Zum Inhalt der Seite gehen


We were contacted by a journalist at Le Parisien newspaper with this prompt:

> I am preparing an article on the use of your secure personal data phone solution by drug traffickers and other criminals. Have you ever been contacted by the police?

Als Antwort auf GrapheneOS

> Are you aware that some of your clients might be criminals? And how does the company manage this issue?

Absolutely no further details were provided about what was being claimed, who was making it or the basis for those being made about it. We could only provide a very generic response to this.

Als Antwort auf GrapheneOS

Our response was heavily cut down and the references to human rights organizations, large tech companies and others using GrapheneOS weren't included. Our response was in English was translated by them: "we have no clients or customers" was turned into "nous n’avons ni clients ni usagers", etc...
Als Antwort auf GrapheneOS

GrapheneOS is a freely available open source privacy project. It's obtained from our website, not shady dealers in dark alleys and the "dark web". It doesn't have a marketing budget and we certainly aren't promoting it through unlisted YouTube channels and the other nonsense that's being claimed.

ClaudioM hat dies geteilt.

Als Antwort auf GrapheneOS

GrapheneOS has no such thing as the fake Snapchat feature that's described. What they're describing appears to be forks of GrapheneOS by shady companies infringing on our trademark. Those products may not even be truly based on GrapheneOS, similar to how ANOM used parts of it to pass it off as such.
Als Antwort auf GrapheneOS

France is an increasingly authoritarian country on the brink of it getting far worse. They're already very strong supporters of EU Chat Control. Their fascist law enforcement is clearly ahead of the game pushing outrageous false claims about open source privacy projects. None of it is substantiated.
Als Antwort auf GrapheneOS

iodéOS and /e/OS are based in France. iodéOS and /e/OS make devices dramatically more vulnerable while misleading users about privacy and security. These fake privacy products serve the interest of authoritarians rather than protecting people. /e/OS receives millions of euros in government funding.
Als Antwort auf GrapheneOS

Those lag many months to years behind on providing standard Android privacy and security patches. They heavily encourage users to use devices without working disk encryption and important security protections. Their users have their data up for grabs by apps, services and governments who want it.
Als Antwort auf GrapheneOS

There's a reason they're going after a legitimate privacy and security project developed outside of their jurisdiction rather than 2 companies based in France within their reach profiting from selling 'privacy' products.

discuss.grapheneos.org/d/24134…

Here's that article:

archive.is/AhMsj

Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf GrapheneOS

They tried the same with some shoddy messenger service to replace Signal. It was truly woeful.
Als Antwort auf GrapheneOS

Okay, you're a stronger OS than the other Android-based ones, particularly regarding privacy and degoogling, but you often despise other projects despite their efforts and the alternative these offer.

I acknowledge your strong efforts but I don't like at all your "We are the one white angel, other projects don't reach our purity".

Als Antwort auf Niavy

@niavy Both products are outright scams. They're extraordinarily insecure and non-private. They're putting users at risk and misleading them with repeated false claims about privacy and security. Each person misled into buying their products enriches them at the cost of those users being far less protected against apps, services and attackers than if they used an iPhone. They lack the most basic privacy and security. GrapheneOS is not remotely in the same space and is not a for-profit company.
Als Antwort auf GrapheneOS

@niavy You should read the detailed information in discuss.grapheneos.org/d/24134… and the linked third party articles. It's not an exaggeration to refer to both /e/ and iodéOS as scams. They're fooling people into believing they're getting privacy when they're throwing it away compared to if they used an iPhone. It's very much in the interested of authoritarian governments for people to opt-in to having highly insecure devices which can be easily broken into both remotely and with physical access.
Als Antwort auf GrapheneOS

@niavy The single thing that keeps me away from Graphene (apart from refusing to use a Pixel) is the cognitive load generated by trying to determine whether the FUD, loud as it is, is or is not valid.
It's very clear that graphene are very committed to a particular security model. It's less clear whether that security model meets my particular use-case, nor how to determine whether it might become so in the future, without all the shouting.
Als Antwort auf kit

@hypostase @niavy We're defending ourselves from major ongoing attacks on our project/team. We're not shouting.

GrapheneOS is a privacy project. It provides substantial privacy improvements including Contact Scopes, Storage Scopes, Sensors toggle, per-connection Wi-Fi anonymity including but not limited to MAC randomization, fixes for 5 different Android VPN leaks and far more. Privacy depends on security so we also heavily focus on that with exploit protections, which are proven to work well.

Als Antwort auf GrapheneOS

@niavy When you use words like ”scam” it starts to look less like defence. Defence would look like ”x said thing a and we disagree because … ”

For some of us our model may be different. Personally, for me, my model specifically excludes the use of google accounts, and it’s not clear to me that that would be possible with graphene, even leaving aside the hardware issue.

Because I have a particular set of priorities, I find it difficult to see a justification for the word ”scam” in some instances.

On the other hand, I have not seen any project that looks like it might meet my needs, and won’t until, and unless, there is strong support for non-US, preferably under multiple jurisdictions, third-party app suppliers for critical apps. That, of course, is beyond the scope of a single project, no matter how necessary it may be.

Als Antwort auf kit

@hypostase @niavy Unlike both of those operating systems, GrapheneOS doesn't connect to any Google servers by default and does not contain privileged Google service integration into the OS. We don't market it by calling it "degoogled" since the point if strong privacy and security, not avoiding one particular set of services.

Read discuss.grapheneos.org/d/24134… and the information from the Divested Computing project we have linked there. Calling that a scam is completely and thoroughly justified.

Als Antwort auf GrapheneOS

@hypostase @niavy GrapheneOS uses the only available secure hardware with support for installing another OS. We aren't going to massively lower those standards and start using devices without working disk encryption, important exploit protections needed to keep commercial exploit tools and other attackers out and basic privacy/security patches for the firmware/drivers. Not having proper privacy/security patches is near universal across Android devices and rules out most hardware by itself.
Als Antwort auf GrapheneOS

@hypostase @niavy Do you think that it's okay for /e/ to have what they advertise as a private speech-to-text which instead of doing processing locally sends the user's speech data to OpenAI without ever asking for consent? It's hidden away in the privacy policy. When confronted about it, they falsely claimed the data is anonymized which is not true. They just run it through their servers first. /e/ and Murena have MANY cases like this with the apps/services. It's the tip of the iceberg though.
Als Antwort auf GrapheneOS

@hypostase @niavy They go many weeks and months without providing basic privacy/security patches on a regular basis. They lag substantially far behind on OS releases which means not ever having the full set of patches since they're always behind and relying on the partial backports Google does for only vulnerabilities they deem High and Critical severity. Google considers most privacy issues Moderate or Low severity so they're not backported and /e/ doesn't get the fixes until years later.
Als Antwort auf GrapheneOS

@hypostase @niavy Android provides full privacy and security support for the latest release of the OS. Older releases of the OS get partial backports. Being on older releases also means missing current generation protections. Privacy and security are moving targets and Android is not staying ahead of what's needed for reasonable privacy and security, which means being far behind on the patches and protections makes things a lot worse. Privacy and security are bad enough on up-to-date software.
Als Antwort auf kit

@hypostase @niavy /e/ and iodéOS are objectively highly insecure and non-private due to the outrageously poor patching. iodéOS doesn't even ship Chromium WebView updates and /e/ barely does. People who actually look at what they're providing and evaluate it objectively can see the privacy and security is atrocious. Their marketing doesn't at all match what's provided and both actively mislead users including making false claims about privacy/security patches. They're much worse than LineageOS.
Als Antwort auf kit

@hypostase @niavy If you can't determine whether or not it meets your use case, it doesn't. You'll just be a headache for forum moderation.
Als Antwort auf kit

@hypostase @libreovergratis @niavy Murena, Calyx and iodé put substantial effort into misleading people about GrapheneOS including making many inaccurate claims about it and attacks on our team prior to us defending ourselves and debunking their insecure products. You have an issue with GrapheneOS defending ourselves from attacks and you falsely portray us as the aggressors when we didn't start a single one of those situations. You're downplaying the blatant misinformation and outright scamming.
Als Antwort auf Rebel Zhang

@rebel1725 @hypostase @libreovergratis @niavy You're clearly well acquainted with it as you posted a thread peddling a bunch of their false claims and narratives about GrapheneOS and their products. Why don't you read discuss.grapheneos.org/d/24134… and the articles linked in it from Divested Computing and Mike Kuketz as a starting point? Why are you making so many claims in the other thread you made without having done the research? Their attacks on GrapheneOS are widespread and easy to find.
Als Antwort auf GrapheneOS

@rebel1725 @hypostase @libreovergratis @niavy We're not going to be spreading their misinformation for them. If you wanted us to share that information with you, you shouldn't have posted a long thread heavily misrepresenting what GrapheneOS provides and equating it to insecure products doing the direct opposite. What you posted already appears to be based on their misinformation about GrapheneOS and their own products, so you seem to be familiar with it and don't appear to need help finding it.
Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy I indeed believe that GrapheneOS offers the best security in my opinion, and CalyxOS, iodé and /e/ fall behind. However, I don't know they are doing attacks on you, and I don't know how they will even fall behind LineageOS. I can't find posts, news and other resources about attacks towards GrapheneOS according to DDG and ChatGPT. Can you offer links supporting your statements?

By the way, I've never purchased Murena's and iodé's products.

Als Antwort auf Rebel Zhang

@rebel1725 @hypostase @libreovergratis @niavy CalyxOS, iodé and /e/ put a massive amount of effort into this false narrative that GrapheneOS is a security project rather than a privacy project. They heavily misled people into believing that their forks of AOSP heavily reducing privacy compared to it are somehow the privacy projects and the OS implementing major privacy improvements, fixing many privacy bugs itself and staying far ahead on privacy patches is somehow not the privacy project.
Als Antwort auf GrapheneOS

@rebel1725 @hypostase @libreovergratis @niavy They've made years of attacks on the GrapheneOS project misrepresenting the privacy, usability, app compatibility and many other aspects of it over and over again. When we began debunking it and criticizing what they're providing based on facts, each of those 3 projects began targeting our team with libel and harassment. As we've already said, we're not going to be spreading their attacks on GrapheneOS and you already seem well aware of it anyway.
Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy I definitely know that there is no privacy when there is no security, and I believe most people else know as well. Privacy is based on security. Therefore I am doing security hardening on my devices, including, but not limited to, considering a switch from Debian GNU/Linux to Kicksecure and Qubes OS. Therefore 'GrapheneOS is a security project' has already implicitly implied it is a privacy project too.
Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy In fact, I have already read your article. However what you've talk about is the security-hardening of GrapheneOS, which /e/ and iodé does not have. That is true and I have already know about it.

