Linux equivalent of grapheneOS

JayJay0

What would be the Linux equivalent of grapheneOS?

Thanks

also hello everyone

[deleted]

JayJay0 What would be the Linux equivalent of grapheneOS?

You'll have to start with hardened-gentoo and have Grsecurity, SELinux, hardened_malloc and seccomp to even come close

Paflechien

JayJay0 The smartphone equivalent is iOS with lockdown mode activated, there is no other equivalent.

Paflechien

JayJay0 And grapheneos is based on linux.

N1b

Paflechien not sure about that, maybe they are comparable in terms of security, but I don't know enough to give an educated answer for that. If you look at privacy, GOS is a dream and iOS a nightmare (requires an Apple ID to install apps, much less privacy related settings that even get ignored by Apple themselves and many more issues). Apple wants to monetize your data and are much more restrictive about what you can control. They just happen to be very good at marketing which makes them more dangerous in my eyes than even Google (Google is very transparent about their anti-privacy intentions while Apple does privacy-theater to confuse their customers).

In terms of comparable Linux distributions, GOS is currently unbeatable if you need both security and privacy, at least that's what I hear from Michael Bazzell, The Hated One and Side of Burritos which are the channels I trust for this...

JayJay0 I just posted here that the next Pixel phones might support external displays and a desktop mode. Maybe that is just what you are looking for if you can wait a bit more to find out.

N1b

I think the simple and short answer is that there is no such thing as an equally secure Linux system. QubesOS tries to get there via virtualization, but the security model of Android plus the hardening of GrapheneOS are on another level while requiring a lot less resources. Maybe an expert can elaborate this in detail.

So if you try to achieve this kind of security, your best bet would be to get a Pixel Tablet plus a wired keyboard and mouse/touchpad (and a stand or case) and install GOS. It's a bit janky yet but I hope this will improve on Android 14...

GrapheneOS

Paflechien iOS with lockdown is not equivalent to GrapheneOS. Lockdown hardly does anything beyond Safari attack surface reduction and Apple service attack surface reduction. This thread has really been a disaster from the very beginning.

Paflechien

N1b iOS is very secure. Like any company they charge for it, that's the point of a company...
the fact that you have to enter an account from the start makes the user experience a lot easier for average people and that doesn't shock me. you don't have to enter your personal information.

https://help.apple.com/pdf/security/fr_CA/apple-platform-security-guide-c.pdf

Paflechien

N1b privacy settings are useless, grapheneos can be a nightmare for your privacy if you use it to tell your life story on any forum, even facebook can be respectful of your privacy if you don't unpack your life.

Paflechien

N1b and please stop listening to youtube or other channels and do your own research. what do you think youtubers make a living from?
The "privacy" business is a BIG business!

ve3jlg

Paflechien you don't have to enter your personal information.

Apple generally collects that at their store at point-of-sale. How many people bring $1000+ cash to buy an iphone with?

Then Apple matches the personal info provided to the phone later, and it is likely that the buyer gave their only/primary email address to Apple at the point-of-sale.

is is possible to ~~buy~~ rent anything-Apple online without a true identity i.e. a traceable payment source?

This is why I posted in another topic how one could (and should) buy a Pixel at Best Buy with cash.

[deleted]

Paflechien

It would appear to me you're entirely missing the point @N1b is making. There is no circumstance, system or set-up where one possessing free will couldn't muck it up.

It's like having a best submarine in the world and complaining that you got wet when you opened the hatch while under.

@N1b 's comparing submarines, and not saying you couldn't conpromise one if you wanted.

[deleted]

Paflechien

This one too... A thinking person will use any resource at hand and make a judgement. To purposefully limit one's access/exposure to potentially relevant information is a version of hand-holding, if not dowright censorship.

Your statement makes it appear as if no person who ever made a video ever said anything that was true. Your very same logic can equally apply to asking strangers on an internet forum for an advice. Yet you're here.

Hb1hf

Paflechien

"stop listening to Big Privacy (12-follower youtuber who somehow profits from you using GrapheneOS), listen to Apple's marketing instead!"

What kind of "do your own research" leads to having such a greatly informed opinion?

Paflechien

[deleted] Exactly

Paflechien

[deleted] Exactly the same goes for your second comment, always multiply the sources.

E24

I'm testing out pop is rn. Its not as secure as GOS but is rlly good in terms of privacy and supports full disk encrypting and things like that out of the box

guitaroctavebee

E24 Consider Fedora. Has better security ootb

Paflechien

Hb1hf All right, you're off the mark, but it doesn't matter, I wasn't talking about grapheneos. Look at the exorbitant rates the privacy vendors charge, their promises and then we'll both see if it's not big business based on fear.

E24

guitaroctavebee don't like the red hat involvement though. I was originally going with fedora sikverbkue then changes my mind

guitaroctavebee

E24 Red Hat is a significant contributor to the Linux kernel, systemd, wayland, X11, pulseaudio, pipewire and many other essential components of a Linux distro. You should not switch to a less secure Linux distro to try and avoid them.

N1b

Let's go back to OP who was asking for Linux distibutions that compare to GOS. In this regard, iOS is not even part of the discussion and I shouldn't have commented on it in the first place.

JayJay0 I think it would help us greatly if you elaborated on your goals with Linux some more. Do you prefer security, privacy, anonymity, simplicity, control, good user experience? All of these would describe the GOS experience, but depending on your priorities you'd probably choose something different in the Linux world. The thread itsjpb linked is a good start, and if you just want a simple OS that doesn't track your every step, most Linux distributions will work for you. Linux Mint, Fedora, Pop!OS and others are great for starters, but there are good reasons for and against any.

It would also help to know your hardware setup, since QubesOS is very RAM hungry, Debian won't have the drivers for newest hardware etc... The more info we have, the better we can guide you.

Hb1hf

N1b
I'd say nothing in the Linux world comes close to what we have with Pixel + GOS.

Safety-wise, the best option is Mac computers: safe boot, full-disk encryption, secure virtual memory, the T2 chip and a pretty ok OS.

It's privacy hell, though. You need to actively stop apple from spying on you, and since the whole "apple services evading little snitch through a backdoor" you can't trust LS/Lulu or even a VPN anymore, so it has to be done at the router.

dairymilkbatman

Hb1hf What about something like PFsense or OpenWRT at the router and Asahi Linux installed on the mac?