News for hackers. Stuff that matters.
Re:F-Droid: how it weakens Android's security model by guilhas on Thursday February 24, 2022 @05:48PM (#30461430)
I was already under the impression that the GrapheneOS developer(s) were overworked, but still they insist in doing everything themselves because no other project is good enough

I have been using for the past year, and the 'advanced' user experience is not great. Updates are forced to the latest version of android, does not seem safe, and definitely does not feel stable, less customization than other roms, a bit aggressive towards root

I will probably go back to lineageos microg f-droid and some hardened configurations

F-Droid is provides invaluable service for android, privacy, open-source, android developers. GrapheneOS seems like an exercise in craziness a bit to extreme for me

Re:F-Droid: how it weakens Android's security model by lberrymage on Monday February 28, 2022 @11:44PM (#30509696)
> they insist in doing everything themselves because no other project is good enough

They are making an alternative store with better security and privacy properties than both Google Play and F-Droid. Why is this problematic?

> Updates are forced to the latest version of Android

On Pixels (the only devices GrapheneOS supports at the moment), only the latest version of Android receives security updates, so GrapheneOS must stay on the latest version to meet a baseline level of security. Each Android release also comes with security and privacy improvements along with further restrictions to the app sandbox.

> does not seem safe

How is GrapheneOS not safe?

> does not feel stable?

In what way?

> less customization than other ROMs

Yes, because GrapheneOS is not focused on customizability. This will be improved in Android 12L.

> a bit aggressive towards root

Root fundamentally cripples the Android security model, so being a security-focused project, this is the proper stance to take.

Honestly I'm not sure why you're complaining about GrapheneOS in this thread. The article is written about F-Droid by someone who is not a GrapheneOS developer. They pointed out F-Droid's issues and mentioned upcoming alternatives without these issues. I don't see how one of those alternatives is an "exercise in craziness," nor how GrapheneOS itself is relevant to the article.