Spyke

Replies

android

Comment on

Does Graphene OS maintain the privacy of notifications from being recorded by third parties?

The issue lies with Google's FCM (Firebase Cloud Messaging) system, so it's not something GrapheneOS can really fix. As far as I know FCM doesn't offer a way to encrypt notification content. Some apps like Signal work around this by instead of sending the message content, they send a little "wake up" notification. This tells Signal on your phone to wake up and it goes and retrieves the new message.

If you don't install Google Play Services, you won't be impacted. But you'll also not get notifications for most applications. There is an alternative push notification system called UnifiedPush which allows you to choose any server to handle your notifications (and even self host it). But it does require both the service and the app to support it, so it's not very wide spread yet.

memes

Comment on

My name is Guy Incognito

Reply in thread

That's not entirely true. It's only very recently that browsers have started using a new system called Encrypted Client Hello which hides the domain of the request. Prior to this all requests needed too have the Host field unencrypted so the receiving server knows which certified to respond with. I imagine there's still quite a few servers which don't support the new setup still.

privacy

Comment on

Can there be privacy with Google Play Services?

Signal uses Play Services for its push notifications. It does have a fallback method which maintains a connection to their servers to get message notifications. It requires changing some battery optimisation settings which might have some minor battery impacts.

Personally I'm using Molly which implements UnifiedPush for Push Notifications without Molly/Signal needing to run in the background constantly. Also swaps a few other Google dependencies (like location pins) with open source alternatives.

Having the second profile with Google Services is a good idea though. That was what I used to do before I shed my last few Google dependencies.

privacy

Comment on

I want to delete my Google account but i have a specific fear

When I migrated emails last time, I setup my old email to automatically forward to the new email. Then on my new email, I setup an automatic label for any email that was addressed to the old address. Every week or two I'd review what was sent to it and either update the email address used or unsubscribe. Eventually it got to a level where I wasn't getting much at the old email anymore and finally deleted it.

Comment on

We are not sustainable

Reply in thread

I feel like they're agreeing with them. Fairphone says the most sustainable phone is the one you've already got. They do good work with recycled material. But the most sustainable part is ensuring that the devices last and are supported for a long time.