this post was submitted on 14 Oct 2025
740 points (99.5% liked)

Android

20454 readers
97 users here now

The new home of /r/Android on Lemmy and the Fediverse!

Android news, reviews, tips, and discussions about rooting, tutorials, and apps.

🔗Universal Link: !android@lemdro.id


💡Content Philosophy:

Content which benefits the community (news, rumours, and discussions) is generally allowed and is valued over content which benefits only the individual (technical questions, help buying/selling, rants, self-promotion, etc.) which will be removed if it's in violation of the rules.


Support, technical, or app related questions belong in: !askandroid@lemdro.id

For fresh communities, lemmy apps, and instance updates: !lemdroid@lemdro.id

💬Matrix Chat

💬Telegram channels / chats

📰Our communities below


Rules

  1. Stay on topic: All posts should be related to the Android OS or ecosystem.

  2. No support questions, recommendation requests, rants, or bug reports: Posts must benefit the community rather than the individual. Please post to !askandroid@lemdro.id.

  3. Describe images/videos, no memes: Please include a text description when sharing images or videos. Post memes to !androidmemes@lemdro.id.

  4. No self-promotion spam: Active community members can post their apps if they answer any questions in the comments. Please do not post links to your own website, YouTube, blog content, or communities.

  5. No reposts or rehosted content: Share only the original source of an article, unless it's not available in English or requires logging in (like Twitter). Avoid reposting the same topic from other sources.

  6. No editorializing titles: You can add the author or website's name if helpful, but keep article titles unchanged.

  7. No piracy or unverified APKs: Do not share links or direct people to pirated content or unverified APKs, which may contain malicious code.

  8. No unauthorized polls, bots, or giveaways: Do not create polls, use bots, or organize giveaways without first contacting mods for approval.

  9. No offensive or low-effort content: Don't post offensive or unhelpful content. Keep it civil and friendly!

  10. No affiliate links: Posting affiliate links is not allowed.

Quick Links

Our Communities

Lemmy App List

Chat and More


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] avidamoeba@lemmy.ca 117 points 4 days ago (4 children)

There aren't too many OEMs that sell worldwide. So that would be one of Samsung, Sony, Moto, OnePlus.

[–] JoMiran@lemmy.ml 89 points 4 days ago (6 children)
[–] atomicbocks@sh.itjust.works 63 points 4 days ago (2 children)

I agree, Motorola is owned by Lenovo. They have found middling success with the return of their Razr line and with phones in the lower to mid tier range. But they really want something super flagship. Something like the Think Phone would have probably sold really well with a Graphene option.

[–] avidamoeba@lemmy.ca 36 points 4 days ago (1 children)

Device hardware, firmware, and software are integrated to protect your most sensitive data from mobile threats. With Moto KeySafe, PINs, passwords, and cryptographic keys are isolated from other device data for an added layer of high-level security.

Yeah this sounds like what Graphene insists on.

[–] deafboy@lemmy.world 6 points 4 days ago (2 children)

That sounds like a fancy speak for a Trusted Platform Module. Isn't some kind of TPM mandatory to obtain a google certification for a new device?

[–] Andromxda@lemmy.dbzer0.com 1 points 2 days ago

It (unfortunately) isn't required. Most current Android devices on the market have serious security issues (most notably, full disk encryption can easily be bypassed due to a lack of effective unlock attempt rate limiting) due to their lack of a secure element.

[–] avidamoeba@lemmy.ca 2 points 3 days ago (1 children)

Yeah, a TPM or secure element. I don't think it's required.

[–] Andromxda@lemmy.dbzer0.com 1 points 2 days ago (1 children)

It (unfortunately) isn't required. Most current Android devices on the market have serious security issues (most notably, full disk encryption can easily be bypassed due to a lack of effective unlock attempt rate limiting) due to their lack of a secure element.

[–] avidamoeba@lemmy.ca 1 points 2 days ago (1 children)

Are you sure there's no rate limiting? My phone definitely does rate limit the on-boot disk decryption prompt. Do you mean there's no rate limiting if someone detaches the NAND and brute-forces it off-device?

