Im considering buying a new phone and i don’t really consider a Pixel. I really like Fairphones approach, with the self repairable stuff. Even though they don‘t have a headphone jack. But well… I can’t change it. I’ll definitely go with the adapter over wireless headphones.
But to my question: What private OSes are there? Fairphone sells FP4s with eOS, how is that? And does it work on the FP5? GrapheneOS only works on Google Pixels right?
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 57 users / day
- 383 users / week
- 1.5K users / month
- 5.7K users / 6 months
- 1 subscriber
- 2.76K Posts
- 68.9K Comments
- Modlog
I found the following website to be a definitive source for comparisons of all sorts, including this one:
https://eylenburg.github.io/android_comparison.htm
Too bad it’s hosted on Microsoft’s GitHub. Wish open source proponents would stick to open source solutions
Personally, and thanks to some comparison charts, Graphene is the best, followed by DivestOS for most devices. Others are weaker, and Calyx is not useful as we have stronger Graphene.
Yeah Fairphones all are fair and whatnot until you find out their software isn’t fair and they don’t give a shit about managing security properly nor collaborating with others such as GrapheneOS.
Yes, GrapheneOS only works on Pixel devices, because the project has some pretty extensive hardware security requirements: https://grapheneos.org/faq#future-devices
The Fairphone is a highly insecure device, which comes nowhere close to the (hardware) security of a Pixel. On top of that, the Fairphone company doesn’t even know how to maintain their own Fairphone OS. The verified boot implementation is fundamentally broken and very misleading, since it’s signed with the publicly available (!!!) AOSP test private keys. This is such a blatant disregard of security practices, that should have made it impossible to certify their devices. It’s not a surprise either that Fairphone regularly misses important Android security patches, or delivers them months later. That’s also why GrapheneOS will never support devices like the Fairphone. There are more issues with Fairphone’s misleading update policy that I haven’t covered in detail.
I highly recommend against purchasing such insecure, and poorly maintained hardware. DivestOS is the best option for “damage control”, if you already own a Fairphone. Its developer actually cares about users and their security, and the OS is properly signed.
I’ve never heard of Fairphone and have only barely heard of DivestOS.
FP4 with CalyxOS works perfectly.
Fairphones can also run CalyxOS if you want to look into that
May i know why you do not like the pixel phones?
I dont know. Its not that I dislike pixels, I just liked the concept of Fairphones. And I just never thought about google phones because I thought google and privacy don’t match, even if I have a different OS installed.
They are expensive and I don’t want to give money to Google
They are way cheaper than fairphones where I live.
Sorry I wasn’t comparing to fairphones. I was comparing the minimum you’d have to pay for a phone that has everything you could possibly need with the only difference being a not-that-great camera. So like a budget Xiaomi phone that I use.
If you don’t want to give money to Google, why not take money from Google?
https://adnauseam.io/
Then, once you’ve offset enough money, then you can buy a Pixel at an overall loss on Google’s side.
Sometimes you get what you pay for, and…
I get that, but your purchase (the entire Pixel department, to be honest) is a drop in the ocean to their profits. They won’t notice you not buying one at all. You’re handicapping yourself in the mobile security arena (not being able to install GrapheneOS) to take the high ground and not effect a tech giant.
That aside, if you really don’t want to give Google, buy one from a reseller and not from the Google Store.
I highly encourage everyone to buy their pixel phones for grapheneos secondhand. there’s enough pixel fanbois out there you should be able to deprive any corporation of the money of your sale by buying a like new condition last generation pixel (Like an 8 now that the 8a and 9 are out)
Yup. Bought a secondhand 7a for ~$250. Maybe I should have looked for an 8, but honestly I don’t think the 7a is too bad all considered.
Recently bought a used Pixel for just under $200.
I refuse to buy new when a 1-2 year old flagship is 1/3 the price of new.
Especially since when was the last time you got a phone that impressed you? Like phones haven’t been getting better they’ve been getting more gimmicky
Yeah that’s not a bad idea
they sometimes retail at a loss around the holiday season.
I use CalyxOS on my FP4. I have been happy. Almost 2 years now.
Depending on your linux knowledge, you may want to use real linux (postmarketOS). But beware, the amount of things that require closed source OSs like android or ios isnt 0. banking apps for example arent accepting of non proprietary phones yet. I dont know about emulation though.
Not true. I’m a Tangerine customer and have no issues at all with their app on Graphene.
That is one usecase. I‘d be a little more thoughtful about my first sentence if I were you.
That one use case literally invalidates the claim that banking apps don’t work. Your banking app might not work, but mine does.
Thats not how logic works my friend. If 99 people cant get it to work and you do, that makes the claim not invalid but either you lie or you have an „unusual“ setup. The claim still holds true in most cases.
Instead of waltzing over someone like this, you could try and show interest in their usecase and how to troubleshoot the underlying problem. That would be making the world a better place.
