Conversation

This Tweet is from a suspended account. Learn more
Replying to and
Calyx is the best privacy focused OS in terms of app compatibility. It's not perfect but it's become very stable over the last few months of using it as a daily. Has some very nice features too like a firewall that completely disables data access to individual apps.
3
2
GrapheneOS doesn't come with assorted bundled apps. It's a more barebones starting point where users need to decide what to use. It's easier to install GrapheneOS via grapheneos.org/install/web but it's harder to get the initial apps. We also don't bundle any form of Play services.
1
1
Users can install Play services on GrapheneOS due to our sandboxed Play services compatibility layer. It doesn't ship with it though. Similarly, we don't bundle third party app stores (F-Droid, Aurora Store) and don't give them unrestricted unattended app install privileges.
1
1
They grant microG special privileges to allow it to bypass the signature checks in apps checking for genuine Play services. That's how it's able to work. However, microG doesn't enforce the same security checks and key pinning as Play services. That has security consequences.
1
1
microG will always be struggling to implement a tiny fraction of Play services and you're still running the Play services code in the apps using it. It's true that CalyxOS has better compatibility with apps than not shipping microG, but it still has serious compatibility issues.
1
1
Show replies