The drama and accusations the GrapheneOS developers are spewing and engaging in are giving me a bad taste in the mouth and make me doubt the OS’s reliability am I the only one?

  • Truscape@lemmy.blahaj.zone
    link
    fedilink
    arrow-up
    0
    ·
    18 days ago

    The source code’s just as transparent, and the fundamental concepts and implementations aren’t going to vanish at all. If we get a future CarbonOS, so be it, but I doubt that will be in any near future scenario.

    • Auli@lemmy.ca
      link
      fedilink
      English
      arrow-up
      0
      ·
      17 days ago

      Why is it transparent? Cause its open source. Yes there has never been anything a bug or backdoor in open source code before ever.

      • artyom@piefed.social
        link
        fedilink
        English
        arrow-up
        0
        ·
        17 days ago

        Bing transparent is not the same thing as being secure. The difference is that closed source code can be audited by no one except its’ developers, and open source code can be audited by anyone.

  • CoyoteFacts@piefed.ca
    link
    fedilink
    English
    arrow-up
    0
    ·
    18 days ago

    It mainly makes me pine for linux phones. I think Graphene is the best we have at the moment in the mobile space, but that’s far more of a testament to our lack of options than how valuable Graphene is. I have no doubts that we’ll eventually kick Graphene to the curb when it stops being useful, so I’m not overly concerned with its future. Worst-case, I think many of us would be just fine on any other AOSP rom for a few extra years until linux phones can come save us all.

    • sobchak@programming.dev
      link
      fedilink
      arrow-up
      0
      ·
      17 days ago

      I could be wrong, but I think Linux would be horrible for the kind of security you’d want in a smartphone. At least that’s what I read from the GrapheneOS folks…

      • CoyoteFacts@piefed.ca
        link
        fedilink
        English
        arrow-up
        0
        ·
        17 days ago

        As far as I’m aware this is true (same with a lot of desktop linux distros), but I’m more interested in freeing myself from Android at the moment. I’m sure we can get there eventually w/r/t security, but it takes time, and we’ll never get there if we don’t start moving.

      • gtr@programming.dev
        link
        fedilink
        arrow-up
        0
        ·
        17 days ago

        Depends on what your threat model is. Sure a fully locked down mobile OS is more secure, but I also care about freedom and privacy. It’s not all black and white.

  • upstroke4448@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    0
    ·
    18 days ago

    Not as bad a taste as the French government is giving me.

    If its do I trust GOS or a confirmed pro chat control governments side of the story, its an easy choice.

    • artyom@piefed.social
      link
      fedilink
      English
      arrow-up
      0
      ·
      17 days ago

      There are many more sides than those 2. GOS is screaming about a new “harrassment” campaign every week.

      • upstroke4448@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        0
        ·
        17 days ago

        Their past dramas are irrelevant to this issue.

        Giving into a straw man argument such as their other dramas somehow devalue what’s going on now, only plays into the French propaganda campaign.

        • artyom@piefed.social
          link
          fedilink
          English
          arrow-up
          0
          ·
          17 days ago

          They’re not irrelevant, they’re both symptoms of the same problem. The Developer Who Cried Wolf.

      • pdxfed@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        17 days ago

        Knowing nothing of the situations details, when you’re a thorn in the side of the most powerful interests on the planet,it seems reasonable that a small group would face deliberate, concentrated pressure from business to legal and the state and any other mechanism. That’s generally what power does, assuming the little guy isn’t subsumed.

        What is the evidence of foul play by GOS, or why would they not have a pretty extreme bias of support?

        • PiraHxCx@lemmy.ml
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          17 days ago

          I think everyone would love some evidence here, but so far it was one journalist from one newspaper talking to one cop that said criminals are using GrapheneOS because it destroys evidence. Afaik Daniel didn’t post any notification, inquiry or general communication he received from any government official or agency…

        • artyom@piefed.social
          link
          fedilink
          English
          arrow-up
          0
          ·
          17 days ago

          from business to legal and the state and any other mechanism.

          I’m not referring to any of those “mechanisms”, I’m referring to basically the entirety of the privacy/security/sovereign communities. They disparage other Android “privacy” platforms and communities on a regular basis, then claim to be victims of “targeted attacks” from those communities. Louis Rossman and Techlore are also 2 people who have also been accused of “harassment” without evidence. Just for starters.

            • artyom@piefed.social
              link
              fedilink
              English
              arrow-up
              0
              ·
              16 days ago

              Look at their social accounts. Half their posts are complaining about some sort of “harrassment”. They claim their branding was being used to sell these devices without any evidence. They claim this is a “state-sponsored attack” without any evidence.

  • l3db3tt3r@piefed.social
    link
    fedilink
    English
    arrow-up
    0
    ·
    17 days ago

    Who benefits?

    Who benefits from sowing a narrative around “drama”, “accusation”, and/or “paranoia”. Seriously.

    I think given the following circumspect; GrapheneOS’s reaction, to move project pieces out of potential hostile environments/jurisdiction, is perfectly reasonable.

    1. France’s Support for EU “Chat Control”, scanning proposals. France has been one of the governments most supportive of EU‑level proposals that would require scanning of communications and devices for illegal content.

    2. The general French framing and approach to cybercrime. As in other EU countries, French authorities are pushing for: Expanded powers to compel cooperation from service providers, and developers. Strong rhetoric against tools that are seen as systematically obstructing investigations.

