Conversation

Calyx is the best privacy focused OS in terms of app compatibility. It's not perfect but it's become very stable over the last few months of using it as a daily. Has some very nice features too like a firewall that completely disables data access to individual apps.

Daniel Micay

@DanielMicay

Replying to

@satrinity402

@Rand0mGuest2

and

@CalyxOS

GrapheneOS now has grapheneos.org/usage#sandboxe providing substantially broader app compatibility. microG only provides a small subset of Play services functionality. CalyxOS does not add a firewall. AOSP already has one and they're just presenting features in their own firewall UI.

12:32 AM · Aug 7, 2021Twitter Web App

Replying to

It's worth noting that their take on network filtering is fundamentally flawed and doesn't work: gitlab.com/CalyxOS/calyxo. It's not something missing but rather the approach is fundamentally incorrect. Solely packet-based filtering can't provide what it's presented as providing.

gitlab.com

App can bypass network isolation (#454) · Issues · CalyxOS / calyxos · GitLab

http://play.google.com/store/apps/details?id=com.gombosdev.ampere is able to show ads even with network-isolation configured. (Main toggle for the app in Datura / "Allow network access" in Settings.

Replying to

Network access via IPC also needs to be blocked, and in a systemic way rather than case-by-case. So, sure, they have a UI for the standard firewall with added features. The plan in their tracker is to fix 1 specific hole caused by a general problem of not blocking IPC networking.

Show replies