GrapheneOS

901 readers

1 users here now

An unofficial discussion community for anyone interested in GrapheneOS.

Helpful links:

Official Graphene OS Discussion Forum

List of official Matrix channels and other contact sources.

founded 3 years ago

MODERATORS

wxboss@lemmy.sdf.org

Are Aurora store apps sandboxxed? (sh.itjust.works)

submitted 4 weeks ago by mnemonicmonkeys@sh.itjust.works to c/graphene_os@lemmy.sdf.org

10 comments fedilink hide all child comments

As the title says, I know you can sandbox apps downloaded through Google Play, but I haven't seen any similar claims for Aurora store. That being said, Aurora's anonymous download/install process is very tempting.

top 10 comments

sorted by: hot top controversial new old

[–] paradox2011@lemmy.world 14 points 4 weeks ago* (last edited 4 weeks ago)

TLDR: apps installed from the aurora store are the same as apps installed from Google Play.

I'm not sure if I understand exactly what you're after, but the Google play store itself is what's "sandboxed" on GrapheneOS, as in, it only has the permissions of a user app, not the wide ranging admin type permissions of a system app. The apