Wifi or Ethernet for Graphene?

K8y

Aloha everyone,

Is downloading Graphene by wifi less secure than by ethernet cable? And just generally speaking is one more secure than the other?

Thank you.

de0u

K8y Is downloading Graphene by wifi less secure than by ethernet cable?

After installation, carefully check every digit of the signing key hash displayed on the boot screen (as documented in the installation instructions). If that is correct, then the GrapheneOS that was installed is correct (unless somebody has compromised the bootloader, which would be a lot of work).

Basically, the device is designed to certify the identity of the installed OS to the end user. It's unlikely the download would be interfered with, but the system includes a solid way to check.

Probably9857

For practical purposes, there is no difference. Ethernet cable might be faster though.

In theory, there is an additional attack surface for wifi transmissions, but it is extremely unlikely that anyone would be able to exploit that.

K8y

Is there any advantage in downloading Graphene from public wifi using a vpn?

I'm thinking it might help with keeping it private.

de0u

K8y Is there any advantage in downloading Graphene from public wifi using a vpn?

I'm thinking it might help with keeping it private.

I think it might be productive to decide which information one wants to conceal from whom. In this case, from whom is it that you wish to conceal the fact that you are downloading GrapheneOS?

If you download GrapheneOS using your regular home network connection with no VPN, then your ISP will (if they care to) know that you have downloaded GrapheneOS. Is that a problem?

If instead you download GrapheneOS using your regular home network with a VPN, then your ISP probably doesn't know you downloaded GrapheneOS, but your VPN provider does!

If instead you download GrapheneOS using Wi-Fi at McDonald's, McDonald's will know that somebody downloaded GrapheneOS, but if you used a randomized MAC address they probably don't know who it was ... unless, of course, you paid for your milkshake by tapping your watch at the kiosk...

It is always possible to add labor to a task or activity, e.g., downloading GrapheneOS at a public library may be "more private" than downloading it at home, and using a VPN may be "more private"... but is the specific tactic providing a degree and variety of privacy that you care about, and that is worth the amount of effort?