[–] Andromxda@lemmy.dbzer0.com 1 points 2 days ago

That rate limiting can easily be bypassed by an attacker. In order to be effective, the rate limit needs to be enforced by tamper-resistant hardware, i.e. a secure element. Here are some of the requirements for a secure element: https://developer.android.com/privacy-and-security/keystore#StrongBoxKeyMint

An implementation of StrongBox KeyMint must contain the following:

Its own CPU
Secure storage
A true random-number generator
Additional mechanisms to resist package tampering and unauthorized sideloading of apps
A secure timer
A reboot notification pin (or equivalent), like general-purpose input/output (GPIO)

For details, I recommend reading:

Only devices with a proper implementation of a secure element (Titan M2, i.e. Pixel 6 or later, or the Apple SEP, i.e. iPhone 12 or later) are actually resistant to brute-force attacks by forensic data extraction tools, such as Cellebrite or GrayKey. GrapheneOS has obtained some internal documents from multiple forensics companies. They published the Cellebrite docs at https://discuss.grapheneos.org/d/14344-cellebrite-premium-july-2024-documentation

Specifically, I recommend looking at this chart:

It clearly shows that data cannot be extracted from iPhones with the SEP, unless the device is in the AFU state, meaning that the encryption keys are kept in memory.

Those are the charts for Pixels:

[–] Revan343@lemmy.ca 11 points 4 days ago

Oh man, please. My current Motorola could use replacing, official Graphene support would be fantastic

[–] Resonosity@lemmy.dbzer0.com 2 points 3 days ago (1 children)

How repairable are Motorola smartphones?

[–] Brown5500@sh.itjust.works 2 points 3 days ago

I have had several versions of the Moto G family and they're pretty easy to repair. Usually under $30 for a screen. Trickiest part is glueing the back panel back on.

[–] possiblylinux127@lemmy.zip 4 points 4 days ago

That would make sense as Motorola is fairly supportive of custom roms

[–] kalapala@sopuli.xyz 3 points 4 days ago (3 children)

It's not going to be a Chinese company.

[–] Andromxda@lemmy.dbzer0.com 2 points 2 days ago (1 children)

What makes you think so? This (admittedly pretty vague) response indicates quite the opposite: https://grapheneos.social/@GrapheneOS/115118480213473033

[–] kalapala@sopuli.xyz 1 points 1 day ago

Because they actually care about security.

[–] picnic@lemmy.world 3 points 4 days ago (1 children)

How come? I'd bet they'd be the most easiest "oem" to get started with.

All western ones will be on the mercy of google licencing, so I'd guess no one wants to burn bridges.

[–] kalapala@sopuli.xyz 2 points 3 days ago

I'm quite sure no one would consider Chinese company as safe option for privacy and clearly security focused phone.

Also as Sony already has the Sailfish support the company is likely going to be Sony.

[–] avidamoeba@lemmy.ca 2 points 4 days ago

I wouldn't bet on it. Lenovo is used across North American corporations, banks and government institutions.

[–] Zink@programming.dev 3 points 4 days ago

Ooh yeah let's get a 6" 2025 take on the OG Motorola Droid with the slide out keyboard, to make it more linux-phone-y.

[–] IBoris@lemmy.world 42 points 4 days ago (2 children)

I hope Sony simply because I want a headphone jack and an MicroSD card reader. Their phones are already pretty bloat free and their custom apps, usually focused on the camera system, would mesh very well with GrapheneOS. Would be a great way for them to become relevant again.

[–] spicehoarder@lemmy.zip 2 points 4 days ago (1 children)

Hot take, but no alt phone will reach critical mass without those features. They need support from even the most stubborn users

[–] IBoris@lemmy.world 2 points 22 hours ago

If the Graphene phone wants to presents itself as a consumer-first phone, I agree.

[–] Resonosity@lemmy.dbzer0.com 1 points 3 days ago (1 children)

How repairable are Sony smartphones?

[–] IBoris@lemmy.world 1 points 22 hours ago* (last edited 22 hours ago)

I don't know, never broke mine.

[–] SeductiveTortoise@piefed.social 8 points 4 days ago (2 children)

Samsung doesn't really rely on Snapdragon too much, so that might be out.

[–] viking@infosec.pub 3 points 3 days ago (1 children)

Samsung is also a synonym for useless bloat, locked boatloaders, intrusive ads, and every other hostile feature ever. They are the last one to open up their phones.

True. But my S3 ran like a young racehorse when I installed Cyanogen back in the third age, when the orcs still roamed Rohan.

[–] Echolynx@lemmy.zip 3 points 4 days ago (1 children)

Yeah, but European ones don't (or at least last time I checked). I guess that would be a hassle for them to keep compatibility.

[–] hamsterkill@lemmy.sdf.org 3 points 3 days ago

Not certain Sony counts as worldwide anymore since they seem to have retreated from the US.