going to push out the beta via stable tonight

only reported issue is direct boot not working with clock app which doesn't really matter

Okay! Thanks for the update!

What kind of SOT are people getting with graphene on there 4XLs?

I'm getting around 9 hours, but if I'm lightly using the phone I get 2+ days

Sound about right ?

Just installed on Pixel 4a, seems nice!

CarpeDiem[m]: yes, this sounds about right! The more your phone can sleep the more it'll ration the battery.

ludicrous_speed[: glad to hear you're liking it!

I had calyxos on earlier

Hey right on!

Their install script was ultra smooth

TheJollyRoger: You a Monero guy?

Hey ludicrous_speed[, ah, sorry, I am not.

I'm not much of a cryptocurrency guy. I know that the developers can use and accept Bitcoin donations, but I don't know if they're set up for XMR/Monero yet.

TheJollyRoger: Reason I ask is because there is some pirate guy in the Monero community

Oh, ha ha ha!

Naw that's probably not me...? I used to hang around in the IRC Channel but then I lost the bookmarks, gotta restore that sometime.

There are about five or six people with some variant of the name "Jolly Roger" on Freenode, if I recall correctly, it's a pretty common name.

hi, hava a person?

Hi chise, what do you need help with?

Ah, crud. Just saw the clock. I gotta scoot.

@freenode_chise:matrix.org yes

You shall have 1 person

lol

help wanted with improving the Clock app including fixing Direct Boot support (might be broken by the API level increase)

possible we could switch to the one from master but it has more issues

JTL just 1

is a system Update released yesterday? My system updated one Update

cenapatop689 yes

how can i disable 90 hz refresh rate

<strcat[m] "eglssm: unless you're going to s"> Where can we check this? ("What we want") in github I have only found the "branding" repo but it pretty much empty. Once we know what it is expected, we could have a look at it and see if what we deliver matches the project expectations and standards.

cenapatop689: adb shell settings put system max_refresh_rate 60.0

Should do the trick, but I haven't tested it

* cenapatop689: adb shell settings put system max_refresh_rate 60.0

Should do the trick, but I haven't tested it yet on my Pixel 4

I have one more question. Is it possible to install microG on GrapheneOS?

> <@norbert:tretkowski.de> cenapatop689: adb shell settings put system max_refresh_rate 60.0

> Should do the trick, but I haven't tested it yet on my Pixel 4

I did that with min and max. Doesn't stop the flickering though (pixel 4 XL)

pixel24: It's in the FAQ

jpds: where?

if i search for gapps or microG in the FAQ i don't find anything. This is what I had done before I asked here

grapheneos wouldnt support it anyways because it requires compromising security by signature spoofing

ok, thanks for the info

pixel24: grapheneos.org/#never-google-services

ok, on the main page, not FAQ. Sorry, I should have searched there too

I have been looking for two days in the web how to realize an ActiveSync account under GrapheneOS. But I cannot find a solution :-(

the microsoft app wont work?

outlook does work

however Server side address books do not. contacts in your own account however are shown in outlook

* however server side address books do not. contacts in your own account arre shown in outlook.

and you cant search contacts in exchange in the systems contact app.

related matrix, whwn i access channel media it says "host not in room"

<r0tt0r[m] "related matrix, whwn i access ch"> is it something on my side wrong?

* related matrix, when i access channel media it says "host not in room"

we have no Exchange server and no Outlook. Kopano server (Linux) with Z-Push. This server is addressed by the cell phone via ActiveSync

maybe The outlook app can still connect to it?

or try the stock gmail app?

Can I install the Stock GMail app? I thought this is part of GApps

try it, it could work

pixel24 no

I would use protonmail

No

someone recommended me to try it however i was satisfied with outlook..

someone in this channel ;)

ok, I'll just test it. Protonmail is a mail provider. We have our own server in the company and I need to access it.

<dar_gomml[m] "someone recommended me to try it"> Our general recommendation is not to trust so-called secure email providers

Email is not a protocol built for security

anupritaisno1: there are good reasons other than raw security to prefer Protonmail over Gmail. Doesn't mean you have to trust PM any more than you trust Gmail

or do you mean privacy?

i guess email and/or exchange activesync discussion should be on #grapheneos-offtopic afterall

pixel24: This question is not really Graphene-specific and is probably more appropriate for the off-topic channel.

