4 ms·

They removed pattern lock, which makes me uncomfortable. I don't care for touch/fingerprint (or face) because biometrics aren't protected in the fifth amendmen

by chasil 1y ago

They removed pattern lock, which makes me uncomfortable. I don't care for touch/fingerprint (or face) because biometrics aren't protected in the fifth amendment right to be free from self-incrimination. The only screen lock is PIN.

subscribed 1y ago
Straight from the horse's mouth: https://discuss.grapheneos.org/d/16393-maybe-re-instate-pattern-unlock/14 https://discuss.grapheneos.org/d/16393-maybe-re-instate-patt... > Pattern unlock is a badly designed lock method that's a major downgrade from the security of a PIN for multiple reasons. > Pattern lock is even more dangerous to people who are as you say more casual users. It is a badly designed and dangerous feature. iPhones not having this is very good for users. We will not add back a major flaw in the OS security design. If this makes you uncomfortable somehow? OK? Maybe it's not an OS for you :)
- chasil 1y ago
  That is hardly the only problem. The browser is astonishingly bad at dark mode. The launcher forces almost all icons to greyscale black and white and does not accept icon packs. I feel like I'm downgrading by my compulsion for Brave and Lawnchair, but some attention is lacking in aesthetics. (e/os has this problem to a lesser degree with the Bliss launcher.) There is no rooted ADB. Even if a giant OS TAINTED notification appears every five minutes if I ever turn it on, I want it. There are a few other annoyances that regulate Graphene to one of my experimental spares.
  - subscribed 1y ago
    Vanadium is pretty good but I agree there are problems I can circumvent only by using another one (Brave); I presume it's the strict tracking protection that breaks some sites. Not sure about your launcher problem, but you had to turn it on yourself? I don't experience anything like this on my phones. I miss Nova though; none of the other launchers I tried came near (last tried: uLauncher, Kvaesito, Olauncher, Lawnchar, Niagara. Need to try Square home perhaps). Lack of rooted adb is a good, conscious choice for the security focused OS. It's not about _you_, it's about the integrity of the OS. You demand access to adb root. Today Cellebrite cannot extract entire phone with one profile unlocked. I bet they'd be thrilled to hear about the new, beautiful target. If you really need that, you can build yourself debug image and have access to it. You want it, but that's incompatible with the security model. They give you ways to get it, of course, but without their stamp of OS integrity. To me safe defaults are a good choice.
    - chasil 1y ago
      I understand that Magisk can be applied to Graphene if the final device lock step is not applied. I might try that if I elevate it to my daily driver. I'm not comfortable without root. I have the absolute right to have root on my device. I don't know why Graphene didn't just take Trebuchet.
      - subscribed 1y ago
        > I understand that Magisk can be applied to Graphene if the final device lock step is not applied Unless you relock the bootloader you are forfeiting major avenue into your phone (and it's not really, fully GOS - because you keep most important protections off). But it's your choice of course. You'd be probably better off just creating your own OS image with preinstalled root libraries, etc. > I'm not comfortable without root. I have the absolute right to have root on my device. I agree with you fully. This is your phone.
        chasil 1y ago
        I have been running Lineage since my first Cyanogen install on my HTC Incredible. An unlocked bootloader is standard operating procedure for me by force of habit.
raw_anon_1111 1y ago
You give way too much credit that law enforcement cares about the law and won’t just use rubber hose decryption.

by chasil 1y ago

subscribed 1y ago

Straight from the horse's mouth: https://discuss.grapheneos.org/d/16393-maybe-re-instate-pattern-unlock/14 https://discuss.grapheneos.org/d/16393-maybe-re-instate-patt... > Pattern unlock is a badly designed lock method that's a major downgrade from the security of a PIN for multiple reasons. > Pattern lock is even more dangerous to people who are as you say more casual users. It is a badly designed and dangerous feature. iPhones not having this is very good for users. We will not add back a major flaw in the OS security design. If this makes you uncomfortable somehow? OK? Maybe it's not an OS for you :)

chasil 1y ago
That is hardly the only problem. The browser is astonishingly bad at dark mode. The launcher forces almost all icons to greyscale black and white and does not accept icon packs. I feel like I'm downgrading by my compulsion for Brave and Lawnchair, but some attention is lacking in aesthetics. (e/os has this problem to a lesser degree with the Bliss launcher.) There is no rooted ADB. Even if a giant OS TAINTED notification appears every five minutes if I ever turn it on, I want it. There are a few other annoyances that regulate Graphene to one of my experimental spares.
- subscribed 1y ago
  Vanadium is pretty good but I agree there are problems I can circumvent only by using another one (Brave); I presume it's the strict tracking protection that breaks some sites. Not sure about your launcher problem, but you had to turn it on yourself? I don't experience anything like this on my phones. I miss Nova though; none of the other launchers I tried came near (last tried: uLauncher, Kvaesito, Olauncher, Lawnchar, Niagara. Need to try Square home perhaps). Lack of rooted adb is a good, conscious choice for the security focused OS. It's not about _you_, it's about the integrity of the OS. You demand access to adb root. Today Cellebrite cannot extract entire phone with one profile unlocked. I bet they'd be thrilled to hear about the new, beautiful target. If you really need that, you can build yourself debug image and have access to it. You want it, but that's incompatible with the security model. They give you ways to get it, of course, but without their stamp of OS integrity. To me safe defaults are a good choice.
  - chasil 1y ago
    I understand that Magisk can be applied to Graphene if the final device lock step is not applied. I might try that if I elevate it to my daily driver. I'm not comfortable without root. I have the absolute right to have root on my device. I don't know why Graphene didn't just take Trebuchet.
    - subscribed 1y ago
      > I understand that Magisk can be applied to Graphene if the final device lock step is not applied Unless you relock the bootloader you are forfeiting major avenue into your phone (and it's not really, fully GOS - because you keep most important protections off). But it's your choice of course. You'd be probably better off just creating your own OS image with preinstalled root libraries, etc. > I'm not comfortable without root. I have the absolute right to have root on my device. I agree with you fully. This is your phone.
      - chasil 1y ago
        I have been running Lineage since my first Cyanogen install on my HTC Incredible. An unlocked bootloader is standard operating procedure for me by force of habit.

raw_anon_1111 1y ago

You give way too much credit that law enforcement cares about the law and won’t just use rubber hose decryption.