News for hackers. Stuff that matters.
Re:Leaving Gmail for Mailbox.org by palata on Friday August 22, 2025 @06:01PM (#44990388)
> supports Graphene but there are too many trade-offs there

What are the tradeoffs? I have been following GrapheneOS for a while, and it doesn't seem like there are many tradeoffs.

> OpenStreetMap is still really hard to use and gives bad directions.

OpenStreetMap is a database, and most commercial services that are not Google use it. E.g. Uber or Lyft.

You just need to find an app that you like. CoMaps is nice, OSMAnd has a lot of feature but the UX is harder. And of course you can contribute to OSM and make it even better than it is! You'll see it's a great community!

Re:Leaving Gmail for Mailbox.org by nine_k on Friday August 22, 2025 @06:22PM (#44990590)
Can you use GrapheneOS with your bank app? With a digital wallet for NFC cards? With Uber or Lyft? (Asking seriously, not rhetorically.)
Re:Leaving Gmail for Mailbox.org by callahad on Friday August 22, 2025 @06:51PM (#44990889)
My understanding from looking into this two years ago is that it's hit or miss for banks (depending on if they opt into device attestation stuff), no for NFC / Google Wallet, and yes for Uber / Lyft.

Apparently the common workaround for the Google Wallet stuff is to pair a GrapheneOS phone with a stock Android smartwatch.

Edit: Here's some additional information on banking apps: https://privsec.dev/posts/android/banking-applications-compa...

Apparently the common recommendation these days is to use Curve Pay as a virtual card provider on GrapheneOS, which can then route to arbitrary underlying cards. And evidently Google Wallet does work for things that aren't payment cards (airline tickets, transit passes, etc.) on GrapheneOS.

Re:Leaving Gmail for Mailbox.org by BeetleB on Friday August 22, 2025 @06:55PM (#44990926)
Yes, these would be my concerns as well. In the past, I would install custom ROMs. Then I stopped doing that and would only root my device. But of late, way, way too many apps refuse to work if rooted (apps that used to be fine with it before).

Now I just accept life as it is.

Re:Leaving Gmail for Mailbox.org by palata on Saturday August 23, 2025 @04:31PM (#44998898)
Using GrapheneOS is not the same thing as rooting, though.
Re:Leaving Gmail for Mailbox.org by octo888 on Friday August 22, 2025 @06:51PM (#44990884)
Contactless payments is the the big one that doesn't work and probably won't. You can do in app payments via Google pay though

Many banking apps work fine though not all.

Re:Leaving Gmail for Mailbox.org by amaccuish on Saturday August 23, 2025 @06:01AM (#44994774)
Luckily my German bank (Volksbank) has its own NFC app on Android. Much maligned years ago when it was announced (why can't they just let me use Google Pay??), I at least have come to the conclusion that it has granted me a freedom that Google does not.
Re:Leaving Gmail for Mailbox.org by wkat4242 on Tuesday August 26, 2025 @01:13AM (#45022501)
And it doesn't let Google snoop on your every transaction. I don't understand how so many people are ok with this.

Unfortunately every EU bank card uses Mastercard or visa so the Americans still get to snoop. Time for that to be changed too.

Re:Leaving Gmail for Mailbox.org by codethief on Monday September 08, 2025 @08:42AM (#45167571)
Agreed. Fingers crossed that Wero will change that.
Re:Leaving Gmail for Mailbox.org by jackthetab on Friday August 22, 2025 @06:56PM (#44990938)
This is a question that I rarely see answered but would love to know as well.
Re:Leaving Gmail for Mailbox.org by palata on Saturday August 23, 2025 @04:33PM (#44998910)
Nice answer (not by me) here: https://news.ycombinator.com/item?id=44990889
Re:Leaving Gmail for Mailbox.org by litmus-pit-git on Friday August 22, 2025 @11:26PM (#44992858)
My friend uses a pretty hardened (as per him; I didn't indulge him when he wanted to give me the gory details) Graphene setup on his few years old Pixel.

Bank apps - as per him none work. Uber (no Lyft here; other taxi apps) work flawless. Payment apps, he said is a coin toss. On his phone even WhatsApp doesn't work. He anyway prefers Signal (which prob. nobody else uses in his circle except maybe me who has it installed on a secondary phone) or plain SMS. Basically most of the "normal" apps that add integrity checks don't work but he is fine with that.

Re:Leaving Gmail for Mailbox.org by hexfish on Saturday August 23, 2025 @05:44AM (#44994688)
Re: the bank apps: that really depends on the bank and the country. I live in a eu-west country and there are afaik no apps that do not run on Graphene (which did suprise me I must admit).

Whatsapp can work if you use sandboxed Google Play (I still use a Google account, I just don't want gplay to have effectively root on my device).

