Pro/Con of DeGoogled Phone operating systems
Graphene
Pro: Good optional sandbox for Google push. And advanced security features such as:
1) Hardened to resist memory attacks
2) Better sandboxing (access policies)
3) Enhanced verified boot
4) Attestation tool to diagnose Pegasus malware
5) Browser reducing “just in time” JavaScript
/
Con: Only Google manufactured hardware, which is the most likely to have hardware backdoors. Titan-M security chip is closed source and therefore untrusted to protect me from Google/Government
Calyx
Pro: Similar DeGoogled experience to Graphene, but supports a wide group of phone manufacturers outside the 5 eyes including Fairphone, OnePlus, Vivo, Xiaomi, ZTE, and Huawei. LOL, Do you trust Google or the Chinese? Calyx also has a great built in Firewall app to cut off apps from the internet
/
Con: While Calyx is better for avoiding Google’s unknown hardware backdoors, it doesn't have Graphene's advanced security against known targeted attacks. Additionally, if you need Google push notifications, then it uses MicroG instead of Graphene's sandbox, which isn't as good at isolating Google from the core system data.
Lineage
Pro: Works on an even larger variety of hardware, so you got a lot of choice. Lineage is also great for fake android virtual machines on your desktop PC. You can easily spin up a VM with this and use spyware apps. While as Graphene won't allow this under current builds, and Calyx requires "annoying to use" Android developer kits to do it.
/
Con: Can't lock the bootloader. Controversial security issues.
Pinephone (Linux phone)
Pro: It's good to see alternatives to Android. Hardware "brains" are open source.
/
Con: Low amount of apps because it's not using Android's ecosystem. Not as good performance as Android. Lacks Android's good security model, and it still uses closed source hardware to communicate: WiFi and LTE modem (they had to)
Purism's Librem 5
Scam. They won't ship it, don't buy it.
Summary,
Graphene - Extra Security, IF you trust Google's hardware
Calyx - Good for non-Google hardware & app firewall
Lineage - Great for VMs
Pinephone - Boycott Google
</end>
SimplifiedPrivacy has lowered custom consultations to $30/hour. Reach out and we'll help you with flashing phones, routers, Linux, any tech support.
SimplifiedPrivacy.com
npub14s…jt5d6
2023-12-20 01:27:25
Author Public Key
npub14slk4lshtylkrqg9z0dvng09gn58h88frvnax7uga3v0h25szj4qzjt5d6Published at
2023-12-20 01:27:25Event JSON
{
"id": "0000039b2964a736337f09e34ef4aa78c09897f7f5f269958ab5f56de0bc70f7",
"pubkey": "ac3f6afe17593f61810513dac9a1e544e87b9ce91b27d37b88ec58fbaa9014aa",
"created_at": 1703035645,
"kind": 1,
"tags": [
[
"nonce",
"13835058055282552590",
"22"
]
],
"content": "Pro/Con of DeGoogled Phone operating systems\n\nGraphene\nPro: Good optional sandbox for Google push. And advanced security features such as:\n1) Hardened to resist memory attacks\n2) Better sandboxing (access policies)\n3) Enhanced verified boot\n4) Attestation tool to diagnose Pegasus malware\n5) Browser reducing “just in time” JavaScript\n/\nCon: Only Google manufactured hardware, which is the most likely to have hardware backdoors. Titan-M security chip is closed source and therefore untrusted to protect me from Google/Government\n\nCalyx\nPro: Similar DeGoogled experience to Graphene, but supports a wide group of phone manufacturers outside the 5 eyes including Fairphone, OnePlus, Vivo, Xiaomi, ZTE, and Huawei. LOL, Do you trust Google or the Chinese? Calyx also has a great built in Firewall app to cut off apps from the internet\n/\nCon: While Calyx is better for avoiding Google’s unknown hardware backdoors, it doesn't have Graphene's advanced security against known targeted attacks. Additionally, if you need Google push notifications, then it uses MicroG instead of Graphene's sandbox, which isn't as good at isolating Google from the core system data.\n\nLineage\nPro: Works on an even larger variety of hardware, so you got a lot of choice. Lineage is also great for fake android virtual machines on your desktop PC. You can easily spin up a VM with this and use spyware apps. While as Graphene won't allow this under current builds, and Calyx requires \"annoying to use\" Android developer kits to do it.\n/\nCon: Can't lock the bootloader. Controversial security issues.\n\nPinephone (Linux phone)\nPro: It's good to see alternatives to Android. Hardware \"brains\" are open source.\n/\nCon: Low amount of apps because it's not using Android's ecosystem. Not as good performance as Android. Lacks Android's good security model, and it still uses closed source hardware to communicate: WiFi and LTE modem (they had to)\n\nPurism's Librem 5\nScam. They won't ship it, don't buy it.\n\nSummary,\nGraphene - Extra Security, IF you trust Google's hardware\nCalyx - Good for non-Google hardware \u0026 app firewall\nLineage - Great for VMs\nPinephone - Boycott Google\n\n\u003c/end\u003e\nSimplifiedPrivacy has lowered custom consultations to $30/hour. Reach out and we'll help you with flashing phones, routers, Linux, any tech support.",
"sig": "c301f40ba26b12b9bf5d0d5e80eb402673fac5e9942361ffa0c8d37727aa6ef16af3021cc68351969af7df77dd6cedf18fd0100853ea286e01ae390702d87649"
}