greydson

Daisy-chain VPNs: It would be nice to use a VPN prior to forcing all Apps through Tor

You can already do this with apps supporting chaining. They can support passing all the traffic through another app already.

Lock to 1 WiFi: I do not need Graphene to search around for additional WiFi options if my primary WiFi is not available. Even with MAC randomization, it's more data than I need to be emitting.

Scanning for Wi-Fi access points doesn't leak data as long as you don't have any saved hidden SSID APs.

Hb1hf

Duress PIN/passphrase/fingerprint

This is being heavily worked on already.

Amnesic profiles

You'll need to explain what you want in more detail.

Working fingerprint after switching profiles (this one's on AOSP, but hey it's a wish list)

This works already.

App scope (most notably to have gplay installed and chose access to in on a per-app basis instead of having different profiles to do the trick)

App communication scopes within profiles are planned, but for now profiles provide it.

Mic/Cam/Location access auto turn off (sort of like app's "only this time" feature)

This wouldn't really work since apps would keep it active if they were using it.

    Themble

    Apps from other profiles not visible in current app list (when entering Settings -> Apps).

    This wouldn't hide the installed apps since there are other ways of detecting them such as attempting to install an app with the app id of the app you want to detect with a different signing key than the official one. If it fails to install due to a signature error, the app is installed.

    • [deleted]

    • Edited

    Ram
    Wifi hacking tool
    Putting phone near to someone's phone to hack them wirelessly like a hacker from movies.

    GrapheneOS is not Kali Linux lol

      GrapheneOS

      Thanks for your reply!

      Good to know about duress pin and app scopes!

      Fingerprint access after switching profiles: it's buggy. People report having to use pin/pf in the first time after switching back and for some people it never turns back on. For me some updates make it better, others bring the issue back.

      Amnesic profiles: the idea came from this discussion:
      https://discuss.grapheneos.org/d/6639-can-someone-create-amnesia-mode-for-profiles
      It's basically a profile that keeps no user/app data. It either returns to a blank profile or to a blank + installed apps after being logged out.

      Mic use: it's a shame. Having the mic off except for phone/signal/WhatsApp calls would be great, specially for the phones we set up for family members who are not great privacy enthusiasts, and who won't bother to manually turn the mic back off after every call.

      Oh, and what about invisible profiles, if it's not asking much?

        I would really like a shared folder/files option for different profiles being able to share select files or folders, without having to plug in an external USB-C memory stick. To be able to read select folders or files created in one profile from the owner profile, but not necessarily vice versa.

          TrustExecutor
          if you download Protondrive in both profiles? It is free (limited) and can do the job or am I missing something?
          Even when use different inlog, you can use the share link to the other.

          13 days later
          • [deleted]

          Hb1hf Having the mic off except for phone/signal/WhatsApp calls would be great

          You can select 'Only when in use' when granting Microphone, Location and Camera permissions to any app.

          serenrodgers
          Absolutely, I second that. Very, very important for Vanadium to be the viable default.

          I would add also that after 10 wrong pin codes attempts the device wipes itself, or delete the encryption key.

            • export + import blocked numbers
            • assign sim card preference per contact. then i could drop custom dialer and sms app
            • call back missed calls using the sim on which the call arrived

            Here is a simple one - color invert all the GOS icons to match dark mode, for example; Phone app - dark background, white handset, Camera app - dark background, white camera and etc.

            If it's a wishlist...

            • A kind of quick setup for User Profiles. My idea would be to use GrapheneOS somewhat similar to Qubes, regularly setting up new Profiles for very limited tasks and deleting them afterwards. This is already possible, but could be made easier. For example, there could be multiple default profile types you can select to automatically have the settings configured like this.
            • Another hurdle currently is that while you can install apps into new User Profiles from the Owner profile, this doesn't do much if you have a setup where you pretty much don't use the owner profile at all and don't actually have any apps installed in it.
            • In fantasy land, where you have unlimited capacity, I'd love for you to provide more apps in "Apps". In practice, Obtainium and Accrescent projects are looking quite promising and F-Droid seems to also head into a better direction, so it would probably be a waste.
            • Dark/black/more beautiful themes/UI for the keyboard, calculator, clock, maybe more
            • A very very basic GOS notes app that's there by default
            • Security Keys as MFA for User Profiles
            • A way to avoid being fingerprinted through your background (question: does this currently only affect the home background, or is the lock screen a problem as well?)
            • And finally, a more extensive wiki/way of sharing knowledge with further scope. I consider the GOS team as some of the most knowledgeable people (surprise) on many infosec questions. GOS as a tool for targetted people that need the safety it provides might benefit everyone a lot by sharing more knowledge. Something like an official Blog that now and then comments on current events or provides easily accessible insight into what's being worked on, might be good. Communication generally could, imo, be improved upon.

            I want to add that this is not in any way to be understood as criticism. Graphene is an incredible product and its achievments are the reason expectations are that big:) Also, maybe those things don't make sense, I'm not a dev, pls don't judge me too hard:D

            Well, here are another three wishes:

            1. Full eSIM support that does not require Google Play Services
            2. Not one more app added! Please : )
            3. Update "Messages" to the latest API
              • [deleted]

              AlanZ Update "Messages" to the latest API

              Its better to just include another SMS app or at least ask user to download one on the device setup screen