Is there any danger to buying a used phone? Specifically a renewed pixel from amazon?

signalarch: Probably not. That's the nice thing about hardware-backed verified boot. If you flash stock OS or Calyx/Graphene and lock the bootloader with their keys you're guaranteed to be booting a known good system.

There was one really cool attack demonstrated by spoofing hardware: replacing the screen or some other hardware component which could allow an attacker to exploit your system somehow (I'm not sure of the details) and afaik only the iPhone 11 has mitigation for such an attack.

But I don't think that is a real world problem you have to worry about. Used Pixel is probably fine.

<alzxjm[m] "signalarch: Probably not. That's"> Gotcha thanks

<strcat[m] "faxing: Android 11 GrapheneOS is"> Oh alright, cool - so like probably within the next month or so?

faxing: GrapheneOS 10 is EOL

EOL?

end of life

Oh - wait - what?

GrapheneOS is ending?

no GrapheneOS 11 is the new base

Oh okay, sorry for misunderstanding

from my understanding all further builds of the OS will be GrapheneOS 11

np

should get 09-05 release and 10-05 release pretty close together if I understand correctly

we are 09-01 right now iirc

The 01/05 designation is regarding which patch set the OS is on (released at the same time)

Oh okay - thank you all so much for the help and info

* Oh okay - thank you so much for the help and info

I think I might have an issue. I have right now GrapheneOS on Android 11

Check first if the encountered issue is not reported or fixed in the next release [github.com/GrapheneOS/os_issue_tracker/issues]

On a Pixel 3 I ve installed using OTA the official Android 10, and after 4-5 attempts to install GrapheneOS and again Android 10 I ve managed to install GrapheneOS at the end and when I checked out the Android version it was 11. Is the official download now based on version 11?

At the time I ve managed to install GrapheneOS I did not had a working OS and the Android 10 install was failing to work.

The Stable channel is still at 10 as of now

GrapheneOS 11 is still at Beta channel

Wow, what the hell happened then?

Ihave verified the install with Auditor and its fine

And why the gyro works even thow I have toggle of the "Sensors off" tile and dezactivated the screen orientation

What app is it and what apps did you disable the sensor permissions?

Hey I was thinking I would donate to this project as I really appreciate the passion put into it, just out of curiosity, does anyone know where that money goes?

From F-droid get Logcat Reader and activate it using manual metod with ADB

For sensor off tile go in Developer Options and type i. The search bar tile and you ll find a menu : Quick settings developer tiles and inside that the second to last toggle

Some system apps are not able to disable sensor permissions

It will apear in the bar nextto the wifi toggle

(Not the developer tools)

<save2020[m] "For sensor off tile go in Develo"> Huh, all I thought you were using the permission

Privacy Breacher can't detect my body movement when Sensors permissions are denied

I don t know if I should keep this version because somehow its Android 11 or make a clean reinstall and get back on GrapheneOS with Android 10

* I don t know if I should keep this version because somehow its GrapheneOS on Android 11 or make a clean reinstall and get back on GrapheneOS with Android 10

<save2020[m] "20200923_090626_4512249101772926"> I don't get the purpose of using the developer options.

I think the sensor tile stops app data getting to apps. Adb is looking more at what the system sees

You could test for sensor data using satstat

Yes, but on GrapheneOS with Android 10 I ve never seen that in the logs

SatStat (GPS, sensor and network status) - f-droid.org/packages/com.vonglasow.michael.satstat

> <@save2020:matrix.org> sent an image.

* I don't get the purpose of using the developer options, whereas the permission model has already sensors in it.

Check on the sensor tab

*stops sensor data getting to apps

You could also test switching the sensor permission for satstat

Guess theres a chance android 11 does things different? Or maybe the sensor tile isn't working.

Those won t work if I click the tile, even the Camera app won t work, even if its the stock app from GrapheneOS. My fear is that somehow I have left some backround shit from Google services from the previous Android 10 installed over OTA. Is this possible?

Try installing privacy breacher

Deny sensor permissions

(It's not as detailed as SatStat but)

Maybe the same for everyone on GrapheneOS 11. I dont think developer options are currently really tested

I lk try that, thanks

Are you on GrapheneOS? Just to be sure

* I ll try that, thanks

Yes, of course, its not my first graphene phone

And verified with the Auditor

If its booting GrapheneOS and you see the yellow warning screen about booting a different operating system, I don't think you can have any Google services stuff left

save2020: AOSP doesn't have Google services in the first place they want it to stay closed source

I know that

The operating system should be bit to bit identical to any other version of that phone with GrapheneOS

But looking at the logs I see a lot of stuff I havent seen before

I guess thats the change to 11

And I still cannot understand why its on top of Android 11

Whats the name of the file you flashed on it?

SatStat and Privacy Breacher not showing any sensor data

At denied permissiln

Not the dev tile

You can see there the 2 OTA files, one is tge official Pixel Android 10

And the second one is GrapheneOS downloaded yesterday from the Releses page on the official website

* You can see there the 2 OTA files, one is the official Pixel Android 10

* At denied sensor permission

You've got the 2020-09-18 ota there. Thats Android 11

And what you are running

Woe, I clicked on the last Android 10 not 11 on the Google website

Its a beta build of 11. Think its close to being released on stable channel

So I have a GrapheneOS 10 on top if a Android 11 beta? Is that even possible?

Imagine that was downloaded from the GrapheneOS site not Google site?

<dazinism "Its a beta build of 11. Think it"> Why do you say that

because most of the porting to 11 is done

I have cleary downloaded Android 10

But indeed now its the version you mentioned

save2020: the 2020-09-18 ota you showed is apparently what you are running

Its GrapheneOS

You can flash GrapheneOS 10 over Stock Android 11

If you did that you would have GrapheneOS 10

You must of then flashed the 2020-09-18 ota

To get onto GrapheneOS 11

But I never even downloaded the 09-18... Its not on my computer

From what store I download Privacy Breacher?

save2020: the computer screenshot you just shared shows the 09-18 in the list of files....

*09-18 ota

Indeeed OMG, i ve looked through it earlier and not see of my nose... Thanks

The izzyondroid fdroid repo has Privacy Breacher

Found it with Aurora Droid

If I toggle of sensors it denies access to the app as intended

Izzyondroid also has Auditor and PDFViewer - likely to get updates to them a bit quicker than when they arrive with an OS update

save2020: with the sensors tile?

You've not used the sensor toggle for individual app

?

No

Example:

So any changes in what you see via adb must be changes from android 10 - android 11

What you should see in monitoring physical activiry

With sensor permissions denied

I'm a bit surprised there is a difference.

If I click on the "Sensors off" tile that cube won't spin when i spin the phone

I lk try from Permissions

Everything working as expected then

For best security using developer options, and especially adb isnt recommended

Yes, but my question is why Android keeps monitoring the sensor in the backround? It never happened before, even on a Xiaomi Note 8 Pro whicb is king in spying

By using adb you are putting a lot of trust into your computer

I have QubesOS

Its likely far less secure than your phone

The VM for USB never sees the internet

That helps

Guess its a difference between Android 11 on Pixel and whatever you were running on the Xiaomi

I really don t know if I should keep this version or make a android 10 install as base

I'd probably stay on what you have

That will likely be the stable version in the next few days

Switch the updater to stable channel

If its not already

I wish the same, but it does not fell right with those logs I m seeing, I wished someone from GrapheneOS say a word.

I expect there will be a few more changes from what you have to GrapheneOS 11 stable

Its already stable channel

I ll have to sign up and do that too, thanks

Once stable 11 lands you'll be the same as everyone else on stable

It would be good then

Yeah 👍

Dont stress, unless you find something you need doesnt work

It works perfectly from what I ve seen until now

(eg. Think support for some cell carriers isnt set up yet)

Just I fell like I ve jnstalled Linux on a NTFS partition... Something is not right

I have not put a SIM card in it yet

I think you are all OK.

Thanks

No problem

So with the stable A11 release the biometric bug will be fixed ? 😁 and we will receive the sec updates also? Just confirming. Having to use master pass in my keepass is killing my lyf typing it out each time

Hi I've taken photos with my Graphene OS Pixel of the Electricity and Gas meter readings in my house. Now when I go on EBay on my Windows PC one of the adverts is for a power company. Is there still some Google spying going on there, please? Similar thing with having a conversation in the same room as the Graphene Pixel 3 XL and the I go on the PC and see adverts related to the conversation contents?

It depends on how you separate your activities on your devices, what sites you visit, or your habits

Also, GrapheneOS will not prevent tracking because of your bad habits

hnfpz5w6jg9hfjk3 your camera isn't spying on

It can only mitigate to some extent the OS can do

You are noticing the ad since it's relevant by chance

Don't install horrible apps with unessacary permissions and trackers

I'd say they are not related in any form, possibly another device you have in your home connected to the WiFi network?? Smart TV for example

I replaced my TV with a beautiful fish tank. Best thing I've done in 2020 besides install GoS

Is all chance

<hnfpz5w6jg9hfjk3 "Hi I've taken photos with my Gra"> It could also be just smart algorithm and data points collected by that site that points to transferring power company

That's not happening. Targeting advertising is one pretty laughably inaccurate and two they aren't that smart

I've mostly stuck to Fdroid apps and Web apps. There are three from the Aurora Store. My TV is a Panasonic one from 10-15years ago. I have many Windows 10 PCs.

Huh, quite a lot of apps there, and also why not just revoke internet permission sometimes instead of using Netguard?

Why do you need a firewall on Android? They aren't exactly running a bunch of web servers

Did you know Netguard can be easily bypassed by download manager, which is blocked by the Network permission?

Lia: that's not different with network permission. Unless it is totally breaking the OS

<traffickpolize[m "Lia: that's not different with n"> grapheneos.org/faq#firewall

"...Revoking the permission denies indirect access via OS components and apps enforcing the INTERNET permission, such as DownloadManager..."

It's better, but it's not leakproof

Yeah, I'm only saying it is better

Ipc is still a pronlem

* Ipc is still a problem

Opening links from one app to browser, that is.

it is ironic to me one of GrapheneOS's most well known features is it's(currently) weakest

<cn3m[m] "it is ironic to me one of Graphe"> If only each app could be as scoped as apps in users

Hi all, wanted to know what to do at the signing keys phase ```Enter pass phrase for avb.pem:``` I left all password prompts blank because I'm just doing a dirty quick test to get familiar with this. thx

` ../../external/avb/avbtool: Error getting public key: unable to load Public Key139848309380416:error:0909006C:PEM routines:get_name:no start line:../crypto/pem/pem_lib.c:745:Expecting: PUBLIC KEY

nvm

i just used a password instead =)

I'm a Newbie. Have been following the advice of this fellow Rob Braxman on Youtube said that Netguard was good for blocking Gapps from the Aurora Store phoning home.

hnfpz5w6jg9hfjk3: On GrapheneOS you are probably better off using the network permission

Possibly with paid NetGuard and some apps you may be able to stop analytics or ads. But cases where that could be worth doing are limited and NetGuard isnt as robust at blocking as the Network permission

Case where it may make sense is say..... an xmpp client where you could block all connections except to your xmpp server.

Here are my permissions

>>> i completed the build but at one step i get " IOError: [Errno 2] No such file or directory: 'out/target/product/sargo/obj/PACKAGING/target_files_intermediates/aosp_sargo-target_files-2020.09.21.15.zip'"

This morning I'd somehow left Netguard disabled too.

