Graphene vs LineageOS what's the diff?
Graphene vs LineageOS what's the diff?
People keep mentioning GraphineOS as a reason to buy a Pixel, but in other regards the Pixel hardware doesn't seem so great. If you get a different phone that can run Lineage, is Graphene really better? Thanks.
You're viewing a single thread.
Yeah, Graphene does updates, GP sandboxing, and direct configuration type stuff that is next level better than a typical swap ROM. The entire reason why Graphene uses the pixel is not because of the hardware but because of the (trusted protection module) TPM chip on pixels. It is the same chip as secure boot on a PC.
The basics of TPM is that it is like a microcontroller that generates and stores encryption keys. It can generate a key internally that can never be extracted or accessed through communication with the TPM chip. You can send it a hash to verify a match with a key it owns and it will verify any encryption. Graphene is using this feature to create keys and a secure system that can be verified and can get OTA updates all the time securely. You can use an old device to confirm that your device is secure too using a provided authorization app.
Custom ROMs often are terrible about security and how Android actually works. Things like adding root to a device or any of the packages that are capable of modifying the kernel are super sketchy dangerous. You're a user just like every developer for every app you use on Android. This is how it just works while knowing about networking and securing an operating system is not required. The entire model is designed to fail safe. The moment you start changing packages available in the kernel there can be problems.
Graphene handles this by only giving root access over USB. Vanadium is also quite outstanding and far more than just a browser. At first you're likely to try to use a ton of apps like you may be accustomed to doing. After a few years with Graphene, you are more likely to greatly limit your apps and only use vanadium for everything. With my setup on a 2 year old device, I still get over 2 whole days of battery life; nearly the same as when new. I'm not using anything from Google and have around a dozen apps total. I'm also primarily on a network that blocks all undesired connections on a whole different level than adblock.
I have been dancing around taking the plunge into GrapheneOS -- I have a pixel. Glad to hear you say this, bc it gives me confidence that I could move to it and not lose absolutely all the apps I have become accustomed to. There exists a list of apps that are compatible once de-googled (un play-protected), right? Also, I saw you mentioned that graphene can sandbox google play?
Yeah, read up on the Graphene webpage. I don't use any of it, but there are options. You're most likely to have issues with banking apps, from what I have seen. Anything that can't be done in a browser is a stalkerware scam IMO. I consider them irrelevant if they lack this fundamental functionality.
Thank you! Also love the username--great game in great series
My experience: most of my apps work fine without Google services. Even more advanced apps - sometimes they just can't verify licensing, so may complain occasionally. Even now, Macrodroid can't verify licensing through microG, but the dev has a process for licensing with a serial key based on your Google account.
Not because of the hardware but because of the TPM chip (hardware).
hardware specification (implied marketing connotation/ opposed to a bootloader function related to a unique part)