Protonmail is just secure with PGP and double authentification

cenapatop689 no it is not

offtopic

> offtopic

U

hi everybody.

I'm experiencing some issues with bluetooth when I switched from calyxos to graphene today

I'm currently on the latest grapheneos with Android 11

is that with november update? and which phone

oy yea today would be latest :p

it's on crosshatch. the 3xl

I believe it's with the update. I don't see any new updates coming in

Joeri[m]: can you make a detailed report here github.com/GrapheneOS/os_issue_tracker/issues

Pixel 3: I can't turn on WiFi or Bluetooth after a couple hours or so of use. The connections seem to hold overnight at basically idle. Streaming audio for a couple hours drops both WiFi and Bluetooth and can't enable either without shutting of the phone for a few minutes. Hardware failure? Seems to have started with Android 11.

cenapatop689: PGP email is far from qualifying as secure

it is not a secure messaging platform

it has massive attack surface, incredibly poor systems for key management and trust with glaring security holes

legacy cryptography including sha1

lacks proper security properties for secure messaging like forward secrecy

and has major usability issues where without being an expert on everything deeply wrong with it and all the common gotchas, I don't see how you could use it securely

in general, PGP is legacy and should be phased out, not adopted for any new usage

use a real secure messaging protocol

waverider[m]: I haven't observed that failure on my Pixel 3 daily driver.

TheJollyRoger: HELLO

Ahoy!

Thought you drowned or smth. I haven't seen you for a while

Yarr... real life and a whole bunch of other things got in the way, kinda. Sorry for the unexplained absence!

c:

strcat: What is your opinion on Rust, the programming language?

Or if this has been answered, anybody got a link?

it's not a strcat Q&A channel

pear[m]: It's in the scope of GrapheneOS as stated at grapheneos.org/build#programming-languages

All, I've got the latest update on Chromium and the November security patch. Already! That's amazingly quick.

Impressive work by the security team

<TheJollyRoger "waverider: I haven't observed th"> Thanks for the report

Does Aurora store/apps not play well with graphene is?

ludicrous_speed[: That's not an English sentence

ludicrous_speed[: Aurora Store works fine

The Aurora store works on Graphene and apps installed through it may or may not work

apps with a hard dependency on Play services won't work, and some apps may have features missing that depend on it

it's up to apps to implement handling of Play services not being present or functional (which can be the case on the stock OS too - Google services aren't always available)

Hrmm, when I used calyxos I didn't seem to have many problems with apps. I may have to go back to calyxos I guess.

CalyxOS includes Google services

as specially privileged code hard-wired into the base OS

we don't

OK, I understand.

they include microG - although that will only provide compatibility with apps using a tiny subset of Play services

Fuck I hate google

some apps choose to have hard dependencies on Google services

that means they don't support Android (which does not include Google services in the baseline OS), only Android with Google apps and services bundled

there's an Android Compatibility Test Suite to verification of compatibility with apps and that doesn't include anything in Play services

unfortunately a lot of developers don't care about their app working for users on devices without it, including most users in China, etc.

you should take it up with app developers and push them to do better, the only way it is going to change is if users want it

I just need a glucose/ketone app to work and Costco. Oh well.

huh, just had a hard crash using opencamera, I'll try to reproduce it

<ludicrous_speed[ "I just need a glucose/ketone app"> If you can find a cloud solution the vanadium "add to home screen" option can replace some apps very well.

waverider: that's a good idea, I'll see if that can work

for me most important and only gapp is needed is their camera and that does work :)

we need help with the Clock app, I asked for help with testing it when the release was in Beta but we didn't get adequate testing

now that it's in stable, we still need people to test the clock app including setting alarms, rebooting, and seeing if they work after a reboot without launching the clock app

this should have been handled in the beta channel but there wasn't enough interest in helping to test this

and we can't delay releases indefinitely without any clear reason

help is also needing with development work on it to resolve these issues - it really shouldn't be what we are focusing on, but unfortunately the current version in AOSP has issues

perhaps we should roll back the upstream fixes that were applied if the previous bugs were less problematic than the new issues these upstream changes introduced

needs testing with people describing what happens if they encounter problems in detail and without ambiguity

there's an issue open on the tracker

strcat: so just fiddle with the clock app and report here?

