thejoker11: grapheneos.org/faq#legacy-devices

> the lifetime of devices will remain based on manufacturer support.

ghjllk: you can always check the IRC logbot, it's linked in the topic. The offtopic channel is at develop.element.io/#/room/#freenode_#grapheneos-offtopic:matrix.org

ghjllk: sorry, I meant to post matrix.to/#/#freenode_#grapheneos-offtopic:matrix.org

pixel phone arrived!! gonna install grapheneos asap

any tips or recommendations while I install it?

also should I install stable or beta?

wow that was fast

follow the official install guide at grapheneos.org/install not a youtube video

living in a major city has its perks I guess lol

I would like to install beta and contribute to like reporting bugs or other quirks but is it stable enough as an everyday driver?

ille_[m]: yes, i use beta as a my daily driver

I've noticed a couple of people have had issues on the Pixel 4 with screen flickering at 90hz. I installed GOS on my Pixel 4 with no such issues. Specifically from, while reading through the chat, travankor . I checked the developer options and there is no 'Force 90hz Refresh Rate' option, so I'm having trouble reproducing the issue. Can anyone speak to why that option isn't available?

switchdominion: the app responsible for refresh rate control toggles is closed source and causes crashes on AOSP

Since these crashes are actually occurring in the system itself your device may boot to recovery and repeatedly ask you to format. Not to mention the app does not work at all

An upstream ticket has been open for quite a while and Google did not take any action

how does pixel4 pass CTS then

should not be android compatible lol

We don't ship the app?

Implementing a force 90 hz toggle isn't a part of CTS

isnt there a cts suite that tests display?

i suppose causing epilepsy is not necessarily part of the cts test suite

Holy shit, i thought the phone i got was bad. I'm glad to hear it's not just me

Thanks, anupritaisno1. So, other people have screen flickering on GOS with refresh rates over 90hz and I might have been lucky with the device I acquired but is there any information I can gleam from my device that could help resolve this issue for others?

switchdominion: the issue is present on all devices

It's just that a few people are more sensitive to it so they notice it

anupritaisno1: Perhaps I'm misunderstanding the issue. Perhaps I should be grateful I'm not as sensitive to the flickering 😂

Thanks so much, ill permalink this to myself to try tomorrow!

No worries

I.read 90Hz seriously kills battery too

Would explain the Pixel 4's shitty battery life.

Yeah its real bad. Barely lasts a day and I don't even use my phone that much

how does screen refresh if the screen is off for most of the day?

Haven't noticed the flickering yet myself though

renlord: what?

Refresh should usually only occur when the screen is on, but OLED displays like those in the Pixels have background display functionality which allow them to be "off" but still display background graphics in low power mode.

Intuitively, I think that may be part of the problem.

Low power mode for oleds is basically only turning on a subset of the LEDs unlike LCD where it's all or nothing

also why true black night mode instead of just a dark color would help battery life. Black for oled means the pixel is totally off drawing no power

Finally decided to use multiple profiles

Can someone point onto how to activate app installation? Fdroid won't install. There was some toggle somewhere (not the on inside vanadium, that one is on already)

Also. Does multiple profiles affect performance?Like on my PC having multiple users eats up tons of RAM

you're trying to install an outdated version of F-Droid

it has to be the same version or newer as what's installed elsewhere

josh.man: this has got some info about using profiles hub.libranet.de/wiki/and-priv-sec/wiki/user-profiles

Stuff running on a different profile does get shut down in the background, like in the main profile.

Checking with running services in developer options it does appear that some things keep running

Can restart the device to stop this

Or force stop apps

Ok. Then no multiple users for me then 🙄 too much of a hassle

Slower, VPN issue, forcing stop apps. Naaah.

I never thought there would be a day I would ask for 8 GB+ of RAM on an Android phone...

very few apps actually run in background

and the oomkiller is quite eager to reap processes when there is not enough memory

Android doesn't handle memory like a desktop. You basically want near 100% memory usage. It caches stuff so it's quicker and can handle closing apps to make room for memory easily.

