65
Graphene vs /e/ os (lemmy.world)

A question as old as time, I know.

I'm getting away from Google and I've done the easy stuff: CoMaps, Proton mail (I know, not the best move), aveslibre, etc. I currently don't have the time (or the knowledge base) to learn how to self host, but hopefully that will replace Drive and such in the future.

But I digress. I'm looking at a new OS for my phone. I'm currently in a contract with a phone that is incompatible with alternative OSs. Graphene needs a Pixel. Used, they're $150-400. /e/OS will run on a Motorola or whatever and those are like $80.

There's also the option of going full Fairphone with /e/os and I like that idea in the future.

The internet people tell me that Graphene is the best due to ease of installation, privacy, and security.

I don't need a lot of security. I just want Google to stop suckling all that sweet, sweet data from my teat.

What are your thoughts?

top 50 comments
sorted by: hot top controversial new old
[-] Shape4985@lemmy.ml 3 points 1 day ago

It depends on what phone you have and what you're looking for.

For me, personally, I went for e/OS as it allowed me to buy a fairphone and support a hardware manufacturer without putting money in Google's pocket for a pixel.

A modular repairable phone was more important than which ROM i used. Though i do wish e/OS had some features graphine has

[-] MostRegularPeople@lemmy.world 2 points 1 day ago

That is absolutely a conundrum. I'd rather support repairable hardware than even getting a used Pixel. By GOS seems like a great OS. I'm at least a couple months out from making the switch so I have a lot of time to agonize over it at least.

[-] Username85920@lemmy.ml 4 points 1 day ago* (last edited 1 day ago)

When I switched to Graphene a month ago, I was expecting to make a lot of concession for privacy, security and to get rid of Google.

But honestly, it just works great and while it is meant to be used without google, WhatsApp and all those spywares.

You still have the ability to use them if needed but sandboxed and in a different profile. It makes it so that the switch is easier and not a all or nothing.

The only thing I struggled with was using something else than Google Maps and Obtainium at first.

[-] Jonnsy@slrpnk.net 2 points 2 days ago

Check out iodeOS Its a LineageOS fork but more privacy friendly. They support many phones and deliver security updates much faster thab /e/os

[-] stegosaur@lemmy.world 13 points 3 days ago

/e/, lineage, Jolla/sailfish, they are all bad for security and really not that great for privacy. grapheneOS really is the best without question especially if you value the best security.

/e/ and lineage:

Sailfish:

[-] IratePirate@feddit.org 5 points 2 days ago* (last edited 2 days ago)

I see the Graphene bois still like shittalking other ROMs. Not exactly the kind of behaviour that builds trust, but we're used to it by now.

Yes, other ROMs make compromises, as do the people using them. Saying that all others are "bad for privacy" is just bullshit. Anything is better than stock Android.

[-] pkjqpg1h@lemmy.zip 1 points 1 day ago

Not just other ROMs they shittalk F-Droid, Firefox, and even Linux: https://lemmy.zip/post/59060122

[-] stegosaur@lemmy.world 3 points 2 days ago

I'm not a dev, I just use the os. Personally I had issues that prevented me from using it, but they have added great compatibility for Android Auto and for RCS.

To clarify since you're mincing my words, I said:

  1. Others are bad for security
  2. Others are not really that great for privacy

Yes grapheneOS increases privacy compared to stock and so do other custom OS, but the key is that grapheneOS does not compromise security but instead increases it compared to stock OS.

Other custom OS lag behind with patches, and grapheneOS is the only custom OS I have heard of where their security patches are actually added back into stock Android.

This is such a soft response and I've seen it in a lot of places. People cry and call it shit talking because the devs point out flaws in other operating systems.

[-] nkk@programming.dev 58 points 4 days ago* (last edited 4 days ago)

Graphene is the best by a long shot, security wise and degoogling wise. In fact, you can use GrapheneOS with absolutely zero Google services running on your phone. /e/OS uses MicroG which while better than your usual Android phone, still runs with privileged access to your device. This is in contrast to GrapheneOS' optional sandboxed Google services implementation which gives Google the same privileges any other app on your phone would have.

[-] MostRegularPeople@lemmy.world 18 points 4 days ago

Thank you for detailing in one paragraph what I was unable to understand after reading articles about it all last evening.

[-] skarn@discuss.tchncs.de 19 points 3 days ago* (last edited 3 days ago)

It is also largely questionable.

/e/OS has MicroG, and that runs as a system service. You can disable most of it, and if you're not using any App that needs Google services, I doubt it really does much.

It is possible to use Graphene without using any Google at all. However... Doing so will break almost every app out there. Anything that needs push notifications, AndroidAuto, a thousands more things. So you end up using Graphene with Sandboxed Google services.

