2 ms·
>Unless you're running Graphene or a similar security minded distro the sandboxing isn't very good Grapheneos doesn't prevent the installed apps fingerprinting
by gruez 10mo ago
>Unless you're running Graphene or a similar security minded distro the sandboxing isn't very good
Grapheneos doesn't prevent the installed apps fingerprinting you linked either.
- fc417fc802 10mo agoColor me surprised. But if you run the app using the sandboxing feature that it provides surely it will only be able to see other apps installed within that same sandbox?
- gruez 10mo agoWhat is "the sandboxing feature" you're talking about? The standard app sandbox built into android allows apps to discover each other for various purposes, and grapheneos doesn't do anything to attempt to plug this.
- fc417fc802 10mo agoApologies. I was thinking of Android user profiles which are available from mainline and (AFAIK) prevent the linked workaround from revealing any apps not installed in the same profile. So it's an example of an unfixed leak in Android but not (as I had previously implied) something that Graphene corrects. Honestly the state of anti-fingerprinting (app, browser, and otherwise) is fairly abysmal but that's hardly limited to android or even mobile as a whole.
- gruez 10mo ago>Apologies. I was thinking of Android user profiles which are available from mainline and (AFAIK) prevent the linked workaround from revealing any apps not installed in the same profile. But there's no evidence that stock android leaks apps installed across profiles? The link you provided doesn't discuss profiles at all, and stock android also has private space and work profile just like grapheneos.
- fc417fc802 10mo ago... yes? That's what I said? Feature available in mainline, motivating leak unfixed, graphene doesn't correct.