You don't need to use Netguard.

hnfpz5w6jg9hfjk3 the built in network permission toggle is good enough.

NetGuard can also be handy for looking at what network connections apps make.

Can someone recommend a good kVM VPS outside of the 14 eyes countries?

There is some built in AOSP network logs, but they arent exposed to users

<save2020[m] "Can someone recommend a good kVM"> serverhunter.com

did grapheos have anything like this? fossunited.org/project?project=Privacy%20Indicator%20App

Autopsy: thanks

Filter until your heart is content.

Also you can set Netguard to default deny. So a malicious app if got installed will be required to be whitelisted first for it to work.

Trouble is its less robust. NetGuard can crash and stop blocking

Or other apps may start up on boot before it

Also apps can make network connections via other apps, which NetGuard doesn't block

<nvidia_corp[m] "Also you can set Netguard to def"> Perhaps a user should think twice before installing a malicious app. If it's that malicious, Netguard won't do anything to protect you. Use the Network Toggle.

Android Permission System/Model is not robust. GrapheneOS cannot fix the shithole. You should not use Android if you are serious about security. It's iOS or no phone at all.

Exactly what dazinism is saying.

As mentioned the GrapheneOS network permission does block some apps from providing network to others

It took 7 years for Google to be able to implement scoped storage. which is yet to be completely enforced as I can see.

iOS did it way back.

nvidia_corp: think the android permission model does what it says? Just the model wasn't/isn't as tight as on iOS. Its improved vastly in the last few years

<Autopsy[m] "Perhaps a user should think twic"> Problem with the network toggle is that it should be on auto deny mode.

Yeah, trouble is that would confuse to many people as app developers don't code their apps to ask for it if its needed

<dazinism "nvidia_corp: think the android p"> You can improve the shithole but really cannot fix it.

Guess if someone wrote a patch to have a toggle for default deny it may well be accepted?

Guess it depends on your definition of fixed. What changes you are looking for?

Heavy use of multiple users, (ideally with a better UI / UX for that) allows for better isolation between groups of apps

Theres a lot of potential to improve the experience of using multiple users

Some stuff maybe not so difficult to implement

<dazinism "Guess it depends on your definit"> I wish changes were enough to fix it. But unfortunately they are not. You have a bloated kernel from an ancient era. How can it be fixed? A browser like Chromium comes with code equivalent to an OS. Only a rewrite can save Android. No wonder Google is working on something like Fuschia or whatever it's called.

What you are suggesting is trivial changes. They may help but end of the day you are left with a not so robust os fucked up from the bottom.

The trouble with browsers is everywhere.... and is really a problem with the modern web

Needs a major rethink/re- architecture to solve

The kernel is the weakness in android. But its arguably still better than everything else than iOS

And the improvements in GrapheneOS give it some advantages over iOS (yet also still some stuff not as good)

nvidia_corp: have you read Daniels comparison of iOS and GrapheneOS on Reddit?

<dazinism "nvidia_corp: have you read Danie"> I might have read it some time back when I was researching on GOS.

This one covers a lot

the biggest advantages with iOS are definitely the verified boot and kernel

and MTE if you will wait

Of android vs. iOS

GrapheneOS wins the rest(generally)

I'll get the other I was thinking of

iOS offers many decent apps out of the box. So the reliance on 3rd party apps can be reduced there. AOSP apps are pale in comparison.

oh and iOS has better sandboxing as far as inter connection and background limits

yeah that is true, Apple just wins at trust minimization in general thouugh

you can use only their chips, devices, os, and services

and get through your life(usually)

GrapheneOS having it's own store would be a big win though

<hnfpz5w6jg9hfjk3 "I'm a Newbie. Have been followin"> No offense, but Brax is a joke

Putting himself on the same level as Micay but his knowledge and advise says orherwise

Offtopic though. He also at least once spread misinfo (posted in r/GrpaheneOS)

Offtopic and I don't want to go any further anyways

Who is Micay?

Aaaaa

The founder of GrapheneOS, shame on me

Thank you Micay for the wonderful OS

Adding more this page has details of ipc hub.libranet.de/wiki/and-priv-sec/wiki/inter-app-comms

"After installing the App, Enable the Service from the Accessibility Settings." And here I noped away

Foreground service or bust

* Foreground service only or bust

Things got tightened up significantly with apps on SDK 28+

Lia: what was after accessibility services?

Please do not recommend this app

Ah yeah noticed that

Even if it actually does what it only needs, requesting a dangerous permission is big nope

Wrote a thing about dangers of accessibility services hub.libranet.de/channel/and-priv-sec

CalyxOS now has indicators, although I'd rather have all the Graphene hardening

Indicators are trivial. Just grant one time permissions on A11.

Pretty much

Or just don't grant them

<nvidia_corp[m] "Indicators are trivial. Just gra"> "One-time"permission is somehow misleading

<dazinism "CalyxOS now has indicators, alth"> CalyxOS is essentially stock Android which is concerning

I tested it in Auditor and after clearing the app

It doesn't ask for it again

Has to be force-stopped

Or maybe rebooted

<Lia[m] "I tested it in Auditor and after"> (Camera permission)

No its not, CalyxOS is AOSP with improvements

<dazinism "No its not, CalyxOS is AOSP with"> Security wise they are similar

Lia: Probably some bug. Permission stay till the app is running or through forergound sevrice.

* Lia: Probably some bug. Permission stay till the app is running or through foregound service.

traffickpolize Yeah. Which, on a Pixel, is really pretty good.

Auditor doesn't have foreground servixes

* Auditor doesn't have foreground services permission, but it's a system apl

* Auditor doesn't have foreground services permission, but it's a system app

Auditor is a system app ?

dazinism: sure, but Android security features have a lot of gotchas

<nvidia_corp[m] "Auditor is a system app ?"> In GrapheneOS, at least

I've audited GrapheneOS(I don't use it)

It's a lot better than AOSP

<traffickpolize[m "I've audited GrapheneOS(I don't "> On what extent? I'm quite curious

<Lia[m] "In GrapheneOS, at least"> I have not used android for a long time. So not sure how the app are killed/closed in background.

<nvidia_corp[m] "I have not used android for a lo"> Force stop is the sureball option to stop them

nvidia_corp: its complicated and depends on the device / OS

<Lia[m] "On what extent? I'm quite curiou"> I think all of it

The only part I don't like about GrapheneOS is that it uses Linux

dontkillmyapp.com has details

Android uses Linux, GrapheneOS is kinda stuck with it?

<Lia[m] "Android uses Linux, GrapheneOS "> No it's not

I mean kinda

Anyways, an official writeup on GrapheneOS code audit would be nice (and awesomeL

* Anyways, an official writeup on GrapheneOS code audit would be nice (and awesome)

Lia: I didn't really find any security issues

* Anyways, a formal writeup on GrapheneOS code audit would be nice (and awesome)

I found a few things that are definitely not best practices, but that's Android's fault and it was on the GitHub

[traffickpolize](matrix.to/#/@traffickpolize:matrix.org): what are those?

Honestly, I'm not very paranoid. If I was I'd seriously consider this. Apple is the only company I trust to build privacy and security in, but I kinda hate don't like them.

<anupritaisno1[m] "[traffickpolize](matrix."> Uh I should double check the issues. It's possible a few were fixed. It took me months

Nice to hear of more people having a look. Think theres quite a few who've checked GrapheneOS out.

traffickpolize: you checked for yourself or for someone/company?

Myself it's just interesting

If you don't mind me asking whats your skills/experience?