And we get into the debate. Is it better to take the official Google Play Services, which we all consider malicious, and run it in a sandbox, or take an open source private, and trusted implementation (MicroG) and run it as a system service?

It is at the very least largely debatable.

[-] willington@lemmy.dbzer0.com 3 points 2 days ago* (last edited 2 days ago)

Thanks for explaining all that.

I don't like being fed conclusions even if in the end I will agree with those conclusions. I need to know all the relevant thinking for the topics with elevated importance to me.

Maybe I can afford a mental shortcut on a topic of little consecuence, or if I have an overwhelmingly good personal relationship and have outsourced 60% of important thinking to this hugely trustworthy person (then I will be in deep shit should something happen to my relationship with that person, not good).

I won't say I do all my own thinking for myself, but I try. So thank you again for explaining.

[-] skyline2@lemmy.dbzer0.com 4 points 3 days ago

From the official GrapheneOS response to exactly this same debate, it seems that the issue is MicroG's reliance on having signature spoofing enabled. Which is a security hole that can be exploited by anyone, not just MicroG, as it allows anything to masquerade as Google Play Services to an app that wants to use it.

https://discuss.grapheneos.org/d/4290-sandboxed-microg/11

Yes, Google Play Services is closed source and contains functionality that would be considered "spying on the user", and "malicious". But that is the same for any closed source app; you can't prove it isn't trying to spy on you or compromise your device. What you can do is rely on the App sandboxing and fine grained permissions control that GrapheneOS allows to disable such functionality if it exists.

Of course, if even having a closed source app on your device is too much, then honestly you wouldn't even be using MicroG as you wouldn't want any apps using Google's proprietary libraries for accessing Firebase or other proprietary services anyways...

So, GrapheneOS offers the most sane approach in my opinion, without opening any security holes. By default the entire OS (not talking about pixel firmware blobs, just the os and kernel drivers) are open source and you can use only open source Apps via Fdroid, Accrescent, direct with Obtainium, etc. But for the average user enabling sandboxed Google play and managing its permissions is the best compromise between security and privacy.

[-] eleitl@lemmy.zip 5 points 3 days ago

It is best to run GOS or Lineage OS completely Google-free.

[-] skarn@discuss.tchncs.de 5 points 3 days ago* (last edited 3 days ago)

It is best from many points of view but, as far as I understand, this community is about providing knowledge and tools, and leaving it up to the individual users to asses their threat modeling and determine the extent of the acceptable compromise?

Edit: in every use of connected technologies there are privacy trade-offs, and privacy may not be the only concern on a user's plate.

The Fairphone mentioned in the opening has the more ethical production and spare parts support, that can be a concern for many users. Ultimately it's for them to decide. Maybe we bore them and they just get a third hand iPhone, which is still largely a privacy improvement over stock Android.

[-] eleitl@lemmy.zip 3 points 3 days ago

"Best" only in the context of this thread.

[-] skarn@discuss.tchncs.de 4 points 3 days ago

If it's only about degoogling, they can very well use /e/OS and remove the network permission from microG. Yes, it's possible.

load more comments (1 replies)
[-] utopiah@lemmy.ml 13 points 3 days ago

Check my post history if you want as I did post quite a few times about my journey there but basically :

  • used Android a long time ago
  • switched to iOS due to discussions with security experts at Mozilla
  • bought and used sporadically Linux proper phones (PinePhone and PinePhone Pro) with different distributions
  • tired of iOS restrictions as a developer, switched to /e/OS last year

The main appeal of /e/OS for me wasn't security or privacy but rather being able to purchase a phone with the OS installed. I wanted to buy a phone, put the SIM in and be pretty much done with it. I also wanted banking apps to keep on working. I bought the cheapest /e/OS phone namely https://murena.com/shop/smartphones/brand-new/murena-cmf-phone-1/ then and basically I've been using daily since.

Few clarifications that I believe are misunderstandings :

  • on security, yes /e/OS lags behind GrapheneOS for Android updates. If you are worried of 0-days because you are a political dissident you should probably NOT use /e/OS but get your setup reviewed by experts. You should definitely not trust randoms strangers on the Internet on that topic. It's important to put an emphasis on the fact that even with the latest Android updates, a phone is still not entirely secure, does not matter if it's with Googled Android, GrapheneOS, iOS or whatever other OS. It's only the least worst known state, in theory. It's better to follow best practices but without being either naive or paranoid.
  • on privacy, /e/OS has some defaults you might not like but they are JUST that, namely default settings. If you do not want to use a Murena account, simply do not create one. That's it. You won't have any call to any API, even proxied one like OpenAI. AFAICT this is also only for paid accounts so it can't happen by mistake. Feel free to check my post/comment history on that. Again if your threat model is any information leak, might be better to use GrapheneOS but if you are fine with just avoiding the downside of surveillance capitalism, IMHO /e/OS is good enough, namely you don't share usage data to Google, even with default settings.
[-] eleitl@lemmy.zip 4 points 3 days ago

To be fair, GOS install is extremely user-friendly. Absolutely no contest with Lineage OS on my Samsung tablet, which initially failed and required some wizardry. My old phone and tablet are still stuck on 18.1 while 22.2 is available.

