• Catalyst@lemmy.ml
      link
      fedilink
      English
      arrow-up
      15
      ·
      17 hours ago

      There’s nothing set in stone yet. Google just committed to doing it is all that’s happened so far. But the response against it has been pretty heavy and we’ll see how it goes. We have to speak up right now and organize our communities like this post is doing.

        • Zetta@mander.xyz
          link
          fedilink
          arrow-up
          1
          ·
          edit-2
          2 minutes ago

          All my banking apps and credit card apps have worked flawlessly on Graphene OS. You’re correct that tap to pay doesn’t work, which is a bummer. But that is just Google spyware as well, honestly.

          I heard about this a while ago, but I remember the GrapheneOS team talking about suing Google if they didn’t allow them to pass play integrity checks like they should be able to, but Google just doesn’t let them. That’s the only reason tap to pay doesn’t work and some baking apps have issues, its Google purposefully limiting graphene OS so they have a competitive edge somewhere.

        • AnyOldName3@lemmy.world
          link
          fedilink
          arrow-up
          4
          ·
          9 hours ago

          Plenty of bank apps work just fine. None of the ones I’ve tried had problems, except Santander, which works perfectly after changing a setting.

      • cardfire@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        29
        ·
        1 day ago

        Samsung s22 and s25, checking in. Graphene won’t be viable for the vast, overwhelming majority of Android users today or in the coming seasons.

        I hope people figure out some kind of virtualization/docker-containerization solution to the coming Goo-lag.

        • Ferk@lemmy.ml
          link
          fedilink
          arrow-up
          15
          ·
          edit-2
          1 day ago

          Samsung s22 and s25

          I’m still holding some hope that maybe Samsung’s flavor of the OS won’t have the restriction of requiring Google keys. Specially considering that Samsung has its own “Galaxy Store” with app submissions controlled by them, not Google.

          Though it’s possible they might simply extend the signatures accepted to include also the ones signed by them ^^U …still it would give them a competitive edge to remove the restriction so they might be incentivized to do it.

            • Ferk@lemmy.ml
              link
              fedilink
              arrow-up
              2
              ·
              edit-2
              11 hours ago

              I mean, you can hack/root most devices, even right now. I expect that’s not changing.

          • Kevin@lemmy.ca
            link
            fedilink
            arrow-up
            2
            ·
            18 hours ago

            If they want a lot of play store banking apps + other things that opt into play protect to work they’ll need to add the signature verification requirement.

            • Ferk@lemmy.ml
              link
              fedilink
              arrow-up
              3
              ·
              edit-2
              11 hours ago

              Will the banks in Korea, EU and many other areas where Samsung phones are very common keep that restriction if it meant alienating that many users? I doubt it. That’s why I think the support of a big player on this would be a killing move.

              Also I’m not 100% convinced that it’s impossible to have some verification without it depending on this one change.

            • cardfire@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              3
              ·
              16 hours ago

              I’m even willing to use the web apps or webpages for banking, if the browsers can make the handshakes. I’ll forfeit using the bank first party apps, if their websites are full featured.

              • Kevin@lemmy.ca
                link
                fedilink
                arrow-up
                1
                ·
                16 hours ago

                100%, my bank thankfully doesn’t tick that box, but if it did I wouldn’t think twice about dropping the app. Freedom is more important.

          • cardfire@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            4
            ·
            edit-2
            16 hours ago

            And the bootloader is now locked down across Samsung’s ecosystem, as of this year. Sucks.

            If you move to using an unsecured “chinaphone” as an alternative to the big three handset vendors, then it’s unlikely they are target devices for the myriad of uncertified ROM’s.

            I think we are going to need software solutions that can run on major Androdis distributions across the variety of hardware.

            I think we’re going to need something like UTM or Docker (virtualization or containerization) for running our unsigned Android apps and services, and I don’t know how feasible it will be.

            • 3abas@lemmy.world
              link
              fedilink
              arrow-up
              3
              ·
              13 hours ago

              If you move to using an unsecured “chinaphone” as an alternative to the big three handset vendors, then it’s unlikely they are target devices for the myriad of uncertified ROM’s.