<dazinism "If you don't mind me asking what"> None

I work in the medical industry. I'm just bored with seeing people and my job

So I just audit stuff and write C games

Adminstration

Well thems some skills :-)

[traffickpolize](matrix.to/#/@traffickpolize:matrix.org): can I pm?

anupritaisno1: sure I just need to check over everything don't want to mislead

Definitely interested in your findings.

Yeah, I saw it on PrivacyTools and thought I should give it a crack

I've tried a few of the things on there

[aeonsolution](matrix.to/#/@aeonsolution:matrix.org) pm me

crankycrawdad: donations go to supporting the project grapheneos.org/donate. paypal and github sponsors supports the main developer directly. bitcoin is for hiring qualified developers to assist with the project. please consider donating what you can.

Going back to the built in AOSP network logging functionality

you cant root a production build. only debug/devel build

Thank you in advance for any response. *

username_420[m]: yes its in this paragraph "You need one of the officially supported devices. To make sure that the device can be unlocked to install GrapheneOS, avoid carrier variants of the devices."

found here grapheneos.org/install#prerequisites

Ohhh... 😅 For my defense, the website I bought it from wasn't telling that it was a carrier variant... 😅 But still, that was me not reading carefully enough, thank you a lot and sorry for the silly question

Have a nice day, maybe I'll come around again once I manage to get this awesome OS setup 😍

hehe good luck

I still have a useless Pixel 2 sitting around. You're not the only one that made this mistake. If you're in the US I got mine from a swappa user with oem unlocking in a screenshot on the listing.

I got mine in the EU and I still don't understand how a verizon (us only carrier if I'm not mistaking) got there :'( But luckily enough I should be able to replace it ;)

I didn't see it in any documentation, does anyone know if Graphene includes the wireguard android kernel?

there is a weird thing going on with pixels

I build my Pixel 2 in Germany, but it was a model from Australia.

<louipc "you cant root a production build"> Please bear with my ignorance. Is there any link that i can learn about difference between production/debug/devel builds?

ops typo, I meant bought

V0 in my gym: no, that's not an option

if you want to use GrapheneOS you're flashing the official images and locking

if you replace the official boot.img with an unofficial one that's not signed, you are not using GrapheneOS

V0 in my gym: it's offtopic for this channel

strcat Thx. guess i have to give up VoLTE then 😢

V0 in my gym: also why are you in a security-focused project's channel talking about using unpatched, vulnerable firmware?

it just doesn't make sense

V0inmygym[m]: please join #grapheneos-offtopic. i dont have a link offhand but maybe you can try searching for info

username_420: have you tried to insert a valid SIM card into the phone and see if the OEM unlocking is available after that? I has a similar experience with a verizon oem unlocked phone (I had to insert a SIM in order to get the OEM unlock option available)

<louipc "V0 in my gym: please join #graph"> omw

* username_420: have you tried to insert a valid SIM card into the phone and see if the OEM unlocking is available after that? I had a similar experience with a verizon oem unlocked phone (I had to insert a SIM in order to get the OEM unlock option available)

* username_420: have you tried to insert a valid SIM card into the phone and see if the OEM unlocking is available after that? I've had a similar experience with a verizon oem unlocked phone (I had to insert a SIM in order to get the OEM unlock option available)

<zyxt128[m] "username_420: have you tried to "> I did insert a valid EU carrier SIM card but it didn't change anything, can we talk about it in private messages just in case you got some information I don't please ?

<username_420[m] "I did insert a valid EU carrier "> sure

Thanks

Do you think these apps marked need network access, please?

username_420: The "IMEI starts with '35' == 'Verizon'" clause isn't even 100% accurate. I have a Pixel 3a I purchased directly from Google's store that I was able to install GrapheneOS on and it's IMEI starts with '35'

The best thing I recommend is that you plug in the phone's IMEI or serial number onto this page store.google.com/us/repaircenter and it will tell you what model it is

hnfpz5w6jg9hfjk3: you should probably not be messing with permissions for base system apps

especially talking about removing network access from the over-the-air update system

<M0xC0ncord[m] "The best thing I recommend is th"> Well thanks a lot for tool and unfortunately it IS a f*****g verizon version 😭 I have tried all the tricks, including the "adb shell pm uninstall --user 0 com.android.phone" and nothing does it so I guess the only option I have left is to return it and buy another one

It happened the same to me last week. A "unlocked" phone from eBay that is Verizon actually and it camed also from overseas and now I have to pay the trip back.

Damn this is painfull.. I just want a GrapheneOS 🤣

On base/system apps where sensor permissions are disabled if possible

It didn't affect my daily usage at all

<username_420[m] "Damn this is painfull.. I just w"> I can at least tell you I feel your pain. I went through 2 other Pixel phones before just buying a 3a off Google

For network, on the other hand, just not disabling dynamic system updates and seamless update client would do, probably

Not sure about Proxy Handlers

<M0xC0ncord[m] "I can at least tell you I feel y"> Well... I guess I hope the second one will be the good one at least 🤣

I'd buy them personally if possible

Or ask them to show screenshots of OEM unlock not greyed out

And the regulatory label on about phones AND rebooting at bootloader then showing the Bar Code

Else not buying it

I need someone with a pixel 4 who has volte

Very important

Need to fix an issue that's blocking release

Please pm me

Im pming some folks who i think have one for you

Another test is to goo on a Google Images search and read the link, inside it you will see client=com.Android.Verizon

<save2020[m] "Another test is to goo on a Goog"> I think I tried this trick and it actually showed that I was a Google version. Not too sure if I followed the procedure right tho

If should work, I ve just done one with: .Android.Google

With Covid tracking BS and "Google vs Parsa" lawsuit this should become the decade of glory for GrapheneOS

I ll try to switch as many people as I can to GrapheneOS and QubesOS as a boicot for the spying corporations

You need decent hardware for qubeos through

I have to buy a new CPU for it

Yes my laptop is a Asus ROG i7, 32 Gb of RAM, and a 2 TB SSD, in my case... On older devices its hard

8 Gb just to boot up

Just the OS partition is 250 Gb for the VMs

Does your CPU have all the requirements

Vt-d and vt-x

I did not even checked, it just worked

What CPU u have?

I7 9th gen

Asus ROG G731GT

Model number

What CPU model number

9750H

Folks, there's an offtopic room for non-Graphene things

Good for you

Leave a link for that room please

#grapheneos-offtopic

crankycrawdad: think its better to use the Wireguard app running in userspace rather that exposing the kernel via having wireguard stuff running there.

Apparently wireguard app works well and has low power draw

From matrix #grapheneos-offtopic:matrix.org

is there a workaround to the gallery crashing issue? not sure if anyone has reported that already

in the newest update, when I try to crop and save a screenshot, gallery crashes.

3a XL

<cryptoamnesia[m] "in the newest update, when I try"> edit button is broken

And is already reported

ok, cool. thanks

Hello everyone, is there any code for any web application on IRC java script on the internet?

ewegerg: this is a bad place to ask that question

ewegerg: maybe try #freenode

sorry( my teacher asked me to write a web chat application using the ICR protocol. But I don't know where to start. I read about the protocol itself

IRC)

theres a channel ##irc that would be more appropriate for you

Isn't it crazy that some people are getting excited over HarmonyOS while GrapheneOS, you know, exists? The stigma against US corporations is (deservedly) huge at this point, but if those smartphone enthusiasts actually cared about surveillance, you'd think they would've come across Graphene by now.

Until proven, HarmonyOS is insecure and untrustworthy

* Until proven otherwise,HarmonyOS is insecure and untrustworthy

Especially coming from Huawei

Obviously.

