• DaddleDew@lemmy.world
    link
    fedilink
    English
    arrow-up
    41
    ·
    11 months ago

    I switched to it a year ago and I like it. The biggest draw for me is it gives me back control and ownership over my phone. It gives you actual and thorough control over what apps can do on your phone including Google’s apps, which on other typical Android OS are being given all or most permissions with no ability for you to deny access to any of them.

    To gain almost all the functionality of a regular Android OS you can install Google Play Services and run it sandboxed, which means it will only do what you allow it to do and access only what you will allow it to access, which for me is the bare minimum before things stop working too much for my tastes.

    Besides Android auto for now, the only thing that won’t work for me on it is my banking app, probably because of all the security checks involved in it. But I just use the browser-based online service to do my banking operations instead.

    • keefshape@lemmy.ca
      link
      fedilink
      English
      arrow-up
      24
      ·
      11 months ago

      I got my banking app working by going into App Info for it, and toggling this to on.

    • TWeaK@lemm.ee
      link
      fedilink
      English
      arrow-up
      13
      ·
      11 months ago

      Banking apps can usually be defeated by Magisk in Zygist mode, then you use the deny list to hide things from the app. Some might check with Google for security, which is much more difficult and maybe even impossible to circumvent, but in my experience these days they work fine.

        • TWeaK@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          ·
          11 months ago

          Magisk is how you get root.

          Magisk also allows app spoofing, which may be something of a security risk, but using it to bypass things like banking app checks is one of the benefits. Personally, I like having root, and to me the benefits are worth the risk.

          It may even be that GrapheneOS uses a little bit of Magisk’s type of functionality. At least, that’s how LineageOS4MicroG works - you need app spoofing to install MicroG, however this ROM comes with it preinstalled but disabled for anything else, so it closes the security hole. However, you probably can’t defeat Google’s SafetyNet with MicroG anymore.

    • TWeaK@lemm.ee
      link
      fedilink
      English
      arrow-up
      3
      ·
      11 months ago

      Banking apps can usually be defeated by Magisk in Zygist mode, then you use the deny list to hide things from the app. Some might check with Google for security, which is much more difficult and maybe even impossible to circumvent, but in my experience these days they work fine.

    • iturnedintoanewt@lemm.ee
      link
      fedilink
      English
      arrow-up
      3
      ·
      11 months ago

      I never managed to get MS “company portal” to successfully create a work profile. I had to give up in the end.

      • DaddleDew@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        11 months ago

        My banking app is in the list and already has a number of reports against it reporting the same problem I have with it. Exploit protection compatibility mode was already enabled on my phone. The app just freezes upon startup ever since an update that rolled in later last year and as I said, this problem has already been reported by other users.

        • lseif@sopuli.xyz
          link
          fedilink
          English
          arrow-up
          1
          ·
          11 months ago

          :( thats annoying. i assume you have google play services installed.

          its a good thing your bank doesnt enforce using the mobile app, like mine…

    • TWeaK@lemm.ee
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 months ago

      Banking apps can usually be defeated by Magisk in Zygist mode, then you use the deny list to hide things from the app. Some might check with Google for security, which is much more difficult and maybe even impossible to circumvent, but in my experience these days they work fine.

    • iturnedintoanewt@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 months ago

      I never managed to get MS “company portal” to successfully create a work profile. I had to give up in the end.