However, /e/ offers features to protect the users against trackers in addition to. iodéOS offers bootloader relocking. I don't know why they fall behind LineageOS.

We are talking about /e/ and iodé vs LineageOS comparison, not vs GrapheneOS comparison.

Als Antwort auf Rebel Zhang

@rebel1725 @hypostase @libreovergratis @niavy

> In fact, I have already read your article.

That doesn't appear to be the case based on your responses, so you should probably read it and the linked content again.

> However what you've talk about is the security-hardening of GrapheneOS

No, the article focuses on the extraordinarily level of privacy and insecurity primarily caused by lack of basic privacy and security patches along with losing many standard privacy and security protections.

Als Antwort auf GrapheneOS

@rebel1725 @hypostase @libreovergratis @niavy

> However, /e/ offers features to protect the users against trackers in addition to.

No, they provide a very poor implementation of DNS-based filtering and heavily misrepresents what it does. It accomplishes close to nothing since nearly none of the most privacy invasive behavior by apps is not done with separate third party domains and the stuff that is bypasses DNS-based filtering via DNS-over-HTTPS since DNS filtering is so widely deployed.

Als Antwort auf GrapheneOS

@rebel1725 @hypostase @libreovergratis @niavy DNS filtering cannot stop privacy invasive behaviors by apps. It can only get rid of some low hanging fruit from third party SDKs not doing the bare minimum to try to evade filtering. They have a short list of ads, analytics and similar domains used by client side libraries which are nowhere close to the main ways apps invade user privacy. They don't block anything dual purpose so it's extremely limited in what it can do and it's easily evaded too.
Als Antwort auf GrapheneOS

@rebel1725 @hypostase @libreovergratis @niavy There's a much better implementation called RethinkDNS available for every Android-based OS. It's fully compatible with using one or more chained WireGuard VPNs. If you care about VPN privacy then filtering makes you stand out from other VPN users and it's better to use the official VPN app such as Mullvad's own app combined with their own filtering also used by their other users. Fingerprinting via blocklists is actively used by websites, etc.
Als Antwort auf GrapheneOS

@rebel1725 @hypostase @libreovergratis @niavy

> iodéOS offers bootloader relocking. I don't know why they fall behind LineageOS.

The only security benefit of locking is to enable verified boot. They don't keep the verified boot security model intact and the only purpose it serves for them is that wiping data via recovery can't be as easily bypassed, except they're not providing important security patches and are mainly using low security devices where this doesn't work properly anyway.

Als Antwort auf GrapheneOS

@rebel1725 @hypostase @libreovergratis @niavy Keeping up with the privacy and security updates is far more important than a partial implementation of verified boot not even actually working on all the devices they support...

> We are talking about /e/ and iodé vs LineageOS comparison, not vs GrapheneOS comparison.

LineageOS keeps up with updates better, doesn't add as many misguided changes, doesn't add as much attack surface and is far more trustworthy of a project than either of those.

Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy Thank you for your detailed explanation. I have originally planned a switch from LineageOS to /e/, now I will no longer consider this plan.

Furthermore, I have also planned a switch to iodé when the GrapheneOS support is end on my Google Pixel 6. I will consider flashing a self-built LineageOS user mode build with bootloader relocking support instead.

Als Antwort auf Rebel Zhang

@rebel1725 @hypostase @libreovergratis @niavy You shouldn't use an insecure end-of-life device and shouldn't even have it unused and connected to the internet. Unpatched devices are the main source of DDoS attacks and have resulted in centralization of the internet behind services like Cloudflare. Outdated routers, phones, tablets, etc. are a major part of this. The reason so many services are behind Cloudflare and similar services is because it's the only way to protect against these botnets.
Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy I am to purchase a Google Pixel 9 as the replacement. My Pixel 6 will be used for something else.
Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy I have a Google Pixel 6 used for security and privacy intensive works, and it runs GrapheneOS. But what OS should I choose for my OnePlus 11, my Xiaomi Mi 10S, and my OnePlus 5T?

They currently run LineageOS, and I am planning to switch to an OS which offers a relatively better level of security and privacy. Currently I plan to switch to /e/. So learning about why it falls behind LineageOS js important for me to make a proper decision.

Als Antwort auf Rebel Zhang

@rebel1725 @hypostase @libreovergratis @niavy The post linked above and the content linked within it explains in detail why /e/ is extremely insecure and non-private. It's far worse at providing privacy and security updates than LineageOS which is not very good at that but not as bad. They also heavily mislead their users about while LineageOS doesn't directly do much of that. /e/ adds very problematic invasive services and attack surface while LineageOS also doesn't do much of that.
Als Antwort auf kit

@hypostase @niavy
The Internet: 'We need vocal privacy advocates and commited devs. '

*advocates for privacy*

The internet: 'Okay okay shut up already, gosh.'

Als Antwort auf Libre>Gratis

@libreovergratis @niavy And a critical part of that is to have multiple models. If each is just trying to be the next monoculture, then the problem will not be solved.

For me, the critical factor is not having to use a US based service or product. Under e/os that's painful, Calyx is currently out of play, Graphene is ruled out for hardware, and their rhetoric seems to reach somewhat beyond what it can support.

My claim is that when rhetoric is not clearly backed up, then only those who have the time and will to see past it, might be able to come to a place of trust.

So far I have not really seen a good and neutral analysis of the architectural choices of each of the projects. Just people shouting.

Als Antwort auf kit

@hypostase @libreovergratis @niavy There's no shouting coming from us. There's substantial misinformation, libel and harassment coming from /e/ and iodéOS which we've responded to by defending ourselves debunking their claims along with posting accurate criticisms of their tech and actions.

You've chosen not to read the detailed and verifiable information at discuss.grapheneos.org/d/24134… along with the linked articles from Mike Kuketz, Divesting Computing and Eylenburg's site and other sources.

Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy Rather than taking the shortcut of supporting insecure devices unable to protect users from widely available commercial exploit tools, GrapheneOS is working with an OEM on secure devices which can at least be a sidegrade from Pixels. Many people want/need an actual private and secure device rather than being told the highly insecure and non-private product they've purchased is private when it doesn't even provide years of standard privacy fixes / protections.
Als Antwort auf GrapheneOS

@libreovergratis @niavy Now that is an actual lie.

As I said, I read your material, and at least some of the links including specifically eylenburg.github.io/android_co…

I came to a different conclusion, because my priorities are different.

I absolutely agree that apple is a more secure solution for my needs, but it’s still one that bows to the US government (whether or not one wishes, as I do, to consider it fascist).

So, as I see it, there are no solutions without compromise. It just depends on which compromises one prioritises. Claiming that a different set of priorities is a scam does not necessarily make for good marketing, no matter who says it.

I find it equally disappointing from all.

Als Antwort auf kit

@hypostase @libreovergratis @niavy You've just admitted to the fact that you didn't actually read all of it, and it's clear that you just skimmed over it and didn't actually try to understand or verify what's written there. We didn't lie, contrary to the numerous false narratives you've pushed about GrapheneOS in this thread which are outright lies.

/e/ is a scam because they have an extraordinarily insecure/non-private product sold through endless objectively false marketing claims.

Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy It is you who is repeatedly lying about GrapheneOS and pushing false narratives where you try to paint us as the aggressor for responding to years of attacks from /e/ and others. Contrary to their inaccurate attacks on GrapheneOS and the inaccurate attacks you've made on it here, our posts about this are based on factual information which can be verified. It's verifiable that /e/ sets a fake Android security patch level and misleads users about patches, etc.
Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy Each time yourself and other people who support/use that OS push false narratives about GrapheneOS we'll post 100 times the amount of content across platforms debunking the scam. If those projects and their communities stopped trying to mislead people about GrapheneOS, we wouldn't be posting about them. Since it continues on an ongoing basis including libel and harassment towards our team from /e/ and their community, we'll be ramping up fighting back.
Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy We've barely gotten started on fighting back against the misinformation about GrapheneOS and libel/harassment towards our team. There's going to be much more active pushback against them combined with legal action over the libel and harassment towards our team which /e/, Murena and their supporters have heavily engaged in.

We have a major OEM partnership and are going to have a lot more resources to better defend ourselves including long overdue legal action.

Als Antwort auf GrapheneOS

Will the OEM you're working with reimburse the litigation costs?
Als Antwort auf 2babcc

@2babcc We won't need that, we have substantial funding coming without them. Our OEM partnership doesn't involve money changing hands, although once things are further along we'll talk about the device pricing, if we'll get money from devices sold with it and how much that would be.
Als Antwort auf GrapheneOS

@hypostase @libreovergratis @niavy
"There's no shouting coming from us"

So, this entire thread doesn't exist? Because this whole thread makes GrapheneOS sound like a politician with no policies that make them look good, so instead they keep talking about everyone else.

Huge red flag🚩

Als Antwort auf Leeloo

@leeloo @hypostase @libreovergratis @niavy Murena and iodé are making highly inaccurate claims about GrapheneOS as part of their false marketing. Countering that with detailed factual information isn't shouting. You should read discuss.grapheneos.org/d/24134… and the linked third party sources. These products are heavily harming user privacy and security. They're not what they claim to be and their marketing is full of false claims including attacks on real privacy projects they mislead people about.
Als Antwort auf Leeloo

@leeloo @hypostase @libreovergratis @niavy Posting information which doesn't align with your pre-existing bias isn't shouting. What you're doing is low effort trolling.
Als Antwort auf GrapheneOS

unfortunately there is a vast segment of the population that lacks the ability to see past your (honestly somewhat abrasive) social media presence to honestly examine the entire context, there's likely no convincing them, while I respect the GOS team for being proactive in dispeling misinformation, you may have to pick your battles.
Als Antwort auf Libre>Gratis

@libreovergratis They're engaging in blatant trolling. Posting information people find inconvenient which doesn't align with their beliefs isn't shouting...
Als Antwort auf GrapheneOS

exactly, best not to feed the trolls, I would just dunk on them and move on.
Als Antwort auf Leeloo

@leeloo @libreovergratis @hypostase @niavy You couldn't be more wrong. You're attacking the actual privacy and security project with substance to support for-profit companies grifting in the space by selling extraordinarily insecure and non-private products with extensive false marketing. There's a reason France is going after GrapheneOS as part of a crackdown on encryption and secure devices but supporting those products...

