←back to thread

GrapheneOS is the only Android OS providing full security patches

(grapheneos.social)
751 points akyuu | 1 comments | 06 Dec 25 13:58 UTC | HN request time: 0s | source
Show context
nanomonkey ◴[06 Dec 25 16:46 UTC] No.46174682[source]▶
As a LineageOS user, I'd be interested in the disparity between GrapheneOS and LineageOS.
replies(7): >>46174688 #>>46174849 #>>46174856 #>>46174958 #>>46175224 #>>46176936 #>>46182713 #
zekica ◴[06 Dec 25 17:10 UTC] No.46174856[source]▶
They have different goals:

GrapheneOS wants to make a FOSS Android with the security model that makes it hard for any bad party to break into the phone.

LineageOS wants to make a FOSS Android that respects user's privacy first and foremost - it implements security as best as it can but the level of security protections differs on different supported devices.

Good news is that if you have a boot passphrase, it's security is somewhat close to GrapheneOS - differing in that third parties with local access to the device can still brute-force their access whereas with GrapheneOS they can't - unless they have access to hardware level attacks.

replies(2): >>46175977 #>>46180234 #
Itoldmyselfso ◴[07 Dec 25 08:53 UTC] No.46180234[source]▶
How can LOS's security be somewhat close to GOS if it's worse than OEM? LOS lacks verified boot, hardware security features, it's often behind is security patches.. With "advanced protection" enabled stock OEMs are even more secure, but GOS is even more secure still. When it comes to EOL devices, LOS may be more secure than OEM depending on your threat model.

https://eylenburg.github.io/android_comparison.htm

replies(1): >>46181260 #
1. hilios ◴[07 Dec 25 12:30 UTC] No.46181260{3}[source]▶
It very much depends on your personal threat model, if you expect targeted attacks LOS doesn't hold a candle to GOS, but at least for my threat model verified boot and hardware security features outside of my control don't have a substantial security benefit.

Obviously it would be preferable to have up to date security patches, but as long as there are plenty oven even more easily exploitable devices, and there is no WannaCry level attack ongoing it is a risk I'm willing to accept for more user freedom.