GrapheneOS attestation compatibility guide
grapheneos.org
Guide on using remote attestation in a way that's compatible with GrapheneOS.

cross-posted from: https://slrpnk.net/post/15995282

Real unfortunate news for GrapheneOS users as Revolut has decided to ban the use of ‘non-google’ approved OSes. This is currently being posted about and updated by GrahpeneOS over at Bluesky for those who want to follow it more closely.

Edit: had to change the title, originally it said Uber too but I cannot find back to the source of ether that’s true or not…

    • Killercat103@slrpnk.net
      4·
      11 days ago

      Is swiftphone its own thing or did you mean shiftphone? I kinda want the shiftphone 8 myself even if they only ship to neighboring countries of mine.

    • Andromxda 🇺🇦🇵🇸🇹🇼@lemmy.dbzer0.comEnglish
      21·
      10 days ago

      All of these are insecure as hell. Linux phones especially https://madaidans-insecurities.github.io/linux-phones.html

      Fairphone also really fucked up: They signed their own OS with the publicly available (!) AOSP test signing keys. These guys really don’t know that they’re doing, and I would trust their hardware or software whatsoever. And no, installing a custom ROM doesn’t solve this. Considering how bad their security practices are, we genuinely have to assume that there are security issues with the device firmware as well.

      /e/OS is based on the already insecure LineageOS, and it weakens the security further, so it’s not a good option either.

      None of the options you mentioned can be compared to GrapheneOS. It’s currently the best option if you value your privacy and security. You don’t have to give Google money either, since you can just buy a used device, which is also cheaper and more environmentally friendly. Google also makes repairing their devices pretty easy for consumers and even works with iFixit. Here’s a Mastodon post I recently saw about that: https://social.linux.pizza/@midtsveen/113630773097519792

      • Venia Silente@lemm.eeEnglish
        1·
        9 days ago

        An used Pixel, assuming I can find one in my country, still costs four (4) times what I need to shell out for a in-market Lineage compatible phone.

        Theoretical security is cute, but it has to be adjusted to practical feasibility. The most secure computer in the world is useless to you if you can’t boot it up.

        • Andromxda 🇺🇦🇵🇸🇹🇼@lemmy.dbzer0.comEnglish
          1·
          7 days ago

          Security-wise you’re better off using whatever OS comes with your device (as long as it gets updates) than downgrading to LineageOS. At least most smartphone vendors (except for Fairphone) manage to ship their Stock OS with a locked bootloader and somewhat working Verified Boot.

          • Venia Silente@lemm.eeEnglish
            1·
            7 days ago

            Security-wise you’re better off using whatever OS comes with your device

            So, Android 9 / 10?

            I’m sure not as heck going to spend zillions on a new phone (or a hard-to-find used one) when the one I have still works perfectly.

              • Venia Silente@lemm.eeEnglish
                1·
                7 days ago

                Well, on my phone that back in stock could only do up to Android 10, Lineage gives me Android 11 (maybe 12, haven’t checked) so it’s still a serious win.

                Now, if you insist that I shall have an up-to-date device from the official manufacturer with all the bloatware, same planned obsolescence and zero control, or even worse a 4× overpriced Pixel, maybe you are so assured of this superiority that you’d be willing to fund it?