Posted by mrbn100ful 3 hours ago
- https://forum.sailfishos.org/t/sailfish-os-clarifying-claims...
Edit: I'm well aware of the differences between typical Linux and Android (especially the security architecture!), and I'm willing to make some sacrifices in the name of FOSS... but only if it's actually FOSS.
Android (and by extension GrapheneOS) uses Linux as a kernel, but it lives in its own world and is completely unrecognizable. I'd say it's even more alien than macOS. For most users, the differences don't matter. If you're a programmer or a sysadmin with reasonable expectations, you feel like a fish out of water very fast. And I cannot honestly the changes are for the better.
The practical downside, however, is that this phone does not natively run Android apps, while GrapheneOS runs all Android apps bar those that require Play Integrity. Desktop GNU/Linux programs are either unusable or a terrible experience on a mobile device with a small screen and no mouse.
Is this an assumption or coming from your experience? Because I'm typing this on a GNU/Linux phone in a desktop browser and use a bunch of desktop applications daily and haven't noticed.
Of course if you run GIMP or something like that it won't fit unless you plug an external screen and a mouse in, but all the applications I use daily are perfectly usable. There's a lot of Kirigami and libadwaita programs these days that just work well on a phone, and if I need to launch my bank's application there's always Waydroid.
See also: https://linuxphoneapps.org/
If you say, rely on google maps, banking apps, apps for your IoT appliances, etc. it's certainly relevant. I don't have any of that though.
For me the most and truest pressing issue is that cell modems are very, very tightly coupled with Android. It's still true for the Jolla Phone that it simply is a worse phone because the modem drivers are buggy. This is a complicated issue that isn't getting better, and is mostly to do with legislation legally mandating the tivoization of cell modems, a weird line in the sand on what responsibilities fall to the hardware or to what software, as well as the modem manufacturers themselves not really caring.
My impression (also for Ubuntu Touch, etc.) is that all these systems use the upstream vendors' Linux kernels trees and firmware blobs for Android.
Unfortunately, since we are not talking about Samsung or Google, but just some random Chinese ODMs, it's usually years old Linux versions and ancient firmware blobs full of known holes (e.g. the C2 is running a Linux tree from October 2022). It's only thanks to the tireless work of postmarketOS etc. that some devices boot on modern kernels.
Everything I listed was an advantage. Now see, I don't think Unix is the be-all end-all of operating systems design. I don't particularly care for Linux, the BSDs, macOS, etc. But Android is a definite regression in the strongest terms. Give me a PIMOS or Genera or Squeak phone that works well. I'll be happier than I would with a Linux phone.
Then again, SailfishOS is a linux with much of the usual linux stuff like userland with bash, coreutils, glibc, systemd, wayland, pulseaudio etc.
https://github.com/sailfishos/sailjail-permissions/blob/mast...
Given how sensitive information most people have on their phones (banking, chats, and whatnot), it's a disaster in the making.
The typical answer is "but I'll only use open source apps that I trust". Sandboxing doesn't only protect you against rogue apps, it primarily protects you against 0-days in apps that you do trust.
If you are worried about big players profiling you (hard to avoid, high likelihood of happening, low likelihood of damage), then you want Sailfish.
If you are worried about apps profiling you (easy to avoid, high likelihood of happening, moderate likelihood of damage), you want Android or iOS.
Graphene and Sailfish sit on different points on that spectrum, just like OpenBSD and Linux do.
But I hate phones. All I want is navigation, sms/call, signal, steam and firefox.
Of course, if your goal is to run SailfishOS, there is currently not much of another option.
https://commodore.net/callback/
It's pretty cool looking! Very optimistic about it.
I would really appreciate it if you could give some references - any at all - to back this claim.
All I have seen is GrapheneOS folks (or probably just a certain individual affiliated with the GrapheneOS org) accusing them of doing this.
I know the people behind SailfishOS, they’re not like, friends or anything: just ex-Nokia developers who got fucked by Microsoft (like I did, btw, which is how I know of them).
I feel like the big tech smartphone duopoly would have a reason to spread such rubbish, but its so patently obvious that I doubt they are so stupid.
"It acquired new investors in 2016, among them the Russian company Votron. In March 2018 they were joined by Rostelecom (which is state owned) as investor, which took over Votron and OMP."
Note that was after 2014 russian invasion into Ukraine.
(I actually couldn't find information on their nationality, they might be e.g. Ukrainian or second-generation Russian immigrants; Micay is somewhat Russian-sounding too, btw, although I think he's known to have been born in Canada).
https://forum.sailfishos.org/t/plea-for-official-statement-f...
https://forum.sailfishos.org/t/open-sourcing-proceeding/2468...
https://github.com/sailfishos/sailfish-weather/
https://github.com/sailfishos/jolla-camera
It's still more open than AOSP
I don't think this is true at all? AOSP is completely open source modulo driver blobs (which Sailfish has too) and Google services.
One can make a fully functional system, modulo drivers, out of only open-source components using AOSP. It's not possible to do this using Sailfish; the compositor, UI libraries (Silica), and most of the "core" apps are still closed source.
And OSS projet based on the SFOS core exist : https://nemomobile.net/, https://github.com/nemomobile-ux
If we're going to start counting forks, we get to count LineageOS and GrapheneOS for Android, and then the goalposts really move.
The main point is that AOSP as a system (modulo firmware) is open source and SailfishOS is not. Also, even though Sailfish has an Android compatibility layer (though only for official devices), compatibility is most likely always going to be worse than 'real' Android.
That said, I hope that Jolla Phone becomes a success, more competition is good. Hopefully being funded better will move them to fully open source the base system.
A true AOPS image is missing most core Apps.
The thing that sounds really fishy is the "User configurable physical Privacy Switch". If you can configure it in software (how else?), then it's software-defined. If it's software-defined, then it's not physical.
I'm not advocating any of those specifically but I do recommend you take whatever step you are comfortable with to a saner mobile technology lifestyle.
IMHO it's a worthwhile learning journey that is probably less challenging and more empowering than you can imagine.
https://github.com/Universal-Debloater-Alliance/universal-an...
E.g. on most Samsung phones you can uninstall (from the user partition): third-party Meta/Microsoft/etc. apps, the McAfee app scanner that not enabled by default, Gemini, Bixbee, most Google apps, most Samsung apps, some analytics services. You can make a pretty vanilla phone with just OneUI.
That said, best is to grab a Pixel, the only phone with an unlockable bootloader that also has modern device security (separate security processor, MTE, etc.). Installing GrapheneOS gives you a very pristine and quiet OS, while still providing great compatibility through sandboxed Google Play Services.
Also the only OS that provides Android 17 now, besides Pixel OS (and obviously betas like the OneUI 9 beta).
woah indeed.
Right now I'm more excited about PostmarketOS which seems to be more vanilla Linux with more approachable UI…
Jolla phones are fine. I have friends who use it every day. Happy to support them all the best I can.
—— Sent from my iPhone 17 Pro
What about the regulatory side where all of Europe is starting to require stock Android or iOS to even have an ID card?