I’m currently using GrapheneOS and I quite like it, but I would like to switch to something else. Will I lose much privacy if I switch to e/OS? Can I lock bootloader after flashing it like on GrapheneOS? I’m using Pixel 7 btw
I recommend sticking to GOS. If you’d like to use something else, I’d recommend DivestOS. CalyxOS, LineageOS, /e/OS and iodéOS are all significant downgrades in usability, privacy and security and therefore not worth using on a Pixel.
You won’t lose anything. Both options are 100% private. However, it’s worth noting that Graphene is generally considered to be more secure.
What? Please stop spreading misinformation.
/e/ includes microG per default and thus calls google servers. /e/ includes unique identifyer per update call tracking its users. Graphene uses several proxy servers to hide user information, /e/ does not in similar way. And so on…
Were you using the Google espionage services on GOS? If so, you’d likely gain a little privacy because of µG.
Some devices can lock the bootloader but that’s not a generally supported feature on /e/OS.
Ah yes, gaining privacy by running microG as root which already has Google code in it instead of running GSF in a sandbox as user.
- µG is not running as root
- It does not “already have google code in it”. That’s an optional, tightly scoped feature with one specific blob that is required to implement the SafetyNet feature in any implementation
- I see no reason why you couldn’t run µG inside a sandbox too; the differentiating factor for security is the sandbox, not the GMS implementation. Also has nothing to do with privacy as, contrary to the original GMS, µG doesn’t spy on you to begin with.
Prize for being overly dramatic!
Seems like the exactly appropriate amount of drama to me!
It literally makes less than zero sense to go from Graphene to e, Graphene is the most hardened privacy tweaked OS available, e would be a huge step backwards on many fronts, what’s your reason for wanting to switch? No, you can’t lock your bootloader with e, verified boot won’t be there, you’ll lose the hardened kernel , the improved sandboxing, the memory protection. It’s a fail from every angle.
