57 Followers
1 Following
126 Posts
Open source privacy and security focused mobile OS with Android app compatibility.
Websitehttps://grapheneos.org/
Forumhttps://discuss.grapheneos.org/
Twitterhttps://twitter.com/GrapheneOS
GitHubhttps://github.com/GrapheneOS

We're now hosting our own Mastodon instance at https://grapheneos.social/ and we'll be moving to @GrapheneOS from this account.

Our server has closed registration and will only be used for official GrapheneOS accounts along with accounts for our project members. It's the same approach we take for our Matrix and email servers.

The remaining setup work will be porting over our age-encrypted cloud backup scripts, improving the sample Mastodon nginx configuration we merged with our standard baseline configuration, tuning PostgreSQL for the instance and setting up localhost access control via nftables which is currently missing.

Donations are appreciated to help cover the cost of this new infrastructure along with the time spent setting it up and maintaining it going forward:

https://grapheneos.org/donate

GrapheneOS Mastodon

GrapheneOS server for official project accounts and project members.

Mastodon hosted on grapheneos.social

GrapheneOS version 2022112500 released: https://grapheneos.org/releases#2022112500.

See the linked release notes for a summary of the improvements over the previous release.

Forum discussion thread:

https://discuss.grapheneos.org/d/2008-grapheneos-version-2022112500-released

GrapheneOS releases

Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.

GrapheneOS

Google publishes the source code for their TalkBack screen reader. GrapheneOS maintains a fork of it and includes it in GrapheneOS with the help of a blind GrapheneOS user who works on their own more elaborate fork. Eventually, we'd like to include more or all of their changes.

TalkBack depends on a text-to-speech (TTS) implementation installed/configured/activated. It needs to have Direct Boot support to function before the first unlock of a profile. Google's TTS implementation supports this and can be used on GrapheneOS, but it's not open source.

We requested Direct Boot support from both prominent open source implementations:

RHVoice: https://github.com/RHVoice/RHVoice/issues/271
eSpeak NG: https://github.com/espeak-ng/espeak-ng/issues/917

eSpeak NG recently added it but it's not yet included in a stable release and their licensing (GPLv3) is too restrictive for us.

RHVoice itself has acceptable licensing for inclusion in GrapheneOS (LGPL v2.1), but has dependencies with restrictive licensing. Both these software projects also have non-free licensing issues for the voices. Neither provides close to a working out-of-the-box experience either.

Google's Speech Services app providing text-to-speech and speech-to-text works perfectly. Their proprietary accessibility services app with extended TalkBack and other services also works fine. However, many of our users don't want to use them and we need something we can bundle.

There aren't currently any usable open source speech-to-text apps. There are experimental open source speech-to-text implementations but they lack Android integration.

We also really need to make a brand new setup wizard with both accessibility and enterprise deployment support.

GrapheneOS still has too little funding and too few developers to take on these projects. These would be standalone projects able to be developed largely independently. There are similar standalone projects which we need to have developed in order to replace some existing apps.

AOSP provides a set of barebones sample apps with outdated user interfaces / features. These are intended to be replaced by OEMs, but we lack the resources of a typical OEM. We replaced AOSP Camera with our own app, but we still need to do the same with Gallery and other apps.

Google has started the process of updating the open source TalkBack, which only happens rarely. We've identified a major issue: a major component has no source code published.

https://github.com/google/talkback/pull/28

Google has been very hostile towards feedback / contributions for TalkBack...

This is one example of something seemingly on the right track significantly regressing. Another example is the takeover of the Seedvault project initially developed for GrapheneOS. It has deviated substantially from the original plans and lacks usability, robustness and security.

In the case of Seedvault, GrapheneOS designed the concept for it and one of our community members created it. It was taken over by a group highly hostile towards us and run into the ground. It doesn't have the intended design/features and lacks usability, security and robustness.

All of these are important standalone app projects for making GrapheneOS highly usable and accessible. What we need is not being developed by others and therefore we need to the resources including funding and developers to make our own implementations meeting our requirements.

#grapheneos #privacy #security #android #mobile #accessibility #texttospeech #speechtotext #talkback #blind #backup

add Direct Boot support for Android so RHVoice can be used with TalkBack before the initial unlock · Issue #271 · RHVoice/RHVoice

More information: https://developer.android.com/training/articles/direct-boot https://github.com/GrapheneOS/platform_packages_apps_Updater is a trivial example of using this. You need to mark a sub...