I’m not here to troubleshoot this issue. I don’t have the technical skill or understanding of this platform to do so.
I’m sure I’m not the only one with a working banking app. We don’t all use mainstream banks, right? There are options and I’m sure I’m not alone in this.
Thanks for insinuating I’m a liar though. That’s nice.
I’m on a Pixel 8 with GrapheneOS and a working banking app with no special fuckery because I genuinely don’t know enough about android to deviate from what’s offered in the stock Graphene experience other than using the FUTO keyboard and customizing basic settings just like everyone else.
Well, thanks for the info. I never said you were a liar. I said thats an option.
The point I took issue with is the way you approached this. I dont mind being corrected. I mind it being done like this as if I were somehow saying stupid things which 20 yrs of IT work clearly speak against.
So maybe we just forget this issue and agree that you have a working setup which I find very positive.
Have a good one.
I daily drove a Oneplus 6 with PostmarketOS for a few months. While it was very cool and gave me a bunch of freedom compared to android, I missed things like always having proper mobile UIs and a working camera. It is my understanding that the fairphone 4 is in a similar state of support, if a bit worse. Can recommend it though if you like using linux and don’t need banking or a camera from your phone.
Thanks for chiming in. I agree that pmos is not a perfect drop in alternative for android yet. but for me it is 1. not necessary to have a perfect copy and 2. not a permanent situation since pmos is picking up steam, same as the rest of linux. So I believe cameras will become usable at some point and banking apps will probably also come around at some point. The more people use it, the faster imo.
Every few months or so there is news of what hurdle has been overcome getting the camera on the oneplus 6 to work. So you might be right there.
Thats my impression as well. Lets hope mobile linux goes nuts.
For emulation there is Waydroid. I’ve never tried to run bank apps with it, but everything else worked smoothly.
Thanks for mentioning it. I heard about waydroid but havent tried it yet.
I’ve used it in multi windows mode with a libhoudini (installed thru a script, I think it was this) (had no luck with libndk) on desktop (x86) because some android apps are not compiled for x86. No need for it on an arm device.
If you have a dual gpu setup, enable software render because it got issue with dual gpus (see here).
There are several degoogled OS options for the Fairphone models, with different levels of degoogling and privacy: LineageOS, CalyxOS, DivestOS, iodéOS and /e/OS.
Most of these are based on LineageOS (I understand that CalyxOS isn’t, but I might be wrong). I personally use iodéOS and I like the helpful developers, the ability to remove / replace any of the apps preinstalled with the system, and the iodé blocker which blocks trackers, adds and any connection you want to at a system level.
I currently run DivestOS on a oneplus 6 and it’s pretty slick with mull for web browsing and neostore for apps.
The Fairphone 5 is supported by CalyxOS, iodéOS, /e/OS and LineageOS (with or without microG, which is a Google Play Services replacement).
You can read about each of the projects here:
As somebody that might be changing phone sometime this year and to cover all the possibilities, do we have a recent comparison of all these projects?
Yes! There is a really helpful (from a privacy and security standpoint) comparison chart here. It also includes GrapheneOS and “stock” Android.
Thanks!
I use MicroG LineageOS which is in my opinion comparable with graphene os and is supported by a lot more devices.
https://lineage.microg.org/
Graphene and Lineage are the most uncomparable custom roms. Have and look at security and privacy and the type of Google Play handling.
See https://eylenburg.github.io/android_comparison.htm to geht a first idea
MicroG version of lineage. Graphene is obviously way supperior.
I’m on CalyxOS, it works great. Locked bootloader, ability to block connection of devices when screen is locked (defeating cellebrite’s method of choice), work profiles and firewalls etc.
There are only a few to consider. /e/os if you want it easy or DivestOS if you want it most secure and private. All the other possibilities have disadvantages compared to these.
Please be aware that you should buy FP5 as FP4 has huge hardware issues and the support is a dissapointment. And yes, /e/ is available for FP5 (but not via easy installer, but it’s not hard to flash it yourself)
/e/ is announced as ‘degoogled’ but that’s not 100 % true (and not nearly as well). For example MicroG connects to Google as well as connectivity backup check. Patch level is far behind AOSP. The App Lounge uses clean APK for some apps which is very risky. Communication is a problem and they do not react like they should for example when Mike Kuketz analysed /e/ and found several problems.
The community is huge and they support many devices.
DivestOS is better in most points but is managed by one person alone. MicroG is not included by default (if you need it) and multi sim support is a problem.
You can disable microg connecting to google servers, but basically you get a standard gms free experience, with most apps simply not working from play store. They list in the wiki how and why they connect to google: https://github.com/microg/GmsCore/wiki/Google-Network-Connections
A completely google free experience would be unusable for “normal” people, so they somewhat right as they target “normal” users. I also don’t like /e/, but because they are deliberately obfuscating a lot of things in their documentation, and they try to sell their os as something genuine, but it’s mostly just AOSP with microG.
DivestOS is the way to go.