@waldschnecke

Fairphone still lacks standard security features such as a secure element, and they have partially installed EoL hardware.

See also:

https://discuss.grapheneos.org/d/24134-devices-lacking-standard-privacysecurity-patches-and-protections-arent-private

See also information from Tavi (Android security researcher and former developer of DivestOS):

https://forum.fairphone.com/t/is-fairphone-really-interested-in-sustainability/99302/2

If you want a secure, privacy-friendly smartphone, the best choice would be a current Pixel (refurbished models are also fine) with GrapheneOS:

https://grapheneos.org/

Devices lacking standard privacy/security patches and protections aren't private - GrapheneOS Discussion Forum

GrapheneOS discussion forum

GrapheneOS Discussion Forum

@Voxelpower But if you want European choice here then the Pixel with GOS doesn't really bring anything to the table. Of course still great choice for journalist and opposition activist! But for average Joe, there are privacy friendly options, which can even be fully Google free as they aren't even android based.

I also have problem a little bit how GOS people communicates. This has been demonstrated well in video: https://youtu.be/4To-F6W1NT0

Why I deleted GrapheneOS

YouTube

@Antti98

> "But for average Joe, there are privacy friendly options, which can even be fully Google free as they aren't even android based"

GrapheneOS is the only custom OS that does not weaken or eliminate the security of AOSP, but actually significantly improves it. It is also the only custom OS that does not delay security updates for weeks or months. Any custom operating systems that are not based on Android (e.g., Sailfish OS) lack basic security mechanisms such as modern exploit mitigations, memory-safe languages, reasonable sandboxing and permissions systems, strict MAC policies, etc.

This means they also lack the ability to protect users' privacy from malicious third parties.

The majority of GrapheneOS users are ordinary people, not opposition figures or journalists, so it is false to claim that GOS is only for such people.

And btw, the Linux kernel contains a lot of code from Google, Microsoft, Oracle, Red Hat, etc. Using Linux kernel-based OSes are not “fully Google free”.

> "I also have problem a little bit how GOS people communicates. This has been demonstrated well in video: https://youtu.be/4To-F6W1NT0"

Louis Rossman often spreads fake news about GrapheneOS (e.g., he once said somewhere that GOS was dead and wouldn't be updating to Android 16, but a few days later, GOS was released with Android 16).

See also information from GrapheneOS about Rossmann and the video:

https://xcancel.com/GrapheneOS/status/1950568612600619319#m

Louis Rossmann also has a verified account on KiwiFarms, one of the largest neo-Nazi, hate, and troll platforms:

https://kiwifarms.st/members/larossmann.132201/

https://en.wikipedia.org/wiki/Kiwi_Farms#Harassment

https://en.wikipedia.org/wiki/Kiwi_Farms#Christchurch_mosque_shootings

You can also see that he posts there regularly (the last time was this Wednesday, for example).

And that he specifically seeks out friendships with people who regularly attack GrapheneOS on KiwiFarms.

@Voxelpower I didn't claim GOS isn't safe or anything → full lecture why it is only safe solution. Can other OS be broken easier? I bet, but on other hand how many normal Joe will ever experience that 3rd party will target your device specifically?

Difference between android and linux is that linux would still exists and develop without G. But G has full control over AOSP. They can end it any day if they want. 1/3

@Antti98

> "but on other hand how many normal Joe will ever experience that 3rd party will target your device specifically?"

> "Didn't claim that average Joe couldn't use GOS, just that it makes most sense for those that probably face direct 3rd party attacks"

> "Some alternatives are in my opinion good enough from privacy perspective to average Joe who's main privacy thread is Google/Meta/Microsoft"

You don't have to specifically target the device. Some time ago, the developer of the Smarttube app (a privacy-friendly YouTube client) was hacked, and malicious builds of the app were released and distributed. Since Android has a robust sandboxing and permissions model, the damage was largely minimized.

The incident is a good example of how important sandboxing and the OS security model are. Just imagine if the app had also been available for Linux (including SailfishOS) or Windows – the damage would have been enormous.
It is also a good example of how a trustworthy app became a threat. This can happen with other apps at any time.

> "I don't know how chatting about phone OS turns into speaking about neo-Nazis without relating at all to those OSs?"

You were the one who linked Rossmann's video; I just pointed out that he is not a reputable source and that you shouldn't believe anything he says. If you want to know more, ask @GrapheneOS yourself.

Here's my take on it (my private Opinion):

I've been reading GrapheneOS posts (on X and Mastodon) almost daily for almost a year now, and I've never noticed any toxic communication on the part of GrapheneOS. All they do is publish technically accurate information (which often overlaps with other Android security researchers).

> "[...] with GOS (Google developed OS with different clothes and nicer seams) [...]"

This statement is incorrect. It is based on the AOSP (like LineageOS, IodeOS, etc.) but significantly improves the security of the AOSP. No GOS developer is affiliated with Google in any way.

> “doesn't contribute anything to the table if we are looking at European alternatives”

These so-called “European alternatives” all have far worse security than Pixels or iPhones. In the case of Fairphone, for example, GrapheneOS and Tavi (Android security researcher and former developer of DivestOS) have already written something:

https://discuss.grapheneos.org/d/24134-devices-lacking-standard-privacysecurity-patches-and-protections-arent-private

https://forum.fairphone.com/t/is-fairphone-really-interested-in-sustainability/99302/2

> “[...] but why bash every other alternative just to prove your superiority?”

It's not about showing that they are “superior.” It's about providing technically accurate information, refuting false claims made by various companies and organizations (some of which attack GrapheneOS), and defending themselves from those attacks.

If there were a smartphone OS with reasonable security (modern exploit mitigations, memory-safe languages, robust sandboxing and permissions systems, strict MAC policies) and timely security updates, they would recommend it.

Devices lacking standard privacy/security patches and protections aren't private - GrapheneOS Discussion Forum

GrapheneOS discussion forum

GrapheneOS Discussion Forum
@Voxelpower "I've never noticed any toxic communication on the part of GrapheneOS" very surprising as I haven't even said any bad thing about them and they spammed 14! messages. That is crazy in every sense xD My only negative comment was that I don't personally like how they communicate and then they demonstrated it exactly what I meant. And I don't know how factual based or constructive those messages were..... And those kind of rants aren't rare what I have seen. 3/n