7 ms·
This is rubbish. I'm running GrapheneOS and have left my bootloader unlocked, and there's no app that has refused to work. The only caveat is some of them need
by ravenstine 3y ago
This is rubbish. I'm running GrapheneOS and have left my bootloader unlocked, and there's no app that has refused to work. The only caveat is some of them need Google Play services. No, I am not rooted, but my last phone was rooted and there might have been one or two apps out of dozens that wouldn't work with root even with Magisk trying to hide the root status. Using a custom ROM is easily one of the beat choices I have made.
- Fire-Dragon-DoL 3y agoWhat are the downsides with GrapheneOS? I had a few problems with root (Netflix and banking apps) but would love my privacy. My main reason for root is the firewall to block outgoing connections from apps that are not supposed to do it
- 0xcde4c3db 3y agoIt's really a downside of the Google app ecosystem and not GrapheneOS per se, but apps requiring higher levels of integrity per Google attestation (Play Integrity/SafetyNet) generally won't work. Intentionally breaking apps on "untrusted" configurations is basically the point of that feature, and GrapheneOS does provide the relevant services, but would need to be specifically enabled by the app developer.
- Fire-Dragon-DoL 3y agoSo Netflix and such DO NOT work on phone? That's really frustrating
- udev4096 3y agoFirewall wouldn't be necessary with GrapheneOS. There's a network toggle which you can use to completely cut off internet access for an app. As for the downsides, I would say close to zero. It feels just like a stock OS, without any kind of bloatware and a lot more secure
- ThePowerOfFuet 3y agoGrapheneOS is not rooted, so you won't have those issues. GrapheneOS also gives you a Network permission per-app; if you uncheck it, the app has no connectivity, period. Highly recommended.
- Fire-Dragon-DoL 3y agoBased on the other comment thread, it seems like Play Integrity and SafetyNet do not succeed and as such, can't really use Netflix, is that correct?
- ThePowerOfFuet 3y agoApparently Google is playing games in the Play Store, but if you can get it installed then it runs fine: https://discuss.grapheneos.org/d/696-issues-with-netflix-app https://discuss.grapheneos.org/d/696-issues-with-netflix-app I just verified that I could download it just fine using Aurora Store, and I don't have Google anything installed.
- switch007 3y agoNo NFC payments with Google wallet. You can get unlucky with your bank app but someone maintains a wiki of compatible banking apps Android auto works OK.
- DEADMINCE 3y agoOne big downside is being limited to Pixel phones, without good reason.
- nebulous1 3y agoDo you use a banking app? Last I read depending on the type of check used some apps can still be problematic.
- ravenstine 3y agoYes. Wells Fargo, Discover, Alliant CU, Venmo, Paypal, and M1 Finance all work.
- zerreh50 3y agoSame with McDonald's, interestingly enough
- iforgotpassword 3y agoSo I guess next thing we need is someone sueing the fucking banks that do that. Mine luckily doesn't because I explicitly use an old phone with LineageOS, the banking app, and nothing else on it for online banking. It's arguably way more secure than using your main phone with a bazillion other Apps installed and online at all times.
- eganist 3y agoHow would that stick? You can just sign into the bank via your web browser in the case of a nonfunctional app. The apps just give you added security assurances beyond using the web. "The app can't function in a low security environment, but complainant is free to use the web client in such event." case dismissed (obviously an oversimplification, but the point stands)
- erinnh 3y agoThis is definitely not the case everywhere. Where I live the app is 100% needed because it’s the „second factor“ in the login process.
- The_Colonel 3y agoThere has to be a fallback like SMS and/or automated call.
- collegeburner 3y agowhat? safetynet is absolutely a pain in the ass. i think there are some xposed and magisk modules or whatever that can work around it but that's a cat-and-mouse thing and can break. lot of bank and financial apps, lot of stuff with DRM will break.
- udev4096 3y agoGrapheneOS is not a ROM. It's an OS.
- jstanley 3y agoWhat's the difference?
- ThePowerOfFuet 3y agoYou should not leave your bootloader unlocked if you care about the security of your device and data. Unfortunately, locking (and unlocking) it wipes user data, so it should be relocked right after installation of GrapheneOS.
- didntcheck 3y agoDon't most phones only wipe on unlock? Also can Graphene still update if the bootloader is locked?
- ThePowerOfFuet 3y agoThe Pixels wipe on both lock and unlock. Yes, it can still update just fine. It installs its own certificate at install time and all updates are signed with it.
- ravenstine 3y agoI acknowledge that.
- 63stack 3y agoNo, parent is 100% correct. Unlocking your bootloader trips SafetyNet.