mastodon.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
The original server operated by the Mastodon gGmbH non-profit

Administered by:

Server stats:

357K
active users

#grapheneos

81 posts72 participants8 posts today
Replied in thread

@kgw @douglaspynn
These devices have 7 years of support. Thats a long time

#GrapheneOS has started and wants to increasingly use virtual machines

Will enable the use of desktop operating system VMs, then opening their applications from GrapheneOS launcher in a window on Android - primarily for tablets or desktop mode on external display with mouse & keyboard

Also enable stronger isolation of android apps, or sets of app, by running them in a vm

Doing these things requires significant RAM

Replied to Fluse

@Fluse Hehe, das war damals auch men Plan, dann ging die Installation und die Einrichtung aber so schnell und unproblematisch vonstatten, das ich noch am selben Abend zu wechseln konnte.
Ich hatte allerdings schon im Vorfeld die benötigten Apps recherchiert, und fast alles was ich vorher auf dem Papier herausgesucht hatte, funktionierte am Ende wie gewünscht.

Gerade ein gebrauchtes Smartphone auf #refurbed erstanden, in den kommenden Wochen folgen dann die ersten Gehversuche mit #GrapheneOS und #FDroid

Plan:
Aktuelles Android-Smartphone parallel erst mal weiter nutzen, bis ich mich in GrapheneOS infrastrukturtechnisch komplett ohne #Google häuslich eingerichtet habe.
Danach schaue ich weiter. Ich habe da keinen Zeitdruck.

Bin aber schon ein bisschen vorfreudig aufgeregt.
#UnplugTrump #UnplugBigTech

People really need to set up a dns black hole, use #pihole #pfsense with #pfblockerng use something.

Essentially a mini PC sits between my devices and the internet and filters it.

I am subscribed a bunch of lists that allow my device to block malware, adware, ads and other things I don't want my devices to connect to.

You can't trust most devices so you need to control your connection.

Also, use #Grapheneos

#privacy #security #fuckgoogle #apple #ads

pi-hole.net/

pi-hole.netPi-hole – Network-wide Ad Blocking

En su dia hice un hilo instalando #GrapheneOS en un #Pixel y nunca di feedback sobre ello y creo que quizá algunes estéis interesades en saber que recientemente alguien cercane hizo el mismo proceso, pudiendo analizarlo yo de cerca y dándome cuenta de que realmente es mucho mas sencillo de lo que parece.

Si alguien tiene alguna duda que pregunte, pero animáos, que aqui la mayoría somos usuaries de #GNULinux pero veo pocos metiéndose en el #degoogling :googletrash: (deshacerse de Google por completo de un smartphone) y no es menos importante que deshacerse de Windows creo yo, viendo algunos Xiaomi... no se que me daría mas miedo hoy por hoy.

ROMs no hay muchas y los Xiaomi son puñeteros, pero es factible prevenirlo cuando cambiéis el actual.

Si necesitáis algo, ando por aqui como siempre al loro :catroomba:

Hilo con mi instalación: paquita.masto.host/@th0maswasc

MastodonTomás (@th0maswaschosen@paquita.masto.host)Bueno, hoy es el día en que creo un hilo aqui para hablar de algo que me lleva preocupando ya tiempo: la privacidad del mejor amigo del ser humano de la actualidad, el smartphone. 🧵
Continued thread

> Pixel devices remain quite a solid choice if kept updated. While it seems that for the standard Google ROM there are working exploits available to perform the FFS extraction in AFU state, on the contrary GrapheneOS additional hardening and protections are effective, and have been so since 2022 [1].

[1]: osservatorionessuno.org/blog/2

osservatorionessuno.orgA deep dive into Cellebrite: Android support as of February 2025A deep dive into Cellebrite: Android support as of February 2025

Thanks for the find [1], @privacyguides !

Seems that using #GrapheneOS isn't a bad idea.

> #Cellebrite, as far as we know, publishes a support matrix for Android-based and iOS-based devices monthly or at least multiple times a year. The latest version available at time of writing is version 7.73.1 released on February 2025.

Secondary source: Osservatorio Nessuno [2]

[1]: discuss.privacyguides.net/t/up
[2]: osservatorionessuno.org/blog/2

Mein derzeitiges Fazit zu #GrapheneOS: Installation des Betriebssystems supereinfach (bin da anderes gewohnt).
Um den Aurora Store und leider auch die G Play Services und somit auch den Store kommt man, wenn man nicht allzu grosse Einschränkungen bezüglich Nutzbarkeit machen will, nicht wirklich herum. Derzeit bei mir aber noch ohne mich bei Google einzuloggen. Sprich: Der Store und die Services sind installiert, aber nicht eingerichtet. Das ist für mich ein soweit akzeptabler Kompromiss.

Replied in thread

@rwg @gaian @clive @RoyBrander

Sound point regarding physical access, although I suspect the legality of compelling someone to unlock their device with a passcode may be up for debate.

For anyone anticipating such an event, I believe GrapheneOS has a "duress" feature (where entering an assigned "duress" pin code to the device wipes it), and - although I've not tried it - there are apps that do something similar.

f-droid.org/packages/me.lucky.

*edited to add: being logged in as a guest user with a token set of contacts and messages and whatnot is probably the other easy win, although if they're smart enough to notice it may make them grumpy. Some companies advise travellers to fly to specific countries with burner devices, and the company agent gives you a new device when you land. This is usually for the sort of country that will install snooping software on your device when given access (or worse). It is unlikely to become one of those situations.

f-droid.orgDuress | F-Droid - Free and Open Source Android App RepositoryDuress password trigger
Replied in thread

@qgustavor It's just file sync but it has versioning so you won't lose anything. I set mine to sync over my home WiFi only so internet connectivity isn't a factor. As soon as I log into my desktop the files sync to/from my phone in the background. KeePassXC has a merge function if you want to combine files because something failed. I've never needed it though. Been using it on #GrapheneOS #LinuxMint #macOS #Windows10 without much trouble.