<BalooRJ "basically you can get 4 years ou"> 3 years of updates guarenteed

The Pixel did get four years of updates though

I do hate the planned obscelence of the phone market though

they're already powerful enough that they can last for much longer than 4 years I think, but that doesn't sell devices

<mxnorvak[m] "Nice rules, i can't access the l"> I can get to it by long pressing the channel name in your list of channels. It'll bring you to the section where you select what kind of notifications you can get (noisy, mentions only), and press the icon. Kind of ass backwards. This is on Element

It has accessible links, at least on Graphene

<internetshogun[m "I can get to it by long pressing"> I made a mistake

Didn't know when you select the room name , the description part is actually scrollable

And by scrolling down the link is accessible

My bad

yeah or you can just press the icon as I learned in the chat as I learned just now. My life is a lie

which icon?

The actual logo for the channel you are in

For me in Riot it just opens the logo image

Yeah, mentioned I was on Element. Riot has been replaced by it now iirc

Yea different apps

Now that the pixel 4a is out, and graphene for the pixel 4 although experiment, is available, can we expect to see graphene running on a pixel 4a soon? Say, within the scope of the next two months?

Or would it be naive of me to have such hopes?

Well seeing as the 4a isn't out yet, I'd say pretty naive

Little has changed, the project still needs more help. New devices will not get GrapheneOS without device maintainers and more development team members.

I just hope my pixel 2 hangs in there a while longer. Wish I had the skills/time to actually contribute in a meaningful way to the project. Maybe in the future when I get my studies out of the way :-/

Didn't realise the pixel 4 had no fingerprint scanner and was instead relying on face scanner. That shits me.

There is a lot of work that goes into making GrapheneOS work as regragable says. We don't have device maintainers and enough developers. If people want the Pixel 4a to get support, you need should pitch in on getting that support or donating money to the project <grapheneos.org/donate>.

does the pixel 4a come with PVC?

>

Brace yourselves: Google’s Pixel 4A is finally, probably coming Monday

I thought it was the HL3 of phones...

strcat[m]: GrapheneOS/AttestationServer #52

renlord: for performance or just UI aesthetics?

<aeonsolution[m] "There is a lot of work that goes"> I wish I could donate more but all I can afford right now is 5$/month, this project deserves way more time and effort and unfortunately I know absolute zero about programming

bonerdose[m]: I was in a similar boat 10-15 years ago. We all start somewhere.

Cheers

<JTL "bonerdose: I was in a similar bo"> Thanks bro, maybe now would be a good time to start learning

The best time was yesterday, second best time is now :)

$5 a month adds up

Unfortuntaly I find to work on an advanced project like this requires some understanding of computer science concepts as opoosed to just programming per se...

I hope you get there someday

True

It does seem extremely complicated

renlord: it might need to be configurable

or paginated

JTL: both

Assumed as much

with my query now, it takes a while to get a response

and the scroll bar is too long

what do you guys use/suggest for streaming music?

hi there. I did a factory reset on 3a xl and when I try to install fdroid on a secondary user I get the error "App was not installed."

crixtnn[m]: you may be trying to install an outdated .apk. If you have F droid installed as the primary user, and it's upgraded to a later version, you need to install the same version on your second user account. Make sure that it's the same in both profiles. F-droid updated itself recently, so that's something to watch for.

thanks. that was the problem. had it with other apps as well. the apk to be installed needs to be the same version as the one installed on other users. reinstalled it on all users and it worked.

fdroid is really bad

i really strongly advise people to not use it

every app i get from fdroid is outdated

uses old android api

Eventually I hope we have own "app store" with own our repository with much better quality control

as an example -- password store, the fdroid version is so old, it cant even update to the current release that is distributed on github/play store

blah

the fdroid version does not even use the correct APIs to password fill

and asks that you enable accessbility which is actually a terrible thing to do

the new one is vastly superior and actually works properly

and uses scoped storage

I assume that's because it was built for a much older version of Android?

Otherwise I agree

JTL: yes

and fdroid does not ship this new version

zzz

why? no fkin idea.

this was just a few months ago

JTL: even if we have our own appstore, the number of application that are maintained inside it will be minimal, prolly vanadium, pdfviewer and auditor only

Agreed

renlord gitlab.com/fdroid/fdroiddata/-/issues/1834

<cn3m[m] "you mean like XPrivacyLua?"> Yea something like that (without xposed), lineage has a built in function for feeding false data to apps. Privacy manager or something similar

Why doesn't AOSP contain a way to truly sandbox apps

what do u mean bonerdose[m]

truly sandbox?

