• GrapheneOS

    From Greenlfc@1337:3/129 to All on Wed Jan 26 08:08:02 2022
    I've been messing around with various alternate Android ROMs for a long time. It's always an adventure - get root, unlock the bootloader, find the right ROM for your exact version of the device, flash it, brick it, recover it, try again, etc.

    Usually I'll end up with LineageOS, without any Google services. However, after work got me a Pixel 3 for (cough) testing, I finally had a chance to try Graphene OS.

    The Pixel 3 is the oldest supported device for GrapheneOS and may fall off before too long. When buying a phone for GrapheneOS, make sure you can unlock the bootloader - the carrier-provided versions don't allow this and prevent you from installing alternate ROMs. The eBay listing should mention this, or you can ask the carrier. If the IMEI starts with "3", it's a Verizon phone and definitely won't work.

    All that said, installing GrapheneOS is the *easiest* alternate ROM install I've ever done. Their web-based installer is flawless. Once booted into the phone you'll find that it's extremely minimal. The first thing to do is go install F-Droid and Aurora so you can easily install other apps. The device is very smooth and the interface is visually appealing.

    In terms of drawbacks, the first is that, as all of the supported devices are Pixel 3 and later, you can't buy a phone that has a MicroSD slot; you're committed to the storage on the phone and no more. The second drawback, for some users, is that since Google Play services are not installed, some apps won't work (including Microsoft Intune, if you need it for work).

    I'm currently daily driving this as my "personal" phone (I need a full Android experience for work). I'll follow up in a few days with some more impressions.

    GreenLFC ║ e> greenleaderfanclub@protonmail.com
    Infosec / Ham / Retro ║ masto> greenleaderfanclub@distrotoot
    Avoids Politics on BBS ║ gem> gemini.greenleader.xyz

    --- Mystic BBS v1.12 A47 2021/12/24 (Raspberry Pi/32)
    * Origin: 2o fOr beeRS bbs>>>20ForBeers.com:1337 (1337:3/129)
  • From MeaTLoTioN@1337:1/101 to Greenlfc on Thu Jan 27 13:37:46 2022
    On 26 Jan 2022, Greenlfc said the following...

    I've been messing around with various alternate Android ROMs for a long time. It's always an adventure - get root, unlock the bootloader, find the right ROM for your exact version of the device, flash it, brick it, recover it, try again, etc.

    Ah I haven't put a new OS on an Android phone since my HTC One M8, I have never tried LineageOS but have heard a lot of positive reviews about it. I used to use MIUI for a long time on all my previous Android phones.

    All that said, installing GrapheneOS is the *easiest* alternate ROM install I've ever done. Their web-based installer is flawless. Once booted into the phone you'll find that it's extremely minimal. The
    first thing to do is go install F-Droid and Aurora so you can easily install other apps. The device is very smooth and the interface is visually appealing.

    GrapheneOS sounds cool, how does a web installer work? Intriguing.

    In terms of drawbacks, the first is that, as all of the supported
    devices are Pixel 3 and later, you can't buy a phone that has a MicroSD slot; you're committed to the storage on the phone and no more. The second drawback, for some users, is that since Google Play services are not installed, some apps won't work (including Microsoft Intune, if you need it for work).

    Sounds like a good way to force yourself to be de-googled. I can understand why you'd say it was a drawback, but then, people who would want to use that OS would probably see that as a pro, right?

    I'm currently daily driving this as my "personal" phone (I need a full Android experience for work). I'll follow up in a few days with some
    more impressions.

    My work phone is a stupid Samsung A20e, it's super slow and full of bloat. Work also put on the Microsoft management thing which gives it kinda two work spaces, one personal so I can install what I like, but can't access any work stuff like email etc, and the other is a work space with all the work apps like MS team, outlook etc, but can't screenshot or save to the phone internal memory etc. I don't like the phone, I don't use it for anything, just sits on my desk and if I'm on call I put the volume up so I can hear it ring if I get called out. I don't really use a phone for anything but IM usually lol, and I have my personal phone for that, which runs a BBS too.

    Looking forward to seeing what you make of GrapheneOS when the next installment hits. Good work!

    ---
    |14Best regards,
    |11Ch|03rist|11ia|15n |11a|03ka |11Me|03aTLoT|11io|15N

    |07── |08[|10eml|08] |15ml@erb.pw |07── |08[|10web|08] |15www.erb.pw |07───┐ |07── |08[|09fsx|08] |1521:1/158 |07── |08[|11tqw|08] |151337:1/101 |07┬──┘ |07── |08[|12rtn|08] |1580:774/81 |07─┬ |08[|14fdn|08] |152:250/5 |07───┘
    |07── |08[|10ark|08] |1510:104/2 |07─┘

    ... Computers all wait at the same speed!

