-
signalarch[m]
Is there any danger to buying a used phone? Specifically a renewed pixel from amazon?
-
alzxjm[m]
signalarch: Probably not. That's the nice thing about hardware-backed verified boot. If you flash stock OS or Calyx/Graphene and lock the bootloader with their keys you're guaranteed to be booting a known good system.
-
alzxjm[m]
There was one really cool attack demonstrated by spoofing hardware: replacing the screen or some other hardware component which could allow an attacker to exploit your system somehow (I'm not sure of the details) and afaik only the iPhone 11 has mitigation for such an attack.
-
alzxjm[m]
But I don't think that is a real world problem you have to worry about. Used Pixel is probably fine.
-
signalarch[m]
<alzxjm[m] "signalarch: Probably not. That's"> Gotcha thanks
-
faxing[m]
<strcat[m] "faxing: Android 11 GrapheneOS is"> Oh alright, cool - so like probably within the next month or so?
-
cn3m[m]
faxing: GrapheneOS 10 is EOL
-
faxing[m]
EOL?
-
cn3m[m]
end of life
-
faxing[m]
Oh - wait - what?
-
faxing[m]
GrapheneOS is ending?
-
cn3m[m]
no GrapheneOS 11 is the new base
-
faxing[m]
Oh okay, sorry for misunderstanding
-
cn3m[m]
from my understanding all further builds of the OS will be GrapheneOS 11
-
cn3m[m]
np
-
cn3m[m]
should get 09-05 release and 10-05 release pretty close together if I understand correctly
-
cn3m[m]
we are 09-01 right now iirc
-
traffickpolize[m
The 01/05 designation is regarding which patch set the OS is on (released at the same time)
-
faxing[m]
Oh okay - thank you all so much for the help and info
-
faxing[m]
* Oh okay - thank you so much for the help and info
-
save2020[m]
I think I might have an issue. I have right now GrapheneOS on Android 11
-
Lia[m]
Check first if the encountered issue is not reported or fixed in the next release [
github.com/GrapheneOS/os_issue_tracker/issues]
-
save2020[m]
On a Pixel 3 I ve installed using OTA the official Android 10, and after 4-5 attempts to install GrapheneOS and again Android 10 I ve managed to install GrapheneOS at the end and when I checked out the Android version it was 11. Is the official download now based on version 11?
-
save2020[m]
At the time I ve managed to install GrapheneOS I did not had a working OS and the Android 10 install was failing to work.
-
Lia[m]
The Stable channel is still at 10 as of now
-
Lia[m]
GrapheneOS 11 is still at Beta channel
-
save2020[m]
Wow, what the hell happened then?
-
save2020[m]
Ihave verified the install with Auditor and its fine
-
-
save2020[m]
And why the gyro works even thow I have toggle of the "Sensors off" tile and dezactivated the screen orientation
-
-
Lia[m]
What app is it and what apps did you disable the sensor permissions?
-
crankycrawdad[m]
Hey I was thinking I would donate to this project as I really appreciate the passion put into it, just out of curiosity, does anyone know where that money goes?
-
save2020[m]
From F-droid get Logcat Reader and activate it using manual metod with ADB
-
save2020[m]
For sensor off tile go in Developer Options and type i. The search bar tile and you ll find a menu : Quick settings developer tiles and inside that the second to last toggle
-
Lia[m]
Some system apps are not able to disable sensor permissions
-
save2020[m]
It will apear in the bar nextto the wifi toggle
-
Lia[m]
(Not the developer tools)
-
-
Lia[m]
<save2020[m] "For sensor off tile go in Develo"> Huh, all I thought you were using the permission
-
-
Lia[m]
Privacy Breacher can't detect my body movement when Sensors permissions are denied
-
-
save2020[m]
I don t know if I should keep this version because somehow its Android 11 or make a clean reinstall and get back on GrapheneOS with Android 10
-
save2020[m]
* I don t know if I should keep this version because somehow its GrapheneOS on Android 11 or make a clean reinstall and get back on GrapheneOS with Android 10
-
Lia[m]
<save2020[m] "20200923_090626_4512249101772926"> I don't get the purpose of using the developer options.
-
dazinism
I think the sensor tile stops app data getting to apps. Adb is looking more at what the system sees
-
dazinism
You could test for sensor data using satstat
-
save2020[m]
Yes, but on GrapheneOS with Android 10 I ve never seen that in the logs
-
dazinism
-
Lia[m]
> <@save2020:matrix.org> sent an image.
-
Lia[m]
* I don't get the purpose of using the developer options, whereas the permission model has already sensors in it.
-
dazinism
Check on the sensor tab
-
dazinism
*stops sensor data getting to apps
-
dazinism
You could also test switching the sensor permission for satstat
-
dazinism
Guess theres a chance android 11 does things different? Or maybe the sensor tile isn't working.
-
save2020[m]
Those won t work if I click the tile, even the Camera app won t work, even if its the stock app from GrapheneOS. My fear is that somehow I have left some backround shit from Google services from the previous Android 10 installed over OTA. Is this possible?
-
Lia[m]
Try installing privacy breacher
-
Lia[m]
Deny sensor permissions
-
Lia[m]
(It's not as detailed as SatStat but)
-
dazinism
Maybe the same for everyone on GrapheneOS 11. I dont think developer options are currently really tested
-
save2020[m]
I lk try that, thanks
-
Lia[m]
Are you on GrapheneOS? Just to be sure
-
save2020[m]
* I ll try that, thanks
-
save2020[m]
Yes, of course, its not my first graphene phone
-
save2020[m]
And verified with the Auditor
-
dazinism
If its booting GrapheneOS and you see the yellow warning screen about booting a different operating system, I don't think you can have any Google services stuff left
-
-
-
cn3m[m]
save2020: AOSP doesn't have Google services in the first place they want it to stay closed source
-
save2020[m]
I know that
-
dazinism
The operating system should be bit to bit identical to any other version of that phone with GrapheneOS
-
save2020[m]
But looking at the logs I see a lot of stuff I havent seen before
-
dazinism
I guess thats the change to 11
-
save2020[m]
And I still cannot understand why its on top of Android 11
-
dazinism
Whats the name of the file you flashed on it?
-
Lia[m]
SatStat and Privacy Breacher not showing any sensor data
-
-
Lia[m]
At denied permissiln
-
Lia[m]
Not the dev tile
-
save2020[m]
You can see there the 2 OTA files, one is tge official Pixel Android 10
-
save2020[m]
And the second one is GrapheneOS downloaded yesterday from the Releses page on the official website
-
save2020[m]
* You can see there the 2 OTA files, one is the official Pixel Android 10
-
Lia[m]
* At denied sensor permission
-
dazinism
You've got the 2020-09-18 ota there. Thats Android 11
-
dazinism
And what you are running
-
save2020[m]
Woe, I clicked on the last Android 10 not 11 on the Google website
-
dazinism
Its a beta build of 11. Think its close to being released on stable channel
-
save2020[m]
So I have a GrapheneOS 10 on top if a Android 11 beta? Is that even possible?
-
dazinism
Imagine that was downloaded from the GrapheneOS site not Google site?
-
deetot
<dazinism "Its a beta build of 11. Think it"> Why do you say that
-
dazinism
because most of the porting to 11 is done
-
-
save2020[m]
I have cleary downloaded Android 10
-
save2020[m]
But indeed now its the version you mentioned
-
dazinism
save2020: the 2020-09-18 ota you showed is apparently what you are running
-
dazinism
Its GrapheneOS
-
dazinism
You can flash GrapheneOS 10 over Stock Android 11
-
dazinism
If you did that you would have GrapheneOS 10
-
dazinism
You must of then flashed the 2020-09-18 ota
-
dazinism
To get onto GrapheneOS 11
-
save2020[m]
But I never even downloaded the 09-18... Its not on my computer
-
save2020[m]
From what store I download Privacy Breacher?
-
dazinism
save2020: the computer screenshot you just shared shows the 09-18 in the list of files....
-
-
dazinism
*09-18 ota
-
save2020[m]
Indeeed OMG, i ve looked through it earlier and not see of my nose... Thanks
-
dazinism
The izzyondroid fdroid repo has Privacy Breacher
-
save2020[m]
Found it with Aurora Droid
-
save2020[m]
If I toggle of sensors it denies access to the app as intended
-
dazinism
Izzyondroid also has Auditor and PDFViewer - likely to get updates to them a bit quicker than when they arrive with an OS update
-
dazinism
save2020: with the sensors tile?
-
-
dazinism
You've not used the sensor toggle for individual app
-
dazinism
?
-
save2020[m]
No
-
-
Lia[m]
Example:
-
dazinism
So any changes in what you see via adb must be changes from android 10 - android 11
-
-
Lia[m]
What you should see in monitoring physical activiry
-
Lia[m]
With sensor permissions denied
-
dazinism
I'm a bit surprised there is a difference.
-
save2020[m]
If I click on the "Sensors off" tile that cube won't spin when i spin the phone
-
save2020[m]
I lk try from Permissions
-
dazinism
Everything working as expected then
-
dazinism
For best security using developer options, and especially adb isnt recommended
-
save2020[m]
Yes, but my question is why Android keeps monitoring the sensor in the backround? It never happened before, even on a Xiaomi Note 8 Pro whicb is king in spying
-
dazinism
By using adb you are putting a lot of trust into your computer
-
save2020[m]
I have QubesOS
-
dazinism
Its likely far less secure than your phone
-
save2020[m]
The VM for USB never sees the internet
-
dazinism
That helps
-
dazinism
Guess its a difference between Android 11 on Pixel and whatever you were running on the Xiaomi
-
save2020[m]
I really don t know if I should keep this version or make a android 10 install as base
-
dazinism
I'd probably stay on what you have
-
dazinism
That will likely be the stable version in the next few days
-
dazinism
Switch the updater to stable channel
-
dazinism
If its not already
-
save2020[m]
I wish the same, but it does not fell right with those logs I m seeing, I wished someone from GrapheneOS say a word.
-
dazinism
I expect there will be a few more changes from what you have to GrapheneOS 11 stable
-
dazinism
-
save2020[m]
Its already stable channel
-
save2020[m]
I ll have to sign up and do that too, thanks
-
dazinism
Once stable 11 lands you'll be the same as everyone else on stable
-
save2020[m]
It would be good then
-
dazinism
Yeah 👍
-
dazinism
Dont stress, unless you find something you need doesnt work
-
save2020[m]
It works perfectly from what I ve seen until now
-
dazinism
(eg. Think support for some cell carriers isnt set up yet)
-
save2020[m]
Just I fell like I ve jnstalled Linux on a NTFS partition... Something is not right
-
save2020[m]
I have not put a SIM card in it yet
-
dazinism
I think you are all OK.
-
save2020[m]
Thanks
-
dazinism
No problem
-
Lckdyspl7[m]
So with the stable A11 release the biometric bug will be fixed ? 😁 and we will receive the sec updates also? Just confirming. Having to use master pass in my keepass is killing my lyf typing it out each time
-
hnfpz5w6jg9hfjk3
Hi I've taken photos with my Graphene OS Pixel of the Electricity and Gas meter readings in my house. Now when I go on EBay on my Windows PC one of the adverts is for a power company. Is there still some Google spying going on there, please? Similar thing with having a conversation in the same room as the Graphene Pixel 3 XL and the I go on the PC and see adverts related to the conversation contents?
-
Lia[m]
It depends on how you separate your activities on your devices, what sites you visit, or your habits
-
Lia[m]
Also, GrapheneOS will not prevent tracking because of your bad habits
-
traffickpolize[m
hnfpz5w6jg9hfjk3 your camera isn't spying on
-
Lia[m]
It can only mitigate to some extent the OS can do
-
traffickpolize[m
You are noticing the ad since it's relevant by chance
-
Lckdyspl7[m]
Don't install horrible apps with unessacary permissions and trackers
-
Lckdyspl7[m]
I'd say they are not related in any form, possibly another device you have in your home connected to the WiFi network?? Smart TV for example
-
Lckdyspl7[m]
I replaced my TV with a beautiful fish tank. Best thing I've done in 2020 besides install GoS
-
traffickpolize[m
Is all chance
-
Lia[m]
<hnfpz5w6jg9hfjk3 "Hi I've taken photos with my Gra"> It could also be just smart algorithm and data points collected by that site that points to transferring power company
-
traffickpolize[m
That's not happening. Targeting advertising is one pretty laughably inaccurate and two they aren't that smart
-
-
-
hnfpz5w6jg9hfjk3
I've mostly stuck to Fdroid apps and Web apps. There are three from the Aurora Store. My TV is a Panasonic one from 10-15years ago. I have many Windows 10 PCs.
-
Lia[m]
Huh, quite a lot of apps there, and also why not just revoke internet permission sometimes instead of using Netguard?
-
traffickpolize[m
Why do you need a firewall on Android? They aren't exactly running a bunch of web servers
-
Lia[m]
Did you know Netguard can be easily bypassed by download manager, which is blocked by the Network permission?
-
traffickpolize[m
Lia: that's not different with network permission. Unless it is totally breaking the OS
-
Lia[m]
<traffickpolize[m "Lia: that's not different with n">
grapheneos.org/faq#firewall
-
Lia[m]
"...Revoking the permission denies indirect access via OS components and apps enforcing the INTERNET permission, such as DownloadManager..."
-
traffickpolize[m
It's better, but it's not leakproof
-
Lia[m]
Yeah, I'm only saying it is better
-
Lia[m]
Ipc is still a pronlem
-
Lia[m]
* Ipc is still a problem
-
Lia[m]
Opening links from one app to browser, that is.
-
cn3m[m]
it is ironic to me one of GrapheneOS's most well known features is it's(currently) weakest
-
Lia[m]
<cn3m[m] "it is ironic to me one of Graphe"> If only each app could be as scoped as apps in users
-
d23d232d33d23d23
Hi all, wanted to know what to do at the signing keys phase ```Enter pass phrase for avb.pem:``` I left all password prompts blank because I'm just doing a dirty quick test to get familiar with this. thx
-
d23d232d33d23d23
` ../../external/avb/avbtool: Error getting public key: unable to load Public Key139848309380416:error:0909006C:PEM routines:get_name:no start line:../crypto/pem/pem_lib.c:745:Expecting: PUBLIC KEY
-
d23d232d33d23d23
nvm
-
d23d232d33d23d23
i just used a password instead =)
-
hnfpz5w6jg9hfjk3
I'm a Newbie. Have been following the advice of this fellow Rob Braxman on Youtube said that Netguard was good for blocking Gapps from the Aurora Store phoning home.
-
dazinism
hnfpz5w6jg9hfjk3: On GrapheneOS you are probably better off using the network permission
-
dazinism
Possibly with paid NetGuard and some apps you may be able to stop analytics or ads. But cases where that could be worth doing are limited and NetGuard isnt as robust at blocking as the Network permission
-
dazinism
Case where it may make sense is say..... an xmpp client where you could block all connections except to your xmpp server.