<chrono[m] "Android doesn't handle memory li"> This is wrong have a day

Just an average day

there's a balancing act between having more memory vs. battery consumption

ram sticks do sip a bit more battery over time

renlord: gib 16 GB sar

<anupritaisno1[m] "Just an average day "> I don't think that is a good idea right now

No I'm actually serious

Here's a friendly and easy to understand image from Google

I thought 12 gb on the op7pro would be enough

but 4gb is a bit little with all that evicting and reloading, you probably use more battery spinning the core

But I pretty much filled it

8gb probably the sweet spot

I could use some 16gb to open a few 100 more chrome tabs rn

max 2 dimm modules on the sbc

renlord: quad channel on pixel

there was a ram shortage when pixel3 was released i think

Only time low ram has affected me is closing out some games when I swapped apps

Most apps are generally good at handling sudden shutdowns and relaunches

Since it's part of Android's design they will kill your app at any time

renlord: we need 64 GB of ram on phones

Just so that you can flex on it

Well I would buy a 64GB ram phone

honestly at this point I just try to use phones as a user without caring what amount of RAM it has. I also usually always get the cheapest variant anyway, and so far it's been fine.

cdesai: you mean on storage?

cn3m[m]: yeah pixels have uniform RAM, but others have more RAM when you pay for more storage

ah fair

I do too

I have 64GB on desktop, had 32 but then it wouldn't be usable when compiling which wasn't fun.

<anupritaisno1[m] "Well I would buy a 64GB ram phon"> There are IBM mainframes with less RAM. In fact, that's the minimum loadout you can have in an IBM z15.

now I can't really notice.

Are there any plans for a port to RISC-V? I would like to see the groundwork laid for a fully open source, hardened phone.

anonhat: no

Not unless we had an entire IT department

RISC-V isn't even supported by android so we'd have to add supoort

It can't be that hard. Debian's RISC-V port has, like, three contributors IIRC.

Well they don't have standards

It's Debian

Debian security is waiting for other people to find issues

cn3m: I call Debian either debshit or downtime OS

Oh, my. Don't go trash talking my OS, now.

<anupritaisno1[m] "cn3m: I call Debian either debsh"> ^

<anonhat[m] "Oh, my. Don't go trash talking m"> Debian is so bad man..

you know, trash talking other projects like this is really not nice.

Sure, point out it's flaws, say which it's bad technically if you feel like it.

but name calling, really?

what are we, 10?

I like it because it's stable and I can run it on my toaster.

you mean outdated?

You mean not beta/alpha stage?

cdesai: the main problem is when projects claim to be security focused so strongly. Debian saltstack took a week and we saw that attack in the wild look at the Lineage server hack

<cdesai "you know, trash talking other pr"> Well I will

I can see the frustration

If something is shit I will call it out

This is why I piss many people but I don't play pretend

Debshit has caused 8 months of combined downtime for glassrom

it would be like GrapheneOS calling itself a haven of user tweakability and customization

Archlinux stands at just 20 minutes

The point is that a RISC-V port is possible. Android has been ported to MIPS and x86 in the past. It's doable.

<anonhat[m] "The point is that a RISC-V port "> no it is not possible

It is though.

GrapheneOS is not possible to support anything beside Pixels right now

...

no it is not

find one RISC-V machine that means the requirements

I will be impressed

if it doesn't meet the requirements it is not GrapheneOS

Go ahead and explain why. I already know why only Pixels are supported, but go ahead and tell me why a RISC-V board can't be found or built which meets the security requirements.

Because nobody bothers to anonhat

of course you could build one, but not even the OpenTitan project has cracked the very small part is the security chip

that is one requirement there are many

The FOSS team is like "hardware encryption bad", " hardware attestation bad" and so on

They're literally hostile to the stuff we need to make it secure

That is how we get Purism shipping with known vulnerabilities

Even when there's completely free as in freedom hardware that is proven to be secure they'll reject it

The FSF is dragging down privacy

The LowRISC project is literally a RISC-V based hardware ROT chip project.

If you want hardware crypto, there you go.

Oh

They rebranded as OpenTitan. God damn I am out of the loop.

np

Anyway thing is it is possible but

We don't have the resources

The FOSS community is openly hostile to some of our ideas

As an ambassador of said supposedly hostile community, I can assure you that my only complaint about hardware crypto is the fact that it uses (at the moment) proprietary hardware. OpenTitan will presumably fix that.

anonhat: no it does not

And in general, I like GOS and support its goals.