Fiddling with the clock app now, then.

ludicrous_speed: yes, mostly try setting alarms in the future (a few hours perhaps) and make sure it works, especially when the device has been idle, or after a reboot (without launching the clock app after the reboot)

I'll try writing up a report and a table with what tests I ran and what results I get. Expect something from me tonight.

set an alarm 2 hours in the future, close the clock activity, reboot

Deleting all existing alarms now...

and login to the profile again

then wait

also if it's not clear I'm asking about testing the latest release, not earlier ones

TheJollyRoger: set alarm 2 hours in the future, close clock activity, reboot, login to profile, wait and see if it goes off

Just updated today.

Okay!

TheJollyRoger: then do the same thing *without* logging into the profile after reboot

2 different tests, if you have 2 devices you can test both at once

Sure. setting for 2 hours later and rebooting my cellphone.

Crap, I don't have two different devices anymore.

TheJollyRoger: also leave the device idle while testing

Leave the device idle while testing... okay!

TheJollyRoger: yes and for one test, login after reboot

for the 2nd test, don't do that

TheJollyRoger: which device do you have

which model

It's the Pixel 3, (non-A, non-XL).

She's still in pretty good condition although I had to replace the USB slot after some water damage.

Ok, phone's set and just came back up. I'm going to put it aside and leave it sleep for the next two hours.

Battery is at 50%, should I let it charge or leave it as it is?

leave it

test without it plugged in

Okay! Leaving it on my desk.

And now, we wait.

I am testing again with more delay between the reboot and time set on the alarm

If needed I can try to get my Pixel 4 back...

we need to figure out what's wrong and why there are issues

and implement a fix or at least a workaround

it's quite important, help is needed with testing and development with this

there has been a lack of interest in fixing the Clock app issues so I applied a series of upstream changes and asked for help testing it in the beta release

wasn't much interest in testing it, and no major issues were identified

but it seems there are new issues from those upstream changes that need to be addressed promptly

Just to be clear, you are talking latest stable for testing clock? strcat

yes

K

and please keep in mind that the beta channel does no good if we don't get usable feedback for issues with releases in it

including responding to requests for additional info, etc.

The alarm only vibrated the phone (3a) once for me. It didn't repeat or make any noise.

<mrxx_0[m] "I am testing again with more del"> +10 minutes not working (first unlock made, but not opened the clock app)

mrxx_0: no need to test a longer one if it doesn't work already

mrxx_0: can you try adding a battery optimization exception and do the test again

for DeskClock

<strcat[m] "mrxx_0: can you try adding a bat"> On my way

strcat: by 'close the activity' you mean swipe it from recent apps screen?

yes

and btw Pixel 2 and 2 XL extended support releases depend on finding a maintainer to work on that

so far, no maintainer

strcat: With battery optimization exception it works after reboot, with and without first unlock and without opening the app

I'm going to be focusing on fixing problems for the officially support devices like this

mrxx_0: okay

it's probably tied to API level

I'll do an update with that ASAP

Don't hesitate to ping me

further testing appreciated to confirm this is the resolution for the issue

would help if others could replicate this problem and then verify that adding a battery optimization exception resolves it

You are supposed to be on this release : RP1A.201105.002.2020.11.03.03

should be fixed by this, I copied this from another app with an exemption

is it only me or anyone else also face with issue ??

Partyush: run `sha256sum` on the factory images file you have

what's the hash?

b94e39a9e987bf7349acdb0e3dae17382990b35c42b09f92486e9c58635ee860

<strcat[m] "would help if others could repli"> Can confirm that this fixes it

<Partyush[m] "b94e39a9e987bf7349acdb0e3dae1738"> file : sunfish-factory-2020.11.03.03.zip

<mrxx_0[m] "strcat: With battery optimizatio"> Will test this, thanks for the info

Partyush: you have the correct hash, so I'm not sure why verifying it isn't working

I just checked here and it verifies with signify

I'll check as well.

