[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology


Thread archived.
You cannot reply anymore.


[Advertise on 4chan]


File: images (1).jpg (32 KB, 415x739)
32 KB JPG
Okay, so I’ve got this right:

Graphene OS phones are objectively the most private and secure phones out there.

According to the Graphene OS developers, iPhones using an Apple ID are an excellent second choice.

According to the Graphene OS developers, all other custom ROMs are total junk and Linux is garbage. A stock Android phone without a Google account is a disaster.

Only Graphene OS and iOS are truly good according to graphene devs, the masters of privacy and security.

What kind of world do we live in?
>>
>>109047547
Why are we getting GOS counter signalling threads every 4 hours now?
>>
>>109047547
One where Google fell hard in 2015.
>>
>>109047563
how is this a counter signalling thread? Micay would agree with OP 100%.
>>
>>109047594
Are you oblivious to OP's sarcasm?
>>
>>109047547
> Graphene OS
It's a honeypot. You can only use it on Google Phones that oc have backdoors.
They don't want you to use a Huawei/Xiaomi without Google account which is more than enough to do all essential stuff online.
>>
>>109047547
No. They say that GrapheneOS is better than other AOSP-based distributions (correct). They also say that if you need a "just werks, your bank and government and normie friends also approve" OS - i.e. only Apple iOS or Google Android™ - then iOS is the more private and secure choice (arguable). GNU/Linux on phones neither has apps nor is it particularly secure (correct).
>>
>>109047821
Didn't Grsecurity just sell patches? GPL-2 doesn't require patches to also be a compatible licence.
>>
>iPhones using an Apple ID are an excellent second choice.
Said nobody who knows anything about privacy and security.
>all other custom ROMs are total junk and Linux is garbage. A stock Android phone without a Google account is a disaster.
Absolutely correct
>Only Graphene OS and iOS are truly good
Only GrapheneOS....is truly good. FTFY
>>
>>109047821
Instead of the Linux kernel developers suing Grsecurity, Grsecurity sued Bruce Perens for defamation and business interference, claiming his interpretation of their license was false and damaging. Pussies and faggots everywhere in tech
>>
>>109048229
Huawei officially shut down its bootloader unlock service in 2018, though and you're still subject to statewide spying, snooping and telemetry by Huawei
>>
>>109047547
From a security (anti-exploitation) standpoint, iOS is formidable. Just not as formidable as a Pixel running GrapheneOS. Yeah, sure, Apple’s hardware security enclaves, secure boot chains, and pointer authentication are industry-leading. But, it isn't GrapheneOS with 0 (count it) telemetry. Apple's Lockdown Mode feature completely neutralizes complex, multi-million dollar zero-click Pegasus/Mercenary spyware vectors by stripping out dangerous web code execution and message attachments. But, last time I checked, the FBI was able to crack that shit (don't quote me on this). Because of this aggressive hardware-level patching, an iPhone is vastly more secure against hackers than a generic stock Android phone, even if it fails to protect from Apple's corporate surveillance. Still, GrapheneOS BFU and reboot every 2 hours features mog Apple.

