Considering GrapheneOS? Quick tour + useful settings

🎥 Video Link Links referenced for video https://grapheneos.org - GrapheneOS https://grapheneos.org/features - GrapheneOS Features https://grapheneos.org/usage - GrapheneOS Usage https://grapheneos.org/faq - GrapheneOS FAQ Auditor App https://attestation.app/ - Auditor App https://attestation.app/tutorial#scheduled-remote-verification - Remote attestation setup GrapheneOS Camera https://grapheneos.org/usage#grapheneos-camera-app GrapheneOS Camera documentation https://github.com/GrapheneOS/Camera - GrapheneOS Camera GitHub GrapheneOS PDF Viewer https://grapheneos.org/features#grapheneos-pdf-viewer - GrapheneOS PDF Viewer documentation https://github.com/GrapheneOS/PdfViewer - GrapheneOS PDF Viewer GitHub GrapheneOS Vanadium https://grapheneos.org/features#vanadium - GrapheneOS Vanadium documentation https://github.com/GrapheneOS/Vanadium - GrapheneOS Vanadium GitHub Settings https://grapheneos.org/features#auto-reboot - Auto reboot https://grapheneos.org/features#attack-surface-reduction - Wi-Fi/Bluetooth timeout https://grapheneos.org/features#pin-scrambling - Pin Scrambling Transcript Please excuse any grammatical errors. I used a tool to generate the transcript and haven’t had a chance to read through it yet. ✔️ ...

February 27, 2023 · 7 min · 1310 words · Josh

GrapheneOS vs Android OS on the Pixel 7 Review

🎥 Video Link Links referenced for video https://grapheneos.org/features#sandboxed-google-play - Sandboxed Google Play Documentation https://youtu.be/hx2eiPTe7Zg - Sensor & Network Permissions https://youtu.be/WjrANjvrSzw - Storage Scopes Transcript Please excuse any grammatical errors. I used a tool to generate the transcript and haven’t had a chance to read through it yet. ✔️ I am upgrading to the Pixel 7 and after nearly two years of using Graphene OS, I have decided to leave the stock Android OS installed on it. Let me be clear, I did not want to do this, but I figured in order to offer a fair comparison between stock Android OS and Graphene OS, I should probably test out the stock OS and see how it is. My first impression with stock Android OS is that it has a very friendly setup. It wants you to log into your accounts to sync your settings and it comes with a ton of popular apps installed, as well as the Google Play Store, installed by default. I am speaking objectively for someone new to the OS, not from a privacy or security perspective. The whole initial experience was very welcoming. To keep things equal in my testing, I am going to be using the Play Store on both OS’s by signing in so I can download apps. I also wanted to try and embrace the stock Android OS as much as possible to see if there were any features I might miss. ...

January 22, 2023 · 6 min · 1201 words · Josh

Most Secure and Private Browser for Mobile | Vanadium

🎥 Video Link Links referenced for video https://grapheneos.org/usage#web-browsing - GrapheneOS | Web browsing https://mullvad.net/en/help/dns-over-https-and-dns-over-tls/ - Mullvad Adblocking DNS server https://microsoftedge.github.io/edgevr/posts/Super-Duper-Secure-Mode/ - Microsoft article on CVE data https://github.com/GrapheneOS/Vanadium - Vanadium GitHub Transcript Please excuse any grammatical errors. I used a tool to generate the transcript and haven’t had a chance to read through it yet. If you’ve been following my channel for any length of time, then you know that I use graphene OS on my mobile device. My browser of choice is the one that’s bundled with it, which has vanadium. In addition to being bundled with the OS, there are a few other reasons I really like it, which I’ll cover in today’s video on graphene OS vanadium is the user facing browser that’s included with the OS and the provider of web view, which is used by other apps to render content. Now you might be asking what is what view. So as an example, let’s take a look at mastodon. Now there’s a post on Mastodon with a link included with it. And I selected, we can see that the page was opened, but I wasn’t actually taken outside of the Mastadon app to my web browser. Instead, the app displayed the link using web view. So even though you might not think you’re using vanadium, if we select the three dots in the upper right-hand corner, we can see at the bottom running in vanadium. So, that’s what web view is, as the name implies, that lets you view the web vanadium is a chromium-based browser, which means it provides the strongest sandbox implementation available for browsers at this time. Among other security features like exploit protection and site isolation. Vanadium actually improves upon these features, so you get even more protection as compared to using the standard Chrome browser. ...

