Can I install my bank app on it yet?
I remember having problems with attestation in the past.
What about full application backups?
I've got a few offline apps, I'd like to transfer the data to/from. However, I thought grapheneOS needed the application developer to "approved" this backup/restore method - or you needed root (which invalidated attestation)... I don't recall which it was (but I really miss titanium backup).
Wow, this is exactly what I was looking for. Thank you.
Original, I thought "hey, everything will work"... but then I started to look into the details. For example, Revolut, it works, then it doesn't work (due to attestation), then works (after people complain).
I really need to ask myself, if this is the kind of experience I want with my daily driver. On the other hand, I know this is just Google strong arming me into their walled garden. Man, I really hate this dystopian future.
I had to enable “exploit protection compatibility mode” for the app. Otherwise it just sits on the logo indefinitely. But after enabling that compatibility mode it launches fine, asked me for location permissions (which I denied), and I can get to where I enter User ID to login.
I had to enable "exploit protection compatibility mode" for the app to get it to stop crashing immediately on launch, but it doesn't complain about attestation or anything. Seems fine from what I can see without a login!
This one also needed me to enable “exploit protection compatibility mode” for the app to get it to stop crashing immediately on launch, but it doesn’t complain about attestation or anything. I get right to the login screen. Seems fine from what I can see without a login!
No, it doesn’t. The sandboxing ensures that the Google services have none of the broad access to the operating system they have on a normal Android. For example Google won’t get access to your location unless you explicitly give the permission.
And as a follow up question to this, are there any container apps to run those apps that won't work in a way that they think they are running on stock android?
Depends on the bank. Graphene has support for seedvault backups, or you could use syncthing-fork to sync the data over. Or any one of those Foss airdrop clones
I also went Graphene, and it's privacy for me too.
I really don't want Google Play Services running, and GrapheneOS gives me that option. I have three profiles:
main - no Google Play Services, most apps are from F-Droid
work - Google Play Services, and only the apps I need for work
"google" - Google Play Services, and only apps I need occasionally (e.g. Google Watch/Wallet, Maps, etc)
I spend 99% of my time on main, and most of the rest in "work" (need it for MFA). My phone reboots every 4 hours, so Google Play eventually stops running in the background (tried more frequently, and it was annoying).
There are other Android ROMs, but GrapheneOS has really rapid security updates, perhaps faster than anywhere else. The other projects are good too, it's just the first I tried and I've liked it so far.