Damus

Recent Notes

GrapheneOS profile picture
We have a partial port of GrapheneOS to the Pixel 11 series after a week of work on it. We're unable to complete the port due to lack of support for ARM hardware memory tagging in software, firmware and near certainly hardware. It appears Google cut an important security feature to save money.
3โค๏ธ9๐Ÿ‘€3โค๏ธ2โ˜ ๏ธ1๐Ÿ‘1๐Ÿ’ฉ1
staringatclouds · 2d
No Google cut an important security feature to stop you porting GrapheneOS to a new device
_v_n_t_r_b_l_k_ · 2d
im sure it was cost cutting yes
LiveFree · 1d
Thank you for telling me before I bought it
note1978fd...
GrapheneOS profile picture
90% of banking apps work on GrapheneOS. Curve Pay and PayPal provide tap-to-pay in Europe with a bunch of European banking apps also providing it.

Lack of tap-to-pay is currently a problem outside of Europe due to the Apple Pay / Google Pay duopoly for smartphones though. You can use a Garmin watch for tap-to-pay in the US instead if you don't want to use cards for it. Android Wear including a Pixel Watch or Galaxy Watch will also work and can optionally be paired with GrapheneOS.
note1ltn3f...
GrapheneOS profile picture
They never used GitHub but rather their own Git and Gerrit hosting:

https://android.googlesource.com/

https://android-review.googlesource.com/q/status:open+-is:wip

They chose to stop pushing tags to their own Git repositories for the Android Open Source Project for Pixels as a whole including kernel drivers, userspace driver/HAL code, SELinux policies and the Android releases for Pixels. They now only push the Android yearly and QPR2 releases along with security backports. They also stopped pushing mainline APEX module tags too.
note1lax56...
GrapheneOS profile picture
We aren't going to add another chat platform in the near future. It would take ages to get people to migrate off Discord and Matrix. The new platform would need to be drastically better to convince people to move. We wouldn't be able to remove those for many years. We haven't had much success getting people to move from Telegram to Matrix or Discord. It would end up being yet another platform we need to moderate and we wouldn't be confident enough in it staying around to migrate to it.
note1fjgv0...
GrapheneOS profile picture
Extensions often require very invasive access across the browser and sites. If you only need it for specific purposes then it's best to keep it in a dedicated browser. If we did decide add our own support for extensions, we wouldn't necessarily simply permit every extension. The way extensions currently work is counter to our goals for Vanadium privacy and security. It's theoretically possible to make the extension model far more private and secure but it would be a huge project.
note1vu8pa...
GrapheneOS profile picture
Chromium extensions are similar to Android accessibility services in terms of the access they have available within the browser. Extensions can access nearly all user data and make changes to content. It's highly problematic especially since it lacks a decent permission system. For the most part, extensions have to be granted all the permissions they require at install time. The permission system also isn't well designed from a privacy perspective. Extensions also lack site isolation.
note1pde23...
GrapheneOS profile picture
Accounts with devices sending valid attestations never expire.

Paired devices are deleted after 90 days of not sending valid attestations.

Accounts without any paired devices remaining are deleted once they haven't had a successful login for 365 days.

If your devices were successfully sending valid attestations for pairings on an account then there's no reason it should have expired. Haven't had any reports of issues with this before. Were the devices turned off for over 3 months?
GrapheneOS · 5d
You should try using GrapheneOS again with sandboxed Google Play in your main user and all of the same apps you're currently using. You'll still get massive privacy and security benefits. In fact, you...
GrapheneOS profile picture
If you have a bank banning using their app on it then you can use their app on an old secondary phone and stick to web banking on GrapheneOS. 90% of banking apps do work on it though.

Tap-to-pay on GrapheneOS is available in Italy and the rest of the EEA via Curve Pay and various banks providing alternatives to Google Pay. People need to use an alternative to it in Canada, the US and a lot of the world but it's a non-issue in the EEA and UK due to Google Pay alternatives.
GrapheneOS · 5d
GrapheneOS isn't an extreme choice. It was your choice to use it without mainstream apps and services. The vast majority of Android apps can be used on GrapheneOS including Google apps and apps depend...
GrapheneOS profile picture
You should try using GrapheneOS again with sandboxed Google Play in your main user and all of the same apps you're currently using. You'll still get massive privacy and security benefits. In fact, you'll benefit a lot more from features including Contact Scopes, Storage Scopes, Sensors toggle and many other privacy improvements if you're running more privacy invasive apps.

Around 10% of banking/government apps ban using GrapheneOS but nearly all other apps can be used on it.
1
GrapheneOS · 5d
If you have a bank banning using their app on it then you can use their app on an old secondary phone and stick to web banking on GrapheneOS. 90% of banking apps do work on it though. Tap-to-pay on GrapheneOS is available in Italy and the rest of the EEA via Curve Pay and various banks providing al...
note1w6gjk...
GrapheneOS profile picture
GrapheneOS isn't an extreme choice. It was your choice to use it without mainstream apps and services. The vast majority of Android apps can be used on GrapheneOS including Google apps and apps depending on those.

Our sandboxed Google Play feature enables the option to install and run Google Play as regular sandboxed apps. Apps depending on those works fine when using this. It provides near perfect app compatibility with the exception of rare apps banning using another OS.
1
GrapheneOS · 5d
You should try using GrapheneOS again with sandboxed Google Play in your main user and all of the same apps you're currently using. You'll still get massive privacy and security benefits. In fact, you'll benefit a lot more from features including Contact Scopes, Storage Scopes, Sensors toggle and ma...