Why don't you read discuss.grapheneos.org/d/24134… and the 3rd party sources?

Als Antwort auf GrapheneOS

@libreovergratis @hypostase @niavy
I'm talking about this very thread. If I'm wrong about this thread existing, what am I replying to? How do you keep replying?
Als Antwort auf Leeloo

@leeloo @libreovergratis @hypostase @niavy We're replying to you in the hope that you're not actually a troll and are willing to read what we've written and what other third party privacy/security researchers have written. The top-level thread here was posted by GrapheneOS and you're choosing to go out of the way to come here and participate in it. If you want to avoid seeing posts from GrapheneOS or grapheneos.social, we can arrange that for you.
Als Antwort auf Leeloo

@leeloo @libreovergratis @hypostase @niavy You consider it a red flag to post detailed factual information that's verifiable and has a bunch of third party sources.
Als Antwort auf GrapheneOS

@niavy And your statement that iOS is better than those libre software projects are absolutely, definitely and undoubtedly wrong and ridiculous. It's proprietary software that is unethical and unjust and is always malware and spyware with no exception, which should never exist.
Als Antwort auf Rebel Zhang

@rebel1725 @niavy iOS provides dramatically better privacy and security than those fake privacy products. Open source doesn't do you any good if you have the source code and can very easily see how horrible it is but still use it anyway. What's the point of sources nearly no one reviews and where the people who do review it and sound the alarm get ignored and attacked?
Als Antwort auf Niavy

guys, if you want to improve the world, please take into account that ressources are scarce. If you pretend that /e/os will put me at risk, risk management would require that I understand the risks related to actual scenarios. Otherwise, you only spread uncertainty. In short: As a non-technician, but as a customer who is keen to avoid Google and other surveillance based businesses, I appreciate your warning, but I do not fully understand the thread you are talking about 1/2 @niavy
Als Antwort auf Plinubius 🇪🇺

@plinubius @niavy /e/ is extraordinarily insecure and non-private. Every user on it is at risk due to severe vulnerabilities not patched for many months and even years, including ones Google has announced are being exploited in the wild. Google only announces exploits in the wild when it's caught happening prior to the Android Security Bulletin being published. It's not widely talked about what happens for ones with patches released but not shipped by /e/ and others for many months or more.
Als Antwort auf GrapheneOS

@plinubius @niavy You should discuss.grapheneos.org/d/24134… because you're greatly underestimating the level of insecurity and non-privacy with /e/. It comes with a bunch of privacy invasive apps/services including sending user data to OpenAI and other invasive services without informing users.

/e/ doesn't have full privacy/security patches on ANY devices but many are much worse than others. They're missing kernel, driver and firmware patches on Pixels since at least June 2025 but most are much worse.

Als Antwort auf Plinubius 🇪🇺

Moreover, as a European, I would choose French authorities over the authorities of the US. 2/2 @niavy
Als Antwort auf Plinubius 🇪🇺

@plinubius @niavy Choosing European-based companies is a much different thing than using fake privacy products from a company delivering extremely insecure and non-private devices/services while falsely marketing them. /e/ and iodéOS both chose to take the approach of misleading people about their products and misleading people about GrapheneOS which they clearly see as a huge threat to their products lacking actual substance. They chose to have us respond by making attacks on us and our team.
Als Antwort auf TSG236

@theserpentguy236 @plinubius GrapheneOS Foundation is based in Canada but GrapheneOS is a very intentional project. Our lead developer is Ukrainian and lives in Ukraine. We've posted about how he was forcibly conscripted into the army and we were able to obtain help to have him redirected away from combat. It doesn't seem that Russia is going to stop invading the country any time soon and support from the EU and US has fallen off so we're still worried he could be sent to combat in desperation.
Als Antwort auf GrapheneOS

@theserpentguy236 @plinubius The founder of GrapheneOS is Canadian so that's why the project is based in Canada. The 3 directors are Canadian, Ukrainian and Kazakhstani. Other key people are from throughout Europe, East Asia, Australia, etc. GrapheneOS Foundation is certainly Canadian but we don't consider the project itself to have a nationality. GrapheneOS Foundation exists to support GrapheneOS but GrapheneOS can exist without it and we can create a non-profit elsewhere if needed.
Als Antwort auf GrapheneOS

@theserpentguy236 @plinubius If Canada passed a law similar to Chat Control which applied to GrapheneOS, we would leave. We can move the non-profit and our local build/signing infrastructure elsewhere. It doesn't mean Canadians couldn't work for the project anymore just as people in the UK or Australia can still work on it despite their outrageous anti-privacy laws. France and several other countries in Europe are going down a similar path. We're not sure where we'd move it outside of Canada.
Als Antwort auf GrapheneOS

I hope for a co-evolutionary development of both, e/os and GrapheneOS. I appreciate your attitude and objectives, and I hope for a more tolerant debate. For the moment, e/OS offers me a number of opportunities which I do not have when using Google Android. It would be a pleasure to use GrapheneOS one day, but currently, e/os provides better affordabilty, as e.g. installable on a 150EUR Nothing CMF Phone 1. @theserpentguy236
Als Antwort auf Plinubius 🇪🇺

@plinubius @theserpentguy236 /e/ is extraordinarily insecure and non-private. You would be far better off using a used iPhone from years ago than such an incredibly insecure and non-private OS. You should read the information available at discuss.grapheneos.org/d/24134… along with the linked content from the Divested Computing project. The device you're using is heavily compromising your privacy and isn't safe to use. That's not an exaggeration and it's unfortunate that you've been fooled by them.
Als Antwort auf GrapheneOS

@plinubius @theserpentguy236 /e/ and Murena spent years misleading people about GrapheneOS. They made an enormous amount of false claims about it which had a substantial negative impact on the project. They're selling extremely insecure and non-private devices while misrepresenting what's provided and relentlessly lying about it to people in their marketing and posts. We're not calling them scammers without it being completely justified. They're far worse than even Erik Prince's Unplugged.
Als Antwort auf GrapheneOS

@plinubius @theserpentguy236 Erik Prince's Unplugged has also only tried to mislead people about GrapheneOS from a technical perspective. In contrast, /e/ and Murena have heavily attacked our team including supporting fabricated stories aimed at directing harassment towards our team.

You would be far better off using an ancient iPhone from both a privacy and security perspective. You would a fair bit better off using LineageOS which is still very problematic but far less far bad than /e/.

Als Antwort auf GrapheneOS

@plinubius @theserpentguy236 If you want to use something that's legitimate, then switch to directly using LineageOS instead of using /e/. You will be better off in terms of privacy and security while also not supporting a company that's scamming people. LineageOS is not really a privacy project and definitely not a security project, but it's better at both of those things than /e/ which is marketed as a privacy product and sold by a for-profit company with extremely false marketing.
Als Antwort auf Plinubius 🇪🇺

Affordability is the big challenge, I really hope someone releases an affordable phone that has full hardware support for modern mitigations or security and privacy will remain the domain of the middle and upper class.
Als Antwort auf David Fleetwood

@reflex @plinubius @theserpentguy236 The most recent 3 generations of the devices we support have 7 years of support from launch. Buying a 4 year old phone with 3 years of support is far cheaper than buying a new phone that's getting far worse privacy/security patches for only 3 years from the beginning. Used Pixels ARE affordable and the Pixel 8 continues getting older and more affordable while having plenty of support remaining and overall quite comparable security to the Pixel 10.
Als Antwort auf GrapheneOS

@reflex @plinubius @theserpentguy236
I have been reading GrapheneOS FAQ. Your FAQ has a check list of what it would take for a device other than Pixel to be included in official support: I'm a bit technical and I have no idea what most of the requirements even mean :(
I'll try asking on the fair phone forums if the latest faire phones match the requirements.
Als Antwort auf Jean Helou ⌨️

@jhelou @reflex @plinubius @theserpentguy236 Fairphones do not come close to meeting our requirements and they're ruled out for any future partnership with GrapheneOS due to their partnership with Murena, a company heavily involved in attacks on the GrapheneOS project and which is scamming users. Please read our post about it and the posts from other privacy/security researchers linked in it:

discuss.grapheneos.org/d/24134…

No need to make a post on the Fairphone forum about it to get an answer.

Als Antwort auf Jean Helou ⌨️

@reflex @plinubius @theserpentguy236 One issue with your support policy is that phones have a huge environmental impact, buying a new phone should only be done as a last resort. Pixel phones have poor repairability and are not so strong against physical hits. I sure wish your FAQ would list environment friendly devices that GrapheneOS can be installed on. I don't fear building my own image, I'm not asking for official support
Als Antwort auf Jean Helou ⌨️

@jhelou @reflex @plinubius @theserpentguy236 Fairphone's devices have atrocious security, updates and long term support. They're nowhere close to providing the requirements for GrapheneOS.

Fairphone closed the door on working with us with their Murena partnership. They share part of the blame for ongoing attacks on GrapheneOS.

We're working with a large OEM towards their devices meeting all our requirements and providing official GrapheneOS support. Late 2026 or in 2027 is the aim right now.

Als Antwort auf GrapheneOS

« Quand il est présent sur un téléphone mobile, ce système constitue un indicateur clair de sophistication technique et d’intention de dissimulation », ajoute un policier.

Foutaise...

Als Antwort auf GrapheneOS

ins deutsche übersetzt liest sich der französische artikel wie ein bericht der "aktuelle kamera".
Als Antwort auf GrapheneOS

another reason to support graphene os, they have multiple ways to pay and contribute
We must do our best to support GrapheneOs team, their work is honorable
Als Antwort auf GrapheneOS

There's another article posted at lefigaro.fr/secteur/high-tech/…. We don't have a subscription to access it so we can't evaluate whether the coverage is fairer. Need our community to check. There's an ongoing attempt to smear GrapheneOS by French government agencies so there will be more articles.
Als Antwort auf GrapheneOS

Ugh. From the parts I am allowed to read it already stinks. Criminal yada yada. A smear campaign - one that is abundantly attempting to spread misinformation.

This needs to stop. Not tomorrow, not today, but yesteryear.

I mean - even some priests are using GrapheneOS nowadays to protect confessions.

Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf h3artbl33d

@h3artbl33d Le Figaro is a right-wing newspaper owned by a leader of the French defense industry, what did you expect?
Als Antwort auf JaggyJeff

@JaggyJeff @h3artbl33d We've looked at the full text of the article and it's at least a lot better than the first one from Le Parisien.
Als Antwort auf GrapheneOS

I'm really at a loss for words.
Even Threema, Signal, and Tuta Mail are used by criminals. Anything that is secure can also be misused by criminals.

Because I want a smartphone without any
Bloatware apps and with privacy settings.

Am I a criminal ??

GOVERNMENTS ARE MUCH MORE CRIMINAL AND CORRUPT THAN I COULD EVER BE. !!!

@GrapheneOS

I WISH YOU ALL THE LUCK IN THE WORLD.

@Tutanota
@threemaapp
@signalapp

Als Antwort auf GrapheneOS

The reality is that a tiny proportion of the GrapheneOS userbase are criminals, clearly far below 1%. It's a rounding error. The vast majority of criminals use Android and iOS. French law enforcement contains a vastly higher proportion of criminals than the GrapheneOS userbase.
Als Antwort auf GrapheneOS

French law enforcement has a disproportionately high number of domestic abusers, pedophiles and other criminals. They routinely illegally violate the human rights of French citizens. They're upset they can't break into phones of a small handful of people because of GrapheneOS.
Als Antwort auf GrapheneOS

and it's not even the worse, they made the addition of "black box" on their network mandatory under "Francois holland" president, officially for scanning http only, but in reallity as a black box anything can run on them and ISP have no control over it or even know what it does.

French are on the full surveillance state road.

Als Antwort auf GrapheneOS

That's a bit of a bold claim, but deeply disappointing if true. Which sources did you use to make it? I'd be interested if you could share
Als Antwort auf GrapheneOS

As a French citizen I absolutely can confirm the way GrapheneOS and every privacy enhancing tools are being criminalized here.
We have a few groups such as @LaQuadrature trying to defend our rights but it's not enough...
Als Antwort auf GrapheneOS

Get GrapheneOS certified for (in Germany) VsNfD and "Streng Geheim". Here it's called "Geheimhaltungsgrad". I think the English word for that is just "Classification" (you know the "Top Secret" and so on stuff).

Followed by marketing it for Government employees.

Then nobody will say anything about criminals using it anymore. After all you also don't hear anything of any of the other products that get used in such contexts like KeePass or Veracrypt and so on...

Als Antwort auf GrapheneOS

I half expect them to start checking phones at the boarder soon enough as every time I go to France they get more and more strict and people drink it up over there
Als Antwort auf GrapheneOS

Are you saying than if a french cop want to crack a GrapheneOS phone, the place where there is statistically the most chance to contain criminal material are not on "media" or "sms" folders, but directly on the cop's phone ?
Als Antwort auf GrapheneOS

A tiny proportion of cars are driving by criminals but I think nobody really wants to blame the cars and ban them !
Als Antwort auf GrapheneOS

bullshit. French prisons are hackerspaces, never heard of that? It has been told that behind the cover of the books Sarkozy took, the books were in fact about Linux and GrapheneOS.

/s

Als Antwort auf GrapheneOS

I feel like eventually if we keep going down this road, there is going to be a suit over whether or not the use of secure aftermarket ROMs is grounds for reasonable suspicion of a crime.

"Sir is there a reason you don't have an advertising ID? "

Als Antwort auf GrapheneOS

I will have access when it goes to the (e)paper edition. The November 20 edition is already out and it is not there, so one more day to wait. This newspaper already published an article saying that free/open source software is a threat to state security. That wasn't by one of their journalists but that gives a clue about their mindset (they are right conservatives).
Als Antwort auf GrapheneOS

All grapheneos is android for people who want control over their device...

Just because someone want control over their data by not using the norm and picking privacy preserving alternatives should not be a red flag. Sure criminals do it too, but let's be honest there's more people who do it because they want the "freedom" or as a hobby than for crime. The issue here is it's harder to spy on these people. It's all about control

Als Antwort auf GrapheneOS

this is like blaming a hammer just because some people use it to beat up other people... im speechless
Als Antwort auf GrapheneOS

don't forget that most newspapers in France are owned by billionaires pushing a far right agenda
Als Antwort auf GrapheneOS

It's same biased horseshit. Your arguments are in, but the overall tone of the article present them as defending the wrong side.
Als Antwort auf GrapheneOS

I doubt the coverage will be better, le figaro used to be a right leaned newspaper that got acquired by a far-right catholic billionaire
Als Antwort auf GrapheneOS

Le Parisien and Le Figaro are both "torchons d'extrême-droite" (far right rags). They do not deliver information, nor do they make readers think. They do not manage their comments section where you can find calls to murder, sexism, misogynist, homophobic, transphobic and racist stuff. The only acceptable answer when they ask "are you aware criminals use GrapheneOS ?" should be "are you aware you are read by racists and masculinists who sometimes take action ?".
Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf GrapheneOS

French people here, I'm honestly not surprised and I don't expect any improvement. As you mentioned in the other thread, the French government has been a big supporter of the chat control law, so... And even though our parliament is fairly mixed at the moment, we're slowly but surely moving towards the far right for the 2027 presidential election.
Als Antwort auf Ncoinfo

If my personal situation allowed it, I would leave the country (probably for Canada or Ireland), to be honest. The grass isn't necessarily greener elsewhere, but I can no longer stand the self-sufficient mindset that far too many of my fellow citizens have.

And if Graphene Os were to be banned or its use became too suspicious, I would not return to Google Android. Instead, I would take this opportunity to embark on a digital detox and return to a dumbphone.

Als Antwort auf Ncoinfo

@ncoinfo Canada could very quickly follow the same path as many European countries and we're prepared to move the operations we have in Canada elsewhere if needed.

Our update mirrors aren't trusted by the update client due to signature checks and downgrade protection for the app store metadata and app/OS updates but the servers still matter and we plan to start taking the politics towards privacy of European countries into account more than we were for choice of providers and locations.

Als Antwort auf GrapheneOS

I'm french and using GrapheneOS since a year. Your work is absolutely amazing and a breeze of fresh air in the toxicity of other phone OS.
FYI, comments below the Figaro article are not going the way they want. People are not buying it. That's what matters the most.
Als Antwort auf GrapheneOS

> /e/OS receives millions of euros in government funding

Do you have a source for this claim?

Als Antwort auf Lutin Discret

@lutindiscret

projets-libres.org/en/podcast/…

> The European Union has subsidized us to the tune of several million for this project.

It should be noted that this is money to build products for their for-profit company. Their non-profit is controlled by the same people who own the for-profit company selling what it makes. They're very closely tied together. It's quite unlike Mozilla where the non-profit owns the for-profit company. The for-profit is owned by investors to get a financial return.

Als Antwort auf GrapheneOS

Ah ouais la balle perdu par contre mdr @murena. Droit de réponse ?
Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf GrapheneOS

I would be interested in a sourced article about this, if only to learn about the threat vectors that are actually used in the wild and how various OS patch or don't patch the corresponding issues.

Do you have a link or something that goes deeper into these aspects 🙏🏻?

Never mind, I found grapheneos.social/@GrapheneOS/… in the thread which seems to have more information


@stephavelo @breizh @cooperative_commown @niavy @lexinova You should read discuss.grapheneos.org/d/24134…. Your data still goes to Google with /e/ which uses Google services and gives those privileged access in the OS, and it has atrocious privacy and security due to many months and even years of missing privacy/security patches. There's a lot of detailed information in that post about it and we linked posts from the Divested Computing project and Mike Kuketz and Eylenburg's site with more info.

Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf Jean Helou ⌨️

@jhelou Doesn't grapheneos.social/@GrapheneOS/… show up in the thread for you?


There's a reason they're going after a legitimate privacy and security project developed outside of their jurisdiction rather than 2 companies based in France within their reach profiting from selling 'privacy' products.

discuss.grapheneos.org/d/24134…

Here's that article:

archive.is/AhMsj


Als Antwort auf GrapheneOS

it does indeed but I misunderstood what the link would be about due to the wording of the message accompanying it
Als Antwort auf GrapheneOS

I understand your statment against /e/ and iodé.
I was mislead thinking /e/ was "just" lineage with a privacy overlay. I did not look at the details. I started thinking their was an issue as I tested lineage on a Samsung tablet and saw it get weekly detailed updates when my fairphone 3 only got monthly-ish /e/ updates (and still get a13 when fairphone published a15 for it long ago)...

The main issue I have with graphene is my need for a repairable phone to make it last long. Pixels are not really repairable. Do you plan to support such a phone in the future ? Or the only hope is to expect Fairphone to inbed a secure element in next phone ?

Als Antwort auf Degafamons-nous !

@unii It's an extraordinarily insecure and non-private OS lacking basic privacy/security patches. They mislead users about what they provide and heavily downplay their failure to protect them. /e/ makes users much worse off than if they had simply used an iOS device. Apple has far more substance behind their privacy and security claims for their products and services.

You should read discuss.grapheneos.org/d/24134… and also the coverage from Divested Computing, Mike Kuketz and others about it.

Als Antwort auf GrapheneOS

e/OS/ makes it possible to use old devices without Google. GrapheneOS may be more secure but for me, I would love to not use Google devices in the first place, and reduce e-waste by not discarding phones once their manufacturers stop supporting them. These are both very valid reasons to use e/OS/ and on these points I strongly prefer their policy to GrapheneOS's.

GrapheneOS is adamant on the fact that no phone that doesn't support specific security features will ever be supported. e/OS/ makes it possible to use old devices. The projects are complementary: you shouldn't be so critical of them.

You don't seem to care that your project pushes people to buy phones from Google, which proved itself to be one of the worst Big Tech companies time and time again (latest example: 404media.co/google-has-chosen-…), you also don't seem to care in the slightest about the environmental impact of buying new phones to stay covered by GrapheneOS, so yeah, on many points, I prefer their project to yours, even though I use GrapheneOS myself.


Google Has Chosen a Side in Trump's Mass Deportation Effort


Google is hosting a Customs and Border Protection (CBP) app that uses facial recognition to identify immigrants, and tell local cops whether to contact ICE about the person, while simultaneously removing apps designed to warn local communities about the presence of ICE officials. ICE-spotting app developers tell 404 Media the decision to host CBP’s new app, and Google’s description of ICE officials as a vulnerable group in need of protection, shows that Google has made a choice on which side to support during the Trump administration’s violent mass deportation effort.

