[ForHackernews]

GrapheneOS is a locked-down, security-hardened system that's good if you need absolutely maximal security (e.g. journalists, activists, folks targeted by state actors). LineageOS is a more of an open system for tinkerers who want to play outside Google's walled garden.

You can have root to control your own device on Lineage, but not Graphene.

[arcanemachiner]

I believe you can root GrapheneOS. It just breaks the security model, so it's not recommended to do so.

[ForHackernews]

Ah, you're right: https://github.com/schnatterer/rooted-graphene

I stand corrected. Still, as you say, less point in it since it breaks their security model.

[preisschild]

> I stand corrected. Still, as you say, less point in it since it breaks their security model.

It breaks the entire point of the security model on ALL android devices. It isnt recommended on any Android distribution. It doesnt matter if its LOS or GOS

[ForHackernews]

Honestly don't care for the idea of a system secured from its owner. If I wanted to use iOS, I would.

[preisschild]

> Honestly don't care for the idea of a system secured from its owner

It's not. It's making your data secure more secure from attackers.

[ForHackernews]

Not having root prevents me from taking proper backups that include app data, it prevents me from using Aegis to import TOTP codes from Authy. I get that on some abstract level it is more "secure" from any malicious software that might find its way onto the device, but the practical upshot is largely obstructing the user from using the system.

Have you ever had to work on a locked-down machine at an office? I don't need Google or Graphene to play IT department for me.

[jasonvorhe]

It's not really locked down. You can toggle or enable some of the more activist-orientated features. The only limitation I'm aware of is that some apps requiring the strongest Play Integrity setting (ChatGPT, some banks, very few airline apps) just won't work on GrapheneOS.