Okay, so I’ve got this right: Graphene OS phones are objectively the most private and secure phones out there. According to the Graphene OS developers, iPhones using an Apple ID are an excellent second choice. According to the Graphene OS developers, all other custom ROMs are total junk and Linux is garbage. A stock Android phone without a Google account is a disaster. Only Graphene OS and iOS are truly good according to graphene devs, the masters of privacy and security.What kind of world do we live in?
>>109047547Why are we getting GOS counter signalling threads every 4 hours now?
>>109047547One where Google fell hard in 2015.
>>109047563how is this a counter signalling thread? Micay would agree with OP 100%.
>>109047594Are you oblivious to OP's sarcasm?
>>109047547> Graphene OSIt's a honeypot. You can only use it on Google Phones that oc have backdoors.They don't want you to use a Huawei/Xiaomi without Google account which is more than enough to do all essential stuff online.
>>109047547No. They say that GrapheneOS is better than other AOSP-based distributions (correct). They also say that if you need a "just werks, your bank and government and normie friends also approve" OS - i.e. only Apple iOS or Google Android™ - then iOS is the more private and secure choice (arguable). GNU/Linux on phones neither has apps nor is it particularly secure (correct).
>>109047821Didn't Grsecurity just sell patches? GPL-2 doesn't require patches to also be a compatible licence.
>iPhones using an Apple ID are an excellent second choice. Said nobody who knows anything about privacy and security.>all other custom ROMs are total junk and Linux is garbage. A stock Android phone without a Google account is a disaster.Absolutely correct>Only Graphene OS and iOS are truly good Only GrapheneOS....is truly good. FTFY
>>109047821Instead of the Linux kernel developers suing Grsecurity, Grsecurity sued Bruce Perens for defamation and business interference, claiming his interpretation of their license was false and damaging. Pussies and faggots everywhere in tech
>>109048229Huawei officially shut down its bootloader unlock service in 2018, though and you're still subject to statewide spying, snooping and telemetry by Huawei
>>109047547From a security (anti-exploitation) standpoint, iOS is formidable. Just not as formidable as a Pixel running GrapheneOS. Yeah, sure, Apple’s hardware security enclaves, secure boot chains, and pointer authentication are industry-leading. But, it isn't GrapheneOS with 0 (count it) telemetry. Apple's Lockdown Mode feature completely neutralizes complex, multi-million dollar zero-click Pegasus/Mercenary spyware vectors by stripping out dangerous web code execution and message attachments. But, last time I checked, the FBI was able to crack that shit (don't quote me on this). Because of this aggressive hardware-level patching, an iPhone is vastly more secure against hackers than a generic stock Android phone, even if it fails to protect from Apple's corporate surveillance. Still, GrapheneOS BFU and reboot every 2 hours features mog Apple.Most alternative custom ROMs (like LineageOS) require you to unlock your device's bootloader permanently. Unlocking the bootloader completely disables Android's Verified Boot. If a malicious actor physically grabs an unlocked device, they can sideload a rootkit directly into the OS partition. GrapheneOS is one of the only custom ROMs that allows for safely relocking the bootloader with custom signing keys. Not even desktop Linux PCs are this secure. Mobile and desktop Linux operating systems (like Arch, PostmarketOS or Ubuntu Touch) lack modern application sandboxing. If an app is compromised on a standard mobile or desktop Linux distribution, it can often read data across the entire system. GrapheneOS' user isolation model is infinitely more secure.
>>109047547De-Googling a stock Android phone simply by logging out of your Google account provides a false sense of security that normies rely on, naturally. There's still constant Telemetry likeGoogle Play Services that's are baked into the root system partition of stock Android. Even without an account, the phone continually pings Google servers with your precise hardware IDs, Wi-Fi MAC addresses, and cellular tower connections. And, without a Google account, push notifications break for 90% of mainstream apps because the underlying system relies on Google Cloud Messaging (GCM). You get the downside of data tracking without any of the functional benefits. It's literally just broken infrastructure.
>>109047547GrapheneOS stands alone because it solves the ultimate paradox, it delivers maximum privacy and maximum security simultaneously. iOS gives you maximum security, but forces you to trust Apple with your data and privacy. Standard Custom ROMs give you privacy from Google, but destroy your physical device security. GrapheneOS hardens the Android kernel (security) while generating zero corporate telemetry data (privacy). And no niggah, you cannot use an iPhone without giving data to Apple. Even if you never create an Apple ID, skip the iCloud setup entirely, and use a completely anonymous SIM card, iOS is hardcoded to continually ping Apple servers just like AOSP devices. It's been confirmed that an idle, out-of-the-box iPhone transmits tracking telemetry back to Apple roughly every 4.5 minutes and the tracking cannot be turned off due to specific hardware and software constraints. Even on a completely "anonymous" iPhone, Apple's servers automatically harvest Hardware Serial Numbers where your phone transmits your Unique Device Identifier (UDID) and IMEI. They harvest the physical hardware addresses of your Wi-Fi card and Bluetooth chip and your local network data aka addresses of nearby Wi-Fi routers, mapping your exact physical location. If that's not enough, Apple also tracks your cellular infrastructure; the ID numbers of nearby cell towers and your current SIM card's serial number (ICCID). And on top of that it tracks and harvests your app usage metadata. Like, every time you open a native app (like Settings, Maps, or the Phone dialer), a log is sent detailing the exact timestamp with tracing Al and keylog info. So, no. Get your facts straight
>>109047547No computer hardware can ever be trusted, but I still use Linux and GrapheneOS to avoid the anti-user features of proprietary software and boycott large companies.
>>109051183>reboot every 2 hoursIs even that sufficient? I suppose if its not a targeted arrest with prearranged warrants 2h or even a day is plenty of time before they target your phone.
>>109047563glowniggers are terrified that the goyim are fighting back
>>109047547So when is GrapheneOS replacing Linux?
Graphene niggers criticism of openbsd was so far besides the point it's in the oort cloud so I doubt very much he has anything salient to say about linux.
>>109051246strictly from a privacy, anti-tracking, and anti-telemetry standpoint, custom firmware like LineageOS is generally considered the second-best option after GrapheneOS. if your only goal is to stop corporate data harvesting from Google, Apple, or phone manufacturers, a clean installation of LineageOS (without installing any Google Apps or "GApps") completely cuts off the telemetry pipeline. however, it sits firmly in second place because it lacks the advanced, built-in network privacy features that make GrapheneOS the gold standard.>>109052271It already has. It's the most secure OS, besides a microkernel
>>109052297but they are correct tho
>>109050849Yes GPLv2 bans "patch subscriptions" explicity: since "patch subscription services" have a "you cannot redistribute this patch" clause in all of them.Grsecurity is not the original copyright holder of the linux kernel. It does not have a right to make derivative works at all of the linux kernel nor of GCC.This is something YOU reject; you think they have a right to make derivatives and thus have a right to distribute them under the terms they want to. They do not. Here we will NEVER agree.You will NEVER agree that Grsecurity doesn't have the freedom and right to make whatever patches it wants and distribute them however it wants.However under US Copyright law it does NOT have those rights.The Copyright holder (Linus and 10000 others) have put out a bare license (no it is NOT a contract when you have no exchange of anything) that proports to allow derivative works only if others are allowed to make derivative works without stipulation on and on.It fails in this because there's no relationship. Linus can cancel any free-gratis license he has "given" at any time. Just as if a license holder that's actually paying you can be yanked when he threatens you or shows a breakdown in the actual contractual relationship (NYC copyright cases 1990s). There is no relationship between Linus and Grsecurity other than Grsecurity dissing Linus.Now: The GPL stipulates that you may not add additional terms to its terms between you and people you distribute your derivative to.This is so you can't "get around" the GPL's open redistribution terms.An original copyright holder can ignore this and license however he pleases. A derivative work creator, cannot. You disagree with this ofcourse. US copyright law gives the copyright holder the right to control derivatives. Which Grsecurity is (of Linux and of GCC).Grsecurity adds additional terms between it and the customer:1) Customer can't redistribute Grsecurity or else.2) Venue for suits is Pennsylvania
>>109052945Linus in the 1990s said "we" would sue anyone who violated the GPL on linux.He lied. He said that to rope everyone in. He had an opportunity to fulfill that promise to the people that coded for him and sue grsecurity and has not.Linus said only the code mattered not anything else, pro-freedom of speech.Now he adds a Code of Conduct and says mysoginist faschist white mamaallleesss are not wanted and hackers are not wanted.And NO RUSSIAN.He also trannified his son.And feminist-ized his daughters.He should be executed.He is a liar and a cheat.He also spit on his previous contributors such as Reiser the Lion.Honour can only be restored through blood.Why the Russians haven't killed him I do not know. He only exists because his parents met in moscow.The hackers who he has turned his back on after decades of them coding for him: should torture and then brutally kill him: and every pro-Code of Conduct entryist that has taken over and seeks to control their speech and ideas.Russia should do this."The community" is being used as leverage against the hackers. There is only one solution to this disrespect.