Google removed certain apps used to report sightings of ICE officials, and “then they immediately turned around and approved an app that helps the government unconstitutionally target an actual vulnerable group. That's inexcusable,” Mark, the creator of Eyes Up, an app that aims to preserve and map evidence of ICE abuses, said. 404 Media only used the creator’s first name to protect them from retaliation. Their app is currently available on the Google Play Store, but Apple removed it from the App Store.

“Google wanted to ‘not be evil’ back in the day. Well, they're evil now,” Mark added.

💡
Do you know anything else about Google's decision? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

The CBP app, called Mobile Identify and launched last week, is for local and state law enforcement agencies that are part of an ICE program that grants them certain immigration-related powers. The 287(g) Task Force Model (TFM) program allows those local officers to make immigration arrests during routine police enforcement, and “essentially turns police officers into ICE agents,” according to the New York Civil Liberties Union (NYCLU). At the time of writing, ICE has TFM agreements with 596 agencies in 34 states, according to ICE’s website.

After a user scans someone’s face with Mobile Identify, the app tells users to contact ICE and provides a reference number, or to not detain the person depending on the result, a source with knowledge of the app previously told 404 Media. 404 Media also examined the app’s code and found multiple references to face scanning.

A Google spokesperson told 404 Media in an email “This app is only usable with an official government login and does not publicly broadcast specific user data or location. Play has robust policies and when we find a violation, we take action.”
A screenshot of Mobile Identify's Google Play Store page.
Last month, Google removed an app called Red Dot. That app, in much the same vein as the more well-known ICEBlock, lets ordinary people report sightings of ICE officials on a map interface. People could then receive alerts of nearby ICE activity. “Anonymous community-driven tool for reporting and receiving ICE activity alerts,” Red Dot’s website reads.

Red Dot’s removal came after a cascading series of events starting in September. That month 29-year-old Joshua Jahn opened fire at an ICE facility in Dallas, killing two detainees and wounding another. Authorities say Jahn used his phone to search for ICE-spotting apps, including ICEBlock, before the shooting, Fox reported. A short while after, the Department of Justice contacted Apple and demanded it remove ICEBlock, which Apple did, despite such an app being First Amendment protected speech.

Both Apple and Google then removed Red Dot, which works similarly, from their respective app stores. Google previously told 404 Media it did not receive any outreach from the Department of Justice about the issue at the time. The company said it removed apps that share the location of what it describes as a vulnerable group: a veiled reference to ICE officials.

A representative for Red Dot told 404 Media in an email they “see 100% dissonance” in Google’s position. Google removed the app claiming it harms ICE agents “while continuing to host a CBP app that uses facial recognition to identify immigrants for detention and deportation.”

“This is unequivocally morally and ethically wrong. We are deeply concerned about the number of violations that must be occurring to deploy AI facial recognition on people for the purpose of making arrests. It is a clear and unacceptable case of selective application of their policies,” they added. The representative did not provide their name.

Google’s decision to host CBP’s immigrant-hunting app while removing one designed to warn people about the presence of ICE has concerned free speech experts.

“Providing tech services to supercharge ICE operations while blocking tools that support accountability of ICE officers is entirely backwards,” Kate Ruane, director of the Center for Democracy & Technology’s Free Expression Project, told 404 Media. “ICE is currently deploying armed, masked agents to take people from daycares, street corners, parking lots, and even their own homes, often based on paper thin suspicion and frequently with unjustifiable use of force. It is the mothers, fathers, children, friends, neighbors and coworkers being targeted by ICE who are most vulnerable in this situation.”

“ICE agents don’t want to face accountability for their actions, but documenting ICE and other police activities is essential to guard against abuse of power and improper conduct. Courts have recognized for decades that tracking and reporting on law enforcement activities is an important and time honored public accountability mechanism,” she continued.

Ruane said apps like this are an exercise of First Amendment protected rights. “As with any other app, if someone misuses it to engage in unlawful activity, they can be held accountable. Google should restore these services immediately,” she added.

Joshua Aaron, the creator of ICEBlock, told 404 Media “Big tech continues to put profit and power over people, under the guise of keeping us safe. Right now we are at a turning point in our nation’s history. It is time to choose sides; fascism or morality? Big tech has made their choice.”


Als Antwort auf zoug

@zoug /e/ is extraordinarily insecure and non-private. They don't provide users with basic privacy and security patches while misleading them about it. It sends sensitive user data to Google, OpenAI and their own services. They falsely claim the OS entirely avoids Google services while adding a bunch of Google service integration with privileged access. It has full privileged integration for multiple Google apps and services. /e/ exists for the founders to profit selling fake privacy products.
@zoug
Als Antwort auf GrapheneOS

@zoug You seem to be confusing /e/ with LineageOS which is what they forked to build their products or the DivestOS project Murena played a substantial role in killing off ruining it for the developer with their attacks prior to shifting focus to attacking GrapheneOS.

Murena is not on the side of privacy but rather is opposed to it and profiting from selling extremely non-private devices and services while attacking actual privacy projects including with repeated harassment towards our team.

@zoug
Als Antwort auf GrapheneOS

@zoug There's nothing about /e/ that's complimentary to GrapheneOS. It's a blatant scam that's causing substantial harm to people who are being tricked into using highly insecure and non-private devices/services. If people are going to be using those old devices, they're better off using LineageOS and would have been better off using DivestOS than that before Murena helped to kill it off.

You talk about the environment but support a company selling disposable devices without basic updates.

@zoug
Als Antwort auf GrapheneOS

@zoug GrapheneOS uses hardware with 7 years of proper support from launch. There are no other Android devices providing it. Using an aftermarket OS doesn't alleviate the need to have firmware and driver updates from the hardware vendors. Other aftermarket operating systems don't keep up with OS and driver/firmware updates and largely don't provide those. Products failing to ship users high importance privacy/security patches aren't doing the bare minimum. They mislead their users about it.
@zoug
Als Antwort auf GrapheneOS

@zoug Rather than providing people with highly insecure and non-private devices without the bare minimum, GrapheneOS is working with a major OEM to make secure devices which are at least a sidegrade from Pixels. We're not going to use hardware lacking support for working disk encryption for the vast majority of users, lacking the tools to protect people from widespread commercial exploit tools and not getting proper updates. People are far better off with an iPhone than fake privacy products.
@zoug
Als Antwort auf GrapheneOS

@zoug /e/ and Murena spent years misleading people about GrapheneOS. They misled pmany eople into believing that it's somehow not a privacy project despite that being the whole focus of the project and it providing massive privacy improvements. That includes crucial features needed to bring parity with iOS and exceed it in some ways rather than providing much worse privacy from apps. Storage Scopes, Contact Scopes, Sensors toggle and much more are privacy features. They've caused a lot of harm.
@zoug
Als Antwort auf GrapheneOS

@zoug /e/ and Murena also made many false claims about the privacy, usability and app compatibility of GrapheneOS. They portrayed it as something not usable by regular people and super niche. The attacks they spent years making on us before we responded to it have caused a lasting impact still harming us. They helped to set up the attacks currently ongoing against GrapheneOS by authoritarians against it through misrepresenting it this way. They're very much not on the side of privacy.
@zoug
Als Antwort auf GrapheneOS

@zoug When we began countering their false claims and criticizing them, they got on board with pushing fabricated stories about our team and harassment. DivestOS was also targeted with harassment by their community, but they've put a lot more effort into targeting GrapheneOS.

/e/ greatly lowering the security of devices is an asset to authoritarians and there's little reason that they'll face the same opposition. They're not protecting users but rather making them far worse off than iOS users.

@zoug
Als Antwort auf GrapheneOS

thanks for the in-depth response. My point about not buying Google phones, and extending the life of existing devices, still stands. 7 years of support means little if you don't buy the phone the instant it came out, and not all Pixels have 7 years. Take me for example, bought a Pixel 6a last year when my old phone broke, it only has 5 years of support, and don't want to change it before it's completely unusable: I'd have to switch to Lineage in one year and a half from now, it seems.

I had a good general view of /e/OS because of their unGoogled promises but may have been misled, I've never tried their OS first-hand.

I'm still bothered by GrapheneOS's standpoint of "either a device with perfect security or nothing" policy, again, because of the e-waste this entails. Yes, even at the cost of some privacy features. But you've convinced me that LineageOS is a better choice than /e/OS (and that one I've tried before).

Als Antwort auf GrapheneOS

I m genuinely interested by any technical source about this particular aspect of your argumentation. I must say I'm one of your big supporters, as an it guy irl.
Als Antwort auf GrapheneOS

The French voting in a left-winger and the government installing a right-winger sort of telegraphed that whole thing.
Als Antwort auf GrapheneOS

Who is "they"? The article I just read from Le Parisien (epaper edition dated Nov 20) does not say anything like what you report in this message. You complain about their translation but completely invent things they have not written. Or then provide a clear reference. That article is not perfect but reasonably balanced.
Als Antwort auf avron

@avron We didn't invent anything. Why don't you look at the article we linked?

> « Quand il est présent sur un téléphone mobile, ce système constitue un indicateur clair de sophistication technique et d’intention de dissimulation », ajoute un policier. Le logiciel peut effacer toutes les données du téléphone en affichant une fausse page de Snapchat par exemple quand un cyberenquêteur tente d’entrer dans sa mémoire ou de le décrypter.

Als Antwort auf GrapheneOS

@avron There's also a second article with more fearmongering about GrapheneOS and a veiled threat:

archive.is/8Jo17

Als Antwort auf GrapheneOS

Thanks, I could not find it in any epaper edition so far. Will check the next ones for it. The interviewed person recognizes that GrapheneOS is also used for legitimate purposes, not just by criminals. She says they might sue GrapheneOS if French police investigators "find ties with a criminal organization and [GrapheneOS] does not cooperate with the [French] justice", which sounds like a threat that they might use whatever poor excuse for doing so, and then she somehow brags that they will find a way to break GrapheneOS security. More intimidation than fearmongering I would say.
Als Antwort auf GrapheneOS

Sorry, I initially understood that as part of what the article explicitly says is what a policeman told the journalist, but I now I realize that the quotes ended before that sentence. However, isn't it possible for any user to put whatever image they want after the duress password is entered? By the way, according to French law, if a newspaper writes something on you that you consider not accurate, you have the right to request them to publish your own statement in reply (but they can comment further on it, so be cautious) and newspapers apply this usually.
Als Antwort auf GrapheneOS

French gos user here.

> the references to human rights organizations, large tech companies and others using GrapheneOS weren't included

This is verifiably false:

> Notre travail sur la sécurité et la confidentialité est très apprécié par les professionnels de la sécurité et est régulièrement recommandé et utilisé par les militants des droits de l’homme, les journalistes et les avocats.

For a mainstream media, this is a fairly favorable article (with obvious falsehoods). They contacted you and gave you the article closing words in the middle of police PR op, instead of taking it as-is.

Your feud with /e/ distracts from the interesting points like France being unfortunately more and more quick to adopt authoritarian policies.

Als Antwort auf Anisse

@Aissen No, it's not false, but rather you're significantly misunderstanding what we wrote. We provided references to statements / articles by Amnesty International and major companies which were not included. We aren't talking about presenting what we said as an unsubstantiated claim after posting a huge amount of highly inaccurate claims about GrapheneOS.

/e/ is an extraordinarily insecure and non-private OS being funded by multiple of the very same governments attacking GrapheneOS this way.

Als Antwort auf GrapheneOS

@Aissen There's another article at lefigaro.fr/secteur/high-tech/… for a comparison in how it was covered.
Als Antwort auf GrapheneOS

the company I am a subcontractor for sells weapons to authoritarian and to murderous countries. They have neither ethical criticism from French government, nor article in le Figaro or le Parisien
Als Antwort auf GrapheneOS

I wonder if Microsoft are aware that criminals are using their software
Als Antwort auf kirby :PregnantPleromatan:

@kirby /e/ is openly getting millions of euros in government funding. That clearly wouldn't be the case if it truly protected people's privacy. It's obvious to people who know the technical details, but it should be increasingly obvious to non-technical people based on it effectively being a state project. Most of the EU countries interested in so called data sovereignty are primarily interested in having data on servers where they can mandate access including banning real end-to-end encryption.
Als Antwort auf GrapheneOS

Please provide a source for this
Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf User

@user025810374810 It's public knowledge that /e/ is getting millions of euros in government funding, which you can confirm with a quick search.
@User
Als Antwort auf GrapheneOS

Le Parisien is owned by Bernard Arnault, who is not exactly known for progressive opinions.
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
GrapheneOS
@niavy Those are highly insecure and non-private. They do not provide basic privacy and security patches/protections. They lag many months and even years behind on providing basic privacy and security patches. They're flat out unsafe to use and remain vulnerable to attacks through vulnerabilities known to be exploited in the wild. Google publicly documents some of the exploits they take many months or even years to patch as being exploited in the wild, and they only have a little bit of insight.
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
User

funding- yes

government - no

Als Antwort auf User

@user025810374810 You're completely wrong. They've received millions of euros of EU government. It's public knowledge and easy to confirm. Why are you claiming otherwise without actually checking?
@User
Als Antwort auf GrapheneOS

' your secure personal data phone solution by drug traffickers and other criminals'

.. And intelligence agencies, smart journalists, human rights activists.. People caring about privacy..

All that just means it works.

Really fine.

Als Antwort auf GrapheneOS

IIRC Le Parisien is owned by Bernard Arnault

No wonder they frame everything in far right ideology

Als Antwort auf GrapheneOS

that in my opinion is called targeting. This is an attack by mean of communication warfare.
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
GrapheneOS

@user025810374810 @sortedetruc Here's a starting point for you:

e.foundation/ngi-mobifree-proj…

mobifree.org/

Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
User

@sortedetruc I searched but could not find a source for this. I tried

google
wiki
e foundation website
perplexity

Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf User

@user025810374810 @sortedetruc
leparisien.fr/faits-divers/goo…
Als Antwort auf Fred G

@chbug @user025810374810 @sortedetruc There's an archive link bypassing their paywall and not giving them advertisement money at the end of our thread:

grapheneos.social/@GrapheneOS/…

The post above was asking for something else, proof of /e/ being government funded, which we gave them a link to start researching:

e.foundation/ngi-mobifree-proj…

mobifree.org/


There's a reason they're going after a legitimate privacy and security project developed outside of their jurisdiction rather than 2 companies based in France within their reach profiting from selling 'privacy' products.

discuss.grapheneos.org/d/24134…

Here's that article:

archive.is/AhMsj


Als Antwort auf GrapheneOS

Le Parisien was once a reputable newspaper, but that was decades ago
Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
GrapheneOS

@lienrag @user025810374810 @sortedetruc They're receiving support from both the EU and French government.

The funding is being wasted as it's not being assigned based on merit. It's also heavily going towards building products to sell from for-profit companies.

/e/ is set up so that they have a for-profit company with investors and a non-profit owned by the same people who own the company which receives government funding. They're essentially just lining the pockets of people they know.

Als Antwort auf User

@user025810374810

NGI funding is a European Commission project, not a French government one.

And a good one afaik, starting to take open source seriously and trying to fund it properly.

@GrapheneOS @sortedetruc

Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
GrapheneOS
@warlock0x They don't even appear to be talking about GrapheneOS but rather weird closed source forks of it sold on shady sites. We have no YouTube videos, no "dark web" presence, no fake Snapchat app, etc. They're attributing stuff to us which has nothing to do with us. We've had similar attacks on GrapheneOS from the Spanish government recently. The claims being made about GrapheneOS which are published there are ridiculous but we were only given a chance to comment on a generic question.
Als Antwort auf GrapheneOS

@niavy don't answer to him, it's a troll, or one of those who talk big while not understanding how hardware security work and think software can do anything.

Surly one of those that think that a software update to AI can create skynet....

Als Antwort auf GrapheneOS

@niavy@masto.bike Graphene and iOS are the most secure mobile OSs. But they can only be used on Pixel and Apple. Both are expensive even when refubished.. Not everyone can afford that. If someone can spend 50 to 100 euro (and already has power adapter, usb cable etc) on a new or refurbished mobile smart device, what should them do? Buy the newest device within the price frame and keep the stock OS? Or what else? Iode, calix, linux, e, lineage, harmony, fire, ...? What is the least worse choice?
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
2babcc
@niavy LineageOS has lower security than all stock systems because it does not recommend users relock the bootloader, leaving it unlocked by default, and contains numerous other security vulnerabilities. Regarding privacy protection, if you are completely ungoogled, its a little bit better than stock systems. But in my opinion, privacy doesn't exist if security doesn't exist.
Als Antwort auf 2babcc

@2babcc @niavy Locking the bootloader only accomplishes something if the OS has verified boot support intact which it doesn't.

It's far more important that it regularly lags significantly behind on standard privacy and security patches. For example, not having the Pixel kernel, firmware and driver patches for June 2025 and later until they ported to Android 16 in October 2025 as one way it ends up lagging behind. LineageOS is much less bad than the forks of it.

Als Antwort auf GrapheneOS

@warlock0x Sorry for our shitty journalists in France !
Regarding the "dark web" presence, would you consider making your website and other services, especially the web installer, accessible over TOR ?
Or is it already and I did not see the link ?
Thanks for all your work by the way.
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
Niavy

@lexinova
OK so pointing out a superior "we're better" assertion feeling is a false claim ?
Saying while other ROMs may be worse than Graphene, these can be better than stock is a false claim ?

Whoa.
@breizh @GrapheneOS

Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf Niavy

@niavy @lexinova @breizh They're extraordinarily insecure and non-private. They're definitely much worse than an iPhone for privacy and security. They're much worse than the stock Pixel OS for security and the privacy is quite mixed. Stock Pixel OS is far ahead on patching privacy vulnerabilities and providing modern privacy features due to being on current AOSP, but has more invasive services bundled. /e/ and iodéOS both always use Google services and bundle privileged access for them though.
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
LΞX/NØVΛ 🇪🇺

@breizh @niavy don't realising it is not an excuse even more when said like he said it.

When you are not sure you add thing like "correct me if i'm wrong but".

here it was not a question but an affirmation

Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
LΞX/NØVΛ 🇪🇺
@breizh @niavy lol making false claim is "try to understand" LMAO
Als Antwort auf LΞX/NØVΛ 🇪🇺

Like he said, I know him. I think he didn’t realise it was a false claim… it was more probably a genuine mistake.
Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf LΞX/NØVΛ 🇪🇺

Well, it’s not a troll, only someone that don’t know what is this thread about, and try to understand. But only receive blunt response, and now even rude ones. That’s not helping…
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
GrapheneOS
@breizh @niavy @lexinova We were talking about forks of LineageOS. LineageOS itself is significantly less problematic, although still definitely lags far behind on privacy and security patches, has the issue of setting an inaccurate Android security patch level inherited and made worse by the forks and rolls back parts of the privacy/security model. The forks of it bundled a bunch of invasive services and rolling back privacy and security further are a different level of problematic than it.
Als Antwort auf LΞX/NØVΛ 🇪🇺

You’re talking about the part he said "You may be talking about GrapheneOS scams ?" I guess?

The question was here. Okay, after it’s an affirmation but it’s more like a formulation error.

And the response is, no, Graphene didn’t talk about the scams, but they were really talking about Lineage and their forks.