-
-
hnfpz5w6jg9hfjk3
Here are my permissions
-
-
-
d23d232d33d23d23
>>> i completed the build but at one step i get " IOError: [Errno 2] No such file or directory: 'out/target/product/sargo/obj/PACKAGING/target_files_intermediates/aosp_sargo-target_files-2020.09.21.15.zip'"
-
-
hnfpz5w6jg9hfjk3
This morning I'd somehow left Netguard disabled too.
-
Autopsy[m]
You don't need to use Netguard.
-
Autopsy[m]
hnfpz5w6jg9hfjk3 the built in network permission toggle is good enough.
-
dazinism
NetGuard can also be handy for looking at what network connections apps make.
-
save2020[m]
Can someone recommend a good kVM VPS outside of the 14 eyes countries?
-
dazinism
There is some built in AOSP network logs, but they arent exposed to users
-
Autopsy[m]
<save2020[m] "Can someone recommend a good kVM">
serverhunter.com
-
Erraverunt
-
save2020[m]
Autopsy: thanks
-
Autopsy[m]
Filter until your heart is content.
-
nvidia_corp[m]
Also you can set Netguard to default deny. So a malicious app if got installed will be required to be whitelisted first for it to work.
-
dazinism
Trouble is its less robust. NetGuard can crash and stop blocking
-
dazinism
Or other apps may start up on boot before it
-
dazinism
Also apps can make network connections via other apps, which NetGuard doesn't block
-
Autopsy[m]
<nvidia_corp[m] "Also you can set Netguard to def"> Perhaps a user should think twice before installing a malicious app. If it's that malicious, Netguard won't do anything to protect you. Use the Network Toggle.
-
nvidia_corp[m]
Android Permission System/Model is not robust. GrapheneOS cannot fix the shithole. You should not use Android if you are serious about security. It's iOS or no phone at all.
-
Autopsy[m]
Exactly what dazinism is saying.
-
dazinism
As mentioned the GrapheneOS network permission does block some apps from providing network to others
-
nvidia_corp[m]
It took 7 years for Google to be able to implement scoped storage. which is yet to be completely enforced as I can see.
-
nvidia_corp[m]
iOS did it way back.
-
dazinism
nvidia_corp: think the android permission model does what it says? Just the model wasn't/isn't as tight as on iOS. Its improved vastly in the last few years
-
nvidia_corp[m]
<Autopsy[m] "Perhaps a user should think twic"> Problem with the network toggle is that it should be on auto deny mode.
-
dazinism
Yeah, trouble is that would confuse to many people as app developers don't code their apps to ask for it if its needed
-
nvidia_corp[m]
<dazinism "nvidia_corp: think the android p"> You can improve the shithole but really cannot fix it.
-
dazinism
Guess if someone wrote a patch to have a toggle for default deny it may well be accepted?
-
dazinism
Guess it depends on your definition of fixed. What changes you are looking for?
-
dazinism
Heavy use of multiple users, (ideally with a better UI / UX for that) allows for better isolation between groups of apps
-
dazinism
Theres a lot of potential to improve the experience of using multiple users
-
dazinism
Some stuff maybe not so difficult to implement
-
nvidia_corp[m]
<dazinism "Guess it depends on your definit"> I wish changes were enough to fix it. But unfortunately they are not. You have a bloated kernel from an ancient era. How can it be fixed? A browser like Chromium comes with code equivalent to an OS. Only a rewrite can save Android. No wonder Google is working on something like Fuschia or whatever it's called.
-
nvidia_corp[m]
What you are suggesting is trivial changes. They may help but end of the day you are left with a not so robust os fucked up from the bottom.
-
dazinism
The trouble with browsers is everywhere.... and is really a problem with the modern web
-
dazinism
Needs a major rethink/re- architecture to solve
-
dazinism
The kernel is the weakness in android. But its arguably still better than everything else than iOS
-
dazinism
And the improvements in GrapheneOS give it some advantages over iOS (yet also still some stuff not as good)
-
dazinism
nvidia_corp: have you read Daniels comparison of iOS and GrapheneOS on Reddit?
-
nvidia_corp[m]
<dazinism "nvidia_corp: have you read Danie"> I might have read it some time back when I was researching on GOS.
-
dazinism
This one covers a lot
-
dazinism
-
cn3m[m]
the biggest advantages with iOS are definitely the verified boot and kernel
-
cn3m[m]
and MTE if you will wait
-
dazinism
Of android vs. iOS
-
cn3m[m]
GrapheneOS wins the rest(generally)
-
dazinism
I'll get the other I was thinking of
-
nvidia_corp[m]
iOS offers many decent apps out of the box. So the reliance on 3rd party apps can be reduced there. AOSP apps are pale in comparison.
-
cn3m[m]
oh and iOS has better sandboxing as far as inter connection and background limits
-
cn3m[m]
yeah that is true, Apple just wins at trust minimization in general thouugh
-
cn3m[m]
you can use only their chips, devices, os, and services
-
dazinism
-
cn3m[m]
and get through your life(usually)
-
cn3m[m]
GrapheneOS having it's own store would be a big win though
-
Lia[m]
<hnfpz5w6jg9hfjk3 "I'm a Newbie. Have been followin"> No offense, but Brax is a joke
-
Lia[m]
Putting himself on the same level as Micay but his knowledge and advise says orherwise
-
Lia[m]
Offtopic though. He also at least once spread misinfo (posted in r/GrpaheneOS)
-
Lia[m]
Offtopic and I don't want to go any further anyways
-
save2020[m]
Who is Micay?
