android security question

GrapheneOS

Blastoidea That's not the only purpose of GrapheneOS at all.

GrapheneOS

Paflechien If you don't have Storage Scopes, many apps will require giving bulk access to your files/media. Similarly, many apps will require giving bulk access to your contacts without Contacts Scopes.

GrapheneOS

[deleted] GrapheneOS has substantial privacy and security benefits, not specifically one or the other. It starts from an OS that's already far more private and secure compared to traditional operating systems (AOSP) and substantially improves it. The list of features at https://grapheneos.org/features are what we add compared to standard Android. This page does not include features that are standard Android features.

zzz

User2288

Once you really get educated about what is happening on your current phone and computer, then you'll be so jarred that you won't be wondering why you should get this.

Agreed on this point.

Itme
Personally I would recommend reading books about happenings in digital surveillance to develop your own understanding and reasons for switching. This is not the easy / convenient path, and the average consumer has spent decades being spoonfed convenience and intentionally hooked on it by the corps to increase dependence and negative feelings associated with "withdrawal".

I think you will want your own homemade ideological convictions to lean on if the going gets tough.

IMO there are many benefits to reading books to develop a foundation, rather than articles / YouTube videos / whatever else floats around on the net (perhaps I am just a snob in this regard ^^).

Some books I would recommend:
The Age of Surveillance Capitalism (2019), Shoshanna Zuboff
Privacy Is Power (2022), Carissa Veliz
How to Destroy Surveillance Capitalism (2020), Cory Doctorow

Best of luck!

GrapheneOS

[deleted] Exodus doesn't accurately list permissions and what they can do. It misuses the low-level permission declarations. Play services does have a massive amount of access via permissions, but this isn't an accurate list of what it can do. It also has a lot of access granted via special privileged SELinux MAC policy, special privileged SELinux MLS policy, the fact that it's marked as a privileged app (priv-app) and all of the integration into the OS where it's used as a backend for many OS services including location, geocoding and much more.

GrapheneOS

[deleted]

Also, Rust does nothing to better C, when C is written well, plenty of knowledgeable coders have attested to that. C is not anymore "memory unsafe" than a sharp knife is "finger-cut unsafe". It's a tool. If used with care and foresight, it can yield a "safe" result.

This is very wrong. Real world code has bugs, and in C minor bugs become severe code execution vulnerabilities due to lack of memory safety. The Linux kernel has hundreds of these severe security vulnerabilities found and fixed every month. If your statement was true, that would mean the Linux kernel is absolutely horribly written.

[deleted]

GrapheneOS

My opinion on C stemmed from following the likes of Drew DeVault (an opponent to implementing Rust).

(drewdevault.com/2022/10/03/Does-Rust-belong-in-Linux.html - among many others articles).

I don't work on kernel development, and am aware that something like 3/4 of issues are related to memory flaws, bur my previous understanding was exactly what you refute: that not enough care/consideration was taken when those parts were written.

I appreciate your point and will educate myself further.

« Previous Page