-
aeonsolution[m]
-
aeonsolution[m]
Vanadium is both the browser and the webview, you might be able to install the browser but the issues you come across will be for you to resolve since the goal of Vanadium is be both the hardened browser and webview for GrapheneOS
-
aeonsolution[m]
there are policies in GrapheneOS that work in synergy with Vanadium's hardening, there is a lot more detail in it than i can describe, but the logs and the devs could provide more insight
-
aeonsolution[m]
this explanation is a huge simplification that leaves out a lot of technical details
-
dcosk[m]
<aeonsolution[m] "Vanadium is both the browser and"> I know, only i'll want know if this, will be possible
-
aeonsolution[m]
its possible to install it, theres no gurantee itll work and you'll have to do the updates on your own since Vanadium doesnt have a dedicated update server. it gets updates when GOS gets a new release
-
aeonsolution[m]
like i mentioned before, the issues you come across will be for you to resolve because Vanadium isn't developed for OSes other than GrapheneOS at this point in time
-
faxing[m]
Still can't get it to work
-
faxing[m]
Every time I get a voicemail, I go to the voicemail tab - nothing, i click on the new voicemail notification - it calls the voicemail box and I can retrieve my voicemails
-
faxing[m]
* Every time I get a voicemail, I go to the voicemail tab in the phone app - nothing, i click on the new voicemail notification - it calls the voicemail box and I can retrieve my voicemails
-
faxing[m]
I'm using the stock phone app for Graphene
-
dcosk[m]
<aeonsolution[m] "its possible to install it, ther"> How its possible? I want to try it. Dont care if dont work. I read a awesome words about this browser
-
strcat[m]
Vanadium is for GrapheneOS
-
strcat[m]
we don't make builds for other OSes and we include functionality for it in the OS rather than the browser
-
strcat[m]
such as the hardened allocator in the OS
-
dcosk[m]
<strcat[m] "Vanadium is for GrapheneOS"> Okey. No more questions.
-
faxing[m]
I know my carrier is compatible with Visual Voicemail, so I don't need to do anything with my carrier, I should just be able to do it all from the phone, right?
-
anupritaisno1[m]
<dcosk[m] "Okey. No more questions. "> You'll find it on glassrom too. It replaces the (now) dead glassrom browser
-
strcat[m]
Pixel 4a tags were finally pushed in case anyone is interested in working on that
-
strcat[m]
need android-prepare-vendor support of course
-
aeonsolution[m]
-
aeonsolution[m]
cdesai shared the info
-
cdesai
Tracking progress on #AOSPAlliance
-
brockin042[m]
Pixel 4a for graphene? Its the only reason why I haven't bought one as of yet.
-
anupritaisno1[m]
cdesai: there's one thing you really need to track
-
cdesai
What
-
anupritaisno1[m]
Did you fix the DTC issue
-
cdesai
Merged revert for now
-
anupritaisno1[m]
Here's basically what happens
-
anupritaisno1[m]
I did a boot to recovery
-
anupritaisno1[m]
Recovery complained it could not find misc
-
cdesai
Check gerrit I left a comment for options for coral that wouldn't affect other devices.
-
anupritaisno1[m]
Tried flashing
-
anupritaisno1[m]
Failed
-
anupritaisno1[m]
Understood what was up
-
anupritaisno1[m]
Storage never initialized
-
cdesai
Ah
-
anupritaisno1[m]
Restoring dtbo fixed it
-
anupritaisno1[m]
Was DTC issue from that commit
-
anupritaisno1[m]
Also idk what exactly that commit does
-
cdesai
Its off topic here anyway but I merged a revert already
-
anupritaisno1[m]
But I've been struggling with this for 4 days
-
cdesai
:(
-
anupritaisno1[m]
Basically clean build + that commit -> doesn't boot
-
anupritaisno1[m]
dirty build + reverted -> doesn't boot
-
anupritaisno1[m]
Clean build + revert -> boots
-
anupritaisno1[m]
Idk why but this is the reason I've been struggling with it for all that time
-
anupritaisno1[m]
Also cdesai I for one ain't going to the lineage gerrit
-
anupritaisno1[m]
They aren't going to support glassrom stable kernels anyway
-
anupritaisno1[m]
And I am not using that messed up kernel lineage has for op7
-
anupritaisno1[m]
-
anupritaisno1[m]
Adapt this instead
-
cdesai
No that won't work
-
cdesai
That's prebuilts which is too old and $out isn't set when BoardConfig is included
-
anupritaisno1[m]
...
