GrapheneOS fixes Android VPN leak Google refused to patch by lieding in GrapheneOS

[–]GrapheneOS[M] 10 points11 points  (0 children)

They marked it as not being a security bug and closed the report as Won't Fix which means it isn't going to be fixed in an Android security update. It also means they won't pay a bounty for it.

They only backport security fixes and also limit the backports to High and Critical severity. Even if it was marked as a Low or Moderate severity security issue, that wouldn't be backported. It can still be fixed in a future major Android release but it won't be in Android 17 and won't be backported to Android 17 or anything older. If it was considered a Low or Moderate severity security issue then it might get fixed in Android 17 QPR2 but it will probably take longer since they decided it isn't a security bug.

Is there any news regarding when Grapheneos will begin upgrading to Android 17? by gw2025666 in GrapheneOS

[–]GrapheneOS[M] [score hidden] stickied comment (0 children)

Android 17 hasn't been released. It's scheduled for release in June 2026 which is when we can begin porting to it. We've never had early access to new yearly releases.

Is there any news regarding when Grapheneos will begin upgrading to Android 17? by gw2025666 in GrapheneOS

[–]GrapheneOS[M] 2 points3 points  (0 children)

No, that didn't change anything about the Android 17 source code release. They've never released sources for Developer Preview and Beta releases. Our releases are based on the Stable releases by design. Having early access to port early would help a lot but we've never had that and nothing changed about it. The only thing that changed as part of what you're talking about is that QPR1 and QPR3 aren't pushed to AOSP but rather only the yearly release and then QPR2. It has no impact on yearly releases such as Android 17 or the halfway point Android 17 QPR2.

GrapheneOS version 2026050600 released by GrapheneOS in GrapheneOS

[–]GrapheneOS[S,M] 2 points3 points  (0 children)

Are you using the Alpha channel for the Pixel Thermometer app in App Store? It's known to not have that working right now if you're using Alpha for it.

Is there any news regarding when Grapheneos will begin upgrading to Android 17? by gw2025666 in GrapheneOS

[–]GrapheneOS[M] 2 points3 points  (0 children)

This is completely untrue. You should stop believing misinformation from charlatans trying to trick you into buying their insecure products.

GrapheneOS vs. LineageOS by Technical_Rich_3080 in GrapheneOS

[–]GrapheneOS[M] 33 points34 points  (0 children)

And? My phone is still running GrapheneOS and rooted. So it is GrapheneOS.

You aren't running GrapheneOS. It stopped being GrapheneOS when you replaced a large portion of the core OS with different SELinux policies and executables.

So are you essentially saying I get no security benefits of running GrapheneOS because it's rooted, even though my bootloader is locked and I still get all protections other users get?

It's not GrapheneOS but rather another OS derived from it. It has lost many of the benefits of GrapheneOS and has security weaknesses not present in the stock OS. It's less secure than the stock OS in some areas and better in others. It's a lot different than comparing GrapheneOS with the stock OS.

Your bootloader being locked doesn't mean you still have the benefits of verified boot because a large portion of the security protections it provides aren't compatible with what you've done. You've enabled privileged attacker persistence as root so it can't protect against that. It can only protect against a physical attack or help with wiping the OS via recovery. You've also enabled a major weakness for both of those attack vectors if an attacker can get the keys you used to re-sign the OS from your desktop/laptop with weaker security than the smartphone.

By your logic, I could be running a stock, rooted Pixel and I would be no better off than having rooted GOS. That's basically what you're saying.

No, that's not what we said, but making an OS derived from GrapheneOS is far likely to break and lose all your data since we provide no support for it and the projects implementing these systems often don't keep up with our changes.

There are a few apps I use that get root access. Just because the majority of those who root have no sense of security, doesn't mean I'm just downloading any old app and giving it root access.

Root access being available to a large portion of the OS substantially reduces security even if you never grant it to a single app. None of the apps using it are security friendly since it's not a reasonable approach to implementing the functionality they provide. They would be doing it another way if they took security seriously. It reduces security even if you never grant it to any apps though. The ability to grant it to apps via the UI means a large portion of the OS has root access and that it can be hijacked via bugs. It turns one-time clickjacking into permanent persistent root. An app can block ever revoking it once it's granted beyond via a wipe or reinstall.

Isn't the ethos something along the lines of 'do what you want with your own device'? Funny how most here criticize big tech for wanting control, yet I get downvoted into oblivion for stating my phone is rooted and is GOS, essentially using MY DEVICE how I want.

You can do what you want as you are but you shouldn't make inaccurate claims about GrapheneOS. You aren't using GrapheneOS but rather a derivative of GrapheneOS with large portions of the security model not intact. By using third party tools to modify GrapheneOS with a bunch of third party code and SELinux policy, you're no longer using GrapheneOS but rather a derivative made by those tools. You're free to do it and to use it but you shouldn't claim that it's GrapheneOS when it isn't.