>>109053453>And NO RUSSIAN.Based, total zigger death
>>109053416Since when was offering patches for the customer to apply and compile the same as distributing a derivative work? GPLv3 wouldn't have allowed Grsecurity btw but Linus doesn't want it
>>109047547They aren't wrong. Google makes it's money from selling telemetry and user profiles built from spying on you Apple makes it's money buy primarily selling hardware and subscriptions.While Apple does it's share of spying, its no where nearly as bad as google. So Graphene -> Apple -> Google (Android) isn't wrong.
>>109051183>Unlocking the bootloader completely disables Android's Verified BootNot a single fuck is given.
>>109052297>OpenBSDnot usable on laptops and smartphonesno 802.11axeverything is mobile now. an OS without Wi-Fi 6 will die. servers will largely stay Linux-based since that's what devs grow up on. i will not learn an OS for the first time by installing it on s production server at work. and if i can't learn it by using it on my devices at home...>GrapheneOSonly runs on Google phonesGoogle is on the "boycott Israel" listput two and two togetherplus, Google always has primarily been an advertising company. they sell your data. that's fundamentally their business modelremember the pager attacks? do you want a piece of Israel in your pocket?
>>109053759This. As much as I hate Apple and their shitty iToys, they're level of spying isn't anywhere close to Android.
>>109048229>They don't want you to use a Huawei/XiaomiIn my very limited experience chink phones wont allow you unlock the bootloader
>>109054045In surprised big IQed hackers haven't figured out to break locked down bootloaders.
>>109053950>not usable on laptops and smartphonessmartphones I agree with but it being unusable on laptops is just blatantly untrue and it shows that you've never even tried to use OpenBSD in a VM. Also it recently added basic support for Wi-Fi AX, which you would know if had spent even 5 minutes researching OpenBSD and its new release. Does it work as well as on other, more popular operating systems? No, it's just the foundation for Wi-Fi AX after all but it is there. Give it one or two more releases and you'll be cruising the web at blazingly fast(TM) speeds.Also why are you pretending that Wi-Fi ist backwards compatible and everything that doesn't support the lates and greatest technology is obsolete? You can connect to a Wi-Fi 6 access point with a Wi-Fi 4 card damn it. And don't come me with WPA3, that is as far away of being the standard as IPv6 is from replacing IPv4 wholly.
>>109054019>yeah bro just pay upwards of twice the price>for the privilege of.. getting spied on lessKek you guys are such raped goycattle it's hilarous
>>109054097Does it still lose data on power loss? Call me when they fulfill this basic requirement, until then, stop shilling this useless piece of shit
>>109054246Wow you got me good.Seriously how often do you use your laptop until it dies? Me personally: fucking never. Funny how you didn't address any of the points I made and instead talked about something entirely different, which I will admit is a problem but also not really if you're backing up your system, which you should. And the only one "shilling" is you. Shilling your retarded /pol/ propaganda that is. I'm only disproving false claims you've made.
>>109053934That's okay, I prefer to go schizo haam with my device and setup.Purchase my device with Cash or Monero, avoid personal triangulation; the phone is never shipped to my home or office. It is ordered to an anonymous drop point or locker under an alias. air-gapped flashing of GrapheneOS using tails or whonix. the phone lives in a Faraday bag when not being used and never used in my home network. and that's just for starters
>>109054297I didn't address to your points because they're all retarded, why bring up backwards compatibility when we're talking about hardware support? If someone tries to run OpenBSD on a laptop with WiFi 6 card will they be able to connect to a WiFi access point at all? Of course not because aside from lacking a journaling filesystem OpenBSD also has no drivers
>>109054389OpenBSD imports lots of drivers from Linux, so yes it does have drivers. I'm running a Framework Laptop with an Intel AX210 (iwx(4)) and it works just as intended. In fact, OpenBSD has much newer drivers than FreeBSD does, making it way more compatible with recently released hardware. You don't know jack shit about OpenBSD, yet you pretend you do because you're an egomanic who just knows better than everybody else. Please just read up on things you want to discuss. I'm hardly trying to dog on you because I was in your position just a couple years ago.