-
save2020[m]
Aaaaa
-
save2020[m]
The founder of GrapheneOS, shame on me
-
save2020[m]
Thank you Micay for the wonderful OS
-
dazinism
-
Lia[m]
"After installing the App, Enable the Service from the Accessibility Settings." And here I noped away
-
Lia[m]
Foreground service or bust
-
Lia[m]
* Foreground service only or bust
-
dazinism
Things got tightened up significantly with apps on SDK 28+
-
dazinism
Lia: what was after accessibility services?
-
Lia[m]
-
Lia[m]
Please do not recommend this app
-
dazinism
Ah yeah noticed that
-
Lia[m]
Even if it actually does what it only needs, requesting a dangerous permission is big nope
-
dazinism
Wrote a thing about dangers of accessibility services
hub.libranet.de/channel/and-priv-sec
-
dazinism
CalyxOS now has indicators, although I'd rather have all the Graphene hardening
-
nvidia_corp[m]
Indicators are trivial. Just grant one time permissions on A11.
-
Lia[m]
Pretty much
-
Lia[m]
Or just don't grant them
-
Lia[m]
<nvidia_corp[m] "Indicators are trivial. Just gra"> "One-time"permission is somehow misleading
-
traffickpolize[m
<dazinism "CalyxOS now has indicators, alth"> CalyxOS is essentially stock Android which is concerning
-
Lia[m]
I tested it in Auditor and after clearing the app
-
Lia[m]
It doesn't ask for it again
-
Lia[m]
Has to be force-stopped
-
Lia[m]
Or maybe rebooted
-
Lia[m]
<Lia[m] "I tested it in Auditor and after"> (Camera permission)
-
dazinism
No its not, CalyxOS is AOSP with improvements
-
traffickpolize[m
<dazinism "No its not, CalyxOS is AOSP with"> Security wise they are similar
-
nvidia_corp[m]
Lia: Probably some bug. Permission stay till the app is running or through forergound sevrice.
-
nvidia_corp[m]
* Lia: Probably some bug. Permission stay till the app is running or through foregound service.
-
dazinism
traffickpolize Yeah. Which, on a Pixel, is really pretty good.
-
dazinism
-
Lia[m]
Auditor doesn't have foreground servixes
-
Lia[m]
* Auditor doesn't have foreground services permission, but it's a system apl
-
Lia[m]
* Auditor doesn't have foreground services permission, but it's a system app
-
nvidia_corp[m]
Auditor is a system app ?
-
traffickpolize[m
dazinism: sure, but Android security features have a lot of gotchas
-
Lia[m]
<nvidia_corp[m] "Auditor is a system app ?"> In GrapheneOS, at least
-
traffickpolize[m
I've audited GrapheneOS(I don't use it)
-
traffickpolize[m
It's a lot better than AOSP
-
Lia[m]
<traffickpolize[m "I've audited GrapheneOS(I don't "> On what extent? I'm quite curious
-
nvidia_corp[m]
<Lia[m] "In GrapheneOS, at least"> I have not used android for a long time. So not sure how the app are killed/closed in background.
-
Lia[m]
<nvidia_corp[m] "I have not used android for a lo"> Force stop is the sureball option to stop them
-
dazinism
nvidia_corp: its complicated and depends on the device / OS
-
traffickpolize[m
<Lia[m] "On what extent? I'm quite curiou"> I think all of it
-
traffickpolize[m
The only part I don't like about GrapheneOS is that it uses Linux
-
dazinism
-
Lia[m]
Android uses Linux, GrapheneOS is kinda stuck with it?
-
traffickpolize[m
<Lia[m] "Android uses Linux, GrapheneOS "> No it's not
-
traffickpolize[m
I mean kinda
-
Lia[m]
Anyways, an official writeup on GrapheneOS code audit would be nice (and awesomeL
-
Lia[m]
* Anyways, an official writeup on GrapheneOS code audit would be nice (and awesome)
-
traffickpolize[m
Lia: I didn't really find any security issues
-
Lia[m]
* Anyways, a formal writeup on GrapheneOS code audit would be nice (and awesome)
-
traffickpolize[m
I found a few things that are definitely not best practices, but that's Android's fault and it was on the GitHub
-
anupritaisno1[m]
-
traffickpolize[m
Honestly, I'm not very paranoid. If I was I'd seriously consider this. Apple is the only company I trust to build privacy and security in, but I kinda hate don't like them.
-
traffickpolize[m
<anupritaisno1[m] "[traffickpolize](
matrix."> Uh I should double check the issues. It's possible a few were fixed. It took me months
-
dazinism
Nice to hear of more people having a look. Think theres quite a few who've checked GrapheneOS out.
-
dazinism
traffickpolize: you checked for yourself or for someone/company?
-
traffickpolize[m
Myself it's just interesting
-
dazinism
If you don't mind me asking whats your skills/experience?
