Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)FU
Posts
9
Comments
400
Joined
2 yr. ago

  • What do you mean, go and find them? You get notified with a badge in the settings icon. Click it, and it takes you to there is an update. That page tells your current version and immediately below that is the release notes button. You're acting like it's buried or you have to Google it. It's literally in the same menu as the install update menu.

  • As an aside...I just tried to post there, and that Community has disabled new posts. It's one person posting stuff with no comments, so it's closer to a delayed RSS feed than a community for discussion and interaction.

    Also, as you mentioned, that's on lemmy.ml and not lemdro.id where this post was asking about Communities here.

  • I said "average PC," and you throw out Linux with a hardened browser. That's not average. But how many people have Linux with a hardened browser? More importantly, how easy is that to set up compared to setting up GOS (I promise GOS is much, much easier to set up and use)?

    But if we're going with extremes like this: no one should use banks on Linux with hardened browsers. Just go in person.

  • Not sure what you mean by "jailbreak" as that's rarely a term applied to Androids. On the phone side, you have to have a Pixel (6 and up are recommended due to increase security and longer support) and enable OEM unlocking, which requires no hacking/jailbreaking/rooting. It's super easy to install.

    https://grapheneos.org/install/web

  • I did acknowledge what you said by saying Google doesn't want Graphene not including GMS stuff and won't whitelist GrapheneOS, despite Graphene's extra security measures. But this doesn't change the fact that Google could...but won't.

  • "Android Runtime Just-In-Time (JIT) compilation/profiling is fully disabled and replaced with full ahead-of-time (AOT) compilation. The only JIT compilation in the base OS is the v8 JavaScript JIT which is disabled by default for the Vanadium browser with per-site exception support."

    https://grapheneos.org/features#exploit-mitigations

  • I'm not being deliberately deceptive. Google absolutely could whitelist GrapheneOS if Google chose to, just like any app developer can as well by checking for the verifiedBootState with proper verifiedBootKey (GrapheneOS attestation link below).

    Now, I don't see Google doing that as GrapheneOS doesn't and won't ship with Play Store, Play services, or Service Framework. GrapehenOS actually has a compatibility layer so those don't get special and device wide privileges like they do on devices that ship with them (sandboxed link below)...which Google probably requires. And I don't see GrapheneOS budging on this as that's one of their main selling points for security and privacy.

    But I'm always down to learn and I'm not a developer. I don't suppose you have a link that says the main thing that Graphene is missing is handing over money to Google to get certified, and ideally how much? If that was it, I'd be willing to bet money Graphene would've forked over the cash by now.

    https://grapheneos.org/articles/attestation-compatibility-guide

    https://grapheneos.org/usage#sandboxed-google-play

  • Depends on how you use your phone. Main thing I miss is Google Pay's tap to pay (disabled by Google unless you run a Google certified OS...which Google could easily certify Graphene but won't), but most banking apps NFC tap to pay work.

    Android Auto also doesn't work, but I never used it. Some people might, though.

    https://grapheneos.org/features#sandboxed-google-play