I don’t like smartphones. I use a dumbphone.
But this is a wonderful initiative.
I really want this to come to the US as well…
Is this phone also more secure?
The problem we are running into right now is Apple and Google are colluding with the US government over fascism and they are supporting their Nazi regime
They have all the power and they can change all of these services overnight, they can track you and everything and you will have no idea and no way to get rid of it
We really need an open replacement. Phones are now used for everything
Is this phone also more secure?
Probably not.
Apple & Google have spent considerable amounts of time building out hardware security infrastructure for their products that I find it extremely unlikely Fairphone would have been able to match.
For example, the popular alternative Android OS GrapheneOS only supports Google Pixels, because: (Emphasis added by me)
“There are currently no other devices meeting even the most basic security requirements while running an alternate OS. GrapheneOS is very interested in supporting a non-Pixel brand, but the vast majority of Android OEMs do not take security seriously. Samsung takes security almost as seriously as Google, but they deliberately cripple their devices when unlock them to install another OS and don’t allow an alternate OS to use important security features. If Samsung permitted GrapheneOS to support their devices properly, many of their phones would be the closest to meeting our requirements. They’re currently missing the very important hardware memory tagging feature, but only because it’s such a new feature”
If even Samsung, the only other phone brand on the market they consider close to meeting their standards, doesn’t support every modern hardware security feature, and deliberately cripples their security for alternate OS’s, as a multi billion dollar company, I doubt Fairphone has custom-built hardware security mechanisms for their phones to the degree that Google has.
Well yeah, because why would phone companies care? Consumers buy devices based on camera and display quality, not for security, privacy, etc. I just had a chat w/ a coworker about a Chinese device with an incredible camera and big battery, and I highly doubt it does anything but the bare minimum for security. It’s a cool piece of hardware, but a no-go for anyone that cares even a little about security updates.
I have a Pixel device because it has a long SW support cycle (Google promises at least 7 years), and I use GrapheneOS because it removes Google’s spyware crap. I’m not married to GrapheneOS or Pixel devices, I just need something where the software support will last at least longer than my desire to keep the device (about 4-5 years for me). I’ve ditched each of my last phones largely because they ran out of security update support, and that sucks.
I’d prefer a Linux phone w/ decent security features, but they don’t meet my minimum standards for things working (just need phone features to work properly, don’t need apps). The moment a Linux phone comes out than actually works properly and has reasonable security, I’ll switch. The FairPhone could be that, but it’s not, so I don’t have one.
Not only that, it’s really really hard to leave the app ecosystem. Anything that has an alternative basically has to run Android apps as well
I mean with smart homes and all the various apps, it becomes really hard to switch phones even. Even your bank app
I used a Fairphone 4 with /e/ and it was good. Not great, but useable. I expect the hardware bugs I ran into (using the camera only worked like 20 times before the phone needed a restart, Bluetooth randomly not working) to be ironed out by now. Currently on an old Samsung and it is more solid, but I also liked the environmentalism with the fairphone. Anyone with a Fairphone 5 and something like a glucose sensor thats in constant use?
Shame there is no Graphene OS support for it
The biggest downside of Fairphone IMO is that they don’t maintain their hardware support in LineageOS and for the retail product then branch development off, add a bit of custom branding and adapt whatever Google requires these days. It would greatly improve custom ROM support in general.
Graphene isn’t the best choice for everything. It doesn’t have good backup solutions nor device to device backup or anything solid for complete snapshots and when restoring your so called backups you’ll realize what all it truly lacks.
It’s hardened and has a lot of security and privacy features but none of that matters if your opsec is bad, or it’s feature set doesn’t match your threat model. I am not knocking it at all. It just isn’t the white knight for every case.
Agreed.
That said, it would be awesome to have an alternative to Pixel devices if you do want GrapheneOS.
The project has sort of silo’d itself into security which is only one part of the equation. Rather than overall completeness, functionality, maintainability. It’s lacking major fundamental feature sets. Thus its more of a tails meets whonix/Qubes right now not a all in one bow wrapped package to save the day for its consumer base. Many many other issues/bugs I didnt list. Perhaps I’ll add more tomorrow. If everyone wants.
And that’s exactly what it should be IMO. I prefer a project with narrow goals to one that does everything, but poorly.
If I want backups, I can use something like Syncthing. When moving to a new device, I prefer to install everything from scratch because I generally don’t use most of the apps I have anyway. I don’t put anything critical on it, so why would I need to restore from a snapshot?
If you want those features, it’s not the ROM for you.
I just want a simple device with a long support cycle and no spyware, and GrapheneOS delivers. I have Google Play Services on a seperate profile, and my main profile is completely free of that crap. I want a Linux phone, but every phone has serious limitations, like missing audio, sketchy calls, or completely broken camera. GrapheneOS is the closest experience I have to that.
If I want backups, I can use something like Syncthing.
syncthing cant backup your device. that is a file transfer app. for backing up the device you need either appmanager and root, or good old dd and root (and a half shutdown system)
I don’t put anything critical on it, so why would I need to restore from a snapshot?
- because not everyone uses the device the same way as you
- snapshots are always complete. file based backups are not because of metadata changes. seedvault even less because it picks apps except this and that, and an unknown subset of the settings, and shared storage for the files that you have enabled
If you want those features, it’s not the ROM for you.
currently there’s no ROM on which you could execute a real backup, thanks to encrypted storage with keys stored in TPM. TPM sees a change, and now your backup is a useless blob of practically random data
I just want a simple device with a long support cycle and no spyware, and GrapheneOS delivers.
as does calyx os
I have Google Play Services on a sperate profile, and my main profile is completely free of that crap. I want a Linux phone, but every phone has serious limitations, like missing audio, sketchy calls, or completely broken camera.
with microg, this can be done on calyx too. there’s even a few options on how much you want google to know.
and if your point is that not all apps work with microg, then you would never actually move to a linux phone because that will never have google play services (hopefully, else something has gone way wrong), probably not even microg or apps that would depend on it
syncthing cant backup your device. that is a file transfer app.
That’s exactly what backup software is, it’s keeping copies of important data in multiple places so if one dies/gets stolen, you have backup copies.
I can tell syncthing to copy all my important data to another device.
I don’t need all the installed apps or a disk image, that’s way overkill. I could do that, but it’ll get way more than I need.
as does calyx os
You’re right, Calyx OS is also a good choice.
I went with GrapheneOS for two reasons:
- sandboxed Google Play vs microG - no option AFAIK to disable it
- faster security updates
My goal is a baby step toward Linux phones, not compatibility with Android. I only have Google Play Services on a separate profile, and I spend 95% of my time on the profile without it. The less I rely on Google Play Services, the easier it’ll be for me to transition to Linux alternatives.
Better app compatibility is a nice side effect. I have a handful of apps that rely on Google Play Services, and there’s a decent chance they wouldn’t work on microG. But I rarely use them and I’m willing to go without if it means I can have a Linux phone.
sandboxed Google Play vs microG - no option AFAIK to disable it
you mean disabling microg?
if so you can refuse installation at profile setup. if you make a new profile, you can choose to install it there. then in microg settings there are some toggles for functionality
btw, which of your apps nead google services?
Great idea, but will never take down here in south America
People know that all these import parts and replacements are not exactly easy to pay for, even less to find. They need a cheap reliable phone that will at least handle day to day for years
I mean come on, the average cellphone user here is still using the equivalent of a Moto G2 or Samsung J2 and thats stretching it.
An S8 is still seen like luxury in here. And I’m not even going into iphones.
the average cellphone user here is still using the equivalent of a Moto G2 or Samsung J2
I guess it depends on where you live in LATAM. Most of my friends and acquaintances own newer iPhones and fancy Androids. I’m the only one stuck with a G8. 😅
Yeah most people in LATAM is poor as fuck