>>109054097i didn't just try it in a VM. i tried it on bare metal. no Bluetooth. no Wi-Fi 6. runs on some laptops and kernel panics on others. doesn't work on any of my laptops with any kind of Wi-Fi because they are too new (the "newer" one is a used thinkpad) the only support is a mailing list so that every embarrassing typo i make in a bug report or asking for help is then cc'd to 999 people who then get posses off my attachment is putting load on their server or something.
>>109054467>OpenBSD imports lots of drivers from LinuxDid someone finally cure them of their allergy to GPL code? That's good to hear>You don't know jack shit about OpenBSDI know it has no journaling filesystem which means it's a useless piece of shit, I don't care if using useless pieces of shit is what you do to get off but in my opinion the least thing you can do is stop trying to trick gullible retards into it on the internet
>>109054097>Also it recently added basic support for Wi-Fi AX, which you would know if had spent even 5 minutes researching OpenBSD and its new release.i tried it this year. doesn't work on my machine. neither does FreeBSD. if you don't have a headphone jack and ethernet port, you are fucked. if your Wi-Fi is ax, you could be fucked or not depending on your hardware. it's not great on laptop in my experience. you have to choose your hardware carefully. maybe then it's great.
>>109053759>Graphene -> LineageOS -> Apple -> Google AndroidFTFYIn a direct matchup, iOS is fundamentally more secure than LineageOS, but LineageOS offers drastically better data privacy. For security on an Android device using LineageOS, certain measures can be taken and practices implemented. But, for privacy there is nothing you can do on an iPhone to ensure it.
>>109054097>Also why are you pretending that Wi-Fi ist backwards compatible and everything that doesn't support the lates and greatest technology is obsolete? You can connect to a Wi-Fi 6 access point with a Wi-Fi 4 card damn it.how about this, on BSD, it doesn't boot. when it does boot, there is no Wi-Fi. i have tried OpenBSD on one laptop and and FreeBSD on another. no amount of getting yelled at on mailing lists, installing the latest kernel, and correcting people who claim BSD works on laptops made it work on laptops. does it work on really fucking old thinkpads running Intel chips? sure it does. but i am not old and dying, unlike BSD and Intel. my laptop was made in this decade
>>109054570closed source is never more secure because your can't audit it and even begin to understand the risks without extensive reverse engineering, which Apple clearly works to prevent on both a hardware and software level, compromising their own repairability and making things harder for their own dev community
>>109054597Niggah, on iOS, Apple’s own system daemons, iCloud services, and telemetry trackers run with elevated, highly privileged profiles outside the restrictive sandbox imposed on third-party App Store apps. You cannot sandbox Apple's background analytics. iOS sandboxing is iron-clad against REMOTE malware, it forces you into an "all-or-nothing" permission structure that permits data scraping. GrapheneOS and LineageOS (to a much lesser degree) (does not contain advanced isolation layers, but can be implemented via 3of party methods and mechanisms) (see DivestOS for example) use advanced "scopes" to let you lie to apps within their sandbox.
>>1090546543rd* party* Work Profile + Shelter
>>109052297>more robust and secure OS design>from a company that keep pushing users to log in with legally crackable/backdoorable biometrics, short easily crackable pin codes>the same company that turned on bitlocker encryption for people that had no idea what it even was, making their systems so secure they couldn't access their own data because they didn't have their keys when it came time to switch systems>bitlocker itself isn't even secure, at this point microsofts response to that hacker proves it has a backdoor by all but admission>same company that pushed fucking RECALL like it was a good feature>more secureLinux and Windows are equally as secure as one another, as in, its unlikely any specific user practising basic digital security hygiene (strong passwords, authenticator 2FA, don't run sketchy exes, use different passwords) will ever be hacked.Almost every single big digital security breach was done via social engineering, much the same with personal breaches. Run your heart and brain in a virtual machine and you'll never be compromised.
>>109054310I don't need that.
>>109056712Me neither. I just do it for practice
>>109055563What's more important is telemetry, spying and snooping and how each handles them. GrapheneOS -> Linux -> MacOS -> Windows.