• General

  • Find my Device on GrapheneOS?

Matthai a security review

LOL. It is well known how insecure SMS is. People with a high thread level should definitely not install an app with these permissions. Something like this is a gift for attackers.

    You see, you do not have to use SMS functionality. :)
    Just do not grant rights and that is it.

    The point is: "find my phone" app is very needed. GOS does not offer it. So people will look for alternatives. It seems this is the only alternative here.

      I think Locus is a different type of app. And it doesn't work on newer Android versions.

      Matthai

      If you only set this up from your server and via VPN, the attack surface is of course more difficult. And setting up and administering a server is also something where you always learn something new. Everyone can do whatever they want with their phone.

      I just wanted to point out that such an app should not be used carelessly via SMS and possibly with third-party service providers.

      In addition:

      • The phone must always be connected to the Internet.
      • It usually doesn't help much if it's stolen.
      • It's unlikely that I'd lose a device worth almost $1000, just like my wallet.

      The point is: "find my phone" app is very needed. GOS does not offer it.

      There is a good reason why the GrapheneOS developers did not integrate or removed the code for remote access and device locate.

        Well, there is also good reason why people should use de-Googled phones. But they are not. And GOS decided, it is better to run Play services in sandbox, than to persist in orthodoxy. :)

        It's unlikely that I'd lose a device worth almost $1000, just like my wallet.
        I do not have a toothache, so we do not need dentists.

        Tested https://gitlab.com/Nulide/findmydevice and it works good. Whitelisted 2 family members, they can send me a sms msg and receive a auto reply with coordinates via sms from my phone. If the phone is rebooted or sim card is taken out it still works because i have a esim without a pin, its always "online" if powered on.

        i didnt opt in for the option to communicate location with a server (either self hosted or public) since the sms reply with geo coordinates is all i need.

          Meph I tried a few weeks ago, unfortunately, Findmydevice didn't work for me because I have an owner profile and my main everyday profile. When installed in the owner profile and using my everyday profile it didn't work and when installed in my everyday profile it didn't work either...

          • Meph replied to this.

              Arnauld I also use 2 profiles, my main and a work profile. But it works.

              Just noticed a issue though, I didnt open the app in a while and tested sending a location request sms from another device, and it replied with a location that was old. I wonder if this is because it wants a setting I don't want to change which is to use a terminal and do something like "pm grant de.nulide.findmydeviceandroid.permission.WRITE_SECURE_SETTINGS"

                  Meph I think its fixed now, app was not allowed to run in the background

                      5 months later

                      Meph How you enabled sms to work? If I try to give permissions for findmydevice, it show me that's not allowed and point to explanation with the URL, but URL doesn't work. On click nothing happens.

                          Well, I just enabled SMS permission and it works.

                          A bug maybe?

                          pampur this has been discussed many times in the forum. Go to the app info of that app and enable restricted permissions in the 3-dot menu in the upper right corner.