Depending on the level of integrity check your app might just work. Gory details: https://grapheneos.org/articles/attestation-compatibility-gu...

And like others said: no contactless payment, but I dont use that personally anyway.

Re:Leaving Gmail for Mailbox.org by mlry on Saturday August 23, 2025 @06:34AM (#44994924)
I use Graphene but with Google play store app. Here in Europe my banking apps and 2fa apps (SecureGo) work flawlessly. NFC cards work with PassAndroid and FOSSwallet, both from Fdroid. I've had issues installing rather new games via the play store, but most often it takes a couple of tries or a waiting period to work in the end.
Re:Leaving Gmail for Mailbox.org by snapplebobapple on Saturday August 23, 2025 @08:11AM (#44995398)
I use it with my bank app ymmv
Re:Leaving Gmail for Mailbox.org by fak3r on Saturday August 23, 2025 @11:09AM (#44996543)
I've been running GrapheneOS for over a year and have had zero issues with 3 different banks, and all credit cards. I'm sure there are issues with some banks, but I've never seen them. I don't use Google Wallet, and never wanted to so if that's a consideration...
Re:Leaving Gmail for Mailbox.org by BeetleB on Friday August 22, 2025 @06:54PM (#44990913)
Someone showed me OSMAnd recently while we were hiking. I installed it as soon as I got home. Great for hiking.

Then last week I used it for navigation (on a phone with no SIM card).

Absolutely. Terrible.

Worst navigation app I've seen. Told me to make a turn at an intersection that did not allow turns. Then at another intersection, it told me to "Turn left", but the display clearly showed it going straight. I'm guessing that the straight road probably is angled 1 degree or something at the intersection and the app was viewing that as a turn.

Re:Leaving Gmail for Mailbox.org by neilv on Friday August 22, 2025 @09:47PM (#44992229)
For an open source Android app for OpenStreetMap data, I like Organic Maps, and it normally works great with locally-cached maps. I've had better luck with it than with Google Maps or Apple Maps on phones.

(Though, I should mention that twice in the last year I've had Organic Maps become hopelessly confused about where I was, and where I should go. Both times, it had gotten a good GPS location, but then got confused while being out for an extended period of time, like maybe it was dead-reckoning only after that initial lock.)

Re:Leaving Gmail for Mailbox.org by crinkly on Saturday August 23, 2025 @02:29AM (#44993752)
+1 for organic maps. Have used it hiking and travelling all over the world. Never had any issues with it.

Not had any GPS problems other than that time I was in an area where it was being jammed. Bloody Russians.

Re:Leaving Gmail for Mailbox.org by Freak_NL on Saturday August 23, 2025 @06:34AM (#44994927)
Regarding Organic Maps: I would recommend keeping tabs on what is happening there since this year. They seem to be having significant governance issues.

https://community.openstreetmap.org/t/organic-maps-open-lett...

Short story: forget Organic Maps, use successor CoMaps or competitor OsmAnd.

https://www.comaps.app/about-us/

Re:Leaving Gmail for Mailbox.org by rpdillon on Saturday August 23, 2025 @08:20AM (#44995454)
I was vaguely aware of this drama but hadn't looked into it. After reading through your link, I've switched over to Comaps. I don't like lack of transparency in community driven projects. Appreciate the flag!
Re:Leaving Gmail for Mailbox.org by neilv on Saturday August 23, 2025 @12:38PM (#44997114)
Thank you, that's interesting and a concern.

Do you have pointers to information about the governance and legitimacy of CoMaps?

(I see a mention that it's non-profit, but no statement about what kind of non-profit, not even on the donate page where that info is customary and relevant for US tax reasons. Also, I see no mention of who's who, nor how they operate.)

The closest I find is this:

https://www.comaps.app/support/what-is-the-comaps-history/

> As a result of the issues not being resolved, in April 2025, the community of former Organic Maps contributors created the CoMaps project, based on the Organic Maps open-source code.

If what that sounds like is true (that it does represent the community of contributors), it still will be important to have safeguards against someone taking over the project.

Or, if what that sounds like isn't true, that could be bad.

One matter that will have to be resolved with governance (if it hasn't already), is that there's what looks like an allegation that the CoMaps project is already tainted with code to which is expressly doesn't have license:

https://codeberg.org/comaps/comaps/pulls/1039#issuecomment-6...

A concern is that a funded commercial competitor could bankrupt a less-funded volunteer project with lawyer fees just arguing the merits of that.

