GrapheneOS [Unofficial]

3073 readers

47 users here now

Welcome to the GrapheneOS (Unofficial) community

This feed is currently only used for announcements and news.

Official support available on our forum and matrix chat rooms

GrapheneOS is a privacy and security focused mobile OS with Android app compatibility.

Links

More Site links

Social Media

This is a community based around the GrapheneOS projects including the hardened Android Open Source Project fork, Auditor, AttestationServer, the hardened malloc implementation and other projects.

founded 4 years ago

MODERATORS

KindnessInfinity@lemmy.ml

akc3n@grapheneos.social

Swissquote Launches Official Support For GrapheneOS (grapheneos.social)

submitted 2 weeks ago by KindnessInfinity@lemmy.ml to c/grapheneos@lemmy.ml

4 comments fedilink hide all child comments

Swissquote has launched official support for GrapheneOS for their main app instead of it only being available for Yuh:

https://play.google.com/store/apps/details?id=com.swissquote.android

What’s new

We now officially support GrapheneOS!

Bug fixes and minor improvements

They're verifying GrapheneOS via hardware attestation.

The code added for verifying GrapheneOS would be easy to extend on the server side with support for other alternate operating systems. They could also support future non-Google roots of trust to permit hardware not certified by Google. It still restricts what can be used but is at least extensible.

More apps using the Play Integrity API should implement this. It can initially be integrated to allow either the Play Integrity API or hardware attestation. Hardware attestation can be used to fully replace the Play Integrity API at the expense of legacy device support but that's not mandatory.

See https://grapheneos.org/articles/attestation-compatibility-guide for more information. Apps implementing this need to add new verified boot key fingerprints when GrapheneOS adds support for more devices since per-device keys are important for security. For our own devices, we could simply have our own attestation root of trust.

you are viewing a single comment's thread
view the rest of the comments

[–] Metr0pl3X@lemmy.ml 2 points 2 weeks ago

Correct, my message was to confirm that payments can and do work on GrapheneOS so long as there is an implementation available to you.

Now that you've mentioned the watch if it is a WearOS device capable of Google Pay then yes it can be used for payments independent of having Google Pay on the handset.