% sha256sum sunfish-factory-2020.11.03.03.zip

b94e39a9e987bf7349acdb0e3dae17382990b35c42b09f92486e9c58635ee860 sunfish-factory-2020.11.03.03.zip

any other way to get sign.zip && factory.key ?

% sha256sum sunfish-factory-2020.11.03.03.zip.sig

0ae02b361fef7511910d71aa55d4c3fd01c9faf48e87ece83338ec29e6d511f1 sunfish-factory-2020.11.03.03.zip.sig

make sure those 3 files are not corrupt?

I don't know why it'd be failing unless your signify is broken

i am on ubuntu 20.10 should is try any other os or live usb for this work ?

did you run those 3 commands?

and got matching hashes for each?

Downloading now... let's see what I get, I'll save my bash history.

<Remu[m] "Will test this, thanks for the i"> It works as stated, tested at secondary user

Will test a little later for primary user

and factory.pub matches too?

Partyush: try removing `-q` from the signify command to get the full output from it

and show that here

`sunfish-factory-2020.11.03.03.zip.sig` is a signed hash file, so it verifies the signature of the file and then uses the hash to verify the factory images zip

it looks like the signature is verifying for you but somehow it's failing to verify the file

quite strange

Partyush: they're both in the same directory, right?

it looks like they might not be

the factory images zip needs to be in the same directory as the signature to verify it

it looks like you have 2 in this Others directory but the zip in another one

need them together

<strcat[m] "quite strange"> 🤐🤐 i think it's time to burn my pc

<strcat[m] "it looks like they might not be"> zip.sig && factory.key is in same dir

yes but the zip also needs to be there

Put everything in the same directory.

Looks like one is in Compressed and the other one is in Others.

it has a signed BSD checksum file which lists out files and verifies them

and the file is listed out as being in the same directory

look at the content of it

ooops moving all file in same dir fixed the issue thank you so much

tahnks alot again .

Whew.

Cancelling the download at 82% now.

Confirm it does work... But there is quite a problem on the alarm sound

what problem?

Even on primary user, but regardless of user, the chosen alarm sound is not being played when the alarmed is triggered before first unlock.

There is like some other alarm sound being pl

* There is like some other alarm sound being used regardless of user choice on the options, not accounting yet to "Add new" option.

that's normal

before the first unlock, the profile is encrypted, data in it can't be accessed

the clock app goes out of the way to use Direct Boot support / device encrypted data to make alarms work before the first unlock

but it doesn't have user settings accessible there

it would have to move the settings to device encrypted data and so on

which it doesn't do right now

Oh that makes sense.

<TheJollyRoger "Oh that makes sense."> Same reaction here

the clock app is one of the only things using direct boot support

our Updater app is another (lets it update before unlock) and we moved the settings to device encrypted data

the downside to moving anything to device encrypted data is not having it protected by the credential-based encryption used for everything in the profile

so it needs to be done carefully

you have to explicitly ask for device encrypted storage and move stuff to it explicitly, one by one

this is how Updater stores preferences there, for example

and you can see here `android:directBootAware="true"`

I think we could remove it from the Settings activity itself

but that's not important

It is not that important, but just a curious question if the "default" direct boot alarm sound is possible to be changed?

As in, by OS configuration/building? Not really by user settings

yes we could change it

it's just whatever the default is when nothing is set

since settings aren't accessible

in general, not much will function in Direct Boot mode

only a couple things support it

and that's a good thing overall - it needs to be done quite cautiously

for example you won't receive notifications about emails from an email app and it *shouldn't* make that work because the credentials should definitely not be in device encrypted storage

it's a tradeoff for some rare cases like alarms

up to apps to decide though

<strcat "it's just whatever the default i"> About that, I found that the "default" Cesium is not the one playing... (And I can't find it in the alarm sound options).

<strcat "it's a tradeoff for some rare ca"> Yeah, it is.

Why are all the repo on GrapheneOS project "Updated x minutes ago" ?

Huh, must've been a big push.