-
anupritaisno1[m]
Just edit it to what you did in vendor
-
anupritaisno1[m]
That's exactly how it's done on grapheneos
-
anupritaisno1[m]
That's exactly how lineage implements linkage again clang lld for the kernel
-
anupritaisno1[m]
* That's exactly how lineage implements linkage against clang lld for the kernel
-
anupritaisno1[m]
It should look like
-
anupritaisno1[m]
TARGET_KERNEL_ADDITIONAL_FLAGS := \
-
anupritaisno1[m]
DTC=$(KERNEL_BUILD_OUT_PREFIX)$(DTC)
-
cdesai
Go ahead, try that.
-
cdesai
Kernel_build_out_prefix just isn't available, the variables it needs just haven't been set when the build system includes boardconfig
-
cdesai
If it was so simple why would I even do that change.
-
cdesai
And again, this is all off topic for this channel
-
anupritaisno1[m]
Solution 2: just update DTC and call it a day
-
faxing[m]
No settings that I see on my carriers website.
-
faxing[m]
Anyone have any ideas?
-
anupritaisno1[m]
faxing: Verizon visible?
-
faxing[m]
I'm using Mint Mobile
-
faxing[m]
They're a T-Mobile MVNO
-
anupritaisno1[m]
What device?
-
faxing[m]
Pixel 3a XL running GrapheneOS
-
anupritaisno1[m]
Can't do much for that sadly
-
faxing[m]
Oh
-
faxing[m]
Okay, Thanks
-
faxing[m]
* Okay, thanks anyway
-
aeonsolution[m]
what are you trying to do faxing
-
faxing[m]
I'm just trying to get Visual Voicemail to work
-
faxing[m]
I've been trying all of today and a while yesterday with no success
-
aeonsolution[m]
brockin042: don't get your hopes up, this is a first for me and i see the learning process being very painful
-
anupritaisno1[m]
aeonsolution: if you have a 3a I can point you to the direction you need to look in
-
anupritaisno1[m]
But I can't do anything without the phone myself
-
aeonsolution[m]
yeah i have a pixel 3a too
-
aeonsolution[m]
cool, i can help there
-
faxing[m]
So now after trying to troubleshoot on my own for this long I figured I'd try and hope that someone here could help
-
faxing[m]
whenever I get a voicemail I just get a notification to call my voicemail box but when I go to the voicemail tab in the stock phone app i see nothing
-
aeonsolution[m]
anupritaisno1: anything helps
-
faxing[m]
it works if I call the voicemail box but it's a pain if I don't have to
-
aeonsolution[m]
let me see what i can figure out
-
anupritaisno1[m]
Oh great
-
anupritaisno1[m]
Accidentally compiled with that commit. This issue is going to haunt me for a while it seems
-
anupritaisno1[m]
-
steve9
Hey folks, quick question: I have fallen two releases behind on updates (was using a different phone). This the device still auto-update, or do I need to reinstall?
-
nickcalyx[m]
> Hey folks, quick question: I have fallen two releases behind on updates (was using a different phone). This the device still auto-update, or do I need to reinstall?
-
nickcalyx[m]
You'll be fine, just let it auto update
-
steve9
Great! Thank you, I appreciate it.
-
nickcalyx[m]
🤘
-
steve9
word to the wise...make sure time/date are correct before hoping for an update haha
-
retry0x[m]
P4xl here on stable channel. My camera does a weird thing. There seems to be a lag from pressing the capture button. Sometimes it can take up to 10 seconds for the press to register.
-
retry0x[m]
Same exp using builtin camera and open camera. Verified using both the volume up key and the regular capture button on the screen.
-
justifiablemadne
If I'm buying a new phone how should I decide between Pixel 4a or iPhone SE? I hear this is the place to ask
-
cn3m[m]
-
cn3m[m]
The offtopic chat is what you are looking for
-
cn3m[m]
-
justifiablemadne
cn3m: that link is bad
-
cn3m[m]
invited you directly
-
shdudbdjdj[m]
<cn3m[m] "invited you directly "> Can you Invite me too? (:
-
justifiablemadne
Ok
-
justifiablemadne
Thanks
-
cn3m[m]
shdudbdjdj: done
-
shdudbdjdj[m]
Thanks (:
-
DrWhax
22
-
anupritaisno1[m]
renlord
-
anupritaisno1[m]
-
anupritaisno1[m]
Can you reword this to
-
anupritaisno1[m]
"Remove sepolicies for several apps where it isn't required or the app isn't included in the base system"
-
cdesai
anupritaisno1[m]: does that DTC port work?
-
anupritaisno1[m]
cdesai: that's pretty much what every device is doing
-
anupritaisno1[m]
Just one thing
-
anupritaisno1[m]
Do not upstream beyond that version
-
renlord
anupritaisno1[m]: ok done
-
arept
hello anyone here?