              Not following your logic here… With the mainstream devices now locked, “the myriad of uncertified ROMs” will necessarily shift to the remaining unlocked phones, or die out.

              I think a viable future is owning two devices, one “certified” to access your banking and work apps, and one running GrapheneOS for your private life.

              • cardfire@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                1
                ·
                6 hours ago

                ROMs rarely work as one-size-fits-all-devices, yeah?

                I only know of four smartphone categories of phones that are really available in the markets around the world today, en masse.

                1. The big tentpole phones available from Samsung, Google, Moto, and maybe two other players.

                2. Boutique devices from vendors like Nothing and Fairphone with limited reach to global markets (like, being Euro only, or being only distributed in markets that can buy into they ideology, etc). Nearly all of them prices or is MOST humans’ reach.

                3. Chinaphones. A mix of fly-by-night brands with ghost shifts in factories that make many varieties of phones with other people’s designs, but have extremely limited first party support and probably zero ROM support from the global community … And then the handful of tech markings like Xiami, HTC, Huawei, and anyone else that bends the knee to the CCP. Virtually no NA market penetration in this decade, and tremendous barrier for entry, for most of the Western world. Also, security issues galore.

                4. iPhones.

                All that to say, I don’t think a more featured OS existed it’s the way forward, with people all jockeying to make new ROM’s for everyone to NOT be able to run on their phones.

                I’m hopeful folks smarter than I will be able to come in about the potential for sandboxes in it phones with their own capacity for running unsigned apps, like a virtualization platform.

          • cardfire@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            6
            ·
            16 hours ago

            I literally named two different phone models, and I think dismissing that people are often bound to what handsets are available to them is … Well, honestly just cruel.

            Most of us don’t have the cash to throw down for phones all the time and we need scalability to protect ALL of us, not just those of us cash flush.

            My fingers are still crossed folks figure out some containerization or virtualization solution between now and the Goo-lag.

            • Autonomous User@lemmy.world
              link
              fedilink
              English
              arrow-up
              2
              ·
              edit-2
              3 hours ago

              It’s better to work a few hours to buy a good device than waste thousands searching for a fantasy solution. Phones are bought rarely, not ‘all the time’. If you can’t afford basics, fix the money problem first, privacy can wait.

              • cardfire@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                1
                ·
                edit-2
                5 hours ago

                “Job” is a precious commodity for many of us.

                You understand that people who live in the developing world, and have hostile governments that will weaponize Meta/Google’s data and telemetry against them, ALSO deserve privacy and liberty with their devices too, right?

                This is why I’m saying that being prescriptive about what hardware we use is not the end game.

                It’s going to have to come from the software platform.

                • Autonomous User@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  3 hours ago

                  Do you live in the developing world? Is your government banning this phone? How can we help others if we can’t help ourselves?

                  • cardfire@sh.itjust.works
                    link
                    fedilink
                    English
                    arrow-up
                    1
                    ·
                    5 hours ago

                    I live in a country where the government is now weaponizing the mobile data on our phones to track us, and assault us. They have begun kidnapping citizens without due process and incarcerating people with legal status, without even filling charges.

                    These state agencies are buying tech that let’s them follow people around by their phones, and the leading mobile platform companies are openly complicit with governments that assault their people.

                    When you ask if I’m living in the developing world, I travel international a lot but my home country is experiencing rapid decline, and they have banned several categories of phone manufacturers, most famously Huawei consumer products. Ironically, because that company is suspected of doing the same things that Google is doing (granting access to back-end services and data to government entities).

                    So it’s really not about any one device.

                    The people affected by this state violence (a ) deserve privacy just like anyone else, and (b ) depend on their mobile devices for every part of their daily life just like everybody else.

                    How are you going to help them, when you can’t even help yourself?

                    Nobody can “help themselves” with a technology platform. It taken cooperation with others, to make systemic changes.

                    Again, I personally will be fine. I can buy a Chinaphone. Or I can fund a Linux project phone for myself. Or, gods help me, I could buy an iPhone.

                    But what about the people on the other end of the line? What good is one secure walkie talkie?

      • z3rOR0ne@lemmy.ml
        link
        fedilink
        arrow-up
        5
        ·
        23 hours ago

        Even on GrapheneOS, sure it uses a sandboxed Google Play Store, which is obviously great for users, but the developers of Android apps still have to hand over their personal data to Google specifically as this new decree from the Lords of the Google fiefdom entails.

        Because FOSS developers rightly value their personal privacy, this decree effectively kills incentive for FOSS developers to continue making and maintaining apps for Android. Running GrapheneOS doesn’t circumvent this.

        It’s like I’m saying “I’m hungry” and you say “Go for a run, it’s healthy for you.” I mean… it’s true that running is healthy… but the act of running doesn’t solve the problem of me being hungry…

        • Captain Beyond@linkage.ds8.zone
          link
          fedilink
          arrow-up
          8
          ·
          23 hours ago

          As I understand it the sandboxed google apps are entirely optional. You can go completely free with GrapheneOS just like with LineageOS.

          • jkYkM7a@lemmy.ml
            link
            fedilink
            English
            arrow-up
            2
            ·
            16 hours ago

            Too, you can shove Google into its own separate User from everything else and keep it locked down in an always on VPN or the like. You don’t owe it the primary user on your phone. You can even keep that user shutdown such that none of it runs until you explicitly switch over and run it.

            GrapheneOS is pretty dang impressive.

        • comrade_twisty@feddit.org
          link
          fedilink
          arrow-up
          4
          ·
          23 hours ago

          I use FOSS apps for everything, I only have one special user profile with google play store for my stupid bank and credit card.

          For everything else there are alternatives that don’t need google play.

          • Chulk@lemmy.ml
            link
            fedilink
            English
            arrow-up
            4
            ·
            edit-2
            21 hours ago

            I think you’re missing the point. You say you use FOSS apps for everything. Do you download them from F-Droid?

            From the article:

            The future of this elegant and proven system was put in jeopardy last month, when Google unilaterally decreed that Android developers everywhere in the world are going to be required to register centrally with Google. In addition to demanding payment of a registration fee and agreement to their (non-negotiable and ever-changing) terms and conditions, Google will also require the uploading of personally identifying documents, including government ID, by the authors of the software, as well as enumerating all the unique “application identifiers” for every app that is to be distributed by the registered developer.

            The F-Droid project cannot require that developers register their apps through Google, but at the same time, we cannot “take over” the application identifiers for the open-source apps we distribute, as that would effectively seize exclusive distribution rights to those applications.

            If it were to be put into effect, the developer registration decree will end the F-Droid project and other free/open-source app distribution sources as we know them today, and the world will be deprived of the safety and security of the catalog of thousands of apps that can be trusted and verified by any and all. F-Droid’s myriad users will be left adrift, with no means to install — or even update their existing installed — applications. (How many F-Droid users are there, exactly? We don’t know, because we don’t track users or have any registration: “No user accounts, by design”)

            • comrade_twisty@feddit.org
              link
              fedilink
              arrow-up
              2
              ·
              21 hours ago

              I get my apps through Obtainium. I usually find the developers pages where they publish source code and the apk and then add them to Obtainium and install from there and let it manage the updates.

              Most of the apps I use are also available on f-droid and some probably have play store versions as well.

      • NewNewAugustEast@lemmy.zip
        link
        fedilink
        arrow-up
        30
        ·
        1 day ago

        On one phone. The rest of are shit out of luck because we didn’t buy the one phone from the company that is causing the problem in the first place.

          • lightnsfw@reddthat.com
            link
            fedilink
            arrow-up
            8
            ·
            18 hours ago

            Dude, just fuck off. Your solution does not work for everyone. Pixel phones don’t even have an SD slot ffs.

              • lightnsfw@reddthat.com
                link
                fedilink
                arrow-up
                4
                ·
                8 hours ago

                Get a USB-C memory stick for your phone. Stop acting like this stuff’s impossible.

                So it’ll take 3 dongles just to bring my music collection with me? That’s stupid. I’m not offering solutions because there are none. Phone manufacturers and Google have fucked us. My current phone is 8 years old because there are no good options that have The hardware I want. The only hope is the FOSS community and they decided to back one of the most useless phone models that is made by the biggest offender. Might as well buy an iPhone at this point for all the good it will do.

