logoalt Hacker News

Elfenertoday at 12:09 PM6 repliesview on HN

GrapheneOS or other custom ROMs don't solve the actual problem that you can't just buy a smartphone and install any operating system like you can with an actual computer, despite technically being one.

Also, GrapheneOS supports device attestation (the non-google kind at least), which is still ridiculous as such systems have no benefit to people, only to technofeudalist corporations.


Replies

grueztoday at 1:10 PM

>which is still ridiculous as such systems have no benefit to people, only to technofeudalist corporations.

GrapheneOS literally has an app that uses attestation and isn't for "technofeudalist corporations".

https://attestation.app/about

hparadiztoday at 1:12 PM

Device attestation is how you can use private keys you don't actually have access to. It has a lot of value to literally anyone who wants to store tokens or use one time authentication codes. Linux folks need to implement the full stack and offer an open alternative to payments, secrets, and tokens. In the age of LLMs there is no excuse. It is annoying as hell that I can't buy a System76 or Framework laptop with a fingerprint sensor but a Lenovo comes with one that works on Linux perfectly.

show 2 replies
Gander5739today at 6:58 PM

> you can't just buy a smartphone and install any operating system like you can with an actual computer, despite technically being one.

What's stopping you from buying a phone, unlocking the bootloader, and flashing whatever ROM you want?

subscribedtoday at 1:40 PM

If this is your stance it's trivial to have your cake and eat it. You can easily build your own GrapheneOS based image, which will then be unable to use attestation (because your own keys you'll use for the secure boot won't match).

And I'm not trying to be snarky, if that's the only thing, it's solvable right now. Everything else will work.

And concerning "you can't just buy a device and install is" - android and iOS are far more secure than any desktop os, and both pixel/iPhones are far more secure than any computer (or any other phone as well (we'll get the third one next year)). GrapheneOS actually explains "whys" in their hardware support faw section.

Generally maintaining an os is a hard work, so that perhaps explains why there's not many mature offerings.

spogbipertoday at 3:58 PM

> install any operating system like you can with an actual computer

This is in practice only true of IBM PC compatibles these days, you really can't install any OS on modern Macs. Maybe you can on (some?) Chomebooks?

show 1 reply
AlienRobottoday at 4:06 PM

A piece of wisdom I read here is that "install any operating system like you can with a [PC]" is something that you can only do with a PC. PC's are the exception. Every other device is controlled by the manufacturer.