* Until proven otherwise, HarmonyOS is insecure and untrustworthy

Somehow Huawei has a strangely good reputation with some people. Is there any chance the open source of HarmonyOS could be of any use to the development of Graphene at all? I'm guessing not, but it's a question I was wondering about.

<cryptoamnesia[m] "is there a workaround to the gal"> Google Photos

It depends if their kernel is secure, or has been tested by time and not riddled by bugs like Linux

Offtopic but I'd look more forward to FuchsiaOS and Zircon kernel for security

res4[m]: u can start the graphene street team :D

<res4[m] "Somehow Huawei has a strangely g"> It was because Google Android Play services has horrible track record in privacy

Huawei don't have Play services

<louipc "res4: u can start the graphene s"> Right. "Wake up sheeple"-style. I'm sure being a small community is cool and all, but I'd love to see wider adoption. At least privacy on the level of iOS should be the standard for popular OSs, not a luxury. Graphene is great, but won't solve the fundamental issue by itself. Still, wider awareness of the OS might at least start some interesting discussions in the mainstream.

need tshirts and stickers and all that jazz

> Huawei don't have Play services

They do have some kind of services framework I think

That's what I thought as well.

Well, from one spy to another lol

<louipc "need tshirts and stickers and al"> Or package actual jazz with every install of GrapheneOS. Randomly generated with encryption keys stored in the Titan M chip, so no one but you will get to listen to your sweet, sweet personal privacy-jazz.

hah

What makes people think Huawei is any better with their own service framework?

I really think it just comes down to an anti-US mentality.

<res4[m] "I really think it just comes dow"> Yep

<nothankyou[m] "What makes people think Huawei i"> Or their version of "gms"?

Hi. Can anyone help me troubleshoot my Auditor app? It had suddenly stopped sending remote verification. I tried to rotate the QR code and repair it but it's still not working.

I'm running GrapheneOS 09.11.14 on Pixel 4 XL with latest Auditor update.

I would really appreciate it!

d3nm6ugnffwftn2j43ni: the QR code on the account page is just for registering a device with an account, rotating it has nothing to do with verification

has no relevance after registering a device with an account

deleting a device and repairing it never makes sense unless you've done something like wiping it

<strcat[m] "deleting a device and repairing "> I see... So do you happen to know why it stopped sending verification for me?

what you should have done is a local verification to figure out why it's not passing verification

I doubt it stopped sending verifications

* I doubt it stopped sending attestations

<strcat[m] "I doubt it stopped sending verif"> Got it. I'll try it right away

Oh no... This showed up

It seems like it has no problem verifying other devices but being verified...

Are there any features in Graphene that could be blocking internet access to an individual app? I can't get AntennaPod downloading over anything but mobile data.

Internet permission?

Network*

<strcat[m] "I doubt it stopped sending verif"> You are right. For some reason I restarted my phone and it's working again. I have no idea what happened. Thanks anyway!!

So if this is somewhere I apologize as I couldn't find it. What are the default apps installed with graphene?

signalarch: Not many. AOSP stock apps (clock, gallery, calendar, etc.) along with Vanadium, Auditor, and a PDF viewr.

<alzxjm[m] "signalarch: Not many. AOSP stock"> So if I lookup all the aosp apps it will have all of those?

signalarch: hub.libranet.de/wiki/graphene-os/wiki/Apps#Pre_installed_apps

Details of how auditor works is at attestation.app

<dazinism "signalarch: hub.libranet"> Thanks

dazinism: Thanks.

Did somebody try Cryptomator ?

anyone knows why changes are not reflected in the rom after build?

its like nothing was changed, same as original

what did you change

and are you sure you actually built the changed code and flashed it onto the device?

sounds like you made a mistake

your question is too vague to answer

like a changelog?

its published on the website

zzz

My 2fa app (aegis) is failing every authentication attempt I make. I believe it may be due to my phone's time being wrong. Is anyone else experiencing this?

I have it set to use network time and all the other systems on my network have the correct time