[-] utopiah@lemmy.ml 4 points 3 days ago

I have no doubt. In fact I bet that as soon as you have done it once, it's entirely obviously. I'm mostly taking the perspective here of somebody who needs a phone and doesn't even properly understand what an OS even is.

load more comments (1 replies)
[-] TheDarkQuark@lemmy.world 26 points 3 days ago

I came to GrapheneOS for privacy and security, but stayed for the features.

  1. Per application network toggle: I found this incredibly useful in cases where the application is fully functional without internet, yet still asks for internet permission, and I do not want it to phone home (e.g. Google Photos). It is helpful for when you are using a VPN, and do not want the slot to be taken by an application like NetGuard. Although, I believe you can replicate this functionality with (Split Tunneling) + (Block connections without VPN).

  2. Storage Scopes: This is a another highly useful feature. Say you took a bunch of pictures on a trip, and want to show the pictures to a friend. Normally, you'd fear them snooping around pictures that you don't want to show them. However, with GrapheneOS, you can just download a separate Gallery application, only expose the photos (or the photo directory) that you want to show via Storage Scopes, pin the application, and safely hand the phone over to them.

I found this feature very helpful when shortlisting ~10 photos from a gallery of 500 photos. I downloaded PhotoSwooper (which lets you keep/delete photos by swiping right/left) from F-Droid, exposed the 500 photos directory to it, and started swiping. I iterated this a couple of times, and got my perfect 10.

  1. Contact Scopes: This is for the cases when you don't want to expose your contacts to the application for whatever reason (e.g. you don't want them to graph your connections or you just want to protect the privacy of your friends). You can just selectively share contact(s) instead of handing your entire phonebook to the application.

  2. Sandboxed Google Play: Some applications require the extremely invasive Google Play Services (because it operates with elevated system-level privileges). However, with GrapheneOS, you can just install the sandboxed play services, which acts as a regular user level application. You can then revoke network access within Sandboxed Google Play Services, and use your play services dependant application as usual.

So, basically, if you can afford it, go for GrapheneOS. I wanted privacy and security; but now that I tried GrapheneOS's features, a lot of these are now nonnegotiable to me.

[-] Imhotep@lemmy.world 3 points 2 days ago

On Graphene now, I dearly miss simple Lineage features I used 10 times a day: the network speed indicator and long press power button for flashlight. I just assumed GOS would have them.

I browsed the forums and they’re not interested in implementing it. One answer was "buy a flashlight"

Even after a few months I still feel like going back.

[-] TheDarkQuark@lemmy.world 3 points 2 days ago

I personally do not use long press power for flashlight, but your requirement got me curious, and I tried to replicate it.

This is doable, but seems to require more permissions. I downloaded KeyMapper from F-Droid (https://f-droid.org/packages/io.github.sds100.keymapper/), and added a new key map with Long press Power trigger and Toggle flashlight action. However, this application requires Accessibility permissions (because you are overriding system maps ig), Camera (for flashlight), Network (I think it sends an adb command via wireless debugging to do the toggle) and unrestricted battery usage.

As for the speed data, from a surface level search, I found these two apps:

  1. NetUpDown (https://apt.izzysoft.de/fdroid/index/apk/com.by_syk.netupdown): This shows a floating window (instead of the notifications bar) with the network speed.

  2. Traffic Light (https://f-droid.org/packages/com.leekleak.trafficlight/): This displays the network speed as a notification, but shows the incorrect data for me for some reason.

Theoretically, it should be possible to just mash the functionality (/code) of these two to get what you want (thanks to open source).

[-] Imhotep@lemmy.world 2 points 1 day ago

A big thanks for doing all that research!

I had kind of a fix for the flashlight, but this is much better. KeyMapper is really polished, the icon doesn't do it justice (I'm superficial like that).
I could customize the press duration, vibration, all good stuff. Only thing missing is a timeout.
I did have a bit of a weird behavior, with actions sometimes launched during button press and sometimes only after release. It seems to be fixed for now. For other users: I did grant root to the app but don't know if it was required for this function.