    • Supervisor194@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      17 days ago

      Man, I am so totally with you, but the problem - and it’s ridiculous to say it’s not a problem - is the guy running GrapheneOS is apparently a socially backward drama whore. Louis Rossman is an amazing advocate, I don’t even pay that much attention to shit and I know him as one of my favorite people on YouTube because of his advocacy for right to repair. And this guy just pisses all over his face for the most minor perceived infraction. I have no problem imagining that something like GrapheneOS would face intense harassment from the state, but when you act like this dude does you completely lose all credibility. Everybody is just left wondering if maybe, just maybe, this is just your weird ass making shit up.

    • exu@feditown.com
      link
      fedilink
      English
      arrow-up
      0
      ·
      17 days ago

      The main GrapheneOS dev creates beef with a bunch of other projects. It’s not some shadowy organisation, it’s him having stupid takes in GitHub issues and spreading false claims about other projects.

  • N.E.P.T.R@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    0
    ·
    17 days ago

    While I do find GOS drama a boy annoying, they aren’t wrong about the lacking security of many AOSP forks. iode and /e/OS have a history late patches for security vulnerabilities in both the OS (https://web.archive.org/web/20241231003546/https://divestos.org/pages/patch_history) and for the forked apps they bundle with it. Each Android monthly and Chromium patches usually contains dozens High Risk CVEs, so taking a month or 2 is unacceptable. Neither are good for privacy or security.

    See a comparison between some Android ROMs here, especially noting the update speed section: https://eylenburg.github.io/android_comparison.htm

  • ganymede@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    17 days ago

    some of it is kind of inevitable when you see how far ahead from everyone else they are technically and when people shitting on their work just aren’t at their (technical) level it seems to be very draining. and eventually lead to dramas.

  • warm@kbin.earth
    link
    fedilink
    arrow-up
    0
    ·
    17 days ago

    GrapheneOS has always had a massive PR problem and crazy leadership unfortunately.

    • pdxfed@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      17 days ago

      Unlike say Google? Why is there an expectation that a group working completely against some of the most powerful actors on the planet, openly, against the grain of mainstream society often and having to bear that responsibility would be charming, at ease?

      I cannot even begin to imagine the mental stress from constantly having to think ahead, in a global David and Goliath, in a maze designed to get you to give up. I probably have half the issues the GOS team does and I can’t claim it’s for doing anything on the scale of what they are.

      • warm@kbin.earth
        link
        fedilink
        arrow-up
        0
        ·
        17 days ago

        You are mistaking what I am saying. I have nothing against the project as whole and the mission is fantastic.

        They just have zero PR skills, don’t know when to keep their mouth shut or how to communicate properly when they need to. A little bit of consultation would go a long way for them. Obviously I am not expecting Google levels of PR/marketing, but it’s not great to see just ranting Discord messages. If it wasn’t an issue, these posts wouldn’t exist at all, the main dev is psycho.

  • Matt@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    17 days ago

    I don’t care about the community, I just care about the experience of using it.

  • exu@feditown.com
    link
    fedilink
    English
    arrow-up
    0
    ·
    17 days ago

    You’re not the only one. It’s one of my biggest reasons for staying away from it

  • azuth@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    0
    ·
    17 days ago

    In my opinion both the evident ego of of the project lead as well as his naivety (tethering the project to Google) are huge red flags despite any assumed technical superiority.

    • FG_3479@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      17 days ago

      They chose Google because they are the only major OEM to allow you to relock the bootloader after installing a custom ROM. Samsung, Motarola, Huawei, Xiaomi etc all don’t.

      • communism@lemmy.ml
        link
        fedilink
        arrow-up
        0
        ·
        17 days ago

        In addition to this, they are working with an OEM to produce their own Graphene phones. It sounds like they’ve made significant progress on that front so I’m hopeful.

    • TheOneCurly@feddit.online
      link
      fedilink
      English
      arrow-up
      0
      ·
      17 days ago

      They’re literally working with a manufacturer to make non-google phones. Tethered to google is a wild mischaracterization.

      • azuth@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        0
        ·
        17 days ago

        No it’s not. This is a recent development that has not yet actually come to fruition. It may exist in 2026.

        Before that GrapheneOS dismissed any idea of targeting other phones than the ones build by one of the most anti-privacy companies on earth, that seeks to consolidate control of Android.

        • NewOldGuard@lemmy.ml
          link
          fedilink
          English
          arrow-up
          0
          ·
          17 days ago

          This isn’t true, they’ve supported other devices in the past. They’ve been Pixel-focused for the security features that other manufacturers haven’t offered

          • azuth@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            0
            ·
            17 days ago

            Yes, before Google made phone on it’s own they supported some Nexus devices (google-partnered) and the Samsung Galaxy S4.

          • azuth@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            0
            ·
            17 days ago

            I don’t need a phone, GrapheneOS needs one now that Google is trying to force them out. I wonder if their new phone will actually meet all the requirements, if it comes out.

            As for complaining, GrapheneOS is the one bitching about other Android versions existing since forever. Now, they 've started making unsubstantiated claims of them attacking them somehow.

              • azuth@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                0
                ·
                17 days ago

                No GrapheneOS is not just calling them out on lack of security.

                It’s apparently from their discord, so it took me a while to find it again.

                It’s not about the personality of it’s directors, it’s about it’s effect on the (alternative) Android ecosystem as a whole, which is not just about security but also privacy and user control.

                Even with regards to security, their choice of limiting devices apparently makes their users targets for extra scrutiny and harassment. That does have actual implications for people whose threat model includes authorities unless they already are guaranteed to be targets.