You can use the contactless payments supported tag when searching the GrapheneOS banking app compatibility list on GitHub. https://github.com/PrivSec-dev/banking-apps-compat-report/issues?q=is%3Aissue+label%3A"contactless+payments+supported"

This is incorrect. GrapheneOS supports NFC, and works just fine with NFC-based payment systems. Google Pay is an exception, because Google specifically chose to disable it on any device that isn’t whitelisted by them. Other apps, such as Curve Pay, PayPal or banking apps with a built-in NFC payment feature work without issues.

I’m not the author. You can thank @[email protected] for this amazing write-up

Wikipedia has way more donors, since it’s basically the only one of its kind. There is no Big Tech alternative to Wikipedia, so everyone just uses it by default. There are lots of other messengers though, so Signal isn’t the default choice.

Finally a good approach at raising money (other than donations)

Btw if you’re still looking for an IRC client, check out Goguma. It’s a better, more modern looking alternative to Revolution.

I’m glad you like it. Consider making a post about your experience so far having switched from iOS to GrapheneOS. The community likes these kinds of posts. Don’t hesitate to use screenshots, etc.

I know about the security issues in desktop Linux, but I still think secureblue fits that level of the iceberg pretty well. I would put Qubes there as well.

You could add secureblue. I would put it in the same category as GrapheneOS and Vanadium.

Chromium-based browsers have arguably better security than Firefox. https://madaidans-insecurities.github.io/firefox-chromium.html

Vanadium further improves Chromium’s security by disabling the JS JIT Compiler, using a hardened memory allocator (GrapheneOS hardened_malloc) enabling ARMv8.5 MTE, and applying other hardening patches (https://github.com/GrapheneOS/Vanadium/tree/main/patches).

The secureblue project maintains a hardened Chromium build for Linux called Trivalent, which uses most of the patches from Vanadium, among others. You can get it from their repo: https://repo.secureblue.dev/secureblue.repo

Tech bros are only interested in getting the results from open source

That’s why we need the GNU AGPLv3

For anyone interested in the Kik controversy: There’s a great episode of the Darknet Diaries podcast about it: https://darknetdiaries.com/episode/93/

Happy cake day!

That’s what I thought when I first saw this

Absolutely

Sorry, forgot to include a blockquote. I was talking about microG. Ntfy is a regular user-installable app, you just need to grant it permission to run in the background, i.e. disable battery optimization.

your only other choice is microg

Doesn’t work on GrapheneOS, since it requires root access for signature spoofing. And it’s not any better than Sandboxed play services.

You can use this website to check if your banking app is supported: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

@[email protected]

All of these are insecure as hell. Linux phones especially https://madaidans-insecurities.github.io/linux-phones.html

Fairphone also really fucked up: They signed their own OS with the publicly available (!) AOSP test signing keys. These guys really don’t know that they’re doing, and I would trust their hardware or software whatsoever. And no, installing a custom ROM doesn’t solve this. Considering how bad their security practices are, we genuinely have to assume that there are security issues with the device firmware as well.

/e/OS is based on the already insecure LineageOS, and it weakens the security further, so it’s not a good option either.

None of the options you mentioned can be compared to GrapheneOS. It’s currently the best option if you value your privacy and security. You don’t have to give Google money either, since you can just buy a used device, which is also cheaper and more environmentally friendly. Google also makes repairing their devices pretty easy for consumers and even works with iFixit. Here’s a Mastodon post I recently saw about that: https://social.linux.pizza/@midtsveen/113630773097519792

I don’t think it’s a coincidence that the shittiest companies are those, who enforce Google’s broken and monopolistic “Play Integrity” API. Revolut has connections to Russia, McDonalds supports the Israeli genocide in Palestine and Authy has always just been a massive piece of shit, not even allowing users to export their TOTP seeds. These are three companies I would NEVER even consider using anyway.

And “Play Integrity” API actually does NOTHING, absolutely NOTHING for your security as an end user.
You use an outdated, unpatched Android version with multiple severe, publicly known exploits on an insecure device?
Google doesn’t give a single fuck.
You use the newest version of Android with all the patches applied on Google’s own hardware, with a locked boot loader and a hardened operating system?
That’s not allowed by the “Play Integrity” API.
It’s only purpose is to serve Google’s monopolistic business interests.