Like a true sandbox and not just a work profile

but each apps are sanboxed already

bonerdose[m], AOSP sandboxes each app individually already to its own specific user account, and unless you grant it permission to the shared storage, it only sees within its own home directory. If it wants to communicate with another app, those apps need to be written to communicate with it. The permissions are enforced via the mandatory access control policies in the kernel.

bonerdose: apps are all sandboxed

an app cannot be not sandboxed

<pixelusus "renlord gitlab.com/fdroi"> I suffered the exact same bug.

renlord the app is up to date: f-droid.org/en/packages/dev.msfjarvis.aps

Version 1.9.2 (10920) Added on 2020-07-0

7

ok, i've uninstalled fdroid

it have been up to date since a while, the package name changed a while ago

The old version of Password Store was archived a while ago, but the renaming was quite confusing...

Still waiting for 1.10.x to get included into F-Droid...

* Still waiting for 1.10.x to get included into F-Droid though...

For some reason, I cannot take photos using Open Camera or Simple Camera, but the default camera included in GrapheneOS works (Pixel 3a XL, version 2020.07.06.20 stable). Why is that?

i haven't tried open camera since a while do it now open in portrait mode or still open in landscape while using the phone in portrait mode? it was really painful

<pixelusus "i haven't tried open camera sinc"> ?

i guess they fixed it finnaly

you can still use gcam

1. Get the latest Google camera apk

2. Install microG services core from f-droid and deny network permission.

3. Install Gcam apk and deny internet permission

Now you have a way better camera app and no telemetry!

* 1. Get the latest Google camera apk

2. Install microG services core from f-droid and deny network permission.

3. Install Gcam apk and deny network permission

^best way I've found to get gcam working on Graphene

<alzxjm[m] "> <@bonerdose:matrix.org> 1. Get"> Thanks! I'll edit my original comment

* 1. Get the latest Google camera apk

2. Install this apk: github.com/lukaspieper/Gcam-Services-Provider

3. Install Gcam apk and deny network permission

Does anyone know if uninstalling play services messes up apps like installing play services after installing apps does?

bonerdose this question would be more suited to the offtopic channel.

#freenode_#grapheneos-offtopic:matrix.org

Black Winner Yoshi: I used `adb pull` to get a Pixel camera from a stock install. You could try APKMirror, maybe.

<BlackWinnerYoshi "> <@bonerdose:matrix.org> 1. Get"> Aptoide has the latest apk, but its the least secure. I recommend apkpure even though its out of date if you don't trust aptoide.

<alzxjm[m] "Black Winner Yoshi: I used `adb "> Well, I don't have the stock install anymore... And I want to have Google Camera up-to-date

Okay aptoide has the latest version

why not apkmirror?

<za_warudo-vilfp8 "why not apkmirror?"> You have to update manually

Exactly

there's mda5, sha1, sha256 signatures you can check there thru Classyshark3xodus

Welp, ok, I don't trust it but go on

Black Winner Yoshi: Subscribe to an RSS feed for your app. Not a big deal to quickly download an APK and update.

How is apkpure any less safe than apkmirror

It's the aptoide I'm quite uncomfortable with

Yes that's understandable

* It's the aptoide I'm quite uncomfortable with (thanks to recent breaches)

You take a bigger risk but aptoide has paid apps, usually has the newest updates, and their app is open source

Actually, what RSS app should I use?

For getting Google Camera updates

The most up to date one on f droid

Or you could just use apkpure

And not need an rss

<bonerdose[m] "Or you could just use apkpure"> But APKPure has an out of date version

Okay so that leaves 2 options:

1. Use aptoide and not need an RSS but less secure.

2. Use an RSS feed for updates on gcam in apkmirror

Don't use ttrss

Requires google play services

It kinda boggles me that it's even on fdroid

It can't even function on gms/gsf-less phones

Antennapod and essential, qksms, many more are GSF dependant

* Antennapod and essential, qksms, many more are GSF dependant and on f droid

Yeah but Antennapod works fine without GSF. That dependency might only be there for Chromecast (in Play Store version) but IDK.

I decided to use Feeder as the RSS app

My favorite RSS readers are Newsblur (for insane features) or Miniflux.

I think you have to self-host Miniflux though.

Don't use aptoide

Try aurora store

<anupritaisno1[m] "Try aurora store"> I haven't found Google Camera on Aurora Store, though. Unless you know where is it.