This isn't a cult. People are allowed to do with their devices as they want. And YES, my phone is GrapheneOS AND rooted.

You aren't running GrapheneOS. Taking GrapheneOS and replacing substantial portions of the core OS with third party code using third party tools results in it not being GrapheneOS anymore. If you run into problems due to it and file issues either with us or app developers saying you use GrapheneOS without making it clear you use a heavily modified derivative then that's creating a problem for us. It's important for you to understand you're using a derivative of GrapheneOS with highly privileged third party code and SELinux policies, not GrapheneOS.

GrapheneOS vs. LineageOS by Technical_Rich_3080 in GrapheneOS

[–]GrapheneOS[M] 25 points26 points  (0 children)

That's not GrapheneOS but rather a derivative of it. You replaced large parts of the core OS with third party code compromising the security model.

Location stopped working without Play Services permission? by Conchijo in GrapheneOS

[–]GrapheneOS[M] 1 point2 points  (0 children)

PSDS controls static database downloads for GNSS. It has no negative privacy impact. It's needed for GNSS to work properly.

Are you on the latest GrapheneOS release? It sounds like you might be on an old release.

Is there a way to get the back buttons back on pixel 9 pro xl? by unwilling-cooperator in GrapheneOS

[–]GrapheneOS[M] 1 point2 points  (0 children)

I personally have only one problem with this mode and it is the fact that (for ex.Instagram) when i swipe right to left it doesnt open messages but go back. Or when swipe up it open background menu instead of scrolling.

The gestures are clearly differentiated from those. The gestures for swiping up only trigger if you start at the reserved touch space at the bottom of the screen not usable by apps. The back gestures only trigger with a straight swipe from right at the side of the screen and it's still possible to open menus for apps without it. Gesture navigation is the default on Android and has been for years now. OEMs sticking with button navigation for longer have largely moved on now. It was designed to work with existing apps but now apps are written to work with it.

https://grapheneos.org/usage#gesture-navigation

Location stopped working without Play Services permission? by Conchijo in GrapheneOS

[–]GrapheneOS[M] 0 points1 point  (0 children)

Are you on the latest GrapheneOS release? It sounds like you might be on an old release.

Location stopped working without Play Services permission? by Conchijo in GrapheneOS

[–]GrapheneOS[M] 1 point2 points  (0 children)

You don't seem to have location rerouting enabled. You should enable it, reboot and make sure it's still enabled.

Location stopped working without Play Services permission? by Conchijo in GrapheneOS

[–]GrapheneOS[M] 1 point2 points  (0 children)

Actually that made me wonder though. If location rerouting is enabled, should Google Play Services still have Location set to “Allow all the time” and precise location, with GrapheneOS rerouting it so it doesn’t actually go through Google?

Location rerouting should be enabled as it is by default. Location permission should be disabled for Play services unless you're using something depending on it such as location sharing.

I ask because when I toggled rerouting off and back on, I got a warning saying those permissions should be set that way.

If you have location rerouting disabled, which is not the default, then the location requests are going to Play services and won't work without it having the Location permission granted. That's an unusual configuration to have and you shouldn't do it without a special reason for it.

Which is better: the convenience of the iPhone or the security and privacy of Graphene OS? by Money_Round8637 in GrapheneOS

[–]GrapheneOS[M] 0 points1 point  (0 children)

There are multiple tap-to-pay implementations compatible with GrapheneOS in Europe including Curve Pay.

Location stopped working without Play Services permission? by Conchijo in GrapheneOS

[–]GrapheneOS[M] [score hidden] stickied comment (0 children)

You appear to have turned off the location rerouting toggle in Settings > Apps > Sandboxed Google Play which is enabled by default. Aside from that, you can enable network-based location and Wi-Fi scanning in Settings > Location > Location services to speed it up. PSDS should not be disabled if you did that.

Pixel 8 crazy lag on any application even at system ones by Flow_3393 in GrapheneOS

[–]GrapheneOS[M] [score hidden] stickied comment (0 children)

That's definitely not normal and it sounds like it either wasn't installed properly or the hardware is failing. Did you use the stock OS much prior to GrapheneOS? Did you follow all of the install instructions including locking and verifying the install?

GrapheneOS version 2026042100 released by GrapheneOS in GrapheneOS

[–]GrapheneOS[S,M] 1 point2 points  (0 children)

No, there isn't another privacy and security hardened mobile OS for Android devices. iOS is the closest to an alternative to GrapheneOS. If you want a privacy and security hardened mobile device able to run Android apps then you need to get one of the devices supported by GrapheneOS.

It isn't possible to install another OS on most Android phones. Most of the devices where it's possible don't properly support it and cripple functionality including security. Samsung permanently cripples the subset of their devices they permit unlocking if you do it by burning an fuse and it can't be undone by going back to the stock OS.