Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

  • Hacker News
  • support?

    I'm yet to come across an Android app I can't run on GrapheneOS.. what exactly are they doing?

  • They're doing attestation checks to enforce having a Google certified device and OS. They followed our attestation compatibility guide to support GrapheneOS by permitting the verified boot keys for it and have said they're open to permitting other operating systems in the same way. It would be better if apps didn't do this but if they're going to do it then this is much better than only permitting a Google certified OS.
  • Truth be told, GrapheneOS is the only third party ROM that bothers to make app attestation work.
  • It's not a ROM it's an OS.
  • However, if on LineageOS, which mind you is the only way to get updated (and thus safer) android versions in many devices, they simply block you.

    Awful.

  • LineageOS has no AVB support at all unfortunately and most devices don't allow using verified boot with custom keys anyways. With GrapheneOS they can just add GrapheneOS public keys (https://grapheneos.org/attestation.json).

    For LOS Roblox would have to disable hardware attestation completely, which means you can easily just add extra modules such as a setuid binary which makes cheating easy (at least on the client side, you'd have to rely completely on server side anti cheating)

    https://eylenburg.github.io/android_comparison.htm

  • The announcement is very funny in that regard, devices with last update in 2023 like the Galaxy S10 are still ok despite having every root exploit under the sun available but god forbid you want to update it to the last version
  • That's excellent news!! Hope to see more of this!!
  • I guess that makes sense given the type of adults that prowl on Roblox.
  • It's Roblox's responsibility to police their platform and the vast majority of bad actors use mainstream operating systems and mainstream services like Discord or Telegram. Clearly lack of privacy does not prevent crime as we can see on Telegram and Discord which are both not E2EE and yet have far more crime taking place then on encrypted alternatives.
  • Please don’t let your kids on this platform…
  • Don't get too excited, this still goes against the basic freedom to own the devices you've paid for.

    Remote attestation is still there and only official builds of GrapheneOS are supported. While this is marginally better than being tied to a build from an advertising company, you're still out of luck if you want to build the OS yourself.

    by m132
  • Great news! I never had problems running Roblox on my GOS, but it's nice to to see the explicit, official support.

    Snowball effect (for both sides, software publishers and OS vendors).

  • “You have reached your limits on help.roblox.com”

    That is the first time I see something like that!

  • Seems ridiculous, but when their biggest rival can’t be bothered to support Linux… you see why they might announce something like this.
  • Who's their biggest rival? Roblox doesn't support Linux either.
  • Roblox has a long history of not supporting Linux, and the game was rendered unplayable for many years. In 2022 it became possible following some Wine patches, but then they began to implement a kernel-level anticheat. Roblox initially committed to keeping Wine working but suddenly went back on that and blocked it without notice. Today, the last remaining way is through running the Android version of the game through an Android container or emulator. The TFA is about stopping this exact method of running the game though...
  • Makes sense for them to support this given their scale. I wouldn't be surprised if GrapheneOS secures another big Android OEM vendor (after Motorola Mobility) and the user base of the OS quickly grows from its current 400k+ to millions.
  • If it become to big, it will go the same way as CyanogenMod, Google will send some people to pressure the manufacturers to drop them off
  • I've been looking into GrapheneOS as a longtime Pixel user who is thinking of becoming a bit more security conscious. But, looking around at its current state RE: RCS and camera apps, I think it makes the most sense to stick with stock Android.

    I also have a really niche feature I rely on daily (letting me "wifi call" from one sim over the data line of the other sim), and it's really hard to tell if GrapheneOS supports it.

    If I can grab my old pixel that's stored in a box at my parents' house on another continent I might give it a try, but GrapheneOS really doesn't seem ready to be a daily driver.

  • > after Motorola Mobility

    Does anyone know anymore on that front? For months, I've regularly looked up whether there were any news, only to find nothing besides the original announcement. No ETA, no upcoming devices to be supported, heck, on the Graphene side, their own webpages make nary a mention. Would buy a Razr 70 Ultra + Clicks the second that is confirmed, but for something that was so publicly announced months ago, this seems very shaky...

  • This is a really interesting signal tbh.

    While it sounds like it already works on GrapheneOS having a corporation come out and say they won't go out of their way to break it is quite unusual.

  • It requires a positive action from the application developer to include GrapheneOS's keys as well as Google's keys. So this is a deliberate positive step, rather than a default.