This works

If you need rss

<BlackWinnerYoshi "I haven't found Google Camera on"> Look at apkpure

It's outdated they said

Apkmirror is the safest latest version

Aptoide: latest and unsafe

Apkpure: Safe but out of date

Apkmirror: safe and up-to-date but no auto update

Nvm, it doesnt

work on apkmirror

* Nvm, it doesnt (the rss app i gave)

Looks like Google Camera works

Although, I still wonder why the other camera apps don't work

bonerdose: use aurora store

Google camera doesn't show up for most people on Aurora

Tried spoofing on lower api, doesn't work

just open it in aurora

from browser

Welp, it works

That doesn't show the latest version here atleast

<za_warudo-vilfp8 "play.google.com/store/ap"> This shows the "Uninstall" and "Install" buttons at the same time, lol

* This shows the "Uninstall" and "Install" buttons at the same time, lol

Although, the latest version of GCam works on Android 11 only, so I had to install an older version anyway

Also, can you remove the `&hl=` thing next time?

Well, anyway, I'll just use GCam for now

<BlackWinnerYoshi "Well, anyway, I'll just use GCam"> forum.xda-developers.com/apps/googl…ds/gcam-google-pixel-1-2-3-t3875663 can also use a modded GCam.

<SchismXL[m] "forum.xda-developers.com"> Actually, I can just use the stock Google Camera app

Yeah, for sure. Just giving options.

you can always use that something something ultra secret repo

Is Saleh a bot that's bugging out? Keeps joining and leaving the room like 20 times a day

Does it reduce privacy or security or anything like that in any way if I use Google Camera?

(Only giving it needed to function permissions and blocking network access of course)

Its probably pretty safe. Google got a load of resources to throw at it.

But I mean it is Google, it wouldn't reduce privacy or anything?

Not sure what it uses the network permission for, but denying that makes it not an issue

There was a vulnerability patched last year.

Any app could get gcam to take photos/videos

Is this the right place to ask for a lil help with the install?

If it had storage permission, it had access to those photos

greenink: yes, whats the problem

Nice, I got as far as the flash all bit for a pixel 3a but nothing happened. I was wondering if I should try locking the oem again so I could follow the guide from the start again.

My brother installed aptoide on my nephews nvidia tablet

Actually nvidia set top box

The aptoide app was making connections to facebook

<greenink[m] "Nice, I got as far as the flash "> Ever checked `fastboot device` before flashing?

I don't use anything apart from aurora and apkmirror for grabbing play store apps.

greenink: no, wont need to lock the device

Just need to follow the instructions on the website carefully

But just ignore the oem unlocking bit because I already did it?

Yeah, ignore that

Its likely a problem with setting PATH

Aight I’ll give it a shot, thanks

Or a dodgy lead or usb port

Try a different lead or port if you can

Was using techlores guide for it because this is defo not my area of expertise

greenink: lots of people run into issues following that.... follow the instructions on the website

👍 cheers

greenink: where did you get your fastboot / android tools?

Good luck

You may have the wrong version and need to remove that

From the link he recommended. I’ll give it another go following only the sites instructions and I’ll let ya know if I haven’t messed it up 😅

greenink: think you may have to uninstall that, if its not the same link as the GrapheneOS website gives

*think you will

Got it, thanks

Does anyone know if there is a way to restore plain text SMS messages in GrapheneOS? I used Silence for a time but switched to the default Messaging AOSP app

trying to see if I can use these plain text backups of text I have from Silence into the Messaging app. Even when I look in backup I don't see an option to even back up text messages, curious if this is possible at all

Google just announced the Pixel 4a, are there any plans to support it?

<BalooRJ "trying to see if I can use these"> Can Silence even restore a Silence SMS backup? I guess this is the only way. Or search F-Droid for other SMS apps, maybe they have the option

<nik[m]1 "Google just announced the Pixel "> Probably yes, but the GrapheneOS devs need to actually have the device to be able to test it

BlackWinnerYoshi: Silence can both export and import SMS texts received through the app in both encrypted and plaintext form

but Silence is not compatible with KDEConnect, so I've been attempting to find a FLOSS SMS app that I can import the backup into. The default app can't, neither can the Simple SMS Messaging app that was recently released

if anyone knows of a FLOSS app that you can import plain text xml SMS backups into and is compatible with KDEConnect, I would be very grateful

<BalooRJ "if anyone knows of a FLOSS app t"> I think someone would need to make one

KDEConnect is compatible with quite a few messaging apps according to the devs, so I think it's just a matter of me finding one with an import option

unless no SMS apps can import old texts from plaintext

so it looks like it is the restore feature that doesn't have a native setting in Android

crabman: yeah, they are pretty much the same. Think the only difference may be that the apk download version can self update.

dazinism: Thanks. I can't find a way to force Signal to check for updates. I am now curious why self update is not being prompted, but Auroa is prompting one for Signal.

greenink: I used Techlore instructions with minimal issues. Against the recommendations here, I edited the script file as recommended by Techlore and all went well.