Re:Leaving Gmail for Mailbox.org by Freak_NL on Saturday August 23, 2025 @12:47PM (#44997182)
Nope, all I know is what I picked up in the OpenStreetMap community, like that thread on the forums, and this open letter:

https://www.comaps.app/news/2025-04-16/1/

Re:Leaving Gmail for Mailbox.org by opensourebuild on Monday August 25, 2025 @04:12AM (#45011491)
The claim about open-source is coming from the shareholder of Organic Maps, Alex, but there is no basis to it, as the code for that repository is licensed under the Apache 2.0 license.

It appears Alex is angry about the fork and doing anything possible to spread negativity.

Re:Leaving Gmail for Mailbox.org by biodranik on Tuesday August 26, 2025 @12:26PM (#45028757)
The code used by the fork was never published. It was stolen from a private repository and a private server, and then published/used in the fork without the authors' approval. That's a serious legal issue.

The fork also took the new website design that was developed for Organic Maps even before the Organic Maps website was updated.

Don't believe everything on the internet; there are many lies spread around.

Re:Leaving Gmail for Mailbox.org by palata on Wednesday August 27, 2025 @04:54AM (#45037034)
Hmm... This says otherwise, with detailed explanations and screenshots: [1][2]

It shows that you, biodranik, removed the MIT licence from the repo with a commit saying "No MIT yet, sorry". It says that the code had been licenced as MIT since 2021. It is not clear if you own the copyright to all the contributions since 2021, and therefore it is not clear if you are legally allowed to remove the MIT licence.

It also says that the fork was made from the repo in the state it was when you removed the MIT licence. Therefore it is a fork of an MIT project by someone who had legal access to the MIT-licenced code: it's legal.

> Don't believe everything on the internet; there are many lies spread around.

You don't say :-).

I was not entirely sure about the CoMaps vs Organic Maps situation, but this very comment of yours clearly favours CoMaps IMO. Or did I misunderstand something?

[1]: https://github.com/orgs/organicmaps/discussions/9837

[2]: https://web.archive.org/web/20250815050441/https://github.co...

Re:Leaving Gmail for Mailbox.org by ihatehn on Monday August 25, 2025 @05:15AM (#45011866)
Very astute! Legally the code is owned by each contributor and licensed via the DCO. Financially the project is underneath the umbrella of the Platform 6 co-op (see OpenCollective)

This is temporary though and a permanent nonprofit home is a top priority.

Re:Leaving Gmail for Mailbox.org by palata on Wednesday August 27, 2025 @04:56AM (#45037047)
I think this is relevant:

https://github.com/orgs/organicmaps/discussions/9837

https://web.archive.org/web/20250815050441/https://github.co...

In the discussion you link, biodranik tries to say that it was illegal for those with access to the repo to dispose of the open-source code because that open-source code had not be published. I don't think this is right:

Open-source does not mean at all that the code has to be public. It can be private to a community. But whoever has access to that code is allowed, under the open-source licence, to dispose of it under the terms of the licence. My understanding is that this is what happened with the fork of Organic Maps. And it is pretty clearly explained in the codeberg discussion you linked.

> an allegation that the CoMaps project is already tainted with code to which is expressly doesn't have license

I don't think it says that CoMaps doesn't have the licence. It says that whoever forked the codebase did not have permission by some of the founders of Organic Maps. That's very different: the licence doesn't say that you must ask permission to the founders; it says that the code can be used under the terms of the licence. A fork part of those terms.

Re:Leaving Gmail for Mailbox.org by incone123 on Saturday August 23, 2025 @03:23AM (#44994026)
I get similar navigation issues with Google maps. I still use Google maps for driving because the live traffic is important to me, but other posts on here mention other apps with live traffic so I'll give them a try.
Re:Leaving Gmail for Mailbox.org by BeetleB on Saturday August 23, 2025 @02:13PM (#44997924)
This happened close to my home on a road I've gone on almost every day. Waze never did that to me. I don't use Google Maps so I can't speak to that.
Re:Leaving Gmail for Mailbox.org by rpdillon on Saturday August 23, 2025 @08:02AM (#44995340)
This is a really interesting feedback. I've used OSMand for maybe five years, and never had issues like you're describing. I've always felt that the search was absolutely awful, so I used Google Maps for that and then put the points of interest into my map. Nevertheless, I find the display particularly dense and confusing to configure, and so I also have been using Organic Maps lately, which may provide a simplified experience that's a bit more polished.

I wonder if there was some issue with the map data in the area you were driving in that led to the issues you experienced. I've used OSMand in Belize, Mexico, California, Connecticut, New York, New Hampshire, Vermont, and Maine and had a good experience, especially with the offline maps.

Re:Leaving Gmail for Mailbox.org by RunningDroid on Sunday August 24, 2025 @10:15AM (#45004411)
> Told me to make a turn at an intersection that did not allow turns.

That's an OpenStreetMap bug, the intersection likely isn't marked as not allowing turns. If you put a note (OSMAnd calls them OSM Notes) on the map someone will fix it when they can.

