Gmail thru Aurora or Sandbox?

K8y

Hello,

a. For those who need gmail, is downloading gmail app through the sandbox play store still private and secure, so Google won't have access to device?

b. Or is Aurora better?

C. Or just sign on via the web, (not app)?

Thank you.

GrapheneOS

K8y If you're going to use the app, it's better to download it through the sandboxed Play Store app especially since it's a Google app depending on Google Play and requiring a Google account so there's zero downside. Other people can respond about the other details.

pxlkng

K8y Aurora Store is not better, it is actually worse and insecure.

It is also a placebo as it is not avoiding Google like it is being claimed.

Always use sandboxed Google Play. If you prefer use an anonymous account for even more privacy.

Graphene1

K8y I prefere to use Play Store with a Google account only used to download apps.

If you set up this way but need your seperate Google account for email, using Vanadium would be preferred as I assume the two accounts could be linked if using the gmail app.

If your not concerned about a link between the two just log into the Play Store with the account you use for Gmail.

K8y

Also how do I make sure I'm only downloading apps from graphene's sandbox version of playstore and not the regular google playstore?

GrapheneOS

K8y There's no way to use non-sandboxed Google Play on GrapheneOS.

pxlkng

K8y Like the project account already told you, there is no way to have them un-sandboxed on GrapheneOS. This is due to the sandboxing-layer being part of the OS. The Play Services apps you get through the GOS App Store are actually unmodified original releases.

DeletedUser127

pxlkng Aurora Store downloads apps from the same source Google Play does. Apps are sandboxed in the same way, it is an AOSP feature. How does this make Aurora Store less secure, or even insecure?

pxlkng

DeletedUser127 Aurora Store doesn't properly verify the apps authenticity/integrity.

It completely lacks any working and reliable auto-update system which is very dangerous since automatic app updates are security-critical.
The fact that it relies on shared accounts which are against Google TOS and will be banned when detected can also always break automatic updates at any time, even if they would work.

It also tends to select wrong download versions of apps which can lead to issues and has other bad practices.

On top of all that using Aurora Store in the first place doesn't make any sense, as it doesn't avoid Google. Many apps on the Play Store bundle Google Libraries. Those run even without Play Services installed and allow Google to collect data - not more than it would be able to collect with sandboxed Google Play, as it is completely sandboxed and stripped of extensive permissions and access on GOS.

It is merely an unnecessary downgrade in security and more bothersome to use.

DeletedUser127

pxlkng There is a part of population, who want to get legitimate stuff from the source, perhaps use it without network where an odd language translation update can wait a day or two and they don't mind they are not signed in around the clock with Play Services reporting whatever you allow them to do. I see you like things automated, how great for you. I like to know what I'm doing and so should you.

pxlkng

DeletedUser127
You seem to greatly misunderstand my arguments.

please carefully read again and note that:

Aurora Store is not more private
Aurora Store is less secure
Sandboxed GMS is more secure and not less private
Even with Aurora Store Play Services (or rather Play Libraries bundled in apps) reports "whatever you allow them to do". Nothing different.

I'm unsure what you mean by "get legitimate stuff from the source". What you get from Aurora Store is potentially not legitimate, as it doesn't properly verify. Play Store does.
But both is the same in regards as to how close you are to the source.

You can disable network for apps even if you installed them from Play Store, not only Aurora. Unsure what you're trying to get at with that.

And you can't always know if an app update contains critical security updates or just feature changes. Having to do them manually increases the human potential to forget and delays potentially important security updates or never delivers them at all.

DeletedUser127

pxlkng there is a vast difference between saying something and actually proving it. Hinting at your bullet points. You forget about the app communication in which Play Services play a big part and to which even GrapheneOS devs can't seem to find recipe. I think I will abstain. Good luck and maybe chat on another occasion.

Graphene1

Apps from any source are sandboxed the same on Android.

GrapheneOS adds additional permissions not found on other versions of Android further restricting access to contacts, files etc. If the user sets up that way.

Aurora store obtains the apps from Google Play without the need for your own Google account however as others have said there maybe security trade offs.

Play Store is deemed to be more secure at the tradeoff you need an account, therefore Google collects usage activity and links that to said account through general Play Store usage and possibly interapp communications.

K8y

Thank you everybody for your helpful and insightful inputs!

But what about just signing in via Vanadium web, instead of using the app...is there any benefit in this/do people do this to be more private?

Graphene1

K8y possibly, as you'd not be giving the Gmail app up to 69 permissions (according to Exodus anyway) which would not be accessible by a website.

Be aware there are some concerns over the accuracy of the items Exodus report on so take with a gain of salt but certainly something to consider if your concerned.

Also worth noting, emails are not private anyway, and as previously stated, Google still have access to your emails so in that sense neither are private.

https://reports.exodus-privacy.eu.org/en/reports/com.google.android.gm/latest/