Hacker News new | ask | show | jobs
by fsflover 6 days ago
> GrapheneOS is quite literally the last hope for Android

Don't they support the idea of the hardware attestation and having no root?

1 comments

All of this has already been explained to fsflover in detail numerous times, but for any onlookers here are some of the project's thoughts on the subject of hardware attestation:

https://grapheneos.social/@GrapheneOS/116550899908879585

https://attestation.app/about

On the subject of root, it completely breaks the security model of the OS, and for very valid reasons they have no interest in having official installations with widely varying security models.

They also have no opposition to people creating their own forks to do so, and they publish comprehensive build instructions: https://grapheneos.org/build

Lo and behold: https://github.com/schnatterer/rooted-graphene

Thanks for the first link. I think I agree with everything written there.

> On the subject of root, it completely breaks the security model of the OS

This is just the opinion of the GrapheneOS team. I've never seen any actual data supporting it. Also it contradicts to the security approach of Qubes OS, doesn't it?