Most alternative custom ROMs (like LineageOS) require you to unlock your device's bootloader permanently. Unlocking the bootloader completely disables Android's Verified Boot. If a malicious actor physically grabs an unlocked device, they can sideload a rootkit directly into the OS partition. GrapheneOS is one of the only custom ROMs that allows for safely relocking the bootloader with custom signing keys. Not even desktop Linux PCs are this secure. Mobile and desktop Linux operating systems (like Arch, PostmarketOS or Ubuntu Touch) lack modern application sandboxing. If an app is compromised on a standard mobile or desktop Linux distribution, it can often read data across the entire system. GrapheneOS' user isolation model is infinitely more secure.
>>
>>109047547
De-Googling a stock Android phone simply by logging out of your Google account provides a false sense of security that normies rely on, naturally. There's still constant Telemetry likeGoogle Play Services that's are baked into the root system partition of stock Android. Even without an account, the phone continually pings Google servers with your precise hardware IDs, Wi-Fi MAC addresses, and cellular tower connections. And, without a Google account, push notifications break for 90% of mainstream apps because the underlying system relies on Google Cloud Messaging (GCM). You get the downside of data tracking without any of the functional benefits. It's literally just broken infrastructure.
>>
>>109047547
GrapheneOS stands alone because it solves the ultimate paradox, it delivers maximum privacy and maximum security simultaneously. iOS gives you maximum security, but forces you to trust Apple with your data and privacy. Standard Custom ROMs give you privacy from Google, but destroy your physical device security. GrapheneOS hardens the Android kernel (security) while generating zero corporate telemetry data (privacy). And no niggah, you cannot use an iPhone without giving data to Apple. Even if you never create an Apple ID, skip the iCloud setup entirely, and use a completely anonymous SIM card, iOS is hardcoded to continually ping Apple servers just like AOSP devices. It's been confirmed that an idle, out-of-the-box iPhone transmits tracking telemetry back to Apple roughly every 4.5 minutes and the tracking cannot be turned off due to specific hardware and software constraints. Even on a completely "anonymous" iPhone, Apple's servers automatically harvest Hardware Serial Numbers where your phone transmits your Unique Device Identifier (UDID) and IMEI. They harvest the physical hardware addresses of your Wi-Fi card and Bluetooth chip and your local network data aka addresses of nearby Wi-Fi routers, mapping your exact physical location. If that's not enough, Apple also tracks your cellular infrastructure; the ID numbers of nearby cell towers and your current SIM card's serial number (ICCID). And on top of that it tracks and harvests your app usage metadata. Like, every time you open a native app (like Settings, Maps, or the Phone dialer), a log is sent detailing the exact timestamp with tracing Al and keylog info. So, no. Get your facts straight
>>
>>109047547
No computer hardware can ever be trusted, but I still use Linux and GrapheneOS to avoid the anti-user features of proprietary software and boycott large companies.
>>
>>109051183
>reboot every 2 hours
Is even that sufficient? I suppose if its not a targeted arrest with prearranged warrants 2h or even a day is plenty of time before they target your phone.
>>
>>109047563
glowniggers are terrified that the goyim are fighting back
>>
>>109047547
So when is GrapheneOS replacing Linux?
>>
File: a.png (474 KB, 1073x924)
474 KB PNG
Graphene niggers criticism of openbsd was so far besides the point it's in the oort cloud so I doubt very much he has anything salient to say about linux.
>>
>>109051246
strictly from a privacy, anti-tracking, and anti-telemetry standpoint, custom firmware like LineageOS is generally considered the second-best option after GrapheneOS. if your only goal is to stop corporate data harvesting from Google, Apple, or phone manufacturers, a clean installation of LineageOS (without installing any Google Apps or "GApps") completely cuts off the telemetry pipeline. however, it sits firmly in second place because it lacks the advanced, built-in network privacy features that make GrapheneOS the gold standard.
>>109052271
It already has. It's the most secure OS, besides a microkernel
>>
>>109052297
but they are correct tho
>>
>>109050849
Yes GPLv2 bans "patch subscriptions" explicity: since "patch subscription services" have a "you cannot redistribute this patch" clause in all of them.

Grsecurity is not the original copyright holder of the linux kernel. It does not have a right to make derivative works at all of the linux kernel nor of GCC.

This is something YOU reject; you think they have a right to make derivatives and thus have a right to distribute them under the terms they want to. They do not.

Here we will NEVER agree.
You will NEVER agree that Grsecurity doesn't have the freedom and right to make whatever patches it wants and distribute them however it wants.

However under US Copyright law it does NOT have those rights.

The Copyright holder (Linus and 10000 others) have put out a bare license (no it is NOT a contract when you have no exchange of anything) that proports to allow derivative works only if others are allowed to make derivative works without stipulation on and on.

It fails in this because there's no relationship. Linus can cancel any free-gratis license he has "given" at any time. Just as if a license holder that's actually paying you can be yanked when he threatens you or shows a breakdown in the actual contractual relationship (NYC copyright cases 1990s). There is no relationship between Linus and Grsecurity other than Grsecurity dissing Linus.

Now: The GPL stipulates that you may not add additional terms to its terms between you and people you distribute your derivative to.
This is so you can't "get around" the GPL's open redistribution terms.

An original copyright holder can ignore this and license however he pleases. A derivative work creator, cannot. You disagree with this ofcourse. US copyright law gives the copyright holder the right to control derivatives. Which Grsecurity is (of Linux and of GCC).

Grsecurity adds additional terms between it and the customer:
1) Customer can't redistribute Grsecurity or else.
2) Venue for suits is Pennsylvania
>>
>>109052945
Linus in the 1990s said "we" would sue anyone who violated the GPL on linux.

He lied. He said that to rope everyone in. He had an opportunity to fulfill that promise to the people that coded for him and sue grsecurity and has not.
Linus said only the code mattered not anything else, pro-freedom of speech.
Now he adds a Code of Conduct and says mysoginist faschist white mamaallleesss are not wanted and hackers are not wanted.
And NO RUSSIAN.

He also trannified his son.
And feminist-ized his daughters.