Re:Leaving Gmail for Mailbox.org by ihatehn on Monday August 25, 2025 @01:03PM (#45016049)
On top of the OsmAnd user experience being a little rough (it can do a lot, but not gracefully) it relies on accurate OSM data underneath. So the best thing to do is at least make a Note on OSM, or edit it yourself, and mark that intersection as having a no-turns-allowed restriction.

Even Google is relying on user submissions to keep its stuff accurate these days, they just have money to pay editors and reviewers.

Re:Leaving Gmail for Mailbox.org by mlry on Saturday August 23, 2025 @06:43AM (#44994958)
I use https://brouter.de/brouter-web on my laptop. Someone told me that you can use brouter as the nav engine for Osmand and thus greatly improve speed and accuracy for navigation, but I have not yet tried this.

And I recently installed GMaps WV from Fdroid as a wrapper for Google Maps. It gives current traffic information but I don't really know if it is even close to gmaps.

Re:Leaving Gmail for Mailbox.org by TranquilMarmot on Saturday August 23, 2025 @01:08PM (#44997375)
> What are the tradeoffs?

As others point out, my main worry is about banking and NFC. I use NFC payments on my phone a lot, especially for the bus. Getting an Android Smartwatch just for that kind of defeats de-Googling haha.

I will probably try out Graphene at some point but that seems like a multi-day project to get it set up, find the tradeoffs, determine if they're worth it, and then potentially switch back to Android.

I also worry about the future of Graphene with AOSP going more closed/private: https://www.androidauthority.com/google-android-development-...

> OSMAnd has a lot of feature but the UX is harder

OSMAnd was the one I tried and it bordered on unusable. I'll try out CoMaps, somebody else suggested Mapy.

Re:Leaving Gmail for Mailbox.org by nabakolu on Saturday August 23, 2025 @03:08PM (#44998300)
There is also Calyx, which is also a privacy friendly Android distribution. It uses open source versions of Google Services. With my Pixel 8a on Calyx I can use NFC to pay with my Credit Card.
Re:Leaving Gmail for Mailbox.org by palata on Saturday August 23, 2025 @04:27PM (#44998882)
> It uses open source versions of Google Services.

Microg, right? I don't think this is more private than the Google Services, is it? It's just open source, but it can phone home just the same?

> With my Pixel 8a on Calyx

Any reason you haven't tried GrapheneOS, given that you already have a Pixel? I have /e/OS because it's the only alternative Android that runs on my FairPhone 3, but I've come to realise that it's actually worse than the Stock Android in terms of security. I really would like to go with GrapheneOS, and I wish more manufacturers made this possible.

Re:Leaving Gmail for Mailbox.org by palata on Saturday August 23, 2025 @04:26PM (#44998864)
> my main worry is about banking and NFC

This may be useful: https://privsec.dev/posts/android/banking-applications-compa...

> I also worry about the future of Graphene with AOSP going more closed/private

I don't think it's AOSP going more closed, but rather the evolution of the Pixels line. GrapheneOS wants the ability to unlock the bootloader, install their own key and relock the bootloader. Google could technically stop supporting that for the Pixels (just like many (most?) manufacturers do), but they haven't said anything about it.

GrapheneOS has mentioned talks with a major manufacturer. I wonder if it will be a Graphene phone (which sounds very tricky) or if it could be something like Huawei or Samsung offering to unlock/relock the bootloader and committing to providing the features necessary for GrapheneOS. The latter would be amazing.

> OSMAnd was the one I tried and it bordered on unusable.

I love it. But if that's your feeling, definitely try CoMaps: in terms of UX it's on the other end of the spectrum :-).

Re:Leaving Gmail for Mailbox.org by wkat4242 on Tuesday August 26, 2025 @01:17AM (#45022527)
Osmand is great but it has a bit of a learning curve. It's much more powerful than Google maps though so all these features need a bit of navigating. It probably should have a simple mode for most users.
Re:Leaving Gmail for Mailbox.org by jacooper on Sunday August 24, 2025 @12:14PM (#45005398)
All navigation apps that are built on osm have awful routing, particularly with public transport, they are almost useless. That's without taking the missing data into account (shops, opening times, basically zero reviews, etc..)
Re:Leaving Gmail for Mailbox.org by palata on Sunday August 24, 2025 @03:53PM (#45007184)
Uber and Lyft are built on OSM.
Re:Leaving Gmail for Mailbox.org by ihatehn on Monday August 25, 2025 @01:09PM (#45016125)
It's all user submitted. It takes someone caring enough to fix it, to make it work. Check out StreetComplete, Every Door, Vespucci, and/or CoMaps to help add/fix data