-
cn3m[m]
arept: yes
-
arept
i want to install graphene on a refurbished pixel 3a. Propably buying it online. Since you need a unlocked device, is there a way to see if it is unlocked, in the settings or something? Is there anything else important it needs for the installation to work?
-
pikey[m]
I just make SURE the phone was purchased NEW UNLOCKED. So long as that's the case it should be fine. I buy my phones second hand and if I can't verify it was factory unlocked I give it a miss.
-
arept
so i should just ask for a pic of something proving it is unlocked like the manual or sth
-
arept
is there something that ships with the phone that proves its unlocked?
-
applescruff_53[m
<anupritaisno1[m] "That's exactly how it's done on "> Autopsy: When I went to make a call on my 3axl yesterday I saw at the top of the listings of received calls the phone symbol w/' Voicemail ' next to it. I tapped on it and a robot operator comes on and instructs to enter my password. On the third attempt robofem replies "I'm sorry you're having this difficulty." This morning on the drawdown from the top edge
-
applescruff_53[m
of the pixel one of the line messages is, ' 2 Voicemails Dial +1 248-224-0128. I called this number with my iPhone6, which no longer has a sim and uses the WiFi to connect phone calls, and the called number immediately fails. Very strange.
-
Autopsy[m]
Sounds very fishy to me.
-
Autopsy[m]
Like, it sounds like they're trying to phish you.
-
Autopsy[m]
Does the voice sound like your normal voicemail from your carrier?
-
rafff[m]
Hi, how can I make a search within this channel?
-
noctux
-
rafff[m]
Thx
-
applescruff_53[m
Autopsy: yes it does sound like an automated voicemail operator.
-
rafff[m]
What version of riot are you using, just got now a message to install element and uninstall riotx?
-
dazinism
rafff: riot and RiotX are discontinued, likely best installing element
-
dazinism
there are other matrix clients by other developers, but element is OK(ish) and under heavy active development
-
dazinism
its basically RiotX with a new name
-
dazinism
The other option that is also OK(ish) is fluffychat
-
dazinism
they have their own fdroid repository with their app
-
rafff[m]
<dazinism "rafff: riot and RiotX are discon"> OK thx, will try element then
-
dazinism
Currently both of them miss some features and have some bugs which can be annoying
-
applescruff_53[m
I am going to re-install GOS. When I first got this phone I installed GOS before I did anything with it. Afterwards I did download some questionable apps which I uninstalled soon after. Then while using Vanadium this pop up page appears from yourphoneboost.com with the message Cleaner Update for Phone is recommended. Your phone Phone can work faster. We released a Cleaner update, and it is recommended for every
-
applescruff_53[m
phone. Mistakenly, I clicked on it, after it repeatedly came on every time I used that browser. When I finally clicked on it, it change screens but didn't seem to be doing anything. I restarted the phone and stopped using Vanadium. Now I'm convinced this phone has been inflected. I opened Vanadium this morning and first thing this same page appears with a countdown clock to update. I'll be back on after new GOS
-
applescruff_53[m
is installed.
-
ruddo[m]
How about you change the home page of the browser, or erase the browser's app data, and try again?
-
applescruff_53[m
It is persistent and not responsive.
-
applescruff_53[m
It has taken over Vanadium browser.
-
theultron[m]
<applescruff_53[m "It has taken over Vanadium brows"> Have you tried clearing app data?
-
applescruff_53[m
I just did that and it appears to have solved that issue.
-
ruddo[m]
😊
-
ruddo[m]
there you go, we saved you an entire day's of phone setup
-
applescruff_53[m
Thank you, I was not looking forward to that job.
-
applescruff_53[m
For now I am going to just ignore the 2 Voicemails notice on my phone call listings.
-
bson989[m]
<arept "i want to install graphene on a "> I have had very good experiences with swappa.com. They are usually always accurate with determining carrier versions. I believe the first two numbers in the IMEI determine the model as well. For instance my pixel 3 begins with 99 which tells me it's a Google edition unlocked.
-
xmwv[m]
Swappa seems US only. Is there international alternative?
-
faxing[m]
<blueuser[m] "faxing: did u managed to get vis"> I got a few voicemails to show up, but only older ones that I haven't had time to delete yet. I had someone leave me a voicemail and it didn't show up and some of the newer ones didn't show up either, but I can still get them if I call the voicemail box
-
faxing[m]
<xmwv[m] "Swappa seems US only. Is there i"> ebay?
-
bson989[m]
<faxing[m] "ebay?"> Maybe Gazelle or Glyde
-
bson989[m]
<xmwv[m] "Swappa seems US only. Is there i">
-
retry0x[m]
Who has issues with screen flickering in GOS on p4s
-
bson989[m]
Yes you're not the first to ask that. They commented on it earlier I believe it has something to do with the 90 HZ refresh rate, but I could be wrong
-
Autopsy[m]
<retry0x[m] "Who has issues with screen flick"> Sup?