He should be executed.
He is a liar and a cheat.

He also spit on his previous contributors such as Reiser the Lion.
Honour can only be restored through blood.

Why the Russians haven't killed him I do not know. He only exists because his parents met in moscow.
The hackers who he has turned his back on after decades of them coding for him: should torture and then brutally kill him: and every pro-Code of Conduct entryist that has taken over and seeks to control their speech and ideas.
Russia should do this.

"The community" is being used as leverage against the hackers. There is only one solution to this disrespect.
>>
>>109053453
>And NO RUSSIAN.
Based, total zigger death
>>
>>109053416
Since when was offering patches for the customer to apply and compile the same as distributing a derivative work? GPLv3 wouldn't have allowed Grsecurity btw but Linus doesn't want it
>>
>>109047547
They aren't wrong. Google makes it's money from selling telemetry and user profiles built from spying on you
Apple makes it's money buy primarily selling hardware and subscriptions.
While Apple does it's share of spying, its no where nearly as bad as google.
So Graphene -> Apple -> Google (Android) isn't wrong.
>>
>>109051183
>Unlocking the bootloader completely disables Android's Verified Boot
Not a single fuck is given.
>>
File: images(126).jpg (32 KB, 400x500)
32 KB JPG
>>109052297
>OpenBSD
not usable on laptops and smartphones
no 802.11ax
everything is mobile now. an OS without Wi-Fi 6 will die. servers will largely stay Linux-based since that's what devs grow up on. i will not learn an OS for the first time by installing it on s production server at work. and if i can't learn it by using it on my devices at home...
>GrapheneOS
only runs on Google phones
Google is on the "boycott Israel" list
put two and two together
plus, Google always has primarily been an advertising company. they sell your data. that's fundamentally their business model
remember the pager attacks? do you want a piece of Israel in your pocket?
>>
>>109053759
This. As much as I hate Apple and their shitty iToys, they're level of spying isn't anywhere close to Android.
>>
>>109048229
>They don't want you to use a Huawei/Xiaomi
In my very limited experience chink phones wont allow you unlock the bootloader
>>
>>109054045
In surprised big IQed hackers haven't figured out to break locked down bootloaders.
>>
>>109053950
>not usable on laptops and smartphones
smartphones I agree with but it being unusable on laptops is just blatantly untrue and it shows that you've never even tried to use OpenBSD in a VM. Also it recently added basic support for Wi-Fi AX, which you would know if had spent even 5 minutes researching OpenBSD and its new release. Does it work as well as on other, more popular operating systems? No, it's just the foundation for Wi-Fi AX after all but it is there. Give it one or two more releases and you'll be cruising the web at blazingly fast(TM) speeds.
Also why are you pretending that Wi-Fi ist backwards compatible and everything that doesn't support the lates and greatest technology is obsolete? You can connect to a Wi-Fi 6 access point with a Wi-Fi 4 card damn it. And don't come me with WPA3, that is as far away of being the standard as IPv6 is from replacing IPv4 wholly.
>>
>>109054019
>yeah bro just pay upwards of twice the price
>for the privilege of.. getting spied on less
Kek you guys are such raped goycattle it's hilarous
>>
>>109054097
Does it still lose data on power loss? Call me when they fulfill this basic requirement, until then, stop shilling this useless piece of shit
>>
>>109054246
Wow you got me good.
Seriously how often do you use your laptop until it dies? Me personally: fucking never. Funny how you didn't address any of the points I made and instead talked about something entirely different, which I will admit is a problem but also not really if you're backing up your system, which you should. And the only one "shilling" is you. Shilling your retarded /pol/ propaganda that is. I'm only disproving false claims you've made.
>>
>>109053934
That's okay, I prefer to go schizo haam with my device and setup.
Purchase my device with Cash or Monero, avoid personal triangulation; the phone is never shipped to my home or office. It is ordered to an anonymous drop point or locker under an alias. air-gapped flashing of GrapheneOS using tails or whonix. the phone lives in a Faraday bag when not being used and never used in my home network. and that's just for starters
>>
>>109054297
I didn't address to your points because they're all retarded, why bring up backwards compatibility when we're talking about hardware support? If someone tries to run OpenBSD on a laptop with WiFi 6 card will they be able to connect to a WiFi access point at all? Of course not because aside from lacking a journaling filesystem OpenBSD also has no drivers
>>
>>109054389
OpenBSD imports lots of drivers from Linux, so yes it does have drivers. I'm running a Framework Laptop with an Intel AX210 (iwx(4)) and it works just as intended. In fact, OpenBSD has much newer drivers than FreeBSD does, making it way more compatible with recently released hardware. You don't know jack shit about OpenBSD, yet you pretend you do because you're an egomanic who just knows better than everybody else. Please just read up on things you want to discuss. I'm hardly trying to dog on you because I was in your position just a couple years ago.
>>
>>109054097
i didn't just try it in a VM. i tried it on bare metal. no Bluetooth. no Wi-Fi 6. runs on some laptops and kernel panics on others. doesn't work on any of my laptops with any kind of Wi-Fi because they are too new (the "newer" one is a used thinkpad) the only support is a mailing list so that every embarrassing typo i make in a bug report or asking for help is then cc'd to 999 people who then get posses off my attachment is putting load on their server or something.
>>
>>109054467
>OpenBSD imports lots of drivers from Linux
Did someone finally cure them of their allergy to GPL code? That's good to hear
>You don't know jack shit about OpenBSD
I know it has no journaling filesystem which means it's a useless piece of shit, I don't care if using useless pieces of shit is what you do to get off but in my opinion the least thing you can do is stop trying to trick gullible retards into it on the internet
>>
>>109054097
>Also it recently added basic support for Wi-Fi AX, which you would know if had spent even 5 minutes researching OpenBSD and its new release.
i tried it this year. doesn't work on my machine. neither does FreeBSD. if you don't have a headphone jack and ethernet port, you are fucked. if your Wi-Fi is ax, you could be fucked or not depending on your hardware. it's not great on laptop in my experience. you have to choose your hardware carefully. maybe then it's great.
>>
>>109053759
>Graphene -> LineageOS -> Apple -> Google Android
FTFY

