everything always has a security flaw. this is horrible logic

some carriers do but Google runs their own as well because carriers were slow to adopt.

a better solution than giving blanket root access would be an API/daemon that provides more fine grained permission control, similar to how flatseal manages the flatpak sandbox.

edit: anyone wanna help me on a new project idea…?

well sure, for customisation sake there is plenty benefit. the security concerns are more plentiful, however

one of the reasons I use nix package manager is because it doesn’t require root. it has separate build users and a daemon responsible for privileged file management. I also have a separate user with access if I absolutely need it, or I can log in with a live session and chroot into my system.

if you need root for a general purpose application then it’s badly designed

you can’t lock your bootloader and retain access for one. that’s an easy way to brick your device. it cripples security because in order to gain this access you are patching in the sudo binary (which doesn’t normally exist on Android and is therefore not designed to be securely used) and a bunch of selinux policies that give extremely vague permissions systemwide. data exfiltration is made a much simpler task when a user has rooted their device.

it is also increasing attack surface. you now have to trust that this per app permission model is actually functioning correctly and isn’t exploitable.

edit: it is worth noting that having root access on a desktop Linux system is horribly insecure as well, though. I completely remove sudo on my systems (although considering one can just invoke su -c or su - root that doesn’t help too much in actuality)

rooting cripples your security and there is little benefit to it.

people are even dumber than I realized holy shit. I knew people weren’t willing to go far for security measures but this is actually much worse than I would have guessed.

laziness, ignorance, or privilege? I’m unsure which of the three causes this. I find it hard to believe it’s ignorance because online scams and hacks are very well known and I’ve always hated “laziness” as a concept.

you only need one totp app… people baffle me.

because I inhaled them dummy

good. this is the only reason I’ve recommended people avoid fdroid. would be useful to fix that

people seem to think if you’re not in support of them or their position, then you haven’t experienced the same things and been on the same path. I saw where I was going and specifically changed it.

I’m still a depressed, alone, piece of shit, but I’m not a bigoted, fascist piece of shit.

I’m fully aware of the depths depression and other mental illnesses can take someone to. I understand hating people because your life sucks, I won’t understand people that resort to demeaning those already beneath them (in a socioeconomic sense, that is.)

he most literally was.

a couple things here;

1. you care why?

2. you most literally can change the rules of language on the fly. that’s kinda how language works and is created.

edit: removed the last comment as the previous guy was the one going on about sex first, regardless, differing levels of hormones can often influence this, considering males can have varying levels of estrogen and vice versa for females and testosterone. other animals often portray characteristics opposite that of their sex, as well.

this is just an odd thing for you to care about. why wouldn’t you instead let people live their life without your criticism when they clearly are having trouble parsing their place in life and their understanding of themselves.

if you are dumb enough to be bigoted out of ‘loneliness’ then I don’t think I care too much. being an asshole and being sexist and transphobic are not the same.

this doesn’t mean much tho, considering people aren’t ever born ‘villains’. they all are created by something traumatic.

so sure, empathize all you want, but it doesn’t help anyone. simply enables it.

this is the exact same argument made to keep slaves.

graphene ships stock aosp apps

I mean, losing message history is kinda a known drawback of e2ee. not that big of a deal