this post was submitted on 21 Jun 2025
44 points (89.3% liked)

Privacy

39154 readers
1082 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

GrapheneOS vs LineageOS vs iodéOS

According to Comparison of Android-based Operating Systems, GrapheneOS seems to be better than LineageOS and iodéOS in every aspect.

I'm wondering if there is any downside of GrapheneOS. What am I giving up for using GrapheneOS instead of LineageOS and iodéOS (besides GrapheneOS only support pixel)?

In terms of privacy, security, customizability and functionality, which OS would you recommend and on what device would you recommend using it?

Answered questions

  • Does LineageOS supports muti profile like GrapheneOS (I thought all AOSP supports multiprofile feature)
  • Does LineageOS supports full device encryption using some open source app? (like veracrypt)
    • @https://lemmy.world/u/who@feddit.org Yes, full-device encryption is built in to Android these days.
  • Can LineageOS supports Sandboxed Google Play with some tweaks?
    • no

Some questions

  • If there is backdoor planted in pixel (which in my opinion is very likely), then I guess the “risk of an adversary gaining physical access to the phone” is quite equal for both of OS?
    • https://lemmy.world/u/upstroke4448@lemmy.dbzer0.com - It is highly unlikely there is a backdoor in the Pixel. It’s just not worth the risk for Google. Not only are the phones highly scrutinized by experts but Google has a million other legal ways to get info off your phone for 99% of users who use the stock OS.
  • @benjaminoakes https://lemmy.world/u/benjaminoakes (how do I @ another user in lemmy???) and I qoute "Graphene is likely to run into issues soon. They were relying on the AOSP source tree including Pixel-specific files. Google isn’t releasing those anymore, so GrapheneOS would have to reverse engineer or extract the needed files somehow."
    • should I be concerned about this issue? Will it affect my experience in the next 5 years ? (I usually update my device in 5 year cycle)

thanks a million

you are viewing a single comment's thread
view the rest of the comments
[–] upstroke4448@lemmy.dbzer0.com 2 points 21 hours ago* (last edited 17 hours ago) (1 children)

Trust does not fix the core privacy issue of allowing an app to have privileged access to your phone.

As I said before, if your threat model allows you to decide your fine with Micro G having that access, good for you. That isn't a remedy for the actual issue. Its just deciding to ignore it. Trust is much easier to break and abuse then a sandbox.

It seems we differ on the value of trust in this situation. To me, no app is ever trust worthy enough for that type of access. Especially for something like play store access where there are other non privileged ways (aurora store, third party apk mirrors, etc) to access the apps from the play store if you really feel Google is malicious.

[–] skarn@discuss.tchncs.de 0 points 12 hours ago (1 children)

There about a gazillion background services in your phone right now having privileged access. Have you taken a look at those? Do you know what they do?

MicroG does not give you access to the play store. Like, not at all. If you think Aurora store is a replacement for microG or Google Play Services you have no idea what you're talking about.

[–] upstroke4448@lemmy.dbzer0.com 1 points 9 hours ago* (last edited 9 hours ago)

Lol trying to conflate system apps vital to an OS and privelged apps like Micro G is about as bad faith an argument as it gets.

Your playing semantics. Both sandboxed google play and micro g are ways to get around Google Play services but only GOS implementation actually solves the main privacy issue.

The reason I mentioned aurora is because a lot of user install micro g so they can use the play store as it requires play services or a substitution. This was obvious in context.