You should read the FSF guidelines for a recommended device

it is garbage

Google has made a requirement in the CTS that hardware and software encryption must produce exactly the same result

<cn3m[m] "You should read the FSF guidelin"> Do you have a link?

that is how you get the Librem 5 and PinePhone without the option of signed firmware

Only the implementation and not the format must change

<EssentialChaos[m "Do you have a link?"> I can find it

<anupritaisno1[m] "Google has made a requirement in"> But the Titan M chip is still a black box.

anonhat: it doesn't matter because they have to proof that encryption in SW and from the titan M is exactly the same

In other words hardware based encryption must only change the implementation and not the on disk format

* anonhat: it doesn't matter because they have to prove that encryption in SW and from the titan M is exactly the same

anonhat: anu is right, but the other thing to consider is you are trusting so many companies with firmware and root certs you name it

Titan M should be the least of your worries

<anupritaisno1[m] "anonhat: it doesn't matter becau"> But because there are so many possible combinations of inputs and outputs, I would question the totality of the accuracy of such tests. Further, how do we know that Google hasn't backdoored the chip to allow bypassing the rate limiter?

it also has insider attack resistance and rollback protection

If you rely on a rate limiter to prevent brute forces on a password you might as well hire a monkey that just shoots at everything as a security guard

Set a strong password. Nothing else should ever be considered to be secure

<cn3m[m] "it also has insider attack resis"> the Titan M is extremely hard for Google to backdoor for the government(a

The rate limiter is referenced in GrapheneOS documentation as a reason for only supporting the Pixels.

The SEP has been going strong for 7 years on the Apple front. Google traditionally keeps up pretty well

Titan M should hold, but no guarantees of course

cn3m: do you think google could like sign apps with a per user key with bundles?

An attacker would have to compromise millions of keys instead of one then

right, but the side effect is you would have less verification

Users could opt in to encrypt their keys with their account

would definitely improve the pinning situation

it is better than Google signing everything

<anonhat[m] "The rate limiter is referenced i"> A long password should circumvent most brute force attacks. So, even if they did have a "backdoor" to bypass the chip, it would still take a lot of compute time to cycle through potential passwords.

ideally devs would sign everything themselves, but alas

<SchismXL[m] "A long password should circumven"> Key Derivation too

SEP is using it I would bet $50 Titan M is too

150ms with a dedicated crypto engine for the SEP which is way more than it sounds

<SchismXL[m] "A long password should circumven"> I'm aware of this. But for the sake of the average user, who won't want to use a long password on their phone, a rate limiter that has been thoroughly audited for vulnerabilities makes sense.

if you have an iPhone with a 10 digit PIN it would take 700 years for it to bruteforce itself with a bypassed hardware ratelimiter

long password + biometrics is probably the way to go though

more robust and protects from shoulder surfing and CCTV

<anonhat[m] "The rate limiter is referenced i"> As an example, it would take 58 minutes of compute time to crack the password "grapheneos". Add 1 to that, it'll take 1 month to crack. Add an exclamation mark, so your password is now " grapheneos1!" It'll take 200 years. Now, just adding 123 to the end of the password would take approximately 32 million years of compute time to crack the password "grapehenos1!123". So,

even if they did have a backdoor, they'd be taking their sweet time with the device lol

<cn3m[m] "long password + biometrics is pr"> Oh yeah. Biometrics. Because no one ever lost a finger due to the access they had to a fingerprint-locked system.

only in screen fingerprint sensors can't detect a dead finger

anyway xkcd.com/538

<SchismXL[m] "As an example, it would take 58 "> Ireallydidntknowwhattoputhereimsorryfordisappointingyoubutreallythisismypassword

Brute force this now

<SchismXL[m] "As an example, it would take 58 "> This is based on what amount of compute power? A standard desktop, a phone, a server cluster?

A standard computer

Let's try "iamavirginandmyfirsttimewaswithapillowanditstillis"

Try brute forcing any of these

grapehenos1!123 would take 120.34 thousand centuries for the NSA to bruteforce in 2013

assuming no key derivation

basically it would take forever to break

I use a 100+ character disk encryption passphrase on my laptop. I wonder how much entropy is in it...

that is a guessable password of course, but it goes to show

<anupritaisno1[m] "Let's try "iamavirginandmyfirstt"> I'll stand with you x

<anonhat[m] "I use a 100+ character disk encr"> You're doing it wrong

I use an 80 character password with a KDF iteration count so high it literally takes 30 seconds to try one password

I use a 15 digit encryption password and a 4 digit PIN on my laptop

I thought I was paranoid

It's about time

The latest chromium 84 fully fixed my issue

Mine started as a 23 character phrase. Then 27. Then 42. Then 64 (which coincidentally was the max size for TrueCrypt FDE), then 90. And now this.