                • cardfire@sh.itjust.works
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  ·
                  4 hours ago

                  Ironically, with an iPhone you could at least buy into Test Flight privately-signed-apps.

                  Anyhow, it took me a couple days to realize the guy that you and I have both been replying to is just a troll. Thanks for explaining your thoughts through this discussion, and try not to be too demoralized by the guy.

                • Autonomous User@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  3 hours ago

                  We don’t need 100 million songs on our phones. We can have 10 million songs. Privacy is more important than a stupidly large music collection.

          • LiveLM@lemmy.zip
            link
            fedilink
            English
            arrow-up
            6
            ·
            edit-2
            20 hours ago

            You can’t even buy a Pixel in Brazil, one of the countries set to receive the change first on Google’s roadmap.
            Being stuck on a single phone brand is never gonna be the solution.

            • Autonomous User@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              2 hours ago

              You clearly have internet, so buy it from anywhere in the world. You’ve given zero solutions. It’s like want us to give up. I’m not giving up on my privacy.

              • LiveLM@lemmy.zip
                link
                fedilink
                English
                arrow-up
                3
                ·
                edit-2
                4 hours ago

                The solution is making noise. Talking to your local regulators, making them know this is an issue worth looking into.
                The solution is pushing your government to do their fucking job and regulate these companies so they can’t take blatant anti-costumer measures.

                I’m not saying GrapheneOS isn’t a solution, it absolutely is, what I’m saying is that it isn’t the be-all and end-all, nor is it available for everybody, and coming into the comments to say “just buy a pixel duh” is smug as shit, and also missing the forest for the trees.
                The solution is stopping Google from rolling out this change so everybody can enjoy the increased privacy sideloaded, FOSS apps bring, not just Graphene users.

                Hell, Graphene themselves are suffering from Google’s fuckery in relation to security patches and AOSP. (Image, Original Link)
                Getting Google in a big antitrust lawsuit so they’ll stop being actively hostile to projects built on top of Android would be very beneficial to Graphene, don’t you think?


                Wanna talk demoralizing? How about hearing “just buy a pixel and install GOS” on every thread on this topic completely ignoring whole countries where this isn’t exactly feasible?
                And when you try to point that out you get the most dismissive answer ever completely ignoring import taxes and a zillion other factors that make even used Pixels cost more than brand new phones that are head and shoulders above them specs wise?

                Demoralizing you? Be so for real dude. You really think I’m part of a psyop trying to make you give up your OS? Rest easy, I won’t reach thru the screen and snatch your phone.
                Just know Graphene needs no negative marketing. If every user walks around talking like this about the project they’ll have plenty already.

                • cardfire@sh.itjust.works
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  ·
                  edit-2
                  4 hours ago

                  Thanks for spelling out all of this. I was you to know the I read every word of it.

                  The guy we both were responding to managed to waste an hour of my own day with back-and-forth so I figured it was worth seeing how others had torn apart the nonsense, and while I knew the issues in a theory level you explaining Brazil’s ecosystem was an excellent illustration I learn from.

                  Good luck out there. May we someday both learn to evade feeding the trolls.

                  • LiveLM@lemmy.zip
                    link
                    fedilink
                    English
                    arrow-up
                    3
                    ·
                    edit-2
                    4 hours ago

                    It’s nice to know that my multi-paragraph unhinged angry rants on Lemmy get read by other people sometimes lmao.

                • Autonomous User@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  2 hours ago

                  The solution is pushing your government to do their fucking job and regulate these companies so they can’t take blatant anti-costumer measures.

                  Now you’re giving a solution. Led with that.

                  • cardfire@sh.itjust.works
                    link
                    fedilink
                    English
                    arrow-up
                    2
                    ·
                    edit-2
                    3 hours ago

                    Bruh. Read the room. You have been taking swings at everyone in these threads and basically telling anyone that can’t beg, borrow or steal a Pixel to fuck off.