-
traffickpolize[m
<dazinism "If you don't mind me asking what"> None
-
traffickpolize[m
I work in the medical industry. I'm just bored with seeing people and my job
-
traffickpolize[m
So I just audit stuff and write C games
-
traffickpolize[m
Adminstration
-
dazinism
Well thems some skills :-)
-
anupritaisno1[m]
-
traffickpolize[m
anupritaisno1: sure I just need to check over everything don't want to mislead
-
dazinism
Definitely interested in your findings.
-
traffickpolize[m
Yeah, I saw it on PrivacyTools and thought I should give it a crack
-
traffickpolize[m
I've tried a few of the things on there
-
anupritaisno1[m]
-
aeonsolution[m]
crankycrawdad: donations go to supporting the project
grapheneos.org/donate. paypal and github sponsors supports the main developer directly. bitcoin is for hiring qualified developers to assist with the project. please consider donating what you can.
-
dazinism
Going back to the built in AOSP network logging functionality
-
dazinism
-
-
louipc
you cant root a production build. only debug/devel build
-
-
username_420[m]
Thank you in advance for any response. *
-
louipc
username_420[m]: yes its in this paragraph "You need one of the officially supported devices. To make sure that the device can be unlocked to install GrapheneOS, avoid carrier variants of the devices."
-
louipc
-
username_420[m]
Ohhh... 😅 For my defense, the website I bought it from wasn't telling that it was a carrier variant... 😅 But still, that was me not reading carefully enough, thank you a lot and sorry for the silly question
-
username_420[m]
Have a nice day, maybe I'll come around again once I manage to get this awesome OS setup 😍
-
louipc
hehe good luck
-
waverider[m]
I still have a useless Pixel 2 sitting around. You're not the only one that made this mistake. If you're in the US I got mine from a swappa user with oem unlocking in a screenshot on the listing.
-
username_420[m]
I got mine in the EU and I still don't understand how a verizon (us only carrier if I'm not mistaking) got there :'( But luckily enough I should be able to replace it ;)
-
crankycrawdad[m]
I didn't see it in any documentation, does anyone know if Graphene includes the wireguard android kernel?
-
Beaver91
there is a weird thing going on with pixels
-
Beaver91
I build my Pixel 2 in Germany, but it was a model from Australia.
-
V0inmygym[m]
<louipc "you cant root a production build"> Please bear with my ignorance. Is there any link that i can learn about difference between production/debug/devel builds?
-
Beaver91
ops typo, I meant bought
-
strcat[m]
V0 in my gym: no, that's not an option
-
strcat[m]
if you want to use GrapheneOS you're flashing the official images and locking
-
strcat[m]
if you replace the official boot.img with an unofficial one that's not signed, you are not using GrapheneOS
-
strcat[m]
V0 in my gym: it's offtopic for this channel
-
V0inmygym[m]
strcat Thx. guess i have to give up VoLTE then 😢
-
strcat[m]
V0 in my gym: also why are you in a security-focused project's channel talking about using unpatched, vulnerable firmware?
-
strcat[m]
it just doesn't make sense
-
louipc
V0inmygym[m]: please join #grapheneos-offtopic. i dont have a link offhand but maybe you can try searching for info
-
zyxt128[m]
username_420: have you tried to insert a valid SIM card into the phone and see if the OEM unlocking is available after that? I has a similar experience with a verizon oem unlocked phone (I had to insert a SIM in order to get the OEM unlock option available)
-
V0inmygym[m]
<louipc "V0 in my gym: please join #graph"> omw
-
zyxt128[m]
* username_420: have you tried to insert a valid SIM card into the phone and see if the OEM unlocking is available after that? I had a similar experience with a verizon oem unlocked phone (I had to insert a SIM in order to get the OEM unlock option available)
-
zyxt128[m]
* username_420: have you tried to insert a valid SIM card into the phone and see if the OEM unlocking is available after that? I've had a similar experience with a verizon oem unlocked phone (I had to insert a SIM in order to get the OEM unlock option available)
-
username_420[m]
<zyxt128[m] "username_420: have you tried to "> I did insert a valid EU carrier SIM card but it didn't change anything, can we talk about it in private messages just in case you got some information I don't please ?
-
zyxt128[m]
<username_420[m] "I did insert a valid EU carrier "> sure
-
username_420[m]
Thanks
-
-
-
hnfpz5w6jg9hfjk3
Do you think these apps marked need network access, please?
-
M0xC0ncord[m]
username_420: The "IMEI starts with '35' == 'Verizon'" clause isn't even 100% accurate. I have a Pixel 3a I purchased directly from Google's store that I was able to install GrapheneOS on and it's IMEI starts with '35'
-
M0xC0ncord[m]
The best thing I recommend is that you plug in the phone's IMEI or serial number onto this page
store.google.com/us/repaircenter and it will tell you what model it is
-
strcat[m]
hnfpz5w6jg9hfjk3: you should probably not be messing with permissions for base system apps
-
strcat[m]
especially talking about removing network access from the over-the-air update system
-
username_420[m]
<M0xC0ncord[m] "The best thing I recommend is th"> Well thanks a lot for tool and unfortunately it IS a f*****g verizon version 😭 I have tried all the tricks, including the "adb shell pm uninstall --user 0 com.android.phone" and nothing does it so I guess the only option I have left is to return it and buy another one
-
save2020[m]
It happened the same to me last week. A "unlocked" phone from eBay that is Verizon actually and it camed also from overseas and now I have to pay the trip back.