<anupritaisno1[m] "I use an 80 character password w"> For FDE on PC?

I use a unique password for every device and password database

<anupritaisno1[m] "The latest chromium 84 fully fix"> What issue?

My passwords are unbreakable and easy enough to remember I don't need that

I just keep adding characters over time. It's been the same basic phrase for years, just with more shit added on every once in a while.

<SchismXL[m] "What issue?"> It used to freeze on very large pages like the Qualcomm release and security bulletin

anonhat feel that lol

On my laptop, the TPM holds the key to FDE...

At least to the Bitlocker part

shudders at TPM

TPM is good

EssentialChaos: detached header here

<anupritaisno1[m] "EssentialChaos: detached header "> What is a "detached header"?

The only copy of the detached header is on the boot partition

<EssentialChaos[m "What is a "detached header"?"> Basically even if you have the password you can't decrypt it

Android already does this btw

<EssentialChaos[m "What is a "detached header"?"> Something that almost happened to me after I saw my missus for the first time in four months this weekend.

<EssentialChaos[m "At least to the Bitlocker part"> I have a setup, which I am not sure why I need, but it has 3 big partitions: Bitlocker for Windows, LUKS for Void and VeraCrypt for the shared one

TPM is bad. Even the German government thinks so.

let me guess you think it is a backdoor?

anonhat: tbh I wouldn't mind giving the header decryption key to my TPM

<anupritaisno1[m] "Basically even if you have the p"> So like a physical key?

lol

<cn3m[m] "let me guess you think it is a b"> Actually, no:

"have the potential to reduce a user's control over software and hardware."

If there was a titan M and full verified boot on desktop it'd be great

probably a good thing

<anupritaisno1[m] "If there was a titan M and full "> Apple Silicon

pretty much that

<cn3m[m] "Apple Silicon "> I don't have that much cash

fair

same

<anupritaisno1[m] "If there was a titan M and full "> At least you have a secure phone

Tbh once I get a more respectable job tjan making scummy ads

<EssentialChaos[m "At least you have a secure phone"> I am going to whine about my Mi 9T until I get something better

I'll probably go that route

<EssentialChaos[m "I am going to whine about my Mi "> you really should whine about that

<EssentialChaos[m "I am going to whine about my Mi "> Somebody wanted to make glassrom for that one

The issue of TPM as a black box remains, though. And it's implemented by companies with a history of severe hardware level vulnerabilities. Spectre? Meltdown? Anyone?

<anupritaisno1[m] "Somebody wanted to make glassrom"> Let me guess... in Techlore Telegram?

<anonhat[m] "The issue of TPM as a black box "> better than the Linux foundation making it xD

<anonhat[m] "The issue of TPM as a black box "> We don't do witch hunting

TPM is moving in the right direction

Can we at least agree that an open source hardware RoT would be better than a black box?

<EssentialChaos[m "Let me guess... in Techlore Tele"> Besides, last I checked, Mi 9T doesn't have an official Lineage build

don't blame people for making meaningful improvements

<anonhat[m] "Can we at least agree that an op"> not really a black box, but sure

If not a black box, what would you consider it?

<EssentialChaos[m "Besides, last I checked, Mi 9T d"> It can still pass glassrom. There are special exemptions for xiaomi devices as long as there are no security issues

And all hardware works

Why did I not buy 3a, was literally choosing between it and Mi 9T....

sell the 9t

<EssentialChaos[m "Why did I not buy 3a, was litera"> F

No don't

I still don't know if I want the 3a or the 4. I don't want cold app start lag, but I also don't want sticker shock.

3a is not that slow

it is overrated the impact

~1 second of lag when opening NewPipe in my experience.

I'm impatient. I want instant gratification.

cn3m: imagine loading lag

This post was made by the oneplus gang

NewPipe is not a super smappy app to be honest

But it loads faster on my shitty burner than it does on a 3a with GOS.

Yes it is actually faster on oneplus as the storage is almost 2-3x faster

> <@anupritaisno1:m.apex.to> cn3m: imagine loading lag

> This post was made by the oneplus gang

OnePlus with your ROM would be my fourth choice. After Google, Apple, and Samsung

Update engine can literally flash firmware in under a second

I could see myself using it one

day

<cn3m[m] "> <@anupritaisno1:m.apex.to> cn3"> Why Samsung?

