@shadow8t4
I'd agree a Pixel 3a is a great choice.
Theres a new wave of alternative operating systems that provide close to production quality experience & security
#GrapheneOS #CalyxOS #RattlesnakeOS #HashbangOS

Also CalyxOS just put up downloads for their Mi A2 builds - not as good a phone, only one year of full security updates left, but they do a 6gb/128gb model
@kyzh

@sheogorath

Wondering why you don't recommend? I've been using #GrapheneOS and its predecessor, both with verified boot, since I got a Nexus 5 four years ago. Been very happy with things.

The auditor app/attestation server, that Graphene, #RattlesnakeOS and #CalyxOS use adds an extra layer of goodness
https://github.com/GrapheneOS/Auditor/releases

@nurinoas

Releases · GrapheneOS/Auditor

Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verificati...

@samavb
Inspired by that work, for a production quality alternative OS, including verified boot (on the few devices that support that for a different OS) & straightforward updates for (at least) the vendor supported life of the phone, its also worth checking out-

https://github.com/hashbang/os - which is working on reproducible builds of AOSP

CalyxOS.org - that is working on being very user friendly. Also they only project working on a non Pixel device! the Mi A2

Finally #RattlesnakeOS

hashbang/os

Open source security/privacy focused AOSP rom. Contribute to hashbang/os development by creating an account on GitHub.

@emacsomancer
Yeah disabling Google apps &/or switching off their permissions will help against this

Best get a phone with a close #AOSP fork. Like #LineageOS, or better one of the new wave of open source privacy & security focused #AOSP forks. #CalyxOS #GrapheneOS #RattlesnakeOS #HashbangOS
Get all the solid security & privacy features from AOSP (big improvements in recent years) https://arxiv.org/abs/1904.05572
AOSP doesnt spy on you & is much more secure than desktop linux ported to a phone @Blort

The Android Platform Security Model (2023)

Android is the most widely deployed end-user focused operating system. With its growing set of use cases encompassing communication, navigation, media consumption, entertainment, finance, health, and access to sensors, actuators, cameras, or microphones, its underlying security model needs to address a host of practical threats in a wide variety of scenarios while being useful to non-security experts. To support this flexibility, Android's security model must strike a difficult balance between security, privacy, and usability for end users; provide assurances for app developers; and maintain system performance under tight hardware constraints. This paper aims to both document the assumed threat model and discuss its implications, with a focus on the ecosystem context in which Android exists. We analyze how different security measures in past and current Android implementations work together to mitigate these threats, and, where there are special cases in applying the security model in practice; we discuss these deliberate deviations and examine their impact.

arXiv.org

@hexmasteen
I'd get the Mi A2, the only device on that list thats getting support of the new wave of security and privacy focused AOSP forks

These forks are different to #lineageos and other ROMs as they maintain verified boot - a powerful security feature

Talking about #CalyxOS #GrapheneOS #RattlesnakeOS #HashbangOS

Mi A2 support from calyxos.org has got some very experienced (and well respected) devs actively working on it
https://gitlab.com/calyxos/calyxos/issues/9

Otherwise consider a Pixel

Mi A2 daily driver material (#9) · Issues · CalyxOS / calyxos

Get most if not all of the basic features working. Minor functions such as IR not working are fine.

Substantial improvements to the security of Android over the past few years have brought it to a level where it is now being considered to provide security comparable to iPhones.
Todays release of #Android10 introduces more security improvements #^https://security.googleblog.com/2019/05/queue-hardening-enhancements.html
Theres also many Privacy improvements
#^https://developer.android.com/about/versions/10/privacy
Its becoming increasingly clear that an #AOSP based operating system, without Google Play Services can offer great privacy and security. #GrapheneOS #CalyxOS #HashbangOS and #RattlesnakeOS all provide verified boot, which helps guard against persistent compromise. #LineageOS and #OmniROM dont maintain this security feature, but are long lived and well known AOSP based operating systems.
Another measure that can be taken is not using app stores where malware is present #fdroid is widely recognised by researchers as being free of malware.
The improvements to Android, which has long been considered to have inferior security,, are being demonstrated by companies paying more for exploit chains on #Android than those for #iOS

LIBRANET.de hubzilla

@leogaggl
Think devices that have a proper open bootloader are limited. I'm talking about devices where it can be relocked & verified boot works.

Current devices I'm aware of are the Google Pixels & Mi A2, although I think there are a few more.

#CalyxOS #GrapheneOS #HashbangOS and #RattlesnakeOS all have proper support for this. All support Pixels, Calyx has early support for the #MiA2
@eff

@praveen

Theres a new wave of AOSP based operating systems that focus heavily on privacy and security. They support recent devices - so far only Pixels, but look set to also support some Android One devices

#CalyxOS is working on support for the Mi A2, theres code in their repository
https://s.coop/aly-sources-published

There is also #HashbangOS #GrapheneOS #RattlesnakeOS
@njoseph

Security & privacy focused AOSP fork CalyxOS releases sources on Gitlab - Android Privacy & Security - [email protected]

I'm only on day 2 of using #RattlesnakeOS and this is turning out to be a bit harder than I thought. I love the idea that I can install apps directly from FDroid, and that pretty much nothing on my phone is spying on me anymore. I can't really confirm it but I think my battery is lasting a tad bit longer too. Makes sense since none of the Google stuff is running in the background. Unfortunately that's about all the good things I have to say about it.
So, I've been going back and forth on whether or not to install #RattlesnakeOS on my Pixel 3, and finally decided to bite the bullet and give it a shot. I love how it makes compiling AOSP so easy (dare I say it's even rather fast at just under 6 hours) and adds on niceties like @fdroidorg privileged extension out of the box. I'm not happy with the camera but maybe this can be my excuse to go buy a DSLR and learn real photography.