-
username_420[m]
Damn this is painfull.. I just want a GrapheneOS 🤣
-
Lia[m]
On base/system apps where sensor permissions are disabled if possible
-
Lia[m]
It didn't affect my daily usage at all
-
M0xC0ncord[m]
<username_420[m] "Damn this is painfull.. I just w"> I can at least tell you I feel your pain. I went through 2 other Pixel phones before just buying a 3a off Google
-
Lia[m]
For network, on the other hand, just not disabling dynamic system updates and seamless update client would do, probably
-
Lia[m]
Not sure about Proxy Handlers
-
username_420[m]
<M0xC0ncord[m] "I can at least tell you I feel y"> Well... I guess I hope the second one will be the good one at least 🤣
-
Lia[m]
I'd buy them personally if possible
-
Lia[m]
Or ask them to show screenshots of OEM unlock not greyed out
-
Lia[m]
And the regulatory label on about phones AND rebooting at bootloader then showing the Bar Code
-
Lia[m]
Else not buying it
-
anupritaisno1[m]
I need someone with a pixel 4 who has volte
-
anupritaisno1[m]
Very important
-
anupritaisno1[m]
Need to fix an issue that's blocking release
-
anupritaisno1[m]
Please pm me
-
blacklight447[m]
Im pming some folks who i think have one for you
-
save2020[m]
Another test is to goo on a Google Images search and read the link, inside it you will see client=com.Android.Verizon
-
username_420[m]
<save2020[m] "Another test is to goo on a Goog"> I think I tried this trick and it actually showed that I was a Google version. Not too sure if I followed the procedure right tho
-
save2020[m]
If should work, I ve just done one with: .Android.Google
-
save2020[m]
With Covid tracking BS and "Google vs Parsa" lawsuit this should become the decade of glory for GrapheneOS
-
save2020[m]
I ll try to switch as many people as I can to GrapheneOS and QubesOS as a boicot for the spying corporations
-
deetot
You need decent hardware for qubeos through
-
deetot
I have to buy a new CPU for it
-
save2020[m]
Yes my laptop is a Asus ROG i7, 32 Gb of RAM, and a 2 TB SSD, in my case... On older devices its hard
-
save2020[m]
8 Gb just to boot up
-
save2020[m]
Just the OS partition is 250 Gb for the VMs
-
deetot
Does your CPU have all the requirements
-
deetot
Vt-d and vt-x
-
save2020[m]
I did not even checked, it just worked
-
deetot
What CPU u have?
-
save2020[m]
I7 9th gen
-
save2020[m]
Asus ROG G731GT
-
deetot
Model number
-
deetot
What CPU model number
-
save2020[m]
9750H
-
jpds
Folks, there's an offtopic room for non-Graphene things
-
deetot
Good for you
-
save2020[m]
Leave a link for that room please
-
jpds
#grapheneos-offtopic
-
dazinism
crankycrawdad: think its better to use the Wireguard app running in userspace rather that exposing the kernel via having wireguard stuff running there.
-
dazinism
Apparently wireguard app works well and has low power draw
-
dazinism
From matrix #grapheneos-offtopic:matrix.org
-
cryptoamnesia[m]
is there a workaround to the gallery crashing issue? not sure if anyone has reported that already
-
cryptoamnesia[m]
in the newest update, when I try to crop and save a screenshot, gallery crashes.
-
cryptoamnesia[m]
3a XL
-
Lia[m]
<cryptoamnesia[m] "in the newest update, when I try"> edit button is broken
-
Lia[m]
And is already reported
-
cryptoamnesia[m]
ok, cool. thanks
-
ewegerg
Hello everyone, is there any code for any web application on IRC java script on the internet?
-
louipc
ewegerg: this is a bad place to ask that question
-
louipc
ewegerg: maybe try #freenode
-
ewegerg
sorry( my teacher asked me to write a web chat application using the ICR protocol. But I don't know where to start. I read about the protocol itself
-
ewegerg
IRC)
-
louipc
theres a channel ##irc that would be more appropriate for you
-
res4[m]
Isn't it crazy that some people are getting excited over HarmonyOS while GrapheneOS, you know, exists? The stigma against US corporations is (deservedly) huge at this point, but if those smartphone enthusiasts actually cared about surveillance, you'd think they would've come across Graphene by now.
-
nothankyou[m]
Until proven, HarmonyOS is insecure and untrustworthy
-
nothankyou[m]
* Until proven otherwise,HarmonyOS is insecure and untrustworthy
-
nothankyou[m]
Especially coming from Huawei
-
res4[m]
Obviously.
-
nothankyou[m]
* Until proven otherwise, HarmonyOS is insecure and untrustworthy
-
res4[m]
Somehow Huawei has a strangely good reputation with some people. Is there any chance the open source of HarmonyOS could be of any use to the development of Graphene at all? I'm guessing not, but it's a question I was wondering about.