In a direct matchup, iOS is fundamentally more secure than LineageOS, but LineageOS offers drastically better data privacy. For security on an Android device using LineageOS, certain measures can be taken and practices implemented. But, for privacy there is nothing you can do on an iPhone to ensure it.
>>
>>109054097
>Also why are you pretending that Wi-Fi ist backwards compatible and everything that doesn't support the lates and greatest technology is obsolete? You can connect to a Wi-Fi 6 access point with a Wi-Fi 4 card damn it.
how about this, on BSD, it doesn't boot. when it does boot, there is no Wi-Fi. i have tried OpenBSD on one laptop and and FreeBSD on another. no amount of getting yelled at on mailing lists, installing the latest kernel, and correcting people who claim BSD works on laptops made it work on laptops. does it work on really fucking old thinkpads running Intel chips? sure it does. but i am not old and dying, unlike BSD and Intel. my laptop was made in this decade
>>
>>109054570
closed source is never more secure because your can't audit it and even begin to understand the risks without extensive reverse engineering, which Apple clearly works to prevent on both a hardware and software level, compromising their own repairability and making things harder for their own dev community
>>
>>109054597
Niggah, on iOS, Apple’s own system daemons, iCloud services, and telemetry trackers run with elevated, highly privileged profiles outside the restrictive sandbox imposed on third-party App Store apps. You cannot sandbox Apple's background analytics. iOS sandboxing is iron-clad against REMOTE malware, it forces you into an "all-or-nothing" permission structure that permits data scraping. GrapheneOS and LineageOS (to a much lesser degree) (does not contain advanced isolation layers, but can be implemented via 3of party methods and mechanisms) (see DivestOS for example) use advanced "scopes" to let you lie to apps within their sandbox.
>>
>>109054654
3rd* party* Work Profile + Shelter
>>
File: 1781020510863899.jpg (40 KB, 480x480)
40 KB JPG
>>109052297
>more robust and secure OS design
>from a company that keep pushing users to log in with legally crackable/backdoorable biometrics, short easily crackable pin codes
>the same company that turned on bitlocker encryption for people that had no idea what it even was, making their systems so secure they couldn't access their own data because they didn't have their keys when it came time to switch systems
>bitlocker itself isn't even secure, at this point microsofts response to that hacker proves it has a backdoor by all but admission
>same company that pushed fucking RECALL like it was a good feature
>more secure

Linux and Windows are equally as secure as one another, as in, its unlikely any specific user practising basic digital security hygiene (strong passwords, authenticator 2FA, don't run sketchy exes, use different passwords) will ever be hacked.
Almost every single big digital security breach was done via social engineering, much the same with personal breaches.

Run your heart and brain in a virtual machine and you'll never be compromised.
>>
>>109054310
I don't need that.
>>
>>109056712
Me neither. I just do it for practice
>>
>>109055563
What's more important is telemetry, spying and snooping and how each handles them. GrapheneOS -> Linux -> MacOS -> Windows.



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.