-
nikitalita[m]1
@retry0x:matrix.org: it's mostly gone away after the latest updates for me
-
nikitalita[m]1
ymmv
-
nikitalita[m]1
but yeah, if it's persisting, you can switch to 60hz mode and that will fix it
-
applescruff_53[m
ruddo: I am wondering, is there a method to reset my password for the OS?
-
ruddo[m]
Yes, from the Settings -> Security -> Screen lock panel.
-
applescruff_53[m
ruddo: OK, that is the password for the screenlock. Good.
-
applescruff_53[m
On the phone app there is Voicemail. How do I get or change my Voicemail password?
-
applescruff_53[m
The Voicemail # is 1-248-224-0128
-
applescruff_53[m
I have two messages but I don't have a password.
-
-
Autopsy[m]
Are you calling that number specifically and it says you have two voicemails, is there a notification on your phone stating you have two voicemails, or are you calling YOUR PHONE PROVIDER'S voicemail service and they are telling you you have two voicemails?
-
blueuser[m]
it's just some kind fo scam
-
Autopsy[m]
Exactly
-
Autopsy[m]
Phone Phishing
-
M1enrique3[m]
hi
-
blueuser[m]
they probably hope that people give some real password and so they can get control over your accounts
-
Autopsy[m]
<M1enrique3[m] "hi"> Hello
-
derpy
possible to change the allowed amount of fingerprint reader attempts?
-
derpy
pixel1 reader sucked... now the pixel3a reader works really well.. so if it doesn't work on the 1st or 2nd attempt, then I want it to force whomever stole it to use the pin code :)
-
M1enrique3[m]
does the google pixel 4 works good with graphene os?
-
kickstart
yup
-
kickstart
no complains
-
M1enrique3[m]
oh
-
kickstart
sometimes camera app crash
-
kickstart
but i was told to use opencamera
-
kickstart
aslo they are still working on the screen
-
kickstart
refresh rate
-
M1enrique3[m]
and how long would it take to get support to 4a
-
M1enrique3[m]
cause it taken months to get support for pixel 4
-
kickstart
above my knowledge
-
M1enrique3[m]
alright
-
Autopsy[m]
<M1enrique3[m] "and how long would it take to ge"> When Google releases the AOSP branch for the 4A and then having someone step up to maintain the phone for GrapheneOS.
-
blueuser[m]
they released it already
-
Autopsy[m]
Link?
-
blueuser[m]
on android googlesource com it's the sunfish device
-
Autopsy[m]
Ah, released yesterday lol
-
blueuser[m]
why new pixels require to connect to internet to unlock bootloader, what kind of informations do it send?
-
blueuser[m]
once you have done it the first time to install grapheneos and relocked the bootloader, do you need to connect to internet the next times that you want to unlock it?
-
BlackWinnerYoshi
<blueuser[m] "why new pixels require to connec"> You mean the Pixel 4[a] [XL]? Because to my knowledge, Pixel 3[a] [XL] doesn't do that. About what kind of informations that sends, it might be some stuff that identifies the device, but I am not sure
-
strcat[m]
blueuser: Pixels do not require it
-
strcat[m]
it's not a hardware/firmware thing
-
strcat[m]
the stock OS has factory reset protection as an anti-theft feature, this is explained in the FAQ
-
strcat[m]
read the FAQ
-
strcat[m]
-
bkeys
Hello guys, I ran fastboot flashing get_unlock_ability on my new pixel 3 xl (which is unlocked) and it is returning 0
-
bkeys
Is there any hope for me to put GrapheneOS on this device?
-
bkeys
Hello guys, I ran fastboot flashing get_unlock_ability on my new pixel 3 xl (which is unlocked) and it is returning 0
-
bkeys
Is there any hope for me to put GrapheneOS on this device?
-
bkeys
I can enter developer mode on a clean factory reset, then go into the developer options and the OEM unlock is greyed out
-
bkeys
And the bootloader confirmed that it is LOCKED
-
jpds
bkeys: Is this a Pixel from Verizon?
-
bkeys
No
-
bkeys
The bootloader says nothing about it, there is no verizon logo physically on the device
-
bkeys
No verizon logo at boot or anything like that; it was also listed as unlocked
-
Autopsy[m]
<bkeys "No verizon logo at boot or anyth"> When people sell unlocked, they usually mean sim free, not bootloader.
-
Autopsy[m]
Most people don't care and/or have no idea about that stuff.
