Conversation

Daniel Micay
@DanielMicay
twitter.com/GrapheneOS/sta Initial implementation is almost ready for public testing. It will need a lot of work to improve the error handling and interface. Once it's robust, it will be the preferred install method for users on OSes without proper fastboot and signify packages.
Quote Tweet
GrapheneOS
@GrapheneOS
GrapheneOS has funding available for developing an open source WebUSB-based installer as an alternative to our installation guide. It's low-level programming work despite being in JavaScript. Get in touch with us (contact@grapheneos.org) if you're interested in working on it.
Show this thread
1
16
Daniel Micay
@DanielMicay
CLI installation approach will still be preferred if you can obtain working fastboot and signify commands via first-party OS packages. That way, you can verify the factory images zip with signify and flash it to the device in a way that's robust to a compromise of our servers.
Twitter Web App
2
Likes
Daniel Micay
@DanielMicay
Replying to
@DanielMicay
Most people are blindly trusting the install guide and aren't on an OS with those packages available. It makes more sense for them to give our site access to the phone's fastboot USB interface so it can perform the installation without them needing to run any additional software.
2
2
Daniel Micay
@DanielMicay
This is very important as a form of harm reduction. A lot of people end up following unofficial install guides and those usually have mistakes and misguided advice. They often encourage using sketchy third party software and various dangerous workarounds. This will resolve it.
1
3
Daniel Micay
@DanielMicay
WebUSB (Chromium-based browsers) is more portable than fastboot so it will be possible to install GrapheneOS from more devices. The installer page could be run locally rather than from our site so perhaps we'll make signed releases of it and have it verify the OS releases itself.
1
4