-
mastercakex[m]
<cryptoamnesia[m] "is there a workaround to the gal"> Google Photos
-
nothankyou[m]
It depends if their kernel is secure, or has been tested by time and not riddled by bugs like Linux
-
nothankyou[m]
Offtopic but I'd look more forward to FuchsiaOS and Zircon kernel for security
-
louipc
res4[m]: u can start the graphene street team :D
-
nothankyou[m]
<res4[m] "Somehow Huawei has a strangely g"> It was because Google Android Play services has horrible track record in privacy
-
nothankyou[m]
Huawei don't have Play services
-
res4[m]
<louipc "res4: u can start the graphene s"> Right. "Wake up sheeple"-style. I'm sure being a small community is cool and all, but I'd love to see wider adoption. At least privacy on the level of iOS should be the standard for popular OSs, not a luxury. Graphene is great, but won't solve the fundamental issue by itself. Still, wider awareness of the OS might at least start some interesting discussions in the mainstream.
-
louipc
need tshirts and stickers and all that jazz
-
nickcalyx[m]
> Huawei don't have Play services
-
nickcalyx[m]
They do have some kind of services framework I think
-
res4[m]
That's what I thought as well.
-
nothankyou[m]
Well, from one spy to another lol
-
res4[m]
<louipc "need tshirts and stickers and al"> Or package actual jazz with every install of GrapheneOS. Randomly generated with encryption keys stored in the Titan M chip, so no one but you will get to listen to your sweet, sweet personal privacy-jazz.
-
louipc
hah
-
nothankyou[m]
What makes people think Huawei is any better with their own service framework?
-
res4[m]
I really think it just comes down to an anti-US mentality.
-
dorrimi23[m]
<res4[m] "I really think it just comes dow"> Yep
-
nothankyou[m]
<nothankyou[m] "What makes people think Huawei i"> Or their version of "gms"?
-
d3nm6ugnffwftn2j
Hi. Can anyone help me troubleshoot my Auditor app? It had suddenly stopped sending remote verification. I tried to rotate the QR code and repair it but it's still not working.
-
d3nm6ugnffwftn2j
I'm running GrapheneOS 09.11.14 on Pixel 4 XL with latest Auditor update.
-
d3nm6ugnffwftn2j
I would really appreciate it!
-
strcat[m]
d3nm6ugnffwftn2j43ni: the QR code on the account page is just for registering a device with an account, rotating it has nothing to do with verification
-
strcat[m]
has no relevance after registering a device with an account
-
strcat[m]
deleting a device and repairing it never makes sense unless you've done something like wiping it
-
d3nm6ugnffwftn2j
<strcat[m] "deleting a device and repairing "> I see... So do you happen to know why it stopped sending verification for me?
-
strcat[m]
what you should have done is a local verification to figure out why it's not passing verification
-
strcat[m]
I doubt it stopped sending verifications
-
strcat[m]
* I doubt it stopped sending attestations
-
d3nm6ugnffwftn2j
<strcat[m] "I doubt it stopped sending verif"> Got it. I'll try it right away
-
-
d3nm6ugnffwftn2j
Oh no... This showed up
-
d3nm6ugnffwftn2j
It seems like it has no problem verifying other devices but being verified...
-
telum[m]
Are there any features in Graphene that could be blocking internet access to an individual app? I can't get AntennaPod downloading over anything but mobile data.
-
nothankyou[m]
Internet permission?
-
nothankyou[m]
Network*
-
d3nm6ugnffwftn2j
<strcat[m] "I doubt it stopped sending verif"> You are right. For some reason I restarted my phone and it's working again. I have no idea what happened. Thanks anyway!!
-
signalarch[m]
So if this is somewhere I apologize as I couldn't find it. What are the default apps installed with graphene?
-
alzxjm[m]
signalarch: Not many. AOSP stock apps (clock, gallery, calendar, etc.) along with Vanadium, Auditor, and a PDF viewr.
-
signalarch[m]
<alzxjm[m] "signalarch: Not many. AOSP stock"> So if I lookup all the aosp apps it will have all of those?
-
dazinism
-
dazinism
Details of how auditor works is at
attestation.app
-
signalarch[m]
<dazinism "signalarch:
hub.libranet"> Thanks
-
alzxjm[m]
dazinism: Thanks.
-
uchihaitachi[m]
Did somebody try Cryptomator ?
-
bejVau8MYNHfnMYv
anyone knows why changes are not reflected in the rom after build?
-
bejVau8MYNHfnMYv
its like nothing was changed, same as original
-
strcat[m]
what did you change
-
strcat[m]
and are you sure you actually built the changed code and flashed it onto the device?
-
strcat[m]
sounds like you made a mistake
-
strcat[m]
your question is too vague to answer
-
renlord
like a changelog?
-
renlord
its published on the website
-
renlord
zzz
-
fomijafi[m]
My 2fa app (aegis) is failing every authentication attempt I make. I believe it may be due to my phone's time being wrong. Is anyone else experiencing this?
-
fomijafi[m]
I have it set to use network time and all the other systems on my network have the correct time