<cn3m[m] "> <@anupritaisno1:m.apex.to> cn3"> "A fine addition to my collection"

Boot time is about 30% faster

Samsung gets really fast updates on the S line

But since the kernel must sanitize 2x more ram

They are at least trying with hardware security chips

30% faster boot on top of that really makes you think

anonhat: how do you use newpipe

I couldn't imagine not getting playlist suggestions from google

Example

debian can run on toaster? even slim debian aint slim enough to run on embedded

<anupritaisno1[m] "I couldn't imagine not getting p"> I don't think it offers suggestions, but you can subscribe and link accounts I believe.

<renlord "debian can run on toaster? even "> debian got me out of debt

debian built me a house

<anonhat[m] "I don't think it offers suggesti"> It's RSS

<renlord "debian can run on toaster? even "> It's called the universal OS for a reason.

any linux distro can get you out of debt

@_@

i really doubt debian can run on a toaster

must be a very expensive toaster

only the iToaster could run it, but locked bootloader enforced by the S6 chip

renlord: debshit or downtime OS is special

It caused downtime for the debt server

Legend has it, the server is still down

BTW renlord you should consider legal action against Copperhead and James Donaldson for harassment and defamation of character for that bogus letter you got. It would make me infinitely happy. Pretty, pretty please?

anonhat[m]: i dont have time for that kinda shit

I'm never going to go back to Debian

The 8 months of combined downtime taught me one lesson

<anupritaisno1[m] "I'm never going to go back to De"> we're never ever getting back together

Downtime OS is built to fall

between my school commitments, working on grapheneos and my hobby persuits, i dont think there's any time for lawyering

Devuan is my preferred distro anyway. Fuck systemd.

Ironically arch Linux, "the unstable OS" has been stable

<anonhat[m] "Devuan is my preferred distro an"> bro do you even Void?

<renlord "between my school commitments, w"> I understand. Still, at least you could notify the RCMP. I'm pretty sure harassment is a crime in Canada.

London stock exchange uses gentoo

i did write to the Vice journalist, he said he'd keep it for future use when there's something to write about

s/the/a/

<anonhat[m] "I understand. Still, at least yo"> He's in Australia

India is much worse

The land of ants that can kill you...

I am in the US and California at that. Feeling lucky

anonhat: india has no free speech, blocks almost the entire internet and is basically a dictatorship

<anupritaisno1[m] "anonhat: india has no free speec"> You just described most of my childhood.

<anonhat[m] "You just described most of my ch"> Gg

I was literally chastised one time for learning Javascript online.

where is the land of annts?

<anonhat[m] "I was literally chastised one ti"> "Don't lie to me, you've been on stackoverflow again, haven't you!"

Dad: why you crying

Me: I was watching porn

Dad: don't lie, you've been learning JavaScript online

I was just killing spare time in my school's library. I had nothing to do. So I went on Code Academy. The librarian came over and apparently thought I was hacking the mainframe of the pentagon. When I explained to her that I was learning Javascript, she said "I don't think your teacher told you to do anything with a javascript" and sent me back to class, where I proceeded to do nothing for the rest of the period.

I toohacked the pentagon in middle school

<renlord "where is the land of annts?"> The land of the coon cheese.

i dont see any ants where i live

and coon cheese getting rebranded

land of the vegemite!

Sure. Land of the yeast paste.

lol

Marmite > Vegemite

Ma might not SchismXL

Punny

Anyway cringe stuff coming xD

cn3m GlassROM/android_vendor_flossprebuilts a3ccf70

<clannad[m] "cn3m github.com/GlassROM"> About time

does yubikey works with grapheneos?

crixtnn: yes

i use mine for gpg mainly on phone, with farmail, password-store, andOTP

nfc one or usb c?

usb C

i dont see reason for nfc not working with grapheneos but from i experience with my previous yubi in nfc, works well or it was pain to get it working correctly

this one?

i use YubiKey 5 Series with a usb C adapter

but yubikey-c-fips should works afaik

nfc seems much more convenient. what was the issue with it?

i got pain to align correctly the key at the good place where the contact is well made

it was long time ago, i dont remember details exactly, but was often frustracted with,

if you try, you will tell me how it is now, maybe depend the phone also, and how you protect it

* if you try, you will tell me how it is now, maybe depend the phone also, and how you protect it, what case you use

<za_warudo-vilfp8 "About time"> wtf is glassrom even, they don't even have a website

or, they do but every time I tried to visit it it's down

and wayback machine doesn't have any record, making me think they never did have a website

<neonfuz2 "wtf is glassrom even, they don't"> It's on the github?

