

Anarchist without adjectives
Sysadmin into Linux, Selfhosting and Piracy


Having read the comments I still see two major isssues with this:


I think it’s a lot more than just 3 features removed. AFAIK the whole hardware attestation is based on the Titan chip and you don’t have to trust the devices hardware, because you can cryptographically prove that the software is unchanged. It’s not only about the Auditor app, but the whole integrity of the OS, the boot process and firmware is secured by the Pixel’s hardware or more specific the Titan chip.
And the billions of devices can not be saved by a GrapheneOS fork because they’re mostly missing crucial firmware and generally get no updates anymore. That’s why GrapheneOS is only supporting recent devices and especially Pixel devices because they receive up to 7 years updates.
I’m all into getting people a more secure OS but I fear that a GrapheneOS fork is perceived as a secure OS when it’s actually not. The most important security features are still recent (firmware) updates and hardware attestation, verified boot etc.
This is actually quite a good read and pinpoints the issue. (Sorry for the Reddit-link though.) https://www.reddit.com/r/GrapheneOS/comments/1s8q534/response_to_a_post_about_grapheneos_on_another/