You can flag apps in Aurora so that youre not pulling updates from different repositories

and that Aurora only updates that apps you got directly from the Aurora store

So no self-update to check

It usually only updates when it's a big one

@za_vilfp8kn0pcyh-tfcfvapg77a:privacytools.io: Thanks

<BalooRJ "You can flag apps in Aurora so t"> Thanks, I will look into the Auroa settings a little more.

It's a little complex the last I looked at it, but as long as you don't just hit update all when youre using Aurora

You'll be able to parse out what you've installed from Aurora specifically and just update those apps

Yeah the Signal self updates happen later than the Play store. Also doesnt happen with every update (I guess/hope any with security fixes do happen)

hmm i feel it's kinda pointless to use standalone apk when you use fdroid with rfc repo ..

maybe i think wrongly tho

<g65434-2[m] "maybe i think wrongly tho"> rfc repo? I am not familiar

yeah, it's included within aurora droid

or you can get it from fdroid site

g65434-2: I looked at forum.f-droid.org/t/known-repositories/721 but don't see a "rfc repo"

oh sorry i wasn't clear enough lmao

this one

g65434-2: Thanks

you're welcome

g65434-2: So it does not work unless signed?

Can the key be generated from a PC or must it be generated from the phone

And it is unclear to me where to paste the key

Yikes the Pixel 3a seems better than the 4a

How did they even do that

why?

I mean what's the difference that makes it seem better?

<crabman[m]1 "g65434-2: So it does not work un"> wdym ?

The 3a has more colors, is essentially the same speed, has a larger screen (on the XL), etc

also no punchhole notch that gets in the way on the 3a

I dunno the 4a just seems like the same thing but worse imo

Personal preference though

You're getting many details wrong

the 4a is faster.

it has more RAM

Moderate bezels like the 3a's help me get to the screen better

it has 128 GB memory

it has a larger screen-to-phone ratio

it has a more powerful battery

it charegs at 18 watts

the cameras appear to be the same

4a weighs less

Its screen is bigger while the phone is smaller

and it's in black which I am okay with.

looks like an improvement for sure

3a charges at 18w too iirc

UFS 2.1 as well

the 4a XL literally has a larger display.

The faster storage is probably the biggest IMO. emmc is so trash

supports 2 sims, one nano sim and another esim

has an audio jack just like the 3a XL

g65434-2: Sorry, I just realized I was looking at the wrong repository

<ruddo[m] "the 4a XL literally has a larger"> 4a XL?

Apparently it's usb type c port is 3.1 so maybe hdmi support

Yes 4a XL has a larger display than 3a XL.

Again, all personal preference like I said

there is no 4a XL

<ruddo[m] "Yes 4a XL has a larger display t"> 4a XL isn't even out yet

It's all incremental improvements tho, I can't find anything about the cool Pixel 4 camera in the Pixel 4a

most rumors point to the XL being canned

<mxnorvak[m] "4a XL isn't even out yet"> specs are up tho gadgetsnow.com/compare-mobile-phone…e-Pixel-3A-XL-vs-Google-Pixel-4A-XL

for me literally none of those things matter - so for me, the 4a is worse than the 3a, to each their own, though

Alright , these were literally all of the phones spec so idk what matters

5 XL, canned. 4a XL, canned. My assumption is the a models take the place of a non-XL size while the "normal" 5 will just be an XL

I care that it charges quickly, is fast enough, I don't like intrusions on the display (notches or punch holes), I like OLED, a headphone jack, and thats about it

I see where some of the changes could be good for some people

but for me it just doesnt make any difference and some of the things make it worse for me

<ruddo[m] "the 4a XL literally has a larger"> There's a 4a XL?

headphone jack is important to me

why I got the a series

<faxing[m] "I care that it charges quickly, "> I don't like the punch hole either

there is no 4a XL, people who have gotten the 4a's specs right for months say they aren't doing an XL anymore

Glad I'm not the only one lol

<ruddo[m] "specs are up tho gad"> this is unofficial but also not true then?

idk

The solution will be an actual phone manufacturer that makes free as in freedom phones.

fairphone?

4a is clearly an improvement to 3a except for punchhole

sort of dealbreaker since it's hard to cover the camera

<za_warudo-vilfp8 "sort of dealbreaker since it's h"> Yea I've been wondering how that could be done

<za_warudo-vilfp8 "sort of dealbreaker since it's h"> Any suggestions on covering the 3a front camera with a screen protector on?