GitHub

GrapheneOS Camera app version 57 released: https://github.com/GrapheneOS/Camera/releases/tag/57.

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/1970-grapheneos-camera-app-version-57-released

#grapheneos #privacy #security #camera

Release 57 · GrapheneOS/Camera

Notable changes in version 57: update CameraX library to 1.3.0-alpha01 providing various improvements which are partially documented in their release notes update Kotlin Gradle plugin to 1.7.21 A...

GitHub

GrapheneOS version 2022111800 released: https://grapheneos.org/releases#2022111800.

See the linked release notes for a summary of the improvements over the previous release.

Forum discussion thread:

https://discuss.grapheneos.org/d/1908-grapheneos-version-2022111800-released

#grapheneos #privacy #security

GrapheneOS releases

Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.

GrapheneOS

We had to create a new #grapheneos:grapheneos.org chat room to work around state reset bugs in Matrix protocol / server software. Previous room had ~15000 members and is redirected through the room upgrade, but it's not seamless. You need to explicitly join the new room.

List of our public chat rooms is available at https://grapheneos.org/contact#community… with links to join through the official Element web client if you're new to Matrix. It's as good a time as any to join our chat rooms. A positive side to needing a room upgrade is that the main room is faster.

#grapheneos #matrix #matrixchat #matrixdotorg

GrapheneOS contact information

Contact information for GrapheneOS.

GrapheneOS

GmsCompatConfig version 16 is now in the stable channel of our app repository. It resolves the Play Store trying to update itself and Play services to unsupported versions. It's now back to requesting user install an update which only adds split packages.

https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/commit/70f6239af73062d7849a641de7ac8a9a4455f06b

We're not planning on addressing this for the legacy 3rd generation Pixels which are completely insecure at this point due to lack of full security updates. You can keep sandboxed Google Play working there by rejecting requests by the Play Store to update it, or reinstalling it.

If you accepted these self-update requests from the Play Store on legacy 3rd generation Pixels, you need to uninstall both Play Store and Play services followed by reinstalling them from our app repository. Don't uninstall/reinstall GSF or you'll also need to uninstall/reinstall every other app depending on GSF directly including most of the apps depending on Play services. GSF only gets updates alongside major Android releases and isn't updated via the Play Store in practice.

Accepting those update requests is fine with GmsCompatConfig v16 again.

We do it this way is so that we're responsible for testing and approving each Play services and Play Store update through our app repository while still supporting installing additional split packages for these apps with extra locales, etc. via the Play Store. Works well again.

#grapheneos #gmscompat

config: make sure Play Store PhenotypeFlags are overridable by Gservi… · GrapheneOS/platform_packages_apps_GmsCompat@70f6239

…ces flags

GitHub

We've retracted our recommendation to use fastboot from the android-tools package on Arch Linux. It's broken for flashing the Pixel 7 and Pixel 7 Pro.

We currently only recommend using the official platform-tools package or building fastboot from GrapheneOS or AOSP from source.

We've updated https://grapheneos.org/install/cli to remove that recommendation. Most users are installing GrapheneOS via our easy to use web installer at https://grapheneos.org/install/web instead where we provide the fastboot implementation via fastboot.js library created based on GrapheneOS funding.

It's unfortunate that seemingly every Linux distribution has broken Android SDK packages because they insist on checking out the sources their own way and using a custom build system instead of the official one. It's easy to build these tools properly if you do it normally.

GrapheneOS CLI install guide

Command-line installation instructions for GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.

GrapheneOS
Note that by cross-posting, we mean we're manually copy-pasting our content to Mastodon and adjusting the handles, links, etc. as needed. In the previous thread, we replaced 2 Twitter handles with project names + website links since we couldn't find fediverse handles. It's not going to be automated and some content will be Twitter-specific or Mastodon-specific such as this thread.

32k is also just the amount of people remaining after the recent mass exodus. Many people deleted their accounts.

There are also 1.6k in the GrapheneOS Twitter community, which is similar to a little forum. We expect that's going to be one of the first features killed off due to it only being publicly launched in the past year and most people not being aware of it or using it yet. Ideally we can get most of those people to move to https://discuss.grapheneos.org/ before it's killed.

GrapheneOS Discussion Forum

GrapheneOS discussion forum

GrapheneOS Discussion Forum