55
How is LineageOS for privacy? (lemmy.ca)
submitted 2 years ago* (last edited 2 years ago) by to c/privacy@lemmy.ml
30 comments fedilink hide all child comments
 

I assume it not completely locked down, but does it mean Google doesn't have access to everything like I assume it does with Android?

you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 2 years ago* (last edited 2 years ago) (2 children)

Even without explicit installation of GApps, Lineage still uses and connects to quite a few Google services in the background.

It's a great way of keeping older devices up to date, but not much more than that.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [+] -6 points 2 years ago* (last edited 2 years ago) (2 children)

    It's more like a way to make your devices insecure by unlocking your bootloader, disabling Verified boot and letting all kinds of malware persist on your device as well as allowing anyone with physical access to your device to modify the system partition and load malware onto it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 6 points 2 years ago (1 child)

    It's a trade-off, everyone needs to decide for themselves

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    Sure, but DivestOS is better for old devices as it supports bootloader relocking and it's just much better for both privacy and security. If you want the most secure mobile OS on a modern sevice, go for GrapheneOS on a Google Pixel (which also has hardware security with the Titan M2 secure element).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    Divest doesn't officially support MicroG or Sanboxed Play Services though, which can be an issue depending on what apps you need.

    Lineage will still be the better option for most people because of this, unless they actually need to buy a new phone anyway

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    I haven't tried microG on DivestOS yet, but from my experience on CalyxOS (before I switched to GrapheneOS) I can tell that it works really well. Doesn't really matter whether it's officialy supported, you can just install it yourself.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago* (1 child)

    After reading up on it on the DivestOS page, it mostly seems to work, with the exception of SafetyNet

    https://divestos.org/pages/faq#microgOptions

    Some apps require SafetyNet to work, while the option to enable it currently exists it will not work in the unprivileged mode that DivestOS uses and will be removed in a future update.

    But then again, the whole point of the DivestOS project is to remove as much Google and other proprietary code as possible.

    So if someone wants to use DivestOS specifically, they likely don't use any apps that need microg.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (2 children)

    Right, SafetyNet. I haven‘t tried banking apps (or anything else that requires SafetyNet) with microG, but SafetyNet is just a flawed system in general. Even on GrapheneOS, with the proprietary Google services running in a sandbox, only SafetyNet basic integrity can be achieved, because the OS needs to specifically be whitelisted by Google order to get full integrity. It‘s a ridiculous monopolistic move by Google. I just never use banking apps on my phone, I have a dedicated small and light laptop only for banking, that I can also take on a trip if I need to do anything related to banking on the go. I do this for extra security, so my banking is separated from all my other digital activities, but I‘ve heard that basic SafetyNet integrity that be achieved on GrapheneOS is enough for many banking apps.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    Well, flawed or not, it's what we need to use if our apps are dependant on it. I guess I'm lucky that my bank doesn't push their App, and even recommends Firefox alongside the other Browsers for Online Banking.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    As I said, I don’t do banking on my phone, but if I needed to use a banking app and it was unsupported on GrapheneOS I would honestly consider switching to another bank. The system of banking is flawed as well, that’s why I try to use Monero as much as possible.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago (1 child)

    Most banks are just massive dicks. Don't you love it when your consultant tells you they have your best interest at heart

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago*

    When they do this, I just laugh at them and tell them them to stop pretending. Is this rude? Maybe. Is it the truth? Definitely.

    Edit: It's not just banks. Insurance companies and publicly traded corporation in general are just there to screw you over. I'm not a socialist or anything like that but I gotta say: The capitalist system is flawed. (Every system is flawed, a perfect system doesn't exist but it's pretty bad with capitalism)

  • permalink
  • fedilink
  • source
  • parent