@Revan_9766@mastodon.social The initial devices with GrapheneOS support should be available in 2027. The initial devices will be flagships so they'll be higher end hardware than Pixels at a higher price. Lower end devices will take more time to meet our requirements since the updates and security features aren't as good. It's mostly due to how Qualcomm handles it. The latest Snapdragon flagships have the best security features. We'll also need Motorola to start paying them for longer updates below flagships.
Not really cause you need to patch those apps to support microg instead afaik, at least you do with YouTube, and banking apps probably have ways to check if they’ve been meddled with.
To expand on that if you’re curious, there are afaik 2 types of attestation to verify it’s a safe device, device attestation (which checks for a locked bootloader and some specific fingerprints), this is safe to fake for custom roms. The other one is the one i mentioned done through the software side with Google play services and such. That’s impossible to fake currently (afaik, been a minute since I could install a custom rom).
So does microG work good enough to run banking apps? That’s really the big question for most I think.
You use the plexus app to find out essentially. Can be installed from fdroid.
Thanks. Well surprisingly even banking should be working, except one “broken” review for the latest version.
Not really cause you need to patch those apps to support microg instead afaik, at least you do with YouTube, and banking apps probably have ways to check if they’ve been meddled with.
To expand on that if you’re curious, there are afaik 2 types of attestation to verify it’s a safe device, device attestation (which checks for a locked bootloader and some specific fingerprints), this is safe to fake for custom roms. The other one is the one i mentioned done through the software side with Google play services and such. That’s impossible to fake currently (afaik, been a minute since I could install a custom rom).
Thanks. What a shame. I blame the banks really.
It’s really Google’s fault for implementing this, the banks do get some of the blame for using it too when it has nothing to do with security though.