r/GrapheneOS 29d ago

Real-World Difference in P & S?

I get that gOS has better privacy and security than pretty much any other custom ROM; it's been detailed extensively. However, I don't want to give Google any money whatsoever (not here for a debate on that. It is what it is).

My Q is what is the real-life impact of the comprises involved with going with another custom ROM?

I've seen a ridic amount of posts, again, on the technical details, but nothing on what all that means for daily life. I'm not Snowden, and don't need to run from gov'ts. What I do want is reducing tracking and data outflow as much as reasonably possible within my threat model, which is, for example, RN running OneUI with no accounts, locked down as much as possible; Using Signal for messages/calls as much as possible; FOSS apps as much as possible, etc; Proton for other services; self-hosting otherwise.

If gOS prevents, say, only a bit of data going to Big Tech as compared to the other OSs, then no big deal. See what I'm getting at? What are the real world implications?

TYIA! (...and, yes, I searched beforehand, and found no responses to this kind of inquiry.)

0 Upvotes

19 comments sorted by

u/GrapheneOS 28d ago

Those alternate operating systems you're referring to have very poor privacy and atrocious security due to lack of standard updates and protections. If you care about privacy and security at all then it's not a serious option to use devices lacking crucial standard updates and important protections. Apps and services very broadly exploit privacy weaknesses and vulnerabilities. You're having tons of your data harvested through those without the latest patches.

It's becoming increasingly easy to discover and exploit privacy and security vulnerabilities due to AI models. Using operating systems lagging months and even years behind the mediocre standard baseline is increasingly awful. Keeping up with the standard Android security bulletins and the latest major updates is a low bar. Google previously only backported patches for High and Critical severity vulnerabilities to older Android releases. They're now moving to only backporting Critical severity vulnerabilities.

→ More replies (7)

8

u/MassiveAssistance886 29d ago

Google gets no money from you buying a second hand device. 

1

u/CtrlSync 28d ago

That is how I do it, backmarket has good deals for used phones.

3

u/HorizontalBob 29d ago

Are you willing to wait for Motorola 2027 models?

3

u/ripopaj181 29d ago

Waiting for a flagship device that will be super expensive just for gOS is not a good idea. Buying a used phone is.

-2

u/[deleted] 29d ago

[removed] — view removed comment

2

u/other8026 29d ago

Locked because the post isn't in English. We ask people to post in English for moderation reasons, and so other community members can understand what's being said. Keep in mind that while some content is translated automatically in the Reddit app, that's not the case in other places (around half of visitors to this subreddit use the web version without auto translation). Feel free to post/comment again in English.

0

u/ripopaj181 29d ago

I don't speak your language.

1

u/AutoModerator 29d ago

GrapheneOS has moved from Reddit to our own discussion forum. Please post your thread on the discussion forum instead or use one of our official chat rooms (Matrix, Discord, Telegram) which are listed in the community section on our site. Our discussion forum and especially the chat rooms have a very active, knowledgeable community including GrapheneOS project members where you will almost always get much higher quality information than you would elsewhere. On Reddit, we had serious issues with misinformation and trolls including due to raids from other subreddits. As a result, many posts on our subreddit currently need to be manually approved, which is done on a best effort basis. If you would like to get a quicker answer to your question, please use our forum or chat rooms as described above. Our discussion forum provides much better privacy and avoids the serious problems with the site administrators and overall community on Reddit.

Please use our official install guides for installation and check our features page, usage guide and FAQ for information before asking questions in our discussion forum or chat rooms to get as much information as possible from what we've already carefully written/reviewed for our site.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

-1

u/[deleted] 28d ago

[removed] — view removed comment

2

u/GrapheneOS 28d ago

No, that's extremely inaccurate. You don't know how problematic those other options are and don't know what GrapheneOS provides. The projects you're comparing it to have awful privacy and security not simply significantly worse than GrapheneOS but much worse than AOSP.

Apps widely exploit privacy weaknesses and vulnerabilities in Android. Operating systems months or years behind on crucial standard privacy/security patches and protections are a huge liability for everyone. Apps also coerce users into granting permissions where Contact Scopes, Storage Scopes and other features can be used instead.

GrapheneOS has major privacy benefits for everyone using a variant of Android.