    --- Mystic BBS v1.12 A47 2021/12/13 (Linux/64)
    * Origin: thE qUAntUm wOrmhOlE, rAmsgAtE, uK. bbs.erb.pw (1337:1/101)
  • From Greenlfc@1337:3/129 to MeaTLoTioN on Thu Jan 27 06:39:24 2022
    On 27 Jan 2022, MeaTLoTioN said the following...

    GrapheneOS sounds cool, how does a web installer work? Intriguing.

    It's really slick. You can see it here: https://grapheneos.org/install/web

    Basically, you unlock your bootloader, plug it in, and follow the prompts on the site (opened in Chrome).


    Sounds like a good way to force yourself to be de-googled. I can understand why you'd say it was a drawback, but then, people who would want to use that OS would probably see that as a pro, right?

    Absolutely. It's only a problem if I don't want to carry two phones, but then, privacy isn't necessarily convenient.

    My work phone is a stupid Samsung A20e, it's super slow and full of
    bloat. Work also put on the Microsoft management thing which gives it kinda two work spaces, one personal so I can install what I like, but can't access any work stuff like email etc, and the other is a work

    Exactly, you're talking about the "Android for Work" environment that's managed with Intune. That's what we have. Unfortunately, I tried shoehorning it in and it failed spectacularly enough I had to factory reset :D. If you try to enroll on one of these devices, it thinks you're in China or some other locale that blocks Google.

    On the plus side, I run our Intune and Conditional Access environment, so if I want to make a special set of rules for me I have that as an option. <Cue Palpatine: "UNLIMITED POWER!!!">

    Another thing that doesn't work is push notifications from Microsoft Authenticator. This isn't the end of the world, though, since you can still enter the TOTP code from it or another standard authenticator app.

    If my daily dies (which it might, the screen keeps flashing green at random times), I think I'll get a Pixel 4 or 5 and switch permanently.

    GreenLFC ║ e> greenleaderfanclub@protonmail.com
    Infosec / Ham / Retro ║ masto> greenleaderfanclub@distrotoot
    Avoids Politics on BBS ║ gem> gemini.greenleader.xyz

    --- Mystic BBS v1.12 A47 2021/12/24 (Raspberry Pi/32)
    * Origin: 2o fOr beeRS bbs>>>20ForBeers.com:1337 (1337:3/129)
  • From Otto Reverse@1337:3/129 to Greenlfc on Thu Jan 27 14:44:38 2022
    Another thing that doesn't work is push notifications from Microsoft Authenticator. This isn't the end of the world, though, since you can still enter the TOTP code from it or another standard authenticator app.

    Do you happen to know off hand if the authenticator app Authy works on GrapheneOS?

    --- Mystic BBS v1.12 A47 2021/12/24 (Raspberry Pi/32)
    * Origin: 2o fOr beeRS bbs>>>20ForBeers.com:1337 (1337:3/129)
  • From Greenlfc@1337:3/129 to Otto Reverse on Fri Jan 28 05:54:30 2022
    On 27 Jan 2022, Otto Reverse said the following...

    Do you happen to know off hand if the authenticator app Authy works on GrapheneOS?


    Not offhand, no. Unless it's heavily dependent on Google Play Services, I would expect it to. Let me test real quick...

    I'm installing it from the Aurora Store (which is a sort-of Google Play proxy). It says it requires GSF, but that's not always a show stopper.

    Continued on, I received a number of errors - when creating an account it didn't think the phone supported sms (it did, and I was able to receive and enter the code). I was able to add a test account and it's generating codes.

    Probably the most annoying thing is that every time you go to the home screen it complains that GSF is missing and it won't work... and then it does :).

    GreenLFC ║ e> greenleaderfanclub@protonmail.com
    Infosec / Ham / Retro ║ masto> greenleaderfanclub@distrotoot
    Avoids Politics on BBS ║ gem> gemini.greenleader.xyz

    --- Mystic BBS v1.12 A47 2021/12/24 (Raspberry Pi/32)
    * Origin: 2o fOr beeRS bbs>>>20ForBeers.com:1337 (1337:3/129)
  • From Otto Reverse@1337:3/129 to Greenlfc on Fri Jan 28 17:08:54 2022
    Not offhand, no. Unless it's heavily dependent on Google Play Services,
    I would expect it to. Let me test real quick...

    Thanks I appreciate that! (and the posting of your results)

    I think I'll give it an install this weekend.

    --- Mystic BBS v1.12 A47 2021/12/24 (Raspberry Pi/32)
    * Origin: 2o fOr beeRS bbs>>>20ForBeers.com:1337 (1337:3/129)