The releases, without own website

I mean yeah there's sources and repos, but no description of what it is

at least no easily accessible description

and that website at the top is the website I'm talking about, it doesn't exist. Broken link.

sure I can dig through this user's repos and try to piece together what it is

looks like glassrom-landing is the closest repo to a description

and that's just how to build it

Unable to update vanadium browser available on github. How to do it?

<eveningbeetle[m] "Unable to update vanadium browse"> You'd need the three apps

Install the library, then the broswer and webview in any order

Are they any safe apps on the aroura store such as Spotify, WhatsApp, or MyFitness pal?? I don't want to download one of these and defeat the purpose of the app...

Source: github.com/GrapheneOS/platform_exte…nal_vanadium/tree/10/prebuilt/arm64

Some are compressed due to 50MB limit

Vanadium is surprisingly light

<sting-ray[m] "Are they any safe apps on the ar"> Spotify don't work, WhatsApp do, unknown on MyFitness, better check the freenode.logbot.info/grapheneos and search it there

Thank you

You'd see some user experience on those apps with the past messages

wait what

spotify works fine

I thought it doesn't recently?

Said by some other user here

I just used it last night

<LinusSexTips[m] "spotify works fine"> quick, ping them

after uninstall and reinstall spotify works back for me too

im on the latest version of spotify

from the aurora store

no problems at all

sting-ray apparently it does, the recent update didn't break it apparently

after the upgrade for me, the app crash at start directly, but uninstall/install, its back

How about what's app??

whatsapp has also always worked fine for me

Guess one app left to check, my apologies for the mistake

I'd say go test it yourself to see?

Now can they track me with the trackers listed below on aruroa ?

use it in a different user profile

I login with the Anonymous login

<sting-ray[m] "Now can they track me with the t"> The apps itself? Yeah, mostly. It is more desirable to use it in non-main user profile

<sting-ray[m] "I login with the Anonymous login"> That's for mitigating Google tracking in downloading google play apps

Ah OK

What is non main user profile ??

I'm sorry such a noob

sting-ray: i think they mean adding a user in Settings > System > Multiple users

and using that instead of the main user (called "Owner")

za_warudo-vilfp8kn0pcyh-tfcfvapg77a: thanks a lot

Has anyone used i2p or Tor with GOS? I've attempted to start the routers but i2p will crash and Tor says "starting" indefinitely.

i use orbot in vpn mode, works fine

although i still haven't managed to migrate to my pixel

been almost a year i've had it

it's been ready, waiting

How does one install apps in other profiles? I've tried downloading APKs and they will not install. "Install unknown apps" is enabled in this profile.

(i.e., "Allow from this source" is checked in Vanadium in the new user profile"

If the version you downloaded is already installed as a newer version it won't work

notably F-Droid

they don't put the latest on their site

Ah. I've only tried installing Aurora and F-Droid.

what you get by default is the known stable. you can get latest through the app pages themselves though

latest available or any older version even

i.e. f-droid.org/en/packages/org.fdroid.fdroid

So on Graphene I cannot have an App Store in a different profile if I have it installed in my Owner profile?

<alzxjm[m] "So on Graphene I cannot have an "> you can you just need the latest version

Hmm. I still get "App not installed" for Aurora. I downloaded 3.2.9 from their website and I have 3.2.9 installed in my Owner profile.

I was able to download a different APK I downloaded from the internet.

alzxjm: let me guess you used F-Droid to install Aurora originally?

I was able to *install a different APK.

Yes.

so the signing key is different than the devs

that is your issue

Ah I see.

F-Droid oi vey

Does Aurora self-update?

I don't know

So I should uninstall Aurora, download from the website, and then try to install on the other profile?

download this apk it will work

Or that.

Thanks.

yw it is safe since it is signed and pinned in your OS

All this for the stupid DJI drone app.

Does anyone use the mullvad app?

yes

VPNs are overrated but I trust moolvlad more than my isp

I'm having trouble establishing a connection

<LinusSexTips[m] "VPNs are overrated but I trust m"> this

<q22[m] "I'm having trouble establishing "> regenerate wireguard key?

