this post was submitted on 25 Feb 2024
436 points (98.9% liked)
Privacy
32103 readers
547 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Dont use Google Android
Fuck banking institutions & their apps. We are seeing them eliminate online banking now & cash is slowly not being accepted by vendors & in-person experiences are worse—instead everything is siloed to only Android or iOS & disallow any sort of modifications to your device with all these attestation assertions. If a user wanted to ditch their phone, go Linux, use an unGoogled phone, or get a dumbphone, etc. they will be disconnected from the banking network—to which most users would view as an immediate nonstarter. Apple is just a different data-collecting advertising business.
The browser login of my bank needs a separate application that's windows only or an app. The Java(!) application Jameica saved my ass for the 6 years I'm on Linux now. It can manage multiple accounts. It offers statistics, saves all the transfers, deposits and balances ad infinitum on your disk, is searchable and has templates and schedules for transfers.
The protocol my bank uses is FinTS, I think. I'm logging in via a certificate file and a password.
I don't want to use an app, cause I trust my cutting edge Linux (Kernel 6.7.6) a lot more than my possibly malicious app riddled outdated android.
In many places its illegal to not accept cash. Report any businesses and if its legal in your area, donate to your local privacy lobbiest NGO and contact your representative.
Where? I can't think of many places where that'd be true.
San Francisco. Law was passed like 10 years ago because not everyone can get a bank account and its discrimination
¯\_(ツ)_/¯ I wish but switching to Apple would be just as bad and I would want to die being forced to use their fisher price software for the tech illiterate.
Soon though, in the next 5 years I think Linux phones (I know Android is Linux, you know what I mean) will be in a good state. So hopefully I can switch soonish
Google and SOC vendors are trying their best to stop developing of Linux phones. That's why available Linux phones use 10 year old chipsets.
Lets be frank, the main reason is that only like 1% of the market has an articulated preference towards free software and privacy. No money to be made equals no product in our cruel world. And of course FOSS, even if it is free to a user (as in you do not have to pay to use it. You do need to spend your time and resources to learn it though, and that is not free already), is by no means free to develop. The time spent on it by devs has to be compensated somehow, enthusiasm is unfortunately not the only fuel our bodies need. And then, for phones, the hardware required is not free as well. And then we need a manufacturer, who would be much more interested in making a billion Android phones than a million of a niche product.
Does Google actively try to stop development of the alternatives? Unlikely, because they don't have to. They do not make it easier of course, why would they. And they do buy out everything they can, because they can use it to improve their products.
I do not see a good way out of this loop for now. Do you?
https://postmarketos.org/faq/#why-postmarketos-over-ungoogled-android-or-halium Hardware vendors just use proprietary drivers so it's almost impossible to port linux to their devices. It is so crazy that you can't even update linux kernel in Android without vendor's help.
I am waiting for the same thing. The amount of shit you have to disable, block, or unistall on android is getting ridiculous. It's getting really old.
Most of the new "features" that either apple or google add anymore are absolute trash. I am constantly having to go through the settings and disable shit.
The stock android is so full of non-romovable crap that a launcher is required anymore.
It's the same for windows, win11 is only usable with a launcher like startallback.
Dont wait, just get a Pixel 6a-8 and install GrapheneOS.
(8 is expensive but will last 7+ years with extended GrapheneOS updates)
What do you use in place of GApps? F-droid?
Also, what's the flashing process like these days? Does it still wipe everything or is there a way to save all the personal stuff?
Just check grapheneos.org
They have only a minimal appstore preinstalled, which they use for their own apps. It is the best there is with full background updates etc. Every store could do this if they used modern libraries.
You have Vanadium preinstalled, from which you can install "F-Droid Basic" (the modern client), or Aurorastore, or accrescent, obtainium etc.
Their own solution is sandboxed google play, installed as regular user apps with way more restricted permissions and an opt-in method (only dedicated calls are allowed) in contrast to the extremely privileged microG or even "GAPPS" which can do everything (and in the place of microG having selected things removed, badness enumeration while still using proprietary Google code).
GrapheneOS is basically Android done right, play services etc. work, you can install all Google apps from the playstore, not as system apps, if you wanted to. (wallet and others are exceptions as they require a Google certified OS).
I dont think they're saying to use Apple. I read that as "Use Android without Google" ... Which is actually easier than using Android with Google if you install the OS yourself.
There's Always graphene or calyx...
Calyx is way worse than Graphene. Only use it if your device is not supported by GrapheneOS > DivestOS.
And afaik Calyx doesnt even support many phones lol. On GrapheneOS this is actually due to missing security, which Calyx doesnt even use.
I mean, yeah. Use Android AOSP without Google.
Obviously by "google" were talking about proprietary blobs.
For example TOTP is great. There's no issue with the fact that it was developed by Google. Same with AOSP.
Any ROM doesn't have Google Play Services by default and therefore its google free in all the ways that matter
No some OS preinstall microG. Because only if the core is finished you can hash and sign it, if the user flashes some apps afterwards that doesnt work.
Btw ROM is read only memory, a tiny part of the firmware
MicroG is open source tho and only talks to Google if you explicitely activate it
Apple is terrible right to repair, and lineage has a bunch of weird bugs, so I'm kinda stuck with it
Which bugs have you found in LineageOS? There's quite a big community behind it, so maybe you can find some help. There are also other LineageOS-based ROMs worth checking: CalyxOS, DivestOS, iodéOS, /e/OS.
I've been using iodeOS for about a year soon! Very happy with it :)
Return to Nokia 3310 then I guess
DeGoogle your Android ROM/use a custom ROM. What exactly was so hard to understand in that comment that made you want to switch to a feature-phone?
I just want to buy a phone and use it without having to figure out all that
Not in this century, unfortunately. Even using a SIM card is going to let companies track you.
Just dont use a SIM card.
Two cans and a string should be a good solution then. It respects your privacy and the battery life is unbeatable.
Vulnerable to the tin can in the middle attack.
Honestly theres a half dozen e2ee apps these days with voice calling support, and WiFi is everywhere. Most people have no reason for a SIM card
Thats how you do it with GrapheneOS. Buy a pixel, take like 30min to install the OS, install F-Droid Basic and sandboxed Play and get your apps.
Degoogling Android is not possible, and LineageOS and other more difficult to install Androids are less secure.
GrapheneOS has a graphical installer, you just need a Laptop (Windows, Linux, Mac), a Chromebook or another Android phone and a USB cable, thats it. You can literally install it from one phone (using some variant of Chromium like Chrome, Cromite, Brave etc.) By opening a website and clicking 4 buttons.
yeh maybe in a few years when I need a new phone
Probably wouldent work on modern cell networks.