January 2, 2023 · 5 min · 904 words · Josh

A minimalist dumb phone you should actually use

🎥 Video Link Links referenced for video https://grapheneos.org/ - GrapheneOS https://jkuester.github.io/unlauncher/ - Unlauncher https://github.com/jkuester/unlauncher - Unlauncher GitHub https://signal.org/ - Signal https://store.google.com/category/phones - Google Pixel https://youtu.be/B0RVWU_nROk - YouTube Video - I used a flip phone for 30 days https://youtu.be/Vl5OrbsXBI8 - YouTube Video - One Month with a Minimalist Dumb Phone | Light Phone II Review https://www.thelightphone.com/ - Light Phone https://palm.com/pages/product - Palm Phone https://mudita.com/products/phones/mudita-pure/ - Mudita Pure https://github.com/sduduzog/slim-launcher - Slim launcher (Unlauncher is a fork of this project) Transcript Please excuse any grammatical errors. I used a tool to generate the transcript and haven’t had a chance to read through it yet. ✔️ ...

December 5, 2022 · 4 min · 739 words · Josh

How to install GrapheneOS on Google Pixel 7 (Pixel 7 Pro) + Setup for new users

🎥 Video Link Links referenced for video https://grapheneos.org/install/web - GrapheneOS Web installer https://grapheneos.org/donate - GrapheneOS donation page https://grapheneos.org/features#sandboxed-google-play - Sandboxed Google Play details https://sideofburritos.com/docs/setup-guides/mobile-privacy/ - Mobile Privacy & Security Guide https://youtu.be/SZ0PKtiXTSs - How to install Sandboxed Google Play in a separate User Profile https://nitter.net/DanielMicay/status/1552966692749414402#m - Twitter thread explaining OEM unlocking Transcript Please excuse any grammatical errors. I used a tool to generate the transcript and haven’t had a chance to read through it yet. So in today’s video, I’ll be demonstrating how to install graphene iOS on the Google Pixel seven specifically, but if you have a different Google Pixel, this process will be relatively similar, I’m going to be using the web installer. And if you use that, it’s nearly impossible to mess up your phone. So don’t be afraid to attempt this. Now with that being said, there are a few hiccups you may run into during the install process. And I’ll cover those at the relevant points in the video. The computer I’m demonstrating this from is running Mac OS, and I’m using the brave browser. So to get started, we’re going to head on over to Griffin os.org. All websites that I mentioned in the video will be linked down below in the description box. So once you get here, click on Install Griffin OS. As I mentioned, we’re going to be using the web based installer. So once you get to this page, we’re going to scroll down to the prerequisites, give this a read through make sure that you have all of these requirements met. Make sure you’re using one of the supported OSS, like I said, I’ll be installing from macOS. So besides a supported operating system, make sure you are using a supported browser. There is an important note here, if you are using chromium on Ubuntu, it’s broken and will not work. So use a different browser, such as Google Chrome. Another important note here do not use incognito or private browsing mode. And so once you give that a read through, I’m not going to waste your time by reading it to you, and you make sure that all the prerequisites are met, we can then proceed on to the first step, which is enabling OEM unlocking in the screen we’re currently on is the screen that you’ll see if you just bought it brand new and just took it out of the box. So first, I’m going to walk through the initial setup. If you’re already past this part, you can skip it, I’ll leave the timestamps down below in the play bar. So we’re going to go ahead and select to get started. I’m not going to connect to a mobile network, I don’t have a SIM card in my phone. Skip. I’m going to skip connecting to Wi Fi select Setup offline, continue. Date and time, you can leave that set to default. You don’t need to uncheck these but I like to anyways click Accept limited warranty. Next additional legal terms except we are going to be erasing the phone so you don’t really need to set a pin but I think it’s good practice anyways ...

November 28, 2022 · 16 min · 3386 words · Josh

Android Full Lock Screen Bypass - Pixel | Demo + Explanation | CVE-2022-20465

🎥 Video Link Links referenced for video https://feed.bugs.xdavidhu.me/bugs/0016 - Complete Lock Screen Bypass on Google Pixel devices post by David Schütz https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/ - Accidental $70k Google Pixel: Lock Screen Bypass - by David Schütz https://nitter.net/xdavidhu/status/1590626467414958080 - Tweet by David Schütz announcing discovery of vulnerability https://source.android.com/docs/security/bulletin/2022-11-01 - Pixel Update Bulletin: November 2022 https://android.googlesource.com/platform/frameworks/base/+/ecbed81c3a331f2f0458923cc7e744c85ece96da - Technical details regarding fix https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20465 - CVE-2022-20465 https://support.google.com/pixelphone/answer/4457705 - Support schedule for Pixel Phones https://nitter.net/DanielMicay/status/1590941219462742018 - Tweet by Daniel Micay regarding scope of vulnerability https://grapheneos.org/features#auto-reboot - GrapheneOS Auto reboot feature https://grapheneos.org/ - GrapheneOS home page Transcript Please excuse any grammatical errors. I used a tool to generate the transcript and haven’t had a chance to read through it yet. ...