-
Autopsy[m]
Searched the logs... Check this bkeys
-
Autopsy[m]
-
Autopsy[m]
Put in your IMEI number
-
Autopsy[m]
If it says anything to do with Verizon, you're screwed and you should return the phone.
-
nikitalita[m]1
bkeys: was it used
-
Autopsy[m]
Quick way to get IMEI is *#06* from the dialer.
-
Autopsy[m]
Also look at the original box, if it came with it, and see if it says anything.
-
bkeys
nikitalita[m]1: Yes it came used
-
bkeys
Autopsy[m]: Where would I put in the IMEI number?
-
bkeys
Nevermind I see it
-
bkeys
Autopsy[m], jpds: I punched it in on Google, and it is saying nothing about Verizon
-
nikitalita[m]1
yup
-
blacktwig[m]
Has anyone been having trouble getting Signal notifications recently? On my Pixel 3a running GOS I think they stopped showing up sometime in the past couple days, and I can't really figure out what's happening. The in-app and out-of-app settings for notifications are both on, and I just redownloaded the APK from their site to make sure I didn't accidentally update it through Aurora, but I'm still not getting any.
-
bkeys
My guess is I am going to have to return this thing?
-
nikitalita[m]1
it's possible it's a verizon phone and its just not showing the logo, and its also possible it's a verizon phone that was soft-unlocked and then sold on as an unlocked phone (not sure if you can actually do this with Pixel 3s though)
-
bkeys
I mean doesn't Verizon usually stamp their logo on phones they lock?
-
nikitalita[m]1
bkeys: either way, use the tool that autopsy linked
-
bkeys
I did
-
bkeys
That tool is not saying anything about Verizon
-
Autopsy[m]
You'll have to use a Google account... Either make one up or use the one you have (assume you have one, most people do), then follow the web page and input the IMEI when Google tells you to
-
bkeys
I did that
-
bkeys
I already did that
-
bkeys
It is not saying anything about Verizon
-
Autopsy[m]
Disclaimer, I've never used it - I'm merely suggesting what someone already has previously.
-
bkeys
I know but I cannot find any evidence that this phone was locked by Verizon
-
bkeys
I signed in using a google account, the oem unlock is still greyed out
-
Autopsy
So it is still greyed out
-
nikitalita[m]1
bkeys: i'd just return it
-
Autopsy
Have you updated to the latest version?
-
bkeys
Autopsy Yes it is the lastest version
-
bkeys
nikitalita[m]1: I probably will end up doing that
-
bkeys
I am talking with google customer support confirming or denying my fate
-
nikitalita[m]1
there are a number of things that could have happened here, none of them good
-
Autopsy
Yeah, for sure.
-
Autopsy
Have you tried factory resetting yet, just in case?
-
nikitalita[m]1
do you have a sim card in this now? if so, which network?
-
Autopsy
You can use Google's web page to flash the latest update and whatnot
-
bkeys
Yes SIM card, Visible
-
bkeys
Is this something I can avoid or am I just gonna have to keep ordering and returning phones until I get a good one?
-
Autopsy
@bkeys no, what you can do is ask the seller to check to see if OEM unlocking is able to be toggled on or off prior to them selling the phone.
-
bkeys
Yeah other than that I mean
-
bkeys
No keyword to look out for
-
Autopsy
Nothing, really. You got the 3XL, yeah?
-
bkeys
Yes
-
Autopsy
All variations use the same G013C code, regardless.
-
Autopsy
If the item has the box in the eBay listing (as an example) look at the photos and see if anything mentions Verizon. Also see if the seller has listed it being used on Verizon in the past. Other than that, you're just going to have to do what I said regarding asking them to toggle the OEM switch. You *may* have to guide them through that, though, as they might not know what they're doing.
-
Autopsy
As a side note.. The IRC / Matrix Bridge is a bit buggy. There aren't many Matrix messages coming through, at least from my side.
-
blueuser[m]
it have been buggy for months now
-
nikitalita[m]1
yeah, you could make the seller show the oem unlock option on the phone
-
nikitalita[m]1
I've been burned on stuff like this before; I got an iphone that was sold as unlocked but it was actually just jailbroken and soft-unlocked, which meant that after a factory reset it was locked again.
-
nikitalita[m]1
in general i just dont trust used phones if i'm going to be using this as my daily driver
-
bkeys
Well is there a way I can buy a Pixel 3 XL that is certain to be OEM unlocked?
-
Autopsy
Sorry we can't be any more help than that, bkeys :(
-
bkeys
It is fine y'all have been helpful
-
nikitalita[m]1
bkeys: why a pixel 3 xl specifically
-
bkeys
I am going up and down eBay asking all the 3 XL sellers if their phone is OEM unlocked
-
Autopsy
Well, Google have stopped shipping them a while back. Apart from having potluck with the device, it's just asking the seller.
-
Autopsy
Haha
-
bkeys
nikitalita[m]1: I like bigger screens, I want GrapheneOS support, and it needs to work on Visible
-
bkeys
3 XL does all of those
-
blueuser[m]
better wait for the 4a no? it will have much longer support
-
bkeys
I am not at all a heavy phone user
-
bkeys
I live out in the country and 99% of this thing will just sit there and be a wifi hotspot
-
nikitalita[m]1
bkeys: again, the only real way to know for sure is if they actually show you a picture of the settings screen showing that the oem unlocking option is toggleable
-
Autopsy
*Duelling Banjos intensifies*
-
bkeys
I will be certain to ask for screenshots if any of them say yes
-
botter_otter
man, love duelling banjos
-
bkeys
I love banjos in general
-
Autopsy
bkeys, if it makes any difference, I usually go for sellers that are obviously just selling them because they've got an upgrade. A lot of the time, those are the nicer ones to communicate with.
-
botter_otter
btw, a question for anyone who knows, since I don't know really anything about rooting: can I root my grapheneOS pixel 3a? That is, will rooting it delete data/brick the phone?
-
botter_otter
ik that magisk by itself supports the 3a, I'm just not aware if having grapheneOS on it will mess with the rooting or vice versa
-
Autopsy
Unsupported here, botter otter
-
botter_otter
? as in grapheneOS doesn't support rooting, or this isn't the place to ask, or?
-
nikitalita[m]1
both
-
Autopsy
While rooting can be done, it pretty much negates the security that is built into GrapheneOS. Using it will mean bypassing the verified boot, and having a tonne of extra attack surface.
-
nikitalita[m]1
not recommended to root your phone at all
-
Autopsy
The question is: Why do you want to root your phone?
-
bkeys
Guise, so if the seller says it is "Verizon unlocked" then I want to avoid it, yes?
-
Autopsy
bkeys, yes
-
nikitalita[m]1
yes
-
botter_otter
nothing important, just was going to if it was convenient/not an actively bad idea to do
-
nikitalita[m]1
it may not be locked to verizon, but the bootloader is still locked
-
botter_otter
if it opens up a bunch of security vulnerabilities then I won't root it
-
bkeys
That is what I thought
-
Autopsy
botter_otter, no worries, it's totally normal to ask. Tbh, before GrapheneOS, I genuinely thought root was the answer to my prayers regarding privacy and security; how wrong I was.
-
botter_otter
anyway, thanks for the info
-
bkeys
The seller of the device I have now does not accept returns, but it is eBay so there is some hope I will not get burned
-
bkeys
I guess worst case I resell it
-
derpy
possible to change the allowed amount of fingerprint reader attempts?
-
nikitalita[m]1
* first one
-
nikitalita[m]1
I don't think so
-
nikitalita[m]1
I believe that may be controlled by the hardware?
-
derpy
nikitalita[m]1 that a reply to my question? sry not sure
-
nikitalita[m]1
derpy: yes, that's right. I dont think you have the ability to set the number of attempts, at least I don't see it on the Pixel 2
-
blueuser[m]
it's hardcoded in source but maybe it's different for pixels with titan m idk
-
derpy
pixel 3a here... would be a good question for one of the main devs...
-
derpy
having the right balance seems key for security & convenience
-
derpy
I think 3 attempts and then failing to the pin code forever is ideal
-
derpy
that way if you get caught having to unlock it you could purposefully use the wrong finger :)
-
derpy
and the conveniently forget your pin code
-
nikitalita[m]1
yeah, I think the Titan-Ms rate-limit PIN and password entry on the Pixel 3-4s, not sure if that extends to fingerprint attempts
-
Autopsy[m]
Let's check pins
-
Autopsy
5 times and it locks for 30 seconds
-
Autopsy
Incorrect using the pin 5 times ^
-
Autopsy
And 5 times for face unlock causes the face unlock to be disabled.
-
derpy
so in the time of an hour someone could try all of your fingerprints
-
derpy
so if you don't want that attack vector you have to not use the fingerprint scanner at all
-
derpy
:(
-
derpy
Damn... Will have to look into if it can lock fingerprint scanner after x attempts -> pincode
-
Autopsy[m]
Try another finger a few times.
-
derpy
so it does say "too many attempts. fingerprint disabaled"
-
derpy
I wonder how long
-
Autopsy_2
Indefinitely
-
derpy
oh sweet
-
derpy
ok so it is smart
-
derpy
just 5 attempts is the max
-
derpy
not bad
-
derpy
just gotta get the person torturing you to use your index fingers or something
-
derpy
haha
-
kickstart
use a toe
-
derpy
hahha security master!
-
kickstart
the torturer will never guess
-
kickstart
:')
-
blueuser[m]
oh that's a grapheneos feature
-
blueuser[m]
on non graphene roms it just lock the fingerprint for a moment and allow you to use it again after a while
-
blueuser[m]
or after 20 attempts it block it indefinitely
-
blueuser[m]
-
kickstart
use a password
-
blueuser[m]
* oh that's a grapheneos change
-
kryptonymous[m]
<bkeys "nikitalita: I like bigger screen"> When I installed GOS 2+ months ago, Visible service would not work with GOS. Search the logs above for "Visible". Hate to see you go to all the trouble of finding a non-Verizon Pixel 3XL (which I also have incidentally) only to find the service won't work. FWIW I switched to PureTalk USA- low cost, high data, great coverage in my region. YMMV. Good luck.
-
nikitalita[m]1
I believe that's been recently fixed
-
nikitalita[m]1
Search for Verizon in the os issue tracker
-
kryptonymous[m]
That could be true- I have no idea. Since it was no longer relevant to my situation, I didn't follow up. But I do try to scan this board almost every day and hadn't noticed any talk of Visible. But you're right- a search is in order.
-
jpds
derpy: You can also enable the lockdown feature in Display > Lock screen display
-
derpy
jpds right, tnx
-
jpds
Hold down the power button, hit Lockdown, no fingerprints
-
derpy
blueuser[m] didn't know about it... its a good choice, glad to have GOS
-
derpy
jpds if I hold power, I see: power off, restart, screenshot, emergency
-
blueuser[m]
you need to enale lockdown in settings if i remember
-
blueuser[m]
* you need to enable lockdown in settings if i remember
-
derpy
ah got it tnx
-
dazinism
@freenode_bkeys:matrix.org did you have a network connection when you tried to do the OEM unlock toggle?
-
blueuser[m]
I and another guy have been censored when we spoke about that exactly 3H ago lol " Pixels do not require it" "go read the faq"
-
blueuser[m]
the other guy said only newer devices such as the 4a require it
-
blueuser[m]
* the other guy said only newer devices such as the 4 require it
-
BlackWinnerYoshi
«I and another guy have been censored
-
BlackWinnerYoshi
Am I dumb to not understand this? Like, how, why, and where have you been censored? For me, the information on [Discord server here] has been censored for me, so I can't prove that [subject admin here] and others are the bad guys. Also, I still wonder why Goolag requires you to connect to the internet just to unlock the bootloader of a Pixel 4[a] [XL]... it looks real suspicious»
-
BlackWinnerYoshi
* «I and another guy have been censored»
-
BlackWinnerYoshi
Am I dumb to not understand this? Like, how, why, and where have you been censored? For me, the information on [Discord server here] has been censored for me, so I can't prove that [subject admin here] and others are the bad guys. Also, I still wonder why Goolag requires you to connect to the internet just to unlock the bootloader of a Pixel 4[a] [XL]... it looks real suspicious
-
BlackWinnerYoshi
* «I and another guy have been censored»
-
BlackWinnerYoshi
Am I dumb to not understand this? Like, how, why, and where have you been censored? For me, the information on [Discord server here] has been censored for me, so I can't prove that [subject admin here] and others are the bad guys.
-
BlackWinnerYoshi
Also, I still wonder why Goolag requires you to connect to the internet just to unlock the bootloader of a Pixel 4[a] [XL]... it looks real suspicious
-
blueuser[m]
what
-
BlackWinnerYoshi
* «I and another guy have been censored» \n Am I dumb to not understand this? Like, how, why, and where have you been censored? For me, the information on [Discord server here] has been censored for me, so I can't prove that [subject admin here] and others are the bad guys. \n Also, I still wonder why Goolag requires you to connect to the internet just to unlock the bootloader of a Pixel 4[a] [XL]... it looks
-
BlackWinnerYoshi
real suspicious
-
blueuser[m]
what do i mean, anyways it seems to be a part of the anti theft feature that grapheneos do not use
-
blueuser[m]
* what do u mean, anyways it seems to be a part of the anti theft feature that grapheneos do not use
-
BlackWinnerYoshi
<blueuser[m] "what do i mean, anyways it seems"> Yeah, sounds like the most logical explanation to this
-
strcat[m]
Autopsy: your response earlier about Magisk, etc. is not really correct since if you are using any of those things you aren't using GrapheneOS in the first place since major portions of it are replaced with other things
-
strcat[m]
it's not just that it cripples the security model and adds substantial attack surface
-
strcat[m]
it is not GrapheneOS, it cannot use the official updates, it cannot be locked with verified boot since it isn't GrapheneOS and isn't signed with the GrapheneOS keys
-
strcat[m]
Auditor will show that it isn't GrapheneOS
-
strcat[m]
Autopsy: also the throttling for unlock attempts is not simply a 30 second lockout every 5 tries - that's wrong
-
strcat[m]
derpy: the information above about unlock attempts and fingerprinting unlocking is wrong
-
strcat[m]
* derpy: the information above about unlock attempts and fingerprint unlocking is wrong
-
Autopsy[m]
<strcat[m] "Autopsy: also the throttling for"> The first five tries are. I didn't say every five tries.
