@akc3n FWIW there's a typo in step 2, "Turning off the exploit protection compatibility toggle reduces system security" should be turning on

    • [deleted]

    other8026 Its good and detailed but not related to my query.

      [deleted] I guess I misunderstood then. And now that I see my response again, I linked the same link you quoted so my reply was kind of useless. But as far as I know, the APIs listed in the linked article (Play Integrity and SafetyNet) are the most common ones that apps use. It would be nice if there were a non-Google alternate that apps could use as well, but until one is available app devs would have to add OSes individually.

      7 days later

      Wonderful...

      ok I have here two Apps, where I should can do this BUT

      This is only practical when the Apps are installed in the owner Profil BECAUSE
      if not and you have two Passwords with each 128 characters (This little bug that nobody can solve but god mother google herself, who doesn't think it's important to solve the problem) , do you know how many time it will cost to creat a little bug report no one will be solved, because the app dev doesn't give a shit if his app runs on a fringe product like GrapheneOS?

      Should I give a try?

      Sorry, but this is the reality...

        WhoTheFuckisAlice two Passwords with each 128 characters

        Obviously you can do whatever you'd like with your phone, but it's not really necessary considering the secure element forces delays between password guesses if being brute forced. I've read project members say that a 6 digit PIN is enough. The only reason you'd be using such a long password is if you don't trust the secure element.

        WhoTheFuckisAlice This little bug that nobody can solve but god mother google herself, who doesn't think it's important to solve the problem

        what little bug?

          other8026 Obviously you can do whatever you'd like with your phone, but it's not really necessary considering the secure element forces delays between password guesses if being brute forced. I've read project members say that a 6 digit PIN is enough. The only reason you'd be using such a long password is if you don't trust the secure element.

          This password is not the key for the encryption of the user data partition in every profile?
          Why do I still assign passwords when you can solve this so elegantly... every electronic device should have such a secure element. God bless your security management !

          other8026 what little bug?

          https://discuss.grapheneos.org/d/5731-bug-fingerprint-unlock-disabled-after-profile-change
          https://github.com/GrapheneOS/os-issue-tracker/issues/1611

            WhoTheFuckisAlice This password is not the key for the encryption of the user data partition in every profile?

            You'll want to read this section of the website about how all that works: https://grapheneos.org/faq#encryption. Here's a relevant quote:

            Sensitive data is stored in user profiles. User profiles each have their own unique, randomly generated disk encryption key and their own unique key encryption key is used to encrypt it.

            And another:

            Using a secondary profile for regular usage allows you to make use of the device without decrypting the data in your regular usage profile. It also allows putting it at rest without rebooting the device. Even if you use the same passphrase for multiple profiles, each of those profiles still ends up with a unique key encryption key and a compromise of the OS while one of them is active won't leak the passphrase. The advantage to using separate passphrases is in case an attacker records you entering it.

            https://discuss.grapheneos.org/d/5731-bug-fingerprint-unlock-disabled-after-profile-change
            https://github.com/GrapheneOS/os-issue-tracker/issues/1611

            I didn't realize that this was still a problem that people were experiencing. I used to have this issue from time to time, but not anymore. I can understand that this is very annoying, especially when using really long passwords.

              other8026 I didn't realize that this was still a problem that people were experiencing. I used to have this issue from time to time, but not anymore. I can understand that this is very annoying, especially when using really long passwords.

              And I am a new user since android 14 btw,
              I did only all updates from android 13 to 14 with stock OS and then install GrapheneOS manual way. Since I use a second profile i had this problem.

              8 days later

              Hanma1963

              FYI: the App "Digitales Amt" (ID-Austria) and "eAusweise" are working now with GrapheneOS :)
              After installing and fireing up the app for the first time, you get a warning, and it'll ask you if you know what you are doing, but other than this, it works like a charm

                DaRon
                Can you pls confirm, is this with or without Google Play Services installed?
                And if with, which permissions...
                thx

                  d4f2
                  Yes, installed...
                  Google Services Framework: network and phone
                  Google Play Services: network, phone and nearby devices
                  Google Play store: network

                  akc3n
                  i am glad to help, but do you think it makes sense to add this report to the "banking apps compatibility list", although this is not a banking app at all?
                  "Digitales Amt" is issued from the government, which can be used as second factor for logging in to certain government websites, or as second factor to "electronically sign" documents and similar services
                  "eAusweise" on the other hand will enable Austrians to have their IDs (drivers licence, personal id, Health insurance) with them on the smartphone.

                    DaRon

                    My apologies, I may have misunderstood and should have looked more closely. I was under the assumption that it would be related to these similar government ID apps that can be used for banking related access:

                    https://github.com/PrivSec-dev/banking-apps-compat-report/issues/173

                    https://github.com/PrivSec-dev/banking-apps-compat-report/issues/310

                    I'll take a closer look in the next following days.

                    Thank you

                      DaRon
                      Thx for the feedback!
                      @akc3n
                      +1 for adding to the list or maintaining a similar list, these eGoverment apps "identify yourself electrically", may well become sort of mandatory...

                        d4f2 @DaRon

                        Yes... on point with this:

                        EU-wide digital wallet: MEPs reach deal with Council

                        Parliament and Council negotiators reached a provisional agreement on Wednesday on the creation of a pan-European digital identity framework.

                        Key points:

                        • An EU wallet to authenticate and access public and private services, store, share and e-sign documents.
                        • A wallet to be used on a strictly voluntary basis.
                        • Privacy dashboard to give users full control over their data

                        Next Steps

                        The legislation will now have to be endorsed by both Parliament and Council before it becomes law. The Industry, Research and Energy Committee will hold a vote on the file on 28 November

                        Primary source

                        6 days later

                        Is there a list/resource where people contribute information about what apps seem to have issues? I see two banking apps listed off an earlier post in the PrivSec-dev github. I've got a Pixel 8 on the way and I wanted to start out with Graphene OS. I use apps that help me collaborate with others integrated with the Googleverse (Keep, Sheets), as well as home automation in connection with Google Wifi, and I am concerned what I'll be in for. I don't use Google Assistant from my phone, but I do set it up via the Home app for my.. home.

                        Maybe I'm overthinking this and the vast majority of things most users want to do will just work, meaning GOS doesn't need a big fancy database of app compatibility like Wine.

                        Thanks!

                          epistax Maybe I'm overthinking this and the vast majority of things most users want to do will just work

                          Sounds about right, I don't think you need to worry. You could search for the apps in question here on the forum and on matrix if you like, you may come across some reported experiences... or not, that could also indicate it just works.

                          12 days later

                          Android Sytem Intelligence and pixel launcher requires system level permission without which it does not work and it looks like GOS devs are reluctant to support that via GMSCompat which is sad.