Conversation

Nicolas Dandrimont
@olasd
Exciting development in the Android without Google space: a backup app that uses the native system integration APIs and doesn't depend on Google cloud stuff.
Quote Tweet
Torsten Grote
@t_grote
That is why I have been working on a #FreeSoftware backup app that does not need root and saves backups wherever you want (e.g. flash drive, @Nextclouders).
Show this thread
Embedded video
1:51
2.9K views
1
8
Nicolas Dandrimont
@olasd
Replying to
@zhenech
Right; but it's a very important piece of the puzzle for these ROMs; It's like having a privileged F-Droid able to do auto-updates in the background: I feel that not being able to give random apps these permissions is a decent tradeoff.
1
Evgeni Golov
@zhenech
Replying to
@olasd
it's a very important piece for those ROMs,yes. But the overall "stock Android" backup experience remains a mess. And the tradeoff is phishy,as you need to disable bootloader protection for installing said ROM, so nothing prevents another app (and usb cable) to gain those perms.
1
Daniel Micay
@DanielMicay
Replying to
@zhenech
and
@olasd
That's not true and also misses the point behind the security model. See grapheneos.org/install for an example of the installation process for an alternate OS with full support for a locked bootloader and verified boot. Unlocking the bootloader is a temporary step for flashing.
grapheneos.org
GrapheneOS installation
Installation instructions for GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.
3
Daniel Micay
@DanielMicay
Replying to
@DanielMicay
@zhenech
and
@olasd
The main benefit of a locked bootloader is enabling verified boot. For verified boot to be useful, the OS needs to fully implement it and preserve the security model for it by avoiding trust in (unverified) persistent state. Verified boot aims to prevent attacker persistence.
1