-
strcat[m]
fingerprint unlocking has a hard limit of 5 attempts on GrapheneOS
-
strcat[m]
the primary unlock method has an exponentially increasing lockout timer with hardware enforcement (for decryption) up to 1 day
-
strcat[m]
the only differences compared to the stock OS is that the hard lockout for fingerprints is 5 instead of 20 and the non-managed password length limit is 64 instead of 16
-
strcat[m]
blueuser: posts containing misinformation are removed from the Matrix scrollback history
-
strcat[m]
it's likely that the IRC logging will be ended
-
strcat[m]
it's not
-
strcat[m]
if you aren't on GrapheneOS the official GrapheneOS updates via the official update client will not work
-
strcat[m]
if you modify the OS it is not GrapheneOS
-
strcat[m]
you will not have functional updates and Auditor can confirm that it is not GrapheneOS
-
strcat[m]
this channel is about GrapheneOS, not derivatives/forks of it
-
Autopsy[m]
Daniel
-
Autopsy[m]
Can you root GrapheneOS?
-
strcat[m]
I don't know what you mean
-
strcat[m]
if you build a userdebug build it has `adb root` and `su` for `adb shell` but that's a debug build, not a production release
-
Autopsy[m]
Can a user root GrapheneOS?
-
Autopsy[m]
Is it recommended? No.
-
Autopsy[m]
Can they? Yes.
-
strcat[m]
no, they can't
-
strcat[m]
that's not GrapheneOS
-
strcat[m]
unless you mean making a userdebug build
-
Autopsy[m]
And I'm saying that's semantics
-
strcat[m]
it's not
-
strcat[m]
Auditor can be used to check if something is running GrapheneOS
-
strcat[m]
if it does not say it's GrapheneOS in Auditor, it's not GrapheneOS
-
strcat[m]
a fork / derivative of GrapheneOS is not GrapheneOS
-
Autopsy[m]
And you won't get updates and auditor says it isn't GrapheneOS. Yes. I get that.
-
strcat[m]
this channel is not about forks / derivatives
-
strcat[m]
because it isn't GrapheneOS
-
strcat[m]
if you replace substantial components of the OS that is not GrapheneOS
-
strcat[m]
if you replace the boot partition including the init system and SELinux policies, that really isn't GrapheneOS anymore
-
strcat[m]
it is a fork
-
strcat[m]
and it's off-topic here
-
Autopsy[m]
Hence why I said it isn't recommended.
-
strcat[m]
it isn't GrapheneOS or GrapheneOS related - it's about forks
-
strcat[m]
forks should have their own channels
-
Autopsy[m]
Gotcha. So rooting = fork. Therefore, no longer GrapheneOS. Not recommended etc.
-
strcat[m]
making substantial modifications to the OS including replacing the core OS partition, init, SELinux policies, etc.
-
strcat[m]
is making a fork
-
strcat[m]
that is not GrapheneOS anymore
-
strcat[m]
it's simple
-
strcat[m]
the only way that user-accessible root accessible is made available is via `adb root` and `su` in a userdebug build (i.e. a development build for developers)
-
strcat[m]
there is never app-accessible root or root accessible to the high-level OS / application layer
-
strcat[m]
if people are taking GrapheneOS and applying substantial modifications like replacing the boot image with a Magisk boot image then they are not running GrapheneOS
-
strcat[m]
they may be confused and think they're running it, but they're really not
-
strcat[m]
this channel is only about the upstream GrapheneOS project and support is only provided to people using that or working on that
-
cdesai[m]
One can think of this as closer to stock
-
cdesai[m]
You wouldn’t ask Google for help with using magisk on stock
-
cdesai[m]
In the same vein, you shouldn’t ask help with rooting or any such modifications here, since the OS is shipped as a full set of unmodifiable images
-
nickcalyx[m]
But i need root to change the icon shape
-
andresbs[m]
<nickcalyx[m] "But i need root to change the ic"> I think Lawnchair allows to change icon shapes for the launcher
-
nickcalyx[m]
I was only kidding, at the reasons people come up with sometimes to justify undermining the security model