3 ms·

> So if it happened, who replaced them? Are they trustworthy? At least in my cursory searching, I didn't figure out an answer to that. https://github.com/thest

> So if it happened, who replaced them? Are they trustworthy? At least in my cursory searching, I didn't figure out an answer to that. https://github.com/thestinger/daniel.micay.dev/commit/79e44b41190cd5c64c4ccd9fec4301ee6008da53 https://github.com/thestinger/daniel.micay.dev/commit/79e44b... They just stepped down as the official head and stopped making public comments. They still are a major developer for the project and still seem to own/run parts of the project.

jchw 3y ago
That's an orphaned commit on their personal website (and that text doesn't appear anywhere on it), and still nobody seems to have any idea who has taken their place. I don't believe that someone should be eternally punished because of making poor decisions, and with time even a pattern of poor decisions can be forgiven, but as it stands from the outside there's zero clarity on what, if anything, actually happened, no apologies, and ultimately no way to know who you're trusting when you install GrapheneOS. On one hand, the track record for the actual OS is still completely fine as far as anyone knows. On the other hand, the stuff said and done on record is pretty tough to swallow for someone you are investing a lot of trust into, for an OS that is meant to be privacy and security focused. Like. It's one thing if you are a casual user running random ROMs off XDA, the risk is high and the only real assurance you get is online reputation and the normal assurances of social pressure. But this is software endorsed by Edward Snowden and many others whose opinions regarding security and privacy are well-regarded. The stakes could be quite high for some users. In the light of that, I really don't like the situation here at all. Dismiss it if you want to, but there's really absolutely no good reason for this to simply remain effectively unaddressed indefinitely.

jchw 3y ago

That's an orphaned commit on their personal website (and that text doesn't appear anywhere on it), and still nobody seems to have any idea who has taken their place. I don't believe that someone should be eternally punished because of making poor decisions, and with time even a pattern of poor decisions can be forgiven, but as it stands from the outside there's zero clarity on what, if anything, actually happened, no apologies, and ultimately no way to know who you're trusting when you install GrapheneOS. On one hand, the track record for the actual OS is still completely fine as far as anyone knows. On the other hand, the stuff said and done on record is pretty tough to swallow for someone you are investing a lot of trust into, for an OS that is meant to be privacy and security focused. Like. It's one thing if you are a casual user running random ROMs off XDA, the risk is high and the only real assurance you get is online reputation and the normal assurances of social pressure. But this is software endorsed by Edward Snowden and many others whose opinions regarding security and privacy are well-regarded. The stakes could be quite high for some users. In the light of that, I really don't like the situation here at all. Dismiss it if you want to, but there's really absolutely no good reason for this to simply remain effectively unaddressed indefinitely.