give them a try.

    • This happened close to my home on a road I've gone on almost every day. Waze never did that to me. I don't use Google Maps so I can't speak to that.

All navigation apps that are built on osm have awful routing, particularly with public transport, they are almost useless. That's without taking the missing data into account (shops, opening times, basically zero reviews, etc..)

  • It's all user submitted. It takes someone caring enough to fix it, to make it work. Check out StreetComplete, Every Door, Vespucci, and/or CoMaps to help add/fix data