GrapheneOS

GrapheneOS is an open source privacy and security focused mobile OS with Android app compatibility.

https://grapheneos.org

Installation instructions
https://grapheneos.org/install

Official Downloads
https://grapheneos.org/releases

https://github.com/GrapheneOS

https://github.com/AndroidHardeningArchive

https://attestation.app

IRC: #grapheneos on Freenode (irc.freenode.net)
Matrix: #grapheneos:matrix.org
https://reddit.com/r/GrapheneOS

FAQs
https://github.com/Peter-Easton/GrapheneOS-Knowledge/blob/master/GrapheneOS-Security-Q%26A.md

Info on Titan M
https://opensource.googleblog.com/2019/11/opentitan-open-sourcing-transparent.html
https://opentitan.org/

#graphene #grapheneos #rom #android #hardening

Click on the hashtags. If the note doesn't show up, just type the hashtag in the chat. Else, the note got vanished

#afwall
#alternatives
#altfrontends
#amp
#apk
#aurora
#backup
#blockadstrackers
#bounty
#classroom
#cleaningcrap
#cloud
#cloudflare
#datacollection
#debloat
#deezer
#delete
#deodex
#disablecaptiveportal
#disablecomponents
#disablegoogle
#discord
#dns
#dnscrypt
#dontask
#e
#exodus
#facebook
#fakegapps
#faq
#fdroid
#fennec
#findyourphone
#gcam
#gmail_signin_error
#googlefi
#googletakeout
#gpslock
#graphene
#grapheneos
#gratisapps
#guide
#ipsum
#librechair
#lineagemicrog
#location
#logs
#madaidan
#magicgapps
#magisk
#mailalias
#manjaro
#microg
#mixplorer
#netoff
#news
#nitrokey
#notes
#nothingtohide
#osm
#ot
#playgames
#playpaid
#problems
#pushnotifications
#qpatch
#rh01
#riot
#safetynet
#satstat
#searchengines
#shelter
#signal
#signaturespoofing
#sigspoof
#smalipatcher
#spite
#sync
#tgclients
#todolists
#tor
#torfud
#uber
#uncensorISP
#unlppatch
#untracklinks
#vanced
#vpn
#wear
#wiki
#windows
#wireguard
#withoutgoogle
#xiaomi

CEO of Twitter loves GrapheneOS

https://nitter.net/jack/status/1355295732836626432

But everyone should boycott Twitter

#graphene #grapheneos #android #hardening #twitter

The GrapheneOS channel is being raided at this very moment by @jaynus and his trolls

https://mobile.twitter.com/DKnol71/status/1364007514254286848

#GrapheneOS teased to be officially supported on other hardware besides Pixels

We're going to be collaborating with a hardware vendor to get a device produced with comparable security and support for alternative operating systems as Pixels.

We can't publish details right now but we're optimistic about it and hope to have real news about it in a few months.

One of our goals for a long time has been working with a hardware vendor to produce a phone meeting our requirements and designed to run GrapheneOS as a stock OS. We don't have details on who we're working with or anything else about it but we're optimistic about it working out.

https://nitter.net/GrapheneOS/status/1490518600339308544

https://twitter.com/GrapheneOS/status/1490518600339308544

Port the #GrapheneOS #NETWORK #permission to 17.1 and 18.1

https://github.com/Divested-Mobile/DivestOS-Build/commit/5e1521700f42a78e10192ece32a5cfc21e8bf58c#diff-c7280c13af85d4a24615f89735de2a7addce2b8e97d5aee15df9de7c3e6272ed

https://madaidans-insecurities.github.io/android.html#firewalls

Should You Use #GrapheneOS or #CalyxOS?

GrapheneOS and CalyxOS are often compared as similar options for people looking for an alternative Android OS for their Pixel devices. Below are some of the reasons why we recommend GrapheneOS over CalyxOS.

https://blog.privacyguides.org/2022/04/21/grapheneos-or-calyxos/

How to #Degoogle your Pixel 3 xl with #GrapheneOS

https://rumble.com/v179s8e-how-to-degoogle-your-pixel-3-xl-with-grapheneos.html

Another guide
https://m.youtube.com/watch?v=4Ki8xQT6Das

Daniel Micay:

I've stepped down as lead developer of #GrapheneOS and will be replaced as a GrapheneOS Foundation director. I'll be ending my use of public social media. I'm unable to handle the escalating level of harassment including recent swatting attacks. There will be a smooth migration.

https://twitter.com/DanielMicay/status/1662212227561308160

Louis Rossman details his interactions with the (former) lead dev of #GrapheneOS in a video entitled "Why I deleted GrapheneOS"

Daniel Micay resigned 12h later

https://odysee.com/@rossmanngroup:a/why-i-deleted-grapheneos:8

https://www.youtube.com/watch?v=4To-F6W1NT0

Sandboxed Google Play #gapps

#GrapheneOS has a compatibility layer providing the option to install and use the official releases of #Google #Playstore in the standard app #sandbox. Google Play receives absolutely no special access or privileges on GrapheneOS as opposed to bypassing the app sandbox and receiving a massive amount of highly privileged access. Instead, the compatibility layer teaches it how to work within the full app sandbox. It also isn't used as a backend for the OS services as it would be elsewhere since GrapheneOS doesn't use Google Play even when it's installed.
Since the Google Play apps are simply regular apps on GrapheneOS, you install them within a specific user or work profile and they're only available within that profile. Only apps within the same profile can use it and they need to explicitly choose to use it. It works the same way as any other app and has no special capabilities. As with any other app, it can't access data of other apps and requires explicit user consent to gain access to profile data or the standard permissions. Apps within the same profile can communicate with mutual consent and it's no different for sandboxed Google Play.
Sandboxed Google Play is close to being fully functional and provides near complete compatibility with the app ecosystem depending on Google Play. Only a small subset of privileged functionality which we haven't yet ported to different approaches with our compatibility layer is unavailable. Some functionality is inherently privileged and can't be provided as part of the compatibility layer.
The vast majority of Play services functionality works perfectly including dynamically downloaded / updated modules (dynamite modules) and functionality provided by modular app components such as Google Play Games. By default, location requests are rerouted to a reimplementation of the Play geolocation service provided by GrapheneOS. You can disable rerouting and use the standard Play services geolocation service instead if you want the Google network location service and related features.
Our compatibility layer includes full support for the Play Store. Play Store services are fully available including in-app purchases, Play Asset Delivery, Play Feature Delivery and app / content license checks. It can install, update and uninstall apps with the standard approach requiring that the user authorizes it as an app source and consents to each action. It will use the standard Android 12+ unattended update feature to do automatic updates for apps where it was the last installer.

https://grapheneos.org/usage#sandboxed-google-play

https://youtu.be/SZ0PKtiXTSs