GrapheneOS is a non-profit open source project. It is not a company. It does not currently sell devices. It does not have an official device management app.

GrapheneOS has a team of developers working on it (github.com/orgs/GrapheneO…) led by @DanielMicay who started the project.
@DanielMicay There are companies and individuals selling devices with GrapheneOS. We aren't selling devices with GrapheneOS ourselves at this time. Some of these vendors install a bunch of additional apps and provide device management. We do not have our own official device management app.
For the most part, we're not receiving anything based on these companies selling devices. We're on good terms with @ncryptcellular and they're supporting the project. We're working towards being on good terms with a couple others. Others have been problematic and have harmed us.
Please just be aware that there are no other co-founders of GrapheneOS. There are now multiple full-time and part-time developers, but the project was started by one person, and it was a one person project when it was initially renamed to GrapheneOS. There are no other founders.
GrapheneOS is open source, but that doesn't mean the requirements of the MIT, Apache 2 and GPLv2 licenses can be ignored.

Our brand should not be misused and people should not be misrepresenting their role in the project. We're tried our best to address these things in private.
Copperhead is by far the worst offender and is engaged in many different kinds of malicious actions against us at the same time as they're copying our work without attribution and license compliance. However, there are others, often those we've tried to work with in various ways.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with GrapheneOS

GrapheneOS Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @GrapheneOS

4 Jan
GrapheneOS has funding available for developing an open source WebUSB-based installer as an alternative to our installation guide. It's low-level programming work despite being in JavaScript.

Get in touch with us (contact@grapheneos.org) if you're interested in working on it.
This does not involve designing and implementing a fancy user interface. It only needs the bare minimum of a functional interface for driving the installation process.

There's the open source fastboot code and an existing proprietary WebUSB-based flasher to reverse engineer.
Need to be comfortable with straightforward, fairly modern C++ and with JavaScript.

UX design and CSS are not within the scope of the project. Don't need to be concerned with making usable instructions either.

Goal for the project is a working installer with a bare minimum UI.
Read 6 tweets
31 Dec 20
The grapheneos.ca and grapheneos.net domains which were registered by Copperhead to cause harm to GrapheneOS should be turned over to us.

The same thing applies to the project's historical Twitter account which was stolen by social engineering Twitter support.
GrapheneOS was using the account before Copperhead existed. It's a separate account from the one belonging to the company and is still rightfully ours.

Our project was called CopperheadOS before Copperhead even existed. This is the same project as you can confirm via GitHub.
Legacy branches and tags from before renaming to AndroidHardening are published separately from the GrapheneOS namespace. The repositories are still the originals as shown by the network graph.

The issue tracker from before renaming the project is at github.com/AndroidHardeni….
Read 5 tweets
25 Dec 20
There's a new section in the GrapheneOS FAQ covering disk encryption:

grapheneos.org/faq#encryption

Other than GrapheneOS allowing ending user sessions and raising the padding size, this also applies to AOSP on devices with a secure element offering Weaver like the Pixel 2 and later.
This covers the baseline disk encryption.

Apps can use the hardware keystore API to provide another layer of encryption with options like setting keys to be only available when unlocked. Can also be mixed with their own encryption.

See github.com/mollyim/mollyi… for an example.
Before the Titan M introduced with the Pixel 3, the Pixel 2 used an off-the-shelf NXP security chip to implement Weaver. The implementation is open source:

android.googlesource.com/platform/exter…

It would be easy for other devices to implement. However, it's not mandatory so they don't bother.
Read 6 tweets
25 Nov 20
GrapheneOS isn't going to be including Google services in the base OS: grapheneos.org/#never-google-….

This doesn't mean it won't be possible to use apps depending on Play services on GrapheneOS. It means it shouldn't be deeply integrated into the OS as a cross-user, privileged app.
We're going to support installing a Google compatibility layer within a user profile as a regular app. The OS will include minimal support for this in a way that does not compromise the security model. It won't have special privileges other than masquerading as Play services.
We plan to add support for using a GrapheneOS release of microG this way. In the longer term, we also plan to offer a more minimal compatibility layer implemented by pretending that Google services are offline. Both will be options you can choose to install in a specific profile.
Read 4 tweets
3 Apr 19
@_copperj @grufwub @CopperheadOS No, this is the direct continuation of the original project by the original development team. The project was started before Copperhead was founded and long before it was incorporated. People can confirm this for themselves by looking at the code, dates and published documents.
@_copperj @grufwub @CopperheadOS You agreed to support this open source project by building a business around it while explicitly agreeing that it would remain as an independent entity from the business without Copperhead directly owning or controlling it. You went back on your word and betrayed the project.
@_copperj @grufwub @CopperheadOS You hijacked the infrastructure and prevented the previous incarnation of the project from ever being able to release a legitimate update again. You stole the donations sent to support the development team and siphoned off the revenue earned based on leeching off the project.
Read 4 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!