zlacker

>>joseph+(OP)
This story with restricting users is a similar one to Manifest V3 in Chromium.

But we don't have anything like FF as an alternative to go from Android. Especially considering banks require "certified OS".

>>zx8080+E7
What about GrapheneOS?

>>scotty+p8
Is it a joke? Have you seen the list of supported devices?

https://grapheneos.org/releases

(Pixels only)

>>zx8080+Y8
Is there anything about GrapheneOS that limits it to only Pixel devices, or was it just a prioritization decision?

>>falcor+ka
It is sus as heck and just about everyone in cybersec was complaining about that weird decision.

Go for Calyx or any other android distro, they have zero difficulties in supporting more devices.

>>nunobr+vl
GrapheneOS developers are free to set their bar wherever they like it. It's an independent, non-profit foundation, driven by community contributions. They provide a web-based, hands-free installer. They offer their work for free, and owe nothing to anyone.

Personally, I wish there was an open/libre device on the market that GrapheneOS could target.

>>rollca+yx
> Personally, I wish there was an open/libre device on the market that GrapheneOS could target.

You mean, Pinephone and Librem 5?

>>fsflov+km1
Let's start with HW secure element and boot chain verification (IMHO the minimum bar that's met by e.g. a 2013 Thinkpad), then work thru the rest of GrapheneOS' checklist.

Also: Android. If I didn't need Android/iOS apps, I'd be using a Nokia 3210.

>>rollca+wG2
>>45101400

> Also: Android

Waydroid can run Android apps.

>>fsflov+9L3
> Waydroid can run Android apps.

Waydroid has a very outdated fork of Android with the privacy/security model largely disabled. It has poor Android app compatibility. The apps are no longer isolated from each other and the kernel is far less protected from them.