Als Antwort auf Fett

@bane @warlock0x We could make onion services. The main reason we haven't is because it's hard to make the services change behavior based on Tor being enabled. Tor is mainly used through either an app providing a profile-wide VPN including covering system services via the Owner profile or an app using that itself. It's not an OS feature and if it was there would still be people who would want to use Tor's own upcoming TorVPN, etc. if we didn't provide all the same functionality as those apps.
Als Antwort auf GrapheneOS

@bane @warlock0x We could have a manual toggle for switching all of the URLs for non-connectivity-check services to onion domains. We'd also need to decide how to deploy it. For example, we currently have 3x 10Gbps dedicated servers for updates at providers providing them to us for free (2x ReliableSite and 1x Tempest). We could use Onionbalance across those and also the network servers. However, we need to consider the attack surface including from a potential denial of service perspective.
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
GrapheneOS
@niavy @breizh @lexinova Being behind by many weeks and months on High/Critical severity AOSP backports, many months to years on kernel, driver and firmware patches along with years for OS updates with major privacy/security protections and the Moderate/Low severity patches adds up to having major privacy and security issues. Full Android privacy/security patches require the latest OS release. Google does backports of High/Critical severity patches to old OS versions, far from everything.
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
Niavy
@breizh
Now I really got the point. Thanks.
@GrapheneOS @lexinova
Als Antwort auf Niavy

Actually, it is, yeah. Well, in some case it could be true (like when they replace outdated stock ROMs), but’s generally, other ROMs are worse than the stock one in terms of security (about privacy it’s a harder to say, since they fix some stock problems, but the security breaches can create more privacy problems than it’s solving).
Als Antwort auf GrapheneOS

@niavy @breizh @lexinova Google considers most privacy patches to be Moderate/Low severity. In many cases, they consider it to not actually be a bug that's being patched but rather the new OS version has a privacy improvement. It's only considered a bug which is a candidate for a backport if it wasn't intended to work that way. For example, older Android releases leak nearby Wi-Fi network metadata revealing location to apps and they decided it was by design or Moderate severity so not backport.
Als Antwort auf GrapheneOS

@niavy @breizh @lexinova Android doesn't backport fixes for VPN leaks and many other kinds of privacy issues which many people would consider severe. /e/ being so far behind on updates means they don't get this stuff into far later when it has already been widely exploited by apps services, Wi-Fi networks, etc. to violate user privacy for years. Privacy also depends on security and having weak exploit protections with tons of unpatched vulnerabilities is a real world issue not a theoretical one.
Als Antwort auf GrapheneOS

@niavy @breizh @lexinova Google regular marks issues which are being patched as known to be exploited in the wild in the Android Security Bulletins. However, they do not provide this information once the patches are released. It's far more common for already fixed vulnerabilities with the patches not shipped by many devices to be exploited than unknown vulnerabilities (zero days), but Google doesn't provide information about that and it would make most OEMs look very bad if they did provide it.
Als Antwort auf GrapheneOS

@niavy @breizh @lexinova Aside from that, they have very little insight into what gets exploited. Non-GrapheneOS Android devices don't successfully protect from companies like Cellebrite exploiting them consistently with few gaps in exploits being available. If Google actually had much insight into what was being exploited, then they could keep fixing those vulnerabilities being used in the real world. In practice, they don't know about most attacks into remote exploitation though.
Als Antwort auf Breizh

@breizh
thank you for the explanation, i rent a fairphone with /e/os with @cooperative_commown because i don't want my data to go to google, but i expected the security to be the same

@GrapheneOS @niavy @lexinova

Als Antwort auf Steph à vélo

@stephavelo @breizh @cooperative_commown @niavy @lexinova You should read discuss.grapheneos.org/d/24134…. Your data still goes to Google with /e/ which uses Google services and gives those privileged access in the OS, and it has atrocious privacy and security due to many months and even years of missing privacy/security patches. There's a lot of detailed information in that post about it and we linked posts from the Divested Computing project and Mike Kuketz and Eylenburg's site with more info.
Als Antwort auf GrapheneOS

It's a tabloid that belongs to French billionaire Bernard Arnault, known to push his far-right propaganda trough the various media he owns. It doesn't reflect the general French opinion.
Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf Christophe B.

@bladecoder It reflects the French government and law enforcement position on open source privacy software including GrapheneOS and Signal. The journalist is largely acting as a mouthpiece for the state and giving them unfair advantages over us in how this was covered due us not being able to review their claims and properly respond. Our issue is mainly with the claims French law enforcement and their government is making about GrapheneOS and privacy technology rather than a tabloid.
Als Antwort auf GrapheneOS

@bladecoder There's another article at lefigaro.fr/secteur/high-tech/… with different coverage not based on the Le Parisian article. There's likely a bunch of other coverage by now. The main issue is an effort by a state and their representatives to libel/slander GrapheneOS and attribute things to us which are not us. They're clearly talking about closed source products which claim to be based on GrapheneOS and may fork our code or use a lot of it but they use far more code from Linux and AOSP...
Als Antwort auf GrapheneOS

GrapheneOS is (possibly/at least in my opinion) indeed the most secure AOSP-based mobile operating system in our community However, we should not contempt other libre software projects that tries to offer a higher level of security and privacy, at least than LineageOS or stock Android.
Als Antwort auf Rebel Zhang

/e/ is indeed far behind GrapheneOS at security hardening, however it offers a libre software and privacy replacement to the unjust Google GMS, and support much many devices, just somewhat fewer than LineageOS. CalyxOS trades off a bit security and privacy for a wider range of devices. DivestOS tries to implement some GrapheneOS-like security and privacy features and bootloader relocking on some non-Pixel devices such as OnePlus 6.
Als Antwort auf Rebel Zhang

@rebel1725 /e/ has extraordinarily poor privacy and security. It lags many months and even years behind on providing basic privacy and security patches. They mislead users and sell them unsafe devices for profit. It's objectively a scam with how highly unsafe their products are combined with the highly inaccurate marketing. You've fallen for their false marketing including about what microG provides, which does not remotely do what you claim it does and is far less private of an approach.
Als Antwort auf GrapheneOS

@rebel1725 You should read what's published at discuss.grapheneos.org/d/24134… along with the information published on /e/ and iodéOS by the Divested Computing project. You're incredibly misinformed and are propagated false marketing from these companies. CalyxOS is similarly an insecure and non-private option which hasn't released the 2025-06-05 patch level or above. None of these was ever a privacy or security hardened OS but rather quite the opposite. LineageOS isn't that but doesn't pretend to be.
Als Antwort auf GrapheneOS

@rebel1725 DivestOS was discontinued in large part due to the attacks on the project by /e/ and others who you're supporting. You're supporting 2 companies which only want to profit from privacy as a marketing angle. They're actively misleading and scamming people with their extraordinarily insecure and non-private products. These attempts at downplaying the level of insecurity and non-privacy from being months and years behind on patches will harm people. It is not theoretical harm, it's real.
Als Antwort auf Rebel Zhang

I have a Google Pixel, however only 6. And there are many people around the globe who do not have enough money to purchase a Google Pixel.
Als Antwort auf Rebel Zhang

In a world ruled by those proprietary software monsters, many libre software projects exist to make the world better in different aspects and fields. We should unite with other libre software projects, fight against the injustice of proprietary software, and work hard together for a society where proprietary software no longer exists, instead of denying the other projects' effort and splitting the community.
Als Antwort auf Rebel Zhang

@rebel1725 You're pushing a false narrative about GrapheneOS which misrepresents it as a security project rather than a privacy project and heavily the privacy and security improvements. You're a textbook example of someone who has been heavily misled by false marketing and who has massive misconceptions about GrapheneOS and these other projects because of it. The claims you're making here are highly inaccurate, harmful and based around lies which are told by these scammers and charlatans.
Als Antwort auf GrapheneOS

@rebel1725 Calyx, iodé and Murena heavily pushed misinformation about the GrapheneOS project to mislead people about it and convince them to use their insecure products instead. When we debunked their false claims and posted accurate criticism of their products, each of these groups engaged in attacks on our team with fabricated stories. They've encouraged extreme harassment from their supporters which has included swatting attacks towards our team. They're despicable people and not on our side.
Als Antwort auf Rebel Zhang

@rebel1725 /e/ and iodéOS are both scams which prey on people with false marketing to sell them extraordinarily insecure and non-private products. They leave users far worse off and are a gift to authoritarians through making devices far easier to compromise remotely, from apps and through physical access. They're doing the opposite of protecting people as you're claiming they are but rather are scamming people. They're not making privacy products but rather anti-privacy products sold as that.
Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
Rebel Zhang

@niavy Again, we are talking about comparison with LineageOS, not GrapheneOS. With low level security hardening, GrapheneOS will offer a very higher level of security and privacy, which makes /e/ and other OSs fall behind. You have misread my viewpoint.

In addition, your radical and contumelious words is harmful to the community, and will potentially drive people away from GrapheneOS.

Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
Rebel Zhang

@niavy With unavailable source code, there is no way to verify. And it can contain telemetry or even backdoors, that will instantly break security.

In my opinion: GOS > CalyxOS >> /e/ ≈ iodé > LineageOS > crDroid >>>>>>>>>>> iOS and stock Android distributions.

Als Antwort auf Rebel Zhang

@rebel1725 @niavy The false narratives and false claims you're making about GrapheneOS combined with your support for scammers is what's harmful to the community. It's despicable that you use GrapheneOS but support people spreading libel and harassment content about our team along with endlessly spreading misinformation about it. Once our conversation is done, you're going to be blocked from grapheneos.social and are no longer welcome in our community after all these manipulative attacks on us.
Als Antwort auf Rebel Zhang

@rebel1725 @niavy iodéOS is partnered with someone (Robert Braxman) who has repeatedly included backdoors in his products/services including fake end-to-end encryption with server access. Several of the products you're promoting have supported hardware which has included actual backdoors rather than the ones you folks make up with absolutely no evidence or logic behind it. Claiming CalyxOS without the 2025-06-05 or later patch level is good is definitely a take. It's far worse than LineageOS.
Als Antwort auf GrapheneOS

@niavy I am not against GrapheneOS, neither for Murena and iodé. I am just a ordinary security and privacy advocate, and I am feeling confused, that's all. I am asking you for links about Murena's and iodé's attack to find out whether that is true, but you never provide them. And you keep misreading and misinterpreting my statements, as well as creating opposition.

If you want to ban me, do what the fuck you want to do and go fuck yourself.

Als Antwort auf Rebel Zhang

@rebel1725 @niavy Here's an iodé business partner spreading Kiwi Farms harassment content from yesterday as Calyx, /e/ and iodé have repeatedly done themselves over and over again. They're also partnered with Braxman who does it on a daily basis.

discuss.privacyguides.net/t/no…

Here's a response to Nova Custom business partner who posted the egregiously libelous article they're linking:

linkedin.com/feed/update/urn:l…

Both linked videos are clearly harassment content filled with outrageous fabrications.

Als Antwort auf GrapheneOS

@rebel1725 @niavy Louis Rossmann is openly a Kiwi Farms user with a verified account on the site you can find with a search. He openly acknowledges it's his account. He actively seeks their support and vents to them. They're big fans of his and attack people who he has issues with on his behalf. They act as his personal army to harass people. Rossmann posted outrageous fabrications which started the ball rolling for his friends at Kiwi Farms targeting us with harassment.
Als Antwort auf GrapheneOS

@rebel1725 @niavy Calyx, /e/ and iodé have repeatedly helped to spread and support this kind of libel and harassment content towards our team. They've also directly misinformed people about GrapheneOS with many years of false claims about the privacy, usability, compatibility and other aspects of it which leads to it being wrongly branded as somehow not being a privacy project while operating systems not doing bare minimum privacy patches and protections are somehow the privacy projects. Nope.
Als Antwort auf GrapheneOS

@rebel1725 @niavy They're misrepresenting what they provide to people and marketing it as something it isn't. People are buying extraordinarily insecure and non-private devices doing the opposite of protecting them. They're giving a huge gift to authoritarians who can much more easily break into their devices than an iPhone. People who got duped into buying these devices who actually needed good privacy and security protection are seriously harmed. We're being entirely fair calling these scams.
Als Antwort auf GrapheneOS

@rebel1725 @niavy If they don't want us talking about it, they can cut out their regular attacks on GrapheneOS and our team occurring on an ongoing basis from Braxman, /e/ and iodé.