Whereas wireguard doesn't have any problems

I'll give it a try

Thanks

just go to settings -> advanced -> wireguard key -> regenerate

hello, I'm on flashing my Pixel4XL with the coral-factory-2020.07.06.20.zip. while flashing it shows:archive does not contain 'vendor_boot.img'

extracting super_empty.img (0 MB) to disk... took 0.000s

is this normal?

I'm ending in the GrapheneOS Recovery... should I load something via sideload? this is not prvided on the homepage, please excuse the stupid questions

LRS are you following the guide on the website or something else?

just the guide on the website, but i'm a newbie

What operating system are you using?

manjaro linux

And have you checked to see if fastboot is the latest version?

yes sir

Good start!

Have you verified all the downloads?

this is my second try

via signify

but where is the .img? do i have to load it somewhere else?

Yeah, either signify or signify-openbsd.

i used signify

Everything should be in the zip folder. Have you downloaded it again?

I loaded the files on diffrent machines, same result

it contains the bootloader-coral-c2f2-0.2-6374983.img and the raddio-coral etc.img

and the image-coral-2020.07.06.20.zip

but I think this is something that I dont have to unzip

Let me just get my laptop

thanks, take your time

Okay, so once you've flashed everything, what screen does the phone show?

it ended in the grapheneos recovery

i think

 

w8 i'll do it again to say it clearly

ok wrong it shows a warning messages that the bootloader is unlocked

--> next google-splash-screen

--> next fastbootd --> grapheneOS FastBoot

Yep, let it do it's thing

If you're following the guide, it will boot into fastbootd and will reboot once it has finished. It will then go back to the bootloader screen, where you can relock the bootloader

ok, how? I have the options:

Reboot system now

Enter Recovery

Reboot to bootloader

Power off

on the other hand seems the flash-all.sh not ready yet... should I reboot to bootloader that the script can finsh?

Let's start from the beginning, yes

thanks

script is finished, now I should lock the bootloader?

If the phone has booted back into the bootloader screen, where it says it is unlocked, yes

ok

If this doesn't work, we can work our way through together

thanks a lot

bootloader is locked

i would now try to boot into the system

i got a warning message, that my device will load a different OS, GOOGLE appeared short and it boots into the bootlader

Okay, no worries. It should boot into GrapheneOS after the Google screen (which is normal)

The warning message is also normal

i'm back on the bootloader

enter reason: reboot bootloader

Okay, assuming your bootloader is now locked, unlock it again

it show device state lock

i will lock it

device state: unlocked

Good, okay

Now, I know this is going to be a bit of a nuisance, but the best thing to do is to delete all the files you've downloaded, so we can go through the install process again

thank, i think it would be the best

curl -O releases.grapheneos.org/coral-factory-2020.07.06.20.zip

curl -O releases.grapheneos.org/coral-factory-2020.07.06.20.zip.sig

curl -O releases.grapheneos.org/factory.pub

rm -rf coral*

done

Let me know when they're all downloaded

kk, factory is loading, it should be ready in 9 min...

No rush :)

total of 1039M is correct?

Should be approx. 1.1gb

Once downloaded*

But yeah, uGet is showing 1039

done

signify -Cqp factory.pub -x coral-factory-2020.07.06.20.zip.sig && echo verified

it echos verified

Excellent, so now we're able to go onto the next part

unzip coral-factory-2020.07.60.20.zip

unzip coral-factory-2020.07.06.20.zip

^^

done

now sudo fastboot ./flash-all.sh

wrong -fastboot

just flash-all

I was going to say

sorry

was i right?

Haha, don't worry. While it isn't necessarily recommended to use sudo for this, it shouldn't harm

I usually do "sudo su" to elevate myself, then just run ./flash-all.sh

ok warnig message and the fastbootd-screen

+n

Just let it do it's thing

Don't touch it until you're back onto the bootloader screen

i dont have to do something?

Sit back and relax

i doesn't seem that there is something happen

I know

dont say

On the fastbootd screen, it looks like nothing is happening. Eventually, the phone will reboot.

If you check the terminal, is anything happening?

script is waiting for device

And it is now in fastbootd?

should i:

reboot system now

enter recovery

reboot to bootloader

power off

?

Go back to bootloader

ok

It shouldn't be doing that

script says finished

We're going to try the process again

stop

there is a errormessage:

fastboot: error: Failed to boot into userspace fastboot; one or more components might be unbootable.