                    Nobody should take you seriously when you talk about discouragement. I asked how you and I could encourage our community today and you told me not to worry about folks in the developing world that can’t “work a few extra hours” for a mythical premium handset.

                    This was your smartest reply today.

          • NewNewAugustEast@lemmy.zip
            link
            fedilink
            arrow-up
            3
            ·
            19 hours ago

            Uh huh. And the devices that are not phones?

            And saying just change your phone, much easier said than done isn’t it?

            My actions… Piss off.

        • eleitl@lemmy.zip
          link
          fedilink
          arrow-up
          6
          ·
          1 day ago

          Buy used. The other phone vendors haven’t been offering the security hardware GOS needs, so far. It might change soon enough though.

          • DishonestBirb@lemmy.world
            link
            fedilink
            arrow-up
            17
            ·
            1 day ago

            This isn’t awful advice, but used Pixel prices are vastly out of whack with used prices from just about any other android manufacturer. On Amazon I can currently buy a refurbished Galaxy S25+ for $300 less than a refurbished Pixel 9 Pro XL - when the Pixel is a worse phone by every metric but its ability to run GOS.

            Also, in some markets (US I believe? I think its a company called Verizon that does this) Some pixels just cannot be OEM unlocked, at all. So that’s also a risk buying used online at least - there’s usually not a way to tell if you’d be getting one of those if you live in a market that has this fucked up “feature”.

      • cardfire@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        17
        ·
        1 day ago

        This isn’t a scalable solution. There aren’t enough affordable, used Pixels for everyone in the ecosystem to adopt between now and the Goo-lag.

        • jkYkM7a@lemmy.ml
          link
          fedilink
          English
          arrow-up
          2
          ·
          16 hours ago

          One con, too, is that Graphene drops support when Google does, limiting the options around buying quite older models and running them for a long time to keep price low.

          I still appreciate GrapheneOS and understand why they drop support, but it is definitely a con compared to other ROMs which trend towards extending support longer.

          • cardfire@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            4
            ·
            edit-2
            16 hours ago
            1. It’s not a “solution” if it doesn’t solve for most of us. Likely you and I both need to federate with others for results because I’m honestly not a qualified software developer but …

            2. Modern flagship phones have more than enough resources to run non-gaming app’s within some other container or even with full virtualization or, worst case scenario, emulation. We desperately need folks to figure out porting Dockerlike platform tools and making them accessible for normies like me.

            If we can run an entire Windows environment and, separately, if we can run Hades II on a yesteryear Samsung, we should be able to get a sufficiently sandboxed environment together that’s qualified to run the weather apps and calculator apps I run on FDroid.

            Because I’ll be god-damned if I’m going to entrust Google’s calculator app with my contacts and phone status permissions.

            Not to say I’m entitled to any of their labor but I would join a crowdfunding program in a heartbeat.

              • cardfire@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                5
                ·
                edit-2
                5 hours ago

                I carry an S22 (with no Google services allowed on it) and an S25. I could buy any flagship phone in cash and not blink. Most folks around you and me don’t have this kind of privilege.

                I’m fine.

                I’m saying that we can’t ask or expect everyone to have the means to do so, AND that tellibg all of them to buy Pixels to fund the very company that is fucking everyone over, in hopes they leave the bootloader for those phones unlocked indefinitely, is basically just complying in advance.

                While you’re busy insulting me and others, I seriously think we need a campaign to empower devs because the solutions are going to have to come from software, and that takes real people’s labor, talent and time. That is solely what I’m advocating for.

                This is your community. It rises or falls with how we treat each other. How can you and I encourage each other, today?

                • Autonomous User@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  2 hours ago

                  I seriously think we need a campaign to empower devs because the solutions are going to have to come from software, and that takes real people’s labor, talent and time. That is solely what I’m advocating for.

                  Great, agreed. Wish more led with this.

        • eleitl@lemmy.zip
          link
          fedilink
          arrow-up
          4
          ·
          1 day ago

          Alternative ROM market is fringe de la fringe, so there’s sufficient used hardware available. I bought my 7a for 320 eur new and my tablet for 400 eur new though, so the Google tax (or, GOS tax, rather) was moderate.