3 ms·

LineageOS tends to disable a lot of security baked into android, so itmight not be a good recommendation. According to Daniel Micay: "It significantly weakens t

LineageOS tends to disable a lot of security baked into android, so itmight not be a good recommendation. According to Daniel Micay: "It significantly weakens the SELinux policies, rolls back mitigations for device porting / compatibility, disables verified boot, lacks proper update security including rollback protection, adds substantial attack surface like FFmpeg alongside libstagefright, etc. They merge in huge amounts of questionable, alpha quality code from the Code Aurora Forum repositories too. Many devices (including Nexus and Pixel phones) also don't get their full firmware updates shipped by LineageOS. It's unrealistically expected that users will flash the firmware and vendor partitions on their own each month and of course that's another incompatibility with verified boot and a locked bootloader." [0] [0]: https://www.reddit.com/r/CopperheadOS/comments/917yab/can_anyone_technically_explain_why_lineageos_as/e2xiot5/ https://www.reddit.com/r/CopperheadOS/comments/917yab/can_an...

stiray 6y ago
Security is always weighting between danger and benefits. It means something different for everyone of us, i consider my phone with microg, netguard and xprivacylua and without google or any 3d party application beeing able to connect to the internet unless faking the data as secure (or, if you want - private), while I am not only flashing but also building my roms until I get full linux support for my second phone when I will depart from android world. For now, lineage is as good as it gets, sure, I would love to have patched OS, withoug google etc., but for now there is really not much of alternatives available for various models of phones, and quite frankly - probably more than half of android phones are vulnerable, unpatched etc. let me just mention latest DSP vulnerabilities. At least attack surface isnt that big :D Its on the eyes of beholder. --- update --- Looks like I am moving away from android today. https://support.planetcom.co.uk/index.php/Cosmo_Linux_Mobile_Data https://support.planetcom.co.uk/index.php/Cosmo_Linux_Mobile...
corty 6y ago
Half of those "security" features are at best useless and at worst more DRM features anyways. And yes, the firmware update mechanisms in android are abysmal in general, but that this is slightly better in google phones doesn't mean that it is good anywhere. For the most part, lineageOS is on par with any random android vendor there. No better and no worse. For software updates, it is generally far better.

stiray 6y ago

Security is always weighting between danger and benefits. It means something different for everyone of us, i consider my phone with microg, netguard and xprivacylua and without google or any 3d party application beeing able to connect to the internet unless faking the data as secure (or, if you want - private), while I am not only flashing but also building my roms until I get full linux support for my second phone when I will depart from android world. For now, lineage is as good as it gets, sure, I would love to have patched OS, withoug google etc., but for now there is really not much of alternatives available for various models of phones, and quite frankly - probably more than half of android phones are vulnerable, unpatched etc. let me just mention latest DSP vulnerabilities. At least attack surface isnt that big :D Its on the eyes of beholder. --- update --- Looks like I am moving away from android today. https://support.planetcom.co.uk/index.php/Cosmo_Linux_Mobile_Data https://support.planetcom.co.uk/index.php/Cosmo_Linux_Mobile...

corty 6y ago

Half of those "security" features are at best useless and at worst more DRM features anyways. And yes, the firmware update mechanisms in android are abysmal in general, but that this is slightly better in google phones doesn't mean that it is good anywhere. For the most part, lineageOS is on par with any random android vendor there. No better and no worse. For software updates, it is generally far better.