<za_warudo-vilfp8 "sort of dealbreaker since it's h"> Do you not trust GrapheneOS to prevent unauthorized camera use?

Gives very little room to put anything

<alzxjm[m] "Do you not trust GrapheneOS to p"> It's more of the other apps I install

They're untrusted

don't give them camera permission

or take the camera out completely.

Yeah but GrapheneOS handles permissions, not the apps.

(I do agree that it would be good to have a way to physically cover the camera, and a notch makes that almost impossible.)

If you don't trust GrapheneOS to handle permissions like sensors, what do you trust?

Some of them, isolated on profiles, have to double sure that they won't get anything on camera though normally, it shouldn't be bypassed thanks to SELinux

I get your point though. I just prefer it covered

in case I accidentally give an app permission to camera

Can blacklist apps in Aurora Store if you dont want Aurora to notify/try to update

I shouldn't be so quick to call you out. I run Chrome OS on a Pixelbook and I have my webcam covered 😅

By the way, I use sticker that has slider that likes covers it.

I have [these](duckduckgo.merchmadeeasy.com/products/webcam-piece)

* By the way, I use sticker that has slider that has a circle cover, like a window slider (lol)

I don't mind to be honest, just avoiding human mistakes. I would have desoldered the mic, but I don't have the skills to do so lol

<alzxjm[m] "I have [these](duckduckg"> Yeah like that

Though I trust the GrapheneOS' SELinux, I try to make sure that even a human mistake will not leak that much

Thus, the additional hardware removal for small opsec points. Not that worth for typical usage

* Thus, the hardware removal or physical patching is for small opsec points. Not that worth for typical usage and threat model.

i have an old keybase account that has some stellar lumens in it (from when they gave them out sometime ago). not doing anything with it. anyone know if theres a way to move those to bitcoin without giving out my personal info? (looking to donate it to grapheneos) i looked at coinbase but they needed a bunch of PI

> I have [these](duckduckgo.merchmadeeasy.com/products/webcam-piece)

Front and back?

pixelbooks have back facing cameras?

thats kinda cool actually

They don't. Just one camera.

oh

then why did that guys ask if it was front and back?

* then why did that guy ask if it was front and back?

Maybe he thought I put those on my phone.

how do you fit a webcam cover on a phone lol

just stick it on there

im looking at my pixel

it would need an awfully small cover

<sallite[m] "i have an old keybase account th"> Same situation here, would love to know if there are options other than Coinbase for this.

What do you guys think of the Pixel 4a

<r357[m] "Same situation here, would love "> Binance?

Empire ;)

Or if you are uncomfortable with an illegal enterprise, pax has the most anonymous method depending on payment type at the cost of heavy fees

Something like you pay .40 for every dollar

Another anonymous method is to buy monero and exchange it for free on xmr.to (through tor) for bitcoin.

<r357[m] "Same situation here, would love "> look into instant exchanges like morphtoken and changenow that dont require any personal info

alternatively you have decentralised exchanges like bisq

but as bonerdose mentioned, monero is basically the only decent privacy coin in the space, bitcoin isn't really anonymous nowadays

Wasabi Wallet will anonymize your BTC with CoinJoin.

But yeah Monero is meant to have higher privacy.

Hey there im lookong for a working step counter. The pedometer from fdroid cant count steps in background

somebody pasted their password in the wrong placeeeee

Well at least its a strong password...

Well thanks, already c hanged :p

Not anymore though

Could someone link to the grapheneOS off-topic channel?

Not sure where to find it

<komsiassa[m] "Could someone link to the graphe"> #freenode_#grapheneos-offtopic:matrix.org

or... matrix.to/#/!NKqyWWNTlbuXwOPMCt:matrix.org

kejsixi reddit.com/r/GrapheneOS/comments/hf…_chip_actually_do/fw8kr29?context=3 check this comment and read through the info.

SchismXL: thank you! I have read all of what's linked in the reddit post yesterday, but not security.googleblog.com/2018/10/bui…-titan-better-security-through.html They write ...Titan M performs several security sensitive functions, including:

Ensuring that even Google can't unlock a phone or install firmware updates without the owner's cooperation with Insider Attack Resistance (link). i have not found anything (5 min search) about how i do NOT cooperate with google's IAR and potential unlock or firmware updates. I'm interested in the firmware, they write they will open source it, but nothing happened yet. im also interessted in other firmware in the phone

, how do we know there's no backdoor of any kind?I believe one thing is for sure the TitanM has no acces to the ram/SOC etc. But we can't really know that right?

