• 0 Posts
  • 58 Comments
Joined 2 years ago
cake
Cake day: August 22nd, 2023

help-circle
  • While you can setup a second profile to put the Google services into, I don’t recommend it.

    The version of Google Services on GrapheneOS thinks it has root, but it does not.

    So there’s no dramatic need to setup a second profile, unless you want it for other reasons.

    I personally think the second profile feature is one of the things people think they want/need from GrapheneOS, but really are happier without.

    (Sure it’s safer, but GrapheneOS is already so much better than other mobile OSes - and I hate to see someone quit GrapheneOS just because they didn’t like the optional profiles.)

    An exception I have seen is for apps mandated for a job. I’m happy to bury that stuff deep.


  • In addition to what else was shared: GrapheneOS now has fairly nuanced options for running apps.

    Things that previously would not run at all, now often run fine - if granted additional permissions, such as the permission for the developer to be lousy at their job (various settings under “Exploit Protection”).

    Many apps run afowl of “Exploit Protections”, but if you trust the app author, those settings can be disabled just for that app. Just realize that needing these settings generally means the app developer is bad at their job. If that’s for an Indie Game - oh well. But when t’s my bank…maybe I should reconsider who I trust with my money.)

    This allows deciding how much to trust each app author.

    I find it creepy that Google hasn’t back-ported more of these privacy features into stock Android.

    Specifically regarding the two app types you mention:

    Regarding authenticators: I have yet to encounter one that fails on GrapheneOS. I have found some that only allow backups via Google services, which feels insane to me, anyway.

    I wish someone had pointed me to Aegis sooner. Aegis is compatible with every MFA service I have tried it with, fully open source, available on F-Droid, and supports backing up to an encrypted file.

    Regarding finance management apps: These have gotten super invasive, recently. Mine all work fine on GrapheneOS, but don’t play nice with routine VPN usage, or with ever having location services disabled even for a minute.

    The saving grace is that all the finance apps I use have had perfectly functional websites, which cannot be made invasive, the way an app can.















  • the very fact that there is a big urban/rural cultural divide is one of the things killing America.

    I agree wholeheartedly about the problem. But blind highest count vote on every topic is one of the big dividers between rural and urban folks.

    Rural folks will simply never have the numbers to influence outcomes in a pure vote count scenario. They’re aware of this, and it leads to animosity.

    Incidentally, I agree that financial decoupling would be ruinous for both, as well.

    The real solution is represtational seats that give everyone a voice - no matter how the voting zone is divided.

    I suspect that requires doing away with first-past-the-poll. The winner of that race will almost always be a city person, by raw numeric chance. That’s fine, city folks have some good ideas. The problem is when there’s no rural voice at the negotiation, at all.

    And I think any sensible person realizes we also have to put a stop to all gerrymandering.

    Also, we need to give seats to what remains of all of the first nations, while we’re at it.