Comment by miroljub

8 hours ago

But GrapheneOS doesn't exist. It works only on a few devices created by Google, so their claim of being degoogled is a bit funny.

Google's hardware is just hardware. It is not locked down like the hardware of many other manufacturers. Moreover, it's the only such hardware which also allows you, the user, to lock it down for your own security. GrapheneOS is not just focused around avoiding Google, it's more accurately focused around security and user choice.

The goal is to give you the option to avoid needing to rely on Google's spying or services while not having to compromise on security.

None of these other solutions regularly get included in Celebrite's documentation as being an explicit benchmark of their software's ability to break into phones. And that's almost certainly due to the fact that unless you leverage hardware security features like what GrapheneOS (and stock Android on a Pixel, and iOS on an iPhone) utilises, you have no chance of going against any actual adversaries.

And I'm not just talking about state actors here, even drive-by opportunistic attacks are likelier on a random other phone running some other Android build.

So yeah, you are running Google hardware, that doesn't make you "googled". It's just a sad reflection on the reality of the hardware landscape. If you want the same security as what GrapheneOS offers, you will currently need to use a Pixel.

I'd be curious to see what comes out of their Motorola partnership though.

  • A large part of "degoogling" to me means "stop giving google money" and "cut off Google entirely from my life".

    If I have to give Google a lot of money every 4-6 years to remain "de-googled" then I never was.

    • Why are we degoogling, for what purpose? I couldn't care less about giving them what likely amounts to ~10€ of margin per year on the hardware sale. What I care about is not giving them data which is worth a lot more than that, and to take back control over my device.

      When you go with an alternative you lose superior privacy and security offered by GrapheneOS and you just end up leaking more data back to Google and other ad-tech companies than you would otherwise, negating any benefits several times over.

      See: Advanced features, degoogling, privacy, security, and updates sections of https://eylenburg.github.io/android_comparison.htm

    • You can buy used Pixel, effectively not giving money to Google, or buy a Motorola when their GOS phone is released

    • I don't think Google makes a lot of profit on Pixel phones.

      The real profit comes from their advertising business.

      Maybe the phones are even subsidized by the ad business.

I must agree, you are right, GOS is only on Pixel phones.

But we have to keep in mind that /e/ has a lot of problems, the only one solved is sending data to Google. The security aspect of the OS is problematic and some key elements of a privacy seem questioning (AI integration, commercial collaborations, ...).

Fix: IA => AI typo and various English errors.

/e/OS is Android, meaning it's still critically dependent on goodwill of Google to continue releasing their work as part of AOSP.

So if you're trying to be a silly purist, then /e/OS doesn't fit either. If you're not, getting a Pixel will significantly enhance your safety since they're better supported for security patches and better designed in hardware when it comes to security.

  • Let's explore this a little further.

    I think it is legitimate to be a purist about smartphones, but I don't think the GP is. So, let's talk about the non-purist situation: Users like us want to de-google. But we are not willing to make all of the sacrifices that purists do. The question is then, what can we use (and - what projects can we support financially).

    Now, we can use GrapheneOS if we have Google Pixel's. But - most people don't have those phones, for any number of reasons. One of them is price, by the way: You can get a decent smartphone for under 100 USD and even a half-decent one for 70 USD. And most people in the world are not in an economic situation where you can tell them "shell out 300 USD and buy a Google Pixel".

    Moreover - suggesting we strengthen our ties to Google in order to de-Google is fundamentally problematic. Even if we're not going all the way, we are striving to distance ourselves from them.

    So, an imperfect software solution for a wider selection of phones does sound quite useful. Change my mind! :-)

    • Where are those decent under 100 USD unlockable smartphones?

      suggesting we strengthen our ties to Google in order to de-Google is fundamentally problematic

      You may have seen that they are working with Motorola to release GrapheneOS-capable phones.

      1 reply →

GOS is degoogled in all the ways that I care about - it's about the data they can gather. Among all the smartphone options that I consider usable day to day (leaving only Android and iOS at the moment), GOS is the most private and secure.

> their claim of being degoogled is a bit funny.

I don't think they use this term anywhere.

It also now works on Motorola devices, it's on my HN feed literally right above this post.

  • It doesn't "now work"; it may work on a future Motorola device that doesn't exist yet.

  • It doesn't yet work on Motorola devices.

    It is going to become available on selected Motorola devices at some point in the future.

  • > It also now works on Motorola devices, it's on my HN feed literally right above this post.

    Did you read the article you mentioned? There's not yet a single non-Google device that can run GrapheneOS.