SchismXL: BTW im currently researching all the functions of the chipsets on the device ifixit.com/Teardown/Google+Pixel+3a+Teardown/123256

"...even Google can't unlock a phone or install firmware updates without the owner's cooperation..." Basically means that if your device is switched off or before first unlock (maybe afterwards, too), they cannot do anything to the device. Period. They need your "permission" in the form of passcode and/or biometrics.

Anyone correct me if I'm wrong!

The rest of the answers to your questions are out of my scope, I'm afraid, kejsixi

hm. which would be stored on the titanM chip itself, or? :D thx

im pretty annoyed about the whole spying and surveilence s going on, im on a blackberry os 7. only sms calls...

in the grapheneos faq the firmware(not just titanM) is praised a lot, but we basically dont know anything about it. am i correct?

<kejsixi[m] "hm. which would be stored on the"> Someone else may be along later today or tomorrow to answer these in more detail, of they have time. But yeah, biometrics and such will be on the Titan M chip.

alright sounds plausible to me. im trying to connect dots. e-sim would be stored there too i guess

ty

Is it worth getting a 3a still? I'm assuming there will be an experimental 4a build in a month or so, but I don't know how stable that would be.

If anyone is using the 4, how experimental is "experimental"?

What's only worded specific is that the TitanM has its own ram etc.

bocyemofo: i can buy the 4a around august 20 in my country

probably very experimental like the 4 and 4xl

bocyemofo: well worng in dont know how experimental support for 4 is.

bocyemofo: did you see the case of the 4a... looks like battery replacement will be a real pain; must remove screen first.

<kejsixi[m] "bocyemofo: did you see the case "> Oh, really? I had just assumed it would be like most plastic phones. That's super annoying.

<kejsixi[m] "hello! has anyone information on"> Why do you ask?

(i.e. is this for your threat model or just a curiosity?)

yeah that's how it looks like, the edge to open it is on the screens end. 2 i wrote why before, i dont know how to navigate around here that well, i can copy my text to you

maybe*

Hi, which Android version grapheneos is based upon?

bocyemofo: both threat model and curiosity, my threat level is: i don't want to be googled, nor do i want any windows installed in my house and i dont want any book of faces also no gate from baal and snakelinda

i also dont like the highest mark on the sugar mountain. i dont like those people.

ham5urg: android 10 since last october iirc

And how does the Titan chip fit into that? Is your concern that google might use the Titan to collect data?

yes sounds like an IME/VPRO to me

same with the pixelcore or neuralcore

sounds great "gives us confidence in the defenses

we're providing for our users. We know what's inside, how it got there,

how it works, and who can make changes." sounds like the government " we'll protect you " rofl

Well Google's adverse goal is transparently data collection - it's probably not impossible to have a backdoor in one of these chips, but they would be fundamentally compromising the security of their hardware - there are much easier ways to collect data on the vast majority of users.

Government adversaries are far more likely to be involved in such trickery than Google, it would seem.

yeah, but what i have gathered and linked to it so far, is that it is the backdoor

<kejsixi[m] "yeah, but what i have gathered a"> Google don't need a backdoor to collect data - for practically every android phone they have all the data they want.

well if oyu see it like that, true, but this is silicon valley, they basically are a own government. I look at it from different angles

i know how those people think and act beyond the tech stuff

This would be an incredibly expensive operation, and would have tremendous cost to Google if it were ever discovered - and would only provide data on a virtually non-existent segment of their market.

I just don't see such an attack being economically viable.

Of course, that only applies when you are considering profit as a motivation - but I treat Google as being motivated by profit and not some darker purpose.

sure is viable, economy is in its core land and resources, further ownership

yep

<kejsixi[m] "sure is viable, economy is in it"> I'm not sure I follow you.

i asumed youre thinking economy = money

googles resource is data mined from people

Yes it's viable, just stupid. If such a backdoor existed, it wouldn't be used against you.

how do you know that ? i believe YOU would not use it against me.

<kejsixi[m] "i asumed youre thinking economy "> In this case data = money. A Titan backdoor would only provide data on Pixel phones (Android as a whole is much larger, of course), and would also not provide any extra data except in the (incredibly rare) case of a de-googled custom ROM.

Maybe there's a backdoor into Titan M, maybe not. Anyway, you're not worth a zero-day.