<mrxx_0[m] "Why are all the repo on Graphene"> Saw that earlier on platform_frameworks_base few hours ago

And I can't find an update on releases, pull request, commits

<mrxx_0[m] "Why are all the repo on Graphene"> The repos are regularly rebased on newer versions

in this case it's from tagging a release

RP1A.201105.002.2020.11.05.18 tag

Makes sense.

Set alarm about 5 mins in advance. Closed clock activity and then restarted my 3XL. Only worked 2nd time I tried with battery optimization off

~Thirty minutes to go for me.

<dazinism "Set alarm about 5 mins in advanc"> What was the alarm sound like? Was it some interval of low-pitched sound?

(Asking out of curiosity)

Forgot to say I logged in both times

<dazinism "Set alarm about 5 mins in advanc"> It only works with battery optimization off right ?

mrxx_0: yeah

Ok ! dazinism

<r0tt0r[m] "is it something on my side wrong"> anyone knows what is wrong?does my acc need an idendserver?

* anyone knows what is wrong?does my acc need an identserver?

<strcat[m] "and btw Pixel 2 and 2 XL extende"> I am no coder but have a big block of time off from work coming up......what is involved?

brenneke nothing

I've already taken up pixel 2 work, just that

I'm busy with other stuff right now

<anupritaisno1[m] "brenneke nothing"> I excel at nothing.

Looks like my remark applies only on a factory reset phone where the default alarm sound is not changed...

Quite a silly experiment, but it helps in case others need that info

Anyways, just hoping to see this project flourish in the future

Nice to have a choice other than Apple phones

strcat pm

hello is camera2api has been removed from graphene os ?

google camera with gcam provider in pixel 4a don't work. do your work ?

Partyush[m]: OpenCamera can use the Camera2 API if the hardware for it (Pixel Visual Core) is present.

It's not set by default so you'll need to check to make sure it's enabled.

Ok, time for testing the second scenario.

<Partyush[m] "google camera with gcam provider"> yes theres an apk you need which provides most minimal stuff that gcam works

dunno if im allowed to post that link here or go offtopic?

<Partyush[m] "google camera with gcam provider"> Install microg in a separate profile with gcam

Has to be a separate profile

<anupritaisno1[m] "Install microg in a separate pro"> not needed

what

<r0tt0r[m] "not needed"> Needed

no its not. this is sufficient for gcam

i currently use it for.gcams on gos and it works fine

r0tt0r you are just wrong

That is a very terrible idea

what happens

<anupritaisno1[m] "r0tt0r you are just wrong "> huh?why

We do not recommend our users to install debug applications

oh lol

Moreover this app uses the name of a gms package without implementing everything expected to be there

Apps might merely check for the existence of this package and crash

Gcam at any point may start depending on more of gms

At that point it is only going to work against microg

You don't need signature spoofing for gcam, at least not yet

Which is why installing microg and gcam in a separate user profile is a better option

Also it might break at any time. You will not get any support here if it does

We don't support gcam or using microg

ok thx for clarifying on this. though to just use gcam i find microg quiet overdose

i wonder what amount of apps support there should be in grapheneos chans

should it all be in offtopic?

No

<anupritaisno1[m] "Install microg in a separate pro"> it's already in work profile

:

thread about the latest round of fraudulent / false claims from Copperhead

please spread the PDF and the twitter thread

and spread the word about Copperhead attacking the project and the developers

renlord.com/posts/2020-03-25-copperheados-legal-threat also relevant

Copperhead is a joke

Now*

also spread the word that we need donations to cover legal fees for our defense against the baseless lawsuit they filed, our counterclaims and our own lawsuit(s) against them grapheneos.org/donate

we already have a lot of solid witnesses able to counter their false claims but we need others who were around from 2014-2018 especially people who donated money to the project, etc. to contact me and I can get them in touch with my lawyer

anyone who can make statements backing up what actually happened

and countering their false claims

people who donated money to the project based on the statements that it would go to me as the developer of the open source project via the donation methods on the Copperhead site back then

most of that money was misused as company revenue by James against my wishes and then he stole all the remaining donations near the end, particularly all the Bitcoin donations worth > 100k (more now)

woa thats a big oof from here, i wish you all the best for the outcome of this.