November 14, 2022 · 11 min · 2250 words · Josh

How to install GrapheneOS on Google Pixel 6a (GP6a) + Setup for new users

🎥 Video Link Links referenced for video https://grapheneos.org/install/web - GrapheneOS Web installer https://nitter.net/DanielMicay/status/1552966692749414402#m - Twitter thread explaining OEM unlocking https://grapheneos.org/donate - GrapheneOS donation page https://grapheneos.org/features#sandboxed-google-play - Sandboxed Google Play details Transcript Please excuse any grammatical errors. I used a tool to generate the transcript and haven’t had a chance to read through it yet. So the main purpose of today’s video is to install graphene OS on the Google Pixel six a specifically, the process will be similar regardless of which pixel you have. But the one I’m demonstrating on today is the six A, we’re going to be following the instructions on graphene os.org. I’ll put the link down below in the description as well as on the screen right now. And we will be using the web installer, it’s essentially impossible to break your phone using the web installer. So don’t be scared to try this, I’ve done the process probably about 50 to 100 times at this point, I’ve never had an issue with it. Now that being said, there are some issues that come up for some individuals when they are going through the install process. And I will point those out throughout the video for any tips, you can try to overcome those. But with that out of the way, let’s begin the installation process. So we’re at Griffin os.org, the web installer, we’re going to go down to the prerequisites, give this a read through the supported OS. I’m installing this from Mac OS today using brave browser, make sure you are using a supported browser and a supported OS. Otherwise you will encounter issues. This is a very important note for those on Ubuntu. If you’re using chromium that is broken and will not work. So make sure if you’re on a boon to you are not using chromium. So once you know you’re using a supported browser and OS, we can continue, make sure to give all this a read through I’m not going to waste your time reading it to you. But there’s some other important bits of information in here such as Do not use an incognito browser or private browser. Because again, you will encounter issues. So once you make sure all the prerequisites are met, we are on to enabling OEM unlocking. So just a note about where you get your information from always go to the source directly, in this case, Griffin os.org. That’s why I’m following along in their guide when showing you the developers do a great job documenting the installation process and different features. Always go to the source. First, don’t trust some random YouTuber talking about it, or some random forum posts that you saw, you’ll always get the best information directly from the source. So the first step for this OEM unlocking needs to be enabled from within the operating system, enable the developer options by going into settings about and pressing the build number entry until developer mode is enabled. So I’m going to be demonstrating this, like I just took my pixel out of the box. When you turn it on for the first time, you will see this screen. If you already past the initial setup, and you want to skip ahead, I’ll have that in the play bar below. So you can skip this section. But if you’re here, go ahead and press Get Started. I don’t have a SIM card in the phone yet. So go ahead and click Skip. So you could connect to Wi Fi at this point. But I like to skip this because we don’t need a Wi Fi connection, we can set up the pixel offline first. So we’re gonna go to Setup offline. Just a quick warning about setting up offline continue. Date and time. I uncheck these just for good practice. Except Except it’s always good practice to set a pin. Even if you’re just going to be erasing the OS quick. Sometimes I don’t but you should anyways. ...

November 6, 2022 · 17 min · 3603 words · Josh

GrapheneOS - Sensors, Network, Exploit Protection | Changelog 02

🎥 Video Link Links referenced for video https://youtu.be/hx2eiPTe7Zg - Sensors and Network permission toggle video https://grapheneos.org/features#sensors-permission-toggle - Sensors permission toggle https://grapheneos.org/features#network-permission-toggle - Network permission toggle https://discuss.grapheneos.org/d/502-mahjong-soul-game-constantly-crashing - Thread discussing Unity memory corruption bug https://grapheneos.org/usage#exec-spawning - Exec spawning https://grapheneos.org/usage#bugs-uncovered-by-security-features - Bugs uncovered by security features https://grapheneos.org/features#exploit-mitigations - Exploit mitigations

October 24, 2022 · 1 min · 48 words · Josh

eSIM Explained | How to activate eSIM Android | GrapheneOS

🎥 Video Link Mobile privacy guide https://sideofburritos.com/docs/setup-guides/mobile-privacy/ Links referenced for video https://grapheneos.org/usage#sandboxed-google-play-esim - GrapheneOS eSIM documentation https://www.usmobile.com/ - US Mobile - not an endorsement https://support.google.com/pixelphone/answer/7086887 - Google Pixel SIM documentation https://www.makeuseof.com/tag/what-is-esim-better-sim-card/ - eSIM vs SIM card https://ozekiphone.com/p_4411-voip-vs.-gsm.html - VoIP vs GSM https://www.moflixgroup.com/blog/esim-for-telcos-unlocking-opportunities - Details about eSIM’s

September 5, 2022 · 1 min · 46 words · Josh

GrapheneOS Sensors and Network Permission Toggle

🎥 Video Link Mobile privacy guide https://sideofburritos.com/docs/setup-guides/mobile-privacy/ Links referenced for video https://grapheneos.org/features#network-permission-toggle - GrapheneOS Sensors and Network permission toggle documentation https://github.com/GrapheneOS/os-issue-tracker/issues/597 - GitHub issue referenced regarding default sensor permission seting for system apps

August 21, 2022 · 1 min · 33 words · Josh