<Antoine-Frdric[m "Maybe there's a backdoor into Ti"> Right - the risk to Google is not worth data on the few users of GrapheneOS

aha. well, fuck you too ;)Antoine-Frédéric:

<Antoine-Frdric[m "Maybe there's a backdoor into Ti"> speak for yourself, i have clash of clans unlimited gem hack 2019 on my phone

<kejsixi[m] "how do you know that ? i believe"> If I correctly recall your personal data is worth $400 and a zero-day is worth hundreds of thousands of dollars.

Going AFK.

<kejsixi[m] "bocyemofo: did you see the case "> Is that better with the 3a?

<Antoine-Frdric[m "If I correctly recall your perso"> my, in conjunction, my self, is not worth any MONEY. stay afk

broda721: in relation yes, better; removable battery by default.

broda721: pixel screen is really thin

<kejsixi[m] "yes sounds like an IME/VPRO to m"> Google does not sell nearly enough pixels to do this. Especially since Titan is based on their own security measures on the Titan

<bocyemofo[m] "Right - the risk to Google is no"> because you think as you said, google has no evil intentions. I mean people... :( just the words alone, in plain sight: Google, Windows, Ba'als Gate, Mel-linda(etymology: dark-snake) Mark Zuckerberg(marking sugar mountain) Qual-Comm chips(Qual; german; Agony kom; german; come/commeth) smart-phone (etymology: smart; pain, phone, voice,sound, to voice) AlphaBet (hebrew;

Alefbet בא

sukiyakiwestern: not yet, like google needs instant gratification, doubt that

you've taken a turn from privacy-desiring normal person into tinfoil-hat weirdo

wreck: chekc yourself

before i wreck myself?

I'm inclined to agree - Translating words to any language doesn't seem a reliable way to make decisions about security. But if that is your choice, then avoid phones altogether.

wreck: why do they choose such names? for fun, accident? all of it, yeah.

i am not translating it is etymology

phonetics

science

well, presumably the Zucc didn't choose his name

nor did ba'als gates or mel-linda

im avoiding phones yes

bill and baal and bull and bell are all phoneticaly identical

thats how dialects form, thats how you trace back language or decode ancient languages too

<kejsixi[m] "i am not translating it is etymo"> etymology doesn't have any scientific link to security - are there bad things with good etymology and vice versa?

the meaning stays the same its true meaning no connonative or dicitonary defined denonnative meanings

qualcomm is more likely a combination of "quality" and "communication"

kejsixi: the world is flat btw

Oh and was 9/11 an insider job?

komsiassa: no

U know 5g is dangerous?

His names William Gates

sukiyakiwestern: i know that

and alphabet is literally the term for a collection of letters, are you saying alphabets are evil because they have a word for alphabets in hebrew? that doesn't even make sense.

bocyemofo: nope, but in the name is delcared what it really is for. you can see it as a form of mockery

Seriously, why should they choose those names to show "their real meaning - according to you"

Why not choose something to hide it then.

You need to talk to someone

wreck: yes but the word is hebrew origin

You also think Bill Gates is big pharma?

<kejsixi[m] "wreck: yes but the word is hebre"> If I write something in Hebrew does that make it true?

wreck: alphabet in hebrew does not mean a collection of letters that resemble phonems and are used by your vocal cords to make sounds

kejsixi: your name is KEJ, a russian airport, SIX, which is "sex" in latin, and I, as in eye, as in third eye. so clearly your a russian KGB agent who's a sexual deviant and believes in astral projection.

komsiassa: look up high court judges in the us, and check what their names mean ; )

wreck: you said that

Read that

your techy guys, dont you have any associative thinking? variables? x+1=2 what is x?

H

correlative thining*

Seriously, this is turning into r/privacy

I think we have left the topic of conversation of this room - I suggest we move to #grapheneos-offtopic or return to GrapheneOS

youre going over the top

<komsiassa[m] "Seriously, this is turning into "> That's pretty harsh to r/privacy

i'm walking away from this conversation right now, i can't believe someone would be that stupid. i'll be back when saner people are in here.

what i told you is those people use certain names and symbols to show who they are, in their mind they told you who they are, youre just too stupid to see it.

Im here wreck

thanks komsiassa

I always wondered if those paranoid people existed before the internet

Or the internet just gave them a voice

like eagles on flags depict: authority, rulership, predators, can see more from above, can see far away etc.

they did, they just didn't have a megaphone to find other people just as dumb as them and spread their gospel

You see what you want to see. You could conclude anything you want by your logic.

oh! i forgot about the ignore feature, i'm going to use that right now. thanks, matrix!

you have a lot of assumptions, i can make a nother identity, and be your best friend. child...

nonono i have perception, but i can see whats true and align my perception with what is true

Like you could hide your paranoia

dont lecture me. boy ; )

wreck yourself, cya

no argument, go away. by by, boy.

Go to r/privacy. You will find like-minded people

grapheneos is about privacy

You're paranoia. Read the rules. It exactly states that types like you isnt allowed

It's toxic for our society though. Cause more and more people believe in it. We need better education

Here are the rules

don't feed the trolls komsiassa . use the ignore. you're just talking to yourself on my end.

Well we're actually on-topic about GrapheneOS now

He thinks it's the right place, cause grapheneOS is about privacy

really ? D) Fantasizing about hypothetical worst-case scenarios like backdoors, nationstate adversaries, intelligence agencies, and their capabilities, or "GrapheneOS versus Three Letter Agency" speculation. It's unfortunate but this type of discussion just ends up being GrapheneOS versus your imagination. Code has limits, your imagination doesn't, and it's not useful to try to threat model against an adversary whose

capabilities are hypothetical and unlimited.

ends up being grapheneos versus your imagination. you are telling me that you create a OS for privacy and security and you DONT know anything about such things you hav eno knowledg eof that at all? what are you creating this os for then?

hm? paranoid. haha.

There is no "you". strcat is the lead developer, but it got a couple of contributors

what are you talking about..?

People use GrapheneOS for different reasons. Some are paranoid, other just find it interesting. Others are against mass surveillance and such

That it's a community project

Its not a single developer

You're free to go write code to the project

let me get this straight again. the os is made for privacy and security. but no one knows about the firmware. and discussions about "hypothetical worst-case scenarios like..." are not allowed? whats the goal with the os

ego?

Well my goal is that I find it interesting

What is going on in here

Other live in a supressing country

good, i fit into all of those categories except paranoid. fuckhead. no one attacked you

you and this other fucker attacked me

both ignroed fuck yourselfs. boys

Some are against mass surveillance and want to get targeted (make it harder and more expensive to get their info) to give up their info

Hey I get to try out the Ignore button on this guy.

Which of us :p

it works great alzxjm

I'm gonna say the N word

if you had some confidence youd just do it and not declare it to others, kidna sounds like you need some attention

kejsixi[m]: consider this a warning, please stay on topic

good

applies to everyone, let's try and keep things civil

im in content.

im sorry, i have asked, as i think very good questions, thats all i wanted. i got angry at the end, i appologize.

you make up a bunch of bullshit and spread FUD

and weird anti-semitic shit

ok you can fuck off then im leaving

as shole

i

if you want to go read the firmware code, go read it, dunno what your problem is

it's available

liitle boys ego

I had a veggie delight with Italian bread and provolone today it was very good

fuck you

I just felt like sharing my sand which damn

So anyways does graphene have the capability to prevent cold-boot attacks?

that's some fucking weird shit

that guy talking about demons and shit

fucking moron

Schizo tendencies will do that

It's sad a lot privacy oriented people turn into that

It is a rabbit hole

Like we "normal" privacy oriented people just look like freaks

A bit like vegans

I got called a tin-foil hatter because I deleted my Facebook lmao

There are a lot of normal ones, but the extreme ones makes the rest look like freaks

I feel that's true for anything

Why do you not kick folks sooner? The last two hours or so were a horrible read. Really off-putting

Well I deleted mine too and I can perfectly and logically argue for it. Not like he did. That was insane

People call Daniel Micay a schizo on 4chan solely because of his elaborate responses on reddit

alex-resist: because I don't sit in the channel 24/7

well clearly we need to remedy that

<wreck[m] "well clearly we need to remedy t"> The thing on 4chan? Seriously, i'm not sure you can change the mind of those people

Just like r/privacy. It's too late. We need to educate sooner

strcat[m]: are you the only one who can kick?

Those people research a lot. The problem is that they arent picky about their sources

is there a list somewhere of the features that have successfully been pushed upstream to AOSP from the graphene project? i know they don't always look the same, but it would be nice to see what features have been incorporated into the broader android ecosystem

<komsiassa[m] "The thing on 4chan? Seriously, i"> i was referring to strcat doing nothing but sitting in this channel 24/7

<wreck[m] "i was referring to strcat doing "> Nevermind me then

<wreck[m] "is there a list somewhere of the"> Yes there is. Looking for it. Found it once. Not sure where

don't maintain a list like that anymore

there is only the legacy one from years ago that has been ripped off with others taking credit for my work

relabelling my old docs / blog posts

and falsely taking credit for my work and the code that I own

i.e. james donaldson #1 scammer in the mobile security space

stole > $100k worth of bitcoin which he uses to bribe ppl to support him

and fund bogus legal attacks on the project

and assorted fraud