GrapheneOS attestation compatibility guide
grapheneos.org
Guide on using remote attestation in a way that's compatible with GrapheneOS.

cross-posted from: https://slrpnk.net/post/15995282

Real unfortunate news for GrapheneOS users as Revolut has decided to ban the use of ‘non-google’ approved OSes. This is currently being posted about and updated by GrahpeneOS over at Bluesky for those who want to follow it more closely.

Edit: had to change the title, originally it said Uber too but I cannot find back to the source of ether that’s true or not…

      • 50MYT@aussie.zone
        1·
        8 months ago

        Your options are:

        Apple phone

        Bloated android phone like Samsung etc.

        Chinese android phone (xiami etc)

        Google phone with Android

        Google phone with graphene. This still looks like the best of those options.

        Or no phone? I guess people are hardcore enough that will be the option.

        Edit: I stand corrected.

          • Andromxda 🇺🇦🇵🇸🇹🇼@lemmy.dbzer0.comEnglish
            1·
            8 months ago

            All of these are insecure as hell. Linux phones especially https://madaidans-insecurities.github.io/linux-phones.html

            Fairphone also really fucked up: They signed their own OS with the publicly available (!) AOSP test signing keys. These guys really don’t know that they’re doing, and I would trust their hardware or software whatsoever. And no, installing a custom ROM doesn’t solve this. Considering how bad their security practices are, we genuinely have to assume that there are security issues with the device firmware as well.

            /e/OS is based on the already insecure LineageOS, and it weakens the security further, so it’s not a good option either.

            None of the options you mentioned can be compared to GrapheneOS. It’s currently the best option if you value your privacy and security. You don’t have to give Google money either, since you can just buy a used device, which is also cheaper and more environmentally friendly. Google also makes repairing their devices pretty easy for consumers and even works with iFixit. Here’s a Mastodon post I recently saw about that: https://social.linux.pizza/@midtsveen/113630773097519792

    • Realitätsverlust@lemmy.zipEnglish
      0·
      8 months ago

      It’s only officially supported on google phones because sadly those are the only ones that are not modified to fuck which makes installing and supporting other OS’es way too much work.

      Giving google money once for a device is not a problem from a privacy or security standpoint.

      • Samsy@lemmy.ml
        1·
        8 months ago

        That’s correct, but not the reason grapheneOS chooses only pixel phones. It’s the level of hardware security features.

      • HiddenLayer555@lemmy.mlEnglish
        0·
        8 months ago

        Wish they’d at least support Fairphone.

        If Graphene reached out to them I bet Fairphone would even actively work with them to make it an official OS option.