Traffic Light is again a well made app, but it updates too often and I don't like persistent app notification in the drop down window. I'll give it a try though.

load more comments (9 replies)
[-] persona_non_gravitas@piefed.social 17 points 4 days ago* (last edited 3 days ago)

IMHO if you only care about Google sucking your data and not other privacy/security, the most important question isn't between OSes as much as it's between:

  1. No Google apps (GAPPS); honestly good ol' LineageOS is just fine. If you don't install Google spyware you don't have Google spyware, just the connectivity check and dns. Which you can probably change. Major con, many applications installed from Play store (through Aurora store, apk, whatever) and practically all notifications you'd receive from them stop working.

  2. MicroG; open source GAPPS replacement that tries to send as little data as possible to Google, while keeping Play store apps & push notifications working. /e/, iodé, Lineage for MicroG, Lineage but add microG manually during installation, formerly CalyxOS...

  3. Add GAPPS but try to handicap it somehow (incl. GrapheneOS work profile isolation); I don't remember if it's eg. possible to block them from accessing the Internet on non-GrapheneOS phones, by app permissions or eg. NetGuard?

If we're taking into account other privacy and security, then GrapheneOS by a mile.

[-] FrostyPolicy@suppo.fi 11 points 3 days ago

block them from accessing the Internet on non-GrapheneOS phones

This is an important feature in GrapheneOS. You can deny network access for any app.

[-] pkjqpg1h@lemmy.zip 1 points 1 day ago

same for other ROMs

load more comments (8 replies)
[-] Undertaker@feddit.org 7 points 3 days ago* (last edited 3 days ago)

/e/OS is not Google free (several calls, integrations and so on are connecting to Google). It makes use of OpenAI as well, uses tracking ids for updates. It is far behind regarding updates and thus risking privacy due to lack of security. They ignore any sort or critique.

Graphene: You have to buy a Google device. Even second hand is support as it increases the value of their devices (or stabilize) and you walk arround with their name.

Advice: Have a look at Iode.

Pick a device that is not meant to be used for many years as Graphene plans to support a non Google device in coorporation with an unknown manufacturer.

(Written from a Fairphone using /e/)

[-] Luffy879@lemmy.ml 5 points 3 days ago

Have a look at Iode.

Its the same as /e/

Linaegeos fork with no updates and its only „security” is a literal subscription for a DNS blocker

[-] Svinhufvud@sopuli.xyz 10 points 3 days ago

https://eylenburg.github.io/android_comparison.htm

This is a great table of comparisons between the different Android alternatives.

Just abit of encouragement

Self hosting is easier than you think. I didn't know anything about Linux prior to setting up a server. I'm faaaaaar from an expert but even a noobie like me was able to set up a truenas system by watching tutorials and reading. It's definitely alot of problem solving in the beginning but it gets easier.

In terms of storage. Mega is great value for money and all E2E

load more comments (2 replies)
[-] Tayl@feddit.org 9 points 3 days ago* (last edited 3 days ago)

GrapheneOS by far. From a security perspective, GrapheneOS is miles ahead because they are quick to update and they have the Android OEM security updates, which lets them update as soon as the update is released, instead of having to wait for the Android public security release with happen every quarter. Have also heard that /e/ OS is extremely slow to release security updates (when available) but i could not find anything about it.

[-] atropa@piefed.social 9 points 4 days ago

I love my graphene phone, and also installed lineage on my old motorola phone , works great , i used that one as a backup

load more comments (2 replies)
[-] mathemachristian@lemmy.ml 4 points 3 days ago

Resurrect divestOS is my thoughts on this

[-] JamesBoeing737MAX@sopuli.xyz 1 points 1 day ago

There is a AXP-OS, but it doesn't support unpriviliged MicroG and they focus on their 'PRO' (rooted) version, which you have to use if you want microG + AVB.

[-] srasmus@slrpnk.net 8 points 3 days ago

I have /e/os. I decided on that pretty early on in my degoogling journey. Main reason being that I believe any privacy venture will come with tradeoffs, but I went with the "most things will work" approach. They have this neat privacy manager that tells you which trackers come from where, and I think that covers my needs. There has been exactly zero apps that haven't worked so far, and most people that use my phone just think it's a standard pixel.

The app lounge kind of blows though. I use the F-Droid app for updating F-Droid apps instead of it, since there was some weird stuff about where they were getting open source apps from. I use it for the play store, and it does what it needs to, although there is some weirdness with it like not being able to tell which apps have recently updated and when. I like the idea of joining app repositories together, but it needs work.

load more comments
view more: next ›
this post was submitted on 25 Feb 2026
65 points (100.0% liked)

Privacy

46714 readers
1153 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS