GOS Privacy Installation

2quuhq3iojgqeugj9jq3380g

I am about to install GOS. Does it matter if I install it using my personal computer with my home wifi for privacy or does it not matter once GOS is installed as long as I don't use sims and google services?

Tandara

It doesn't matter. ISP will know you use GOS anyways since OS sends time syncing and update requests, bypassing vpn

gosuers1

Tandara

"bypassing vpn"

Whaaaaaaaaaaaaaaaaaat!?

I was going to use GOS with Always-On VPN to my VPN server, but if GOS leaks data outside VPN then this is a huge issue for me.

Anyone can confirm this?

legreteco

Tandara proof please.

Novaliss

gosuers1 if GOS leaks data outside VPN

Not if configured correctly and used accordingly to your setup+configuration.

Tandara

gosuers1
legreteco
I never said "leaks". Connectivity checks, timezone, and other packets are supposed to be sent over normal network and not through some VPN tunnel. They wouldn't work otherwise. They don't reveal anything more than the fact you are using GOS. You would need to go beyond VPN setup and disable them altogether in settings. I'm addition, Always On VPN is not enough, you would need 'Block All connections without VPN' that prevents leakage even after reboots/startups/initialization. Please check the forum for the existing threads regarding this.

de0u

gosuers1 Whaaaaaaaaaaaaaaaaaat!?

The GrapheneOS project has a lot of documentation on the web site. People with specific high-importance needs arguably would benefit from consulting the documentation before installing. Otherwise, assumptions might turn out to be inaccurate.

One recurring source of surprised posts on this forum is people assuming they know what "sandboxed Google Play" means based on hearing the name and attaching hopes to the name.

Novaliss

https://grapheneos.org/faq#non-hardware-identifiers

Apps can detect that they're being run on GrapheneOS via the privacy and security features placing further restrictions on them and hardening them against further exploitation

https://grapheneos.org/faq#default-connections

By default, GrapheneOS only makes remote connections to GrapheneOS services and the network provided DNS resolvers. There aren't any analytics/telemetry in GrapheneOS. The only information revealed to the GrapheneOS servers are the generic device model (such as Pixel 7 Pro) and OS version which are necessary for obtaining updates. The default connections provide the OS and apps with updates, set the system clock, check each network connection for internet connectivity, download a global database (does not vary based on location) with predicted satellite locations when using Location and obtain attestation chain signing keys for the hardware keystore needed for the hardware-based attestation feature.