The security model of GrapheneOS and CalyxOS are similar on this specific issue. They drop support after OEM support has ended because the proprietary drivers that are borrowed from the official ROM stop being updated. It introduces an unpatchable security hole unless someone can reverse engineer all the proprietary drivers and keep updating them with security fixes, and even then, hardware security flaws may eventually surface.

LineageOS and iodéOS are good for keeping older devices working as long as you are okay with a looser threat model (not having those hardware level security updates, and not having the extra features provided by Graphene or Calyx)

postmarketos is a Linux distro aimed at reverse engineering those drivers to allow supported phones to live even longer. However, the team doesnt recommend ANY devices for daily driving. The OnePlus 6T and Pixel 3 are recommended for people who want a tolerable experience but they are not perfect. The Pixel 6 series was recently supported, but Im not even sure if they have graphics drivers working yet. (not to mention, pmos has no security features outside of LUKS encryption. No measured boot, no sandboxing, no fine grain permission control etc)

Theyre also losing CalyxOS support but I figured it wouldnt hurt to mention

If you care about security in any capacity I would advise against a flip phone

My bank currently works but in the past it hasnt and the website worked just fine for the period of time the app didnt work.

It will not affect GrapheneOS (or any custom ROM built without unsandboxed Google Services) as the delivery method for the update requires Google Play services have full admin access to the device to install it.

At this time it is currently better to go with a custom Android ROM. Linux phones are currently have almost 0 security. I say almost 0 because postmarketos does support LUKS encryption, but only on some devices, and pmos uses an “upstream kernel” update model for devices, so a lot of the drivers for supported phones are not fully complete.

None of them have sandboxing, or measured boot, and excluding postmarketos, none of them get driver level security updates either.

You can probably get rid of it by installing GrapheneOS, CalyxOS, iodéOS, or LineageOS, unless youre in the US and bought the phone from Verizon

related

Its a bribe? I wasnt aware of that. That fucking sucks.

So they designed a phone for the US audience only to leave out 33% of the US audience by not supporting Verizon towers… do they want to fucking fail here??

I’m not entirely sure on all the details but I believe there may have been something with them having to get signatures on petitions for getting their names on the ballot but I’m not actually familiar with the details.

They can run independent but VA is generally not known for supporting independents. One of the guys who was running for senator is trying it but im not sure he’ll get anywhere.

Thr Virginia dem primaries got fucked over and theres no other option. They pretty much told all the other possible runners to fuck off in march before primaries even happened.

is it really only millennials? :(

Yeah CalyxOS just came back from a hiatus due to some internal drama, and iodéOS is a French based ROM that is based on LineageOS.

CalyxOS has made some pretty nice QoL changes in the last few years that I really appreciate (Seedvault backups, Per-app, per connection type firewalling, Work profile ootb, VPN sharing over all profiles)

iodeOS offers bootloader relocking on devices that support it, and they support devices longer than Calyx & Graphene for Eco. sustainability, but you do still run the risk of the proprietary hardware drivers having vulnerabilities. I tried it out for a bit but it wasnt for me.

LineageOS via avbroot, CalyxOS and iodéOS all support bootloader relocking.

This is blatant disinformation. CalyxOS requires a relockable bootloader with their AVB key to support, and they support Fairphone, Motorola, Shift and in the past have supported OnePlus and Xiomi in addition to Google.

https://calyxos.org/docs/guide/device-support/

The reason Graphene is only on Pixels is due to the Titan security chip on Pixels being so vital to the GrapheneOS security profile.

say /s bro please bro.

Google Play Services stops allowing third-party Android app installations – Fuck you [signed Google]

Authenticity Notice: Light Bio does not sell or authorize the sale of seeds. Our bioluminescent technology is available exclusively in live plant form.

seems predatory