Don't worry, we can try again

kk

should i flash again?

On bootloader screen, do you see your device when doing fastboot devices?

Did you download platform-tools, too?

Can you do fastboot --version for me, with sudo?

i see my serialnumber

 

fastboot version 30.0.0-2

Good, at least it is seeing the phone!

Is that with sudo, yeah?

It is an older version of fastboot than the one recommended on the guide

What I want you to do is to download the platform-tools from the guide:

curl -O dl.google.com/android/repository/platform-tools_r30.0.3-linux.zip

echo '19c74e779f3d81f15ba21207ec405439416d99330c3f5a337dab6d58ea20b465 platform-tools_r30.0.3-linux.zip' | sha256sum -c

unzip platform-tools_r30.0.3-linux.zip

but the told, that the arch packeges where updated?

 

Manjaro can lag behind sometimes

i'll download

sorry

Don't worry. I'm on Mint, so I have to follow it to the letter anyways

Once you've downloaded the platform-tools, elevate yourself using sudo su, then do this:

ok unzipped everything

export PATH="$PWD/platform-tools:$PATH"

The reason why I'm saying to do it in su, is because if you do that just for a normal user, it won't change it for sudo.

fastboot version 30.0.3-6597393

and i'm root via su

Nice

Okay, now try running ./flash-all.sh

ok

And don't touch the phone lol

^^

it begins...

fastbootd again

Terminal waiting for device?

yes

reboot bootloader?

No

ok

Unplug the device and plug it back in

done, nothing happens

Hmm

how long should it take?

The only thing I can think of is that you're missing android udev r ules

rules

dump question: what should i do?

Check your repositories or aur to see if you can install android udev rules that way

Or...

i'll take a look

ok seem that say missed

installed theme

-e

should i start from the beginning?

Good, now try flash-all.sh again, with su

kk

fastbootd

waiting for any device

What I was going to say after "Or..." is, if the rules wasn't in your repositories, you could download them from github.com/M0Rf30/android-udev-rules/raw/master/51-android.rules then copy them to /etc/udev/rules.d/51-android.rules

Just leave it for a few minutes and see if it does anything

ok

The next thing to try is another cable, if you have one

Or do what i just said above, copying the 51-android.rules file to that directory, then run "sudo chmod a+r 51-android.rules" in the same directory as that file.

i'll do

ok i start again

Worst case scenario, you can always run the Google installer through Chrome to get back to "official" and then try the whole process again

i'll got via flashing the old version back, the last time i tried

fastbootd...

Waiting for device again?

yeah, but i missed something... one mom please

after creating the udev rule and changing the right to read 4 all, do i have to do something else?

maybe rebooting?

Nah, it should be fine. However, you could reboot your computer. You'd then have to do export PATH="$PWD/platform-tools:$PATH" again

And try another cable and/or port

i just can change the port, and can grap another cable tomorrow from work

The official cable that came in the box didn't work for me on my Pixel 4 XL, so I used an older one from a spare Xperia I have floating around

they wrote, that there are problems with usb3.0, maybe i can find a cable from another device

That's probably it

but man, thanks a lot for your time

You seem to be clued up on the installation now, though. Sorry we couldn't get it sorted - but once it gets to fastbootd, it should detect the device and then it'll go through some progress bars on the terminal. Eventually, it'll reboot back to bootloader and then you can lock the bootloader

No worries. I don't have the skills people have here regarding coding and the like, so I just try to contribute by helping every once in a while

And, btw, if you end up having screen flickering on your Pixel 4 XL (yes, I moan about it a lot), just search the logs. It took me a while, but I've ended up forcing 60hz all the time using adb.

thanks again, i will reboot my computer, try again and if it fails agian, i'll going to load the official rom back on

Good luck!

If you need any more help tomorrow or whenever, just @ me and I'll see what I can do, even if it's just cheerleading reassurance.

* If you need any more help tomorrow or whenever, just @ me here and I'll see what I can do, even if it's just cheerleading reassurance.

thanyou are the best, i'll do, i'm sure^^

Hello, can someone help me with interpreting the Auditor results?

Anyone else having an issue with NewPipe ? Keeps crashing "unable to decode URL"

sting-ray: Yes, I'm experiencing that issue now

Can't watch videos 😕

Same here. I just sat down to catch up on videos.