despite the company not claiming those as revenue or anything, he just stole them all when he pushed me out, I really shouldn't have trusted him to handle it and should have gotten him to regularly transfer it to me but it is what it is now and we have to deal with the theft

and again money thevroot of all evil

* and again money the root of all evil

in a sense it's the people who donated that had their money stolen by him so it would be very helpful for anyone who sent Bitcoin donations in particular and who has a record of it to contact me and get in touch with my lawyer

he misused these donations as company revenue and personal income to him despite him never being involved as a developer or working on the open source project in any way

and despite it being said that it would 100% go to the open source project

strcat please send me the link to your claim

I saw your commit on github

I'll send it to glassrom groups

There might be ex-copperhead peeps there

I need you to send it again

I linked the PDF and thread on Twitter acove

Element is buggy and isn't letting me scroll up

* twitter.com/DanielMicay/status/1324434634864795650

we need help spreading the word about these things

read through the Twitter thread and the legal document and help spread the word

also grapheneos.org/#history

and past stuff I've written about this

Copperhead is escalating their attacks on the project

What is their endgame anyway? I thought that copperhead was using code from grapheneos to keep going, so getting this project to shipwreck sounds counterintuitive to me

but I may be wrong so I’m asking

crush the competition, eliminate detractors, maximize profit, etc

Kurai: yes, they just rip off our code, including code from after the split

and fraudulently claim that they authored it and/or own it

they don't even understand the basics of what it does, or AOSP security

they don't have privacy or security experts working for them, that's not what they do

Kurai: they are more about marketing than code though

so I imagine it won't make a difference really

what they do is release an incredibly expensive branded build of AOSP with dubious 'hardening' and tracking in the Updater app for enforcing their expensive licensing scheme

strcat pm

they primarily intend to sell devices through third party resellers, and they've worked with at least 2 resellers later arrested for involvement in organized crime

including MPC

this is a major part of why the split happened with the open source project

what they are trying to do is steal the reputation built by the open source project

with their closed source fork of it

and take credit for what it did, and what other projects including AOSP itself have done

they stripped my name off my blog posts and documentation, etc.

they fraudulently claim ownership over our work, and not even just the code

including more recent work we've done

read through my twitter thread

which is based on their latest round of false claims and marketing nonsense

<strcat[m] "twitter.com/DanielMicay"> Looks like itneas deleted?

Remu: it's not deleted, it's right there

a portion of the tweets were removed and redone to correct a typo (I accidentally wrote Android 10 instead of Android 9)

not sure what you're seeing that's deleted

Hello GrapheneOS Folks!

INFO: A very nice Google Maps replacement is Magic Earth!

Magic Earth Navigation & Maps - Apps on Google Play

Magic Earth even has audio directions!

😁

And does NOT collect your info.

does it use GCM ?

<num8[m] "does it use GCM ?"> GCM?

google services

<num8[m] "google services"> No

I don't log into anything... simply use it

=)

Works beautifully too!

dunno how many ppl with an android without google would consider the amazon app store...

but ok, thanks for the info :)

> <@num8:matrix.org> dunno how many ppl with an android without google would consider the amazon app store...

> but ok, thanks for the info :)

My pleasure.

here's a new thread via the GrapheneOS account:

please spread this

this is a better thing to spread than the other Twitter thread, it's a lot more concise and focused

my other thread started as subtweeting some of their recent false claims / misrepresentations

so the other thread is a mess of different topics, etc.

How much money does copperhead have anyways? I doubt there making much money now adays

timeistruevalue: they're making enough money to keep up appearances for people who don't know better while funding escalating attacks against us

including a misinformation campaign involving reaching out to people in the media with press releases, this lawsuit, etc.

strcat: just wanted to let you know I don't think my alarms are going off >2 hours out.

the CEO has time to personally coordinate editing Wikipedia content about CopperheadOS and GrapheneOS etc

ludicrous_speed: we have a fix pending, you should set a battery optimization exception for the Clock app in the meantime

K

<timeistruevalue[ "How much money does copperhead h"> Buying a Copperhead subscription for a mere 3 months costs $300+. And that's just for getting the OS alone. They also make tons of money from selling the hardware with the OSes preinstalled. They don't even need that many users to gather enough funds to launch more attacks.