Comment on Fairphone 6 Teardown: Proof Phones Don’t Have to Be Disposable

<- View Parent
Carrot@lemmy.today ⁨2⁩ ⁨days⁩ ago

Not who you were talking to, but I use GrapheneOS on a Pixel 9. I don’t know if there’s a “lockdown” mode, but I have my phone set up where I can’t use biometrics to unlock the phone, but can use biometrics to log into my apps. As for the website/email based attacks, these are mostly rendered useless with the GrapheneOS subproject Vanadium, which is their security-hardened web browser, that I use by default. (grapheneos.org/usage#web-browsing)

I have a bunch of banking apps (chase, discover, american express, citi bank, ally, and my local bank) and while I did need to turn off some of the more extreme safety features for some of those apps (GrapheneOS has a toggle for them on a per-app basis), all of them work without Google Play Services, something I don’t have installed. Some of my other bills apps don’t work even with that setting turned on (student loans, local utilities, home loan, etc.) But I just add a link to their website to my home screen and it doesn’t really change my experience much. Also all my work apps (Slack, proprietary apps) have worked without Google Play Services. However, a bunch of apps do require google play services, and for my use cases most can be replaced with the website link, some can’t. Google Maps is the biggest one, and while I have devised a way to get the great search from Google Maps anonymously through TOR and import the coordinates into CoMaps (FOSS alternative map app), that’s the last part of my phone use that is still a pretty significant inconvenience.

Any app that needs the stricter security turned off gets put in a separate user on my phone, that can’t run in the background, to prevent any shenanigans there as well.

For all my security needs, I haven’t found a mobile OS that does everything I wanted as low-hassle as GrapheneOS, and I’ve tried a bunch.

source
Sort:hotnewtop