• 6 Posts
  • 132 Comments
Joined 1 year ago
cake
Cake day: July 6th, 2023

help-circle








  • I don’t even use proprietary apps so most if the “security features” aren’t even useful to me

    So only proprietary apps may have malware? Malware aside, only proprietary apps may have bugs that can be exploited? And all nonproprietary apps are perfectly safe? But seriously, there is so much wrong with that thinking.

    Apps aside, GrapheneOS protects the actual OS and is kept up to date, much quicker than pretty much any other variant.

    It is overly complex for no benefit to me.

    What’s overly complex? Contact and storage scope I mentioned? You don’t have to use it. Separate profiles for work I mentioned? Again, don’t have to use it. GrapheneOS is one of the closest OSes to AOSP that I’ve seen. You could even just install the Play Store (which is in a sandbox by default, with no root, and you don’t have to do anything to specify that), only use the owner profile, and you get all of the security benefits with no extra work. You introducing F-Droid and using all nonproprietary apps is more complex than GrapheneOS out of the box.


  • Graphene sucks the life of android in my humble option.

    What’s not “fun” or lifeless about it? It’s a phone. I use it exactly as I would a normal Pixel, with the exception of having the convenience of Google Wallet.

    Everything is about security with anything else being second.

    Would you rather it be all about fun/having life with everything else being second? That doesn’t sound safe. And I’m still confused about you saying it having no life.

    I will say what I do differently vs a normal Pixel, is I use the storage scopes and lock certain apps to certain folders as well as contact scopes to lock certain apps to only see certain people. I don’t use my phone for work, but if I did, that would be a separate profile/user.






  • They are expensive

    Sometimes you get what you pay for, and…

    I don’t want to give money to Google

    I get that, but your purchase (the entire Pixel department, to be honest) is a drop in the ocean to their profits. They won’t notice you not buying one at all. You’re handicapping yourself in the mobile security arena (not being able to install GrapheneOS) to take the high ground and not effect a tech giant.

    That aside, if you really don’t want to give Google, buy one from a reseller and not from the Google Store.


  • Firefox with uBlock Origin should always be your starting point.

    Except Firefox is not secure on Android.

    Avoid Gecko-based browsers like Firefox as they’re currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn’t have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android. This is despite the fact that Chromium semantic sandbox layer on Android is implemented via the OS isolatedProcess feature, which is a very easy to use boolean property for app service processes to provide strong isolation with only the ability to communicate with the app running them via the standard service API.

    https://grapheneos.org/usage#web-browsing




    • The video is a return to the creator’s previous “Top 5 Linux Apps” monthly series, which was popular in the past.
    • The first app highlighted is Boxy, a graphic design tool for creating SVG images and logos, with a user-friendly interface compared to more complex tools like Inkscape.
    • The second app is Eyedropper, a color picker tool that works well in Wayland environments and allows users to get color codes in various formats.
    • The third app is Iotas, a simple, GTK-based note-taking app with Nextcloud integration, focused on basic note-taking functionality without advanced features.
    • The fourth app is Plexamp, an electron-based desktop music player that provides access to the user’s Plex music library.
    • The fifth app is Sigil, a niche tool for editing metadata in eBook (EPUB) files, particularly useful for adding series information to support self-hosted ebook platforms like Calibre.
    • The creator acknowledges that Sigil has some quirks, working better in KDE than GNOME environments.
    • The creator encourages viewers to provide suggestions for future “Top 5 Linux Apps” videos in the comments.
    • The creator provides links to their social media and support platforms, including Mastodon, Odyssey, and Patreon.
    • The overall tone is one of enthusiasm for sharing useful Linux applications with the audience, while also acknowledging the niche nature of some of the recommendations.

    Courtesy of Kagi’s Universal Summarizer.




  • if used for work…Features? Don’t care.

    Most organizations care about maintaining document compatibility, especially formatting, and that usually means Office365. Microsoft is notorious for publishing a standard and then ignoring their own standard, making it exceedingly difficult to use other office suites.

    I’ve heard OnlyOffice does the best at maintaining compatibility.