All 3 of the core developers including the lead developer left Calyx. The leader/founder of the organization was pushed out and isn't part of it anymore. We're talking about Calyx in the past, not the Calyx of the present without most of the people involved in attacks on us still present which may not be hostile.

Als Antwort auf GrapheneOS

@rebel1725 @niavy The past Calyx was involved in this as much as /e/ and iodé. We aren't sure how many people currently involved in the organization are part of the attacks on it since we aren't sure how many other people have left. We also don't know what the people who are there now think about it since they were largely colleagues of people who were extremely malicious towards us. If you're going to deny their past attacks on us, we're going to counter that, but it has essentially stopped.
Als Antwort auf GrapheneOS

@rebel1725 @niavy We don't intend to link a bunch more libelous claims about our team, harassment content and false claims about GrapheneOS here. From what you're saying, you have heavily read/watched at least a lot of the content with inaccurate narratives they've propagated. It's easy to find them falsely claiming GrapheneOS isn't a privacy project, misleading people about usability, about app compatibility which is in fact far better in GrapheneOS and many other things about it over and over.
Als Antwort auf GrapheneOS

@rebel1725 @niavy GrapheneOS would have more developers, more features, more funding and much more progress in many areas if they hadn't made all of these attacks which were so successful in misrepresenting it as a super niche project within their communities and where their communities heavily participate. Many of the largest privacy forums, subreddits, etc. were taken over by people who are part of these attacks and abuse their positions to help spread these attacks on GrapheneOS.
Als Antwort auf GrapheneOS

@niavy Thank you for the information you just offered. I will consider a blog post about mobile OS comparison. I want to say links to relevant resources and/or detailed demonstration supporting your opinion is much stronger than words like those insulting and uncomfortable words.

There are many people like me that do not know much more about what is happening. Using unfriendly words will drive them away, causing harm to the GOS project, the community, and the free software movement.

Als Antwort auf GrapheneOS

What caused your assumption? I have just skimmed FSFE's recommended mobile OS list, your and other project's official website's homepages and FAQs, and nothing beyond. Also, I have even almost not read PrivacyGuides beyond its homepage!
Dieser Beitrag wurde bearbeitet. (3 Wochen her)
Als Antwort auf GrapheneOS

@niavy Even those people were mislead by those viewpoints, you should use facts, proofs, and relevant code, docs, news, blog posts, and make your statements clear. Bad words and bans will only make the situation worse.
Als Antwort auf Rebel Zhang

@rebel1725 @niavy Using facts and proof is what we've done with discuss.grapheneos.org/d/24134… and what Divested Computing, Mike Kuketz, Eylenburg and others have done in the linked content. Calling people who are charlatans and scammers what they are is not using a bad word. That is objectively what they are proven by an enormous amount of evidence and we aren't scared to call them what they are. It has been adequately proven by Divested Computing for both of those projects with their many posts.
Als Antwort auf Rebel Zhang

@rebel1725 @niavy They've targeted our team with extreme fabricated stories and libel including repeatedly calling our founder delusional, schizophrenic, insane, etc. with no basis. They've repeatedly pushed fabricated stories about him. This includes both Murena and iodé. It also includes several of their business partners (Braxman and now Nova Custom). Calling scam a bad word is a strange thing to say when these people are engaging in extreme harassment and their community is doing swatting.
Als Antwort auf Rebel Zhang

@rebel1725 @niavy Then why make all these confident statements about how GrapheneOS compares to these other systems and argue with us about it?
Als Antwort auf GrapheneOS

@niavy Your proof successfully proved that GrapheneOS is better than /e/, iodéOS and CalyxOS, but it didn't prove that they are not better than LineageOS. I even cannot find the string 'LineageOS' in the webpage. From the very beginning of our conversation, I have already been talking about their comparison against LineageOS, not GrapheneOS. Your later proof proved your viewpoint, but it is not contained in the article.
Als Antwort auf Rebel Zhang

@rebel1725 @niavy CalyxOS is worse than LineageOS because it's not being updated and does not have the 2025-06-05 patch level or above.
Als Antwort auf Rebel Zhang

@rebel1725 @niavy We described the action of pushing false narratives about GrapheneOS as despicable. What is bad about that word? It's like saying you saying the word 'bad' is problematic.
Als Antwort auf GrapheneOS

@niavy GrapheneOS only supports Pixel. I have a Pixel, so I choosed GrapheneOS. But what about those who don't have a Pixel? What OS should they choose?
Als Antwort auf GrapheneOS

@niavy I know, and the CalyxOS project itself has made this clear on its official website.

I am talking about the case before `2025-06-05`.

Als Antwort auf Rebel Zhang

@rebel1725 @niavy Before then, it still had months of delays for updates not quite as bad as LineageOS which is itself not quite as bad as the LineageOS forks. It still rolled back privacy and security like LineageOS, but not as much as it, and the LineageOS forks roll it back more. So sure, before CalyxOS stopped providing updates it was less bad and now their users have no updates. Many people are still using an OS without updates, being told it will all be fine when it seems it won't.
Als Antwort auf GrapheneOS

@niavy You should consider the motive, not only the action. According to your logic, if those who mislead by /e/ are 'despicable', then those who believe iOS respect the privacy will be heinous and should be put into a massacre. Obviously this is not true. It is Apple's fault, not its users' fault.

I used to be an iPhone user before 2019 as well, and after learning about free software, I have understand Apple's conspiracy and switch to free software. We should educate, not censure.

Als Antwort auf Rebel Zhang

@rebel1725 @niavy It's highly unlikely they have a device they can put another OS on without destroying functionality and security. If they do have one, the end result is not a reasonably private and secure device.
Als Antwort auf GrapheneOS

@niavy We should consider the threat model. For journalists, whistleblowers, activists, and possibly security advocates like me, security-hardened OSs like Qubes OS and GrapheneOS will me mandatory. However, for regular people, they will be more comfortable using LineageOS and crDroid for more functionality and customisability with security as a trade-off.
Als Antwort auf Rebel Zhang

@rebel1725 @niavy Apple doesn't target open source developers with libel and harassment. Even Erik Prince's Unplugged doesn't target us that way despite repeatedly making inaccurate claims about GrapheneOS. They stick to inaccurate technical claims and aren't targeting our team with libel and harassment. Murena and more recently both iodé and their business partners are doing that and that's much worse. A company sticking to selling insecure products with false marketing wouldn't be that bad.
Als Antwort auf GrapheneOS

@niavy Who told the users about CalyxOS is still be fine? CalyxOS's official website explicitly tells the users CalyxOS is no longer secure and should be uninstalled.
Als Antwort auf Rebel Zhang

@rebel1725 @niavy GrapheneOS is a production quality OS with a high level of stability, testing and rigor which goes into the development. Neither of those is a production quality OS for regular people, and neither are the forks of LineageOS. GrapheneOS also provides far broader app compatibility and in fact provides more functionality for regular users such as network location, geocoding and a lot more built in with a lot more coming. It just largely leaves choosing apps/services to end users.
Als Antwort auf Rebel Zhang

@rebel1725 @niavy They're making announcement after announcement portraying everything as fine and not telling people what has actually happened. Do you know why the founder/leader of the company left and the manner in which he left? Are you aware he's making a for-profit company with Louis Rossmann and has been since before he left? Does their site say all 3 core developers left? No, you wouldn't find any of that from their site. There are perhaps others who left which we don't know about.
Als Antwort auf GrapheneOS

@niavy But it is Murena, iodé and their partners' fault, not ours. As for me, I even don't have heard of their actions recently, and I made my statements according to what I know already.

Apple does not attack libre software projects directly using libel and harassments. But instead, it uses jails, DRM, incompatibility to do so. And Apple is ruining the users' privacy by cooperating with the governments and imposing surveillance and censorship.

Als Antwort auf GrapheneOS

@niavy GrapheneOS is indeed easy to use, not what Qubes OS be. However LineageOS is also easy to use, and offers a wide range of functionalities such as adding AM/PM to the clock, changing the battery indicator shape, and the most importantly (at least for me), the ability of chargine control at mostly arbitrary level (GrapheneOS only supports 80%; I use 98% for my LineageOS devices). Another, my mother, who knows nothing about technology, is also using LineageOS.
Als Antwort auf GrapheneOS

@niavy According to calyxos.org/news/2025/08/01/a-…

> Given the potential risk posed by the pause of maintenance and development, it’s logical that we stop providing options to install CalyxOS for now.

> For those wishing to remain on CalyxOS until our next release, note that you will not have the latest security patches on your device as released from the Android Open Source Project and from any proprietary sources provided by device manufacturers.

Unbekannter Ursprungsbeitrag

mastodon - Link zum Originalbeitrag
GrapheneOS
@rebel1725 @niavy That's not what we're talking about. Where's the information about what happened and the actual state of the organization? Why did this happen? We have inside information, but you don't. Based on what they announced, who controls the organization compared to before, why did a bunch of people leave at once and which people left recently? How many core developers are left? They're portraying the state of things as fine and as it being on track to relaunch when they said.
Als Antwort auf Rebel Zhang

@niavy

> Without security updates, we can only be honest that this does not guarantee the level of security we strive for, especially when global threats to privacy and human rights are at a critical moment. That is why in the meantime we have posted the recommendation that people who are running CalyxOS should uninstall the OS and follow our community channels for updates, including when the latest version of CalyxOS becomes available again.

Als Antwort auf GrapheneOS

This story made me buy a Pixel and install GrapheneOS. Thanks for what you're doing! 🫶
Als Antwort auf GrapheneOS

honestly i would rather propose to all your graphene users taking a pics of their smartphone showing-off their G/OS logo with their grandma sitting here as the main user.... ;)