• 0 Posts
  • 5 Comments
Joined 2 years ago
cake
Cake day: July 10th, 2023

help-circle
  • That is pretty common when you hear conservatives talk. You often agree about the issues, but then you suddenly hear crazy conspiracy theories about why everything is the fault of immigrants, jews, trans people or whatever.

    When conservatives talk about the rich and powerful being bad, its often about some “globalists”, “George Soros”, “World Economic Forum”, “Liberals”, … than just the system being bad.

    That is the reason why the leftist critique should always focus on the system, not specific people or groups.




  • I am currently using a rooted LOS with MicroG. It certainly is not as secure as GrapheneOS in terms of app sandboxing, encryption, regular security updates, etc., but I have control of the system, in case I need it, for instance ACC, F-droid privilege extension (F-Droid auto updates), ReVanced Manager (not using it currently) etc.

    I trust GrapheneOS much more than Apple, but both go into a similar direction with their understanding of security. IMO taking control away from the user might be a good option, if you are dealing with just regular consumers, but I don’t really like the “one-size-fits-all” approach of it. And it is my device, I should be allowed to decide what I want to do with it.

    BTW, this is just a personal annoyance of mine. The GrapheneOS devs do a very good job.


  • I would like to switch, but there are a couple of points that are still holding me back right now:

    • Charge limits, on LOS I can root the phone, install ACC and still use the OTA updates, if I apply the patch afterwards. (Will be resolved in A15)

    • Option for sandboxed MicroG, IMO privacy is also very important for security, and people should be able to decide if they like more privacy or more security.

    • Option for rooting sandboxed apps from outside. IMO I, and a person, like to have full control over my phone. Trust often comes with control. If I choose to trust one app to have root access to another app in order to inspect it, then this should be possible. Sandboxing could allow one app to have root access to individually chosen other apps, thus limiting the impact compared to system-wide root access. Maybe offer rooting gated behind a separate hardware token authentication. (sudo like) A lot there can be improved IMO, while still providing it and making it more secure in general.

    I know that my understanding of security and privacy might be different from what GrapheneOS understands, but as a long time Linux Admin, I don’t like black boxes, I like to peek into them, modify or patch them, when they do something I don’t want them to do, etc. So that when I enter personal information into them, I am still in control what happens to them, at least that is my desire.

    Taking control away from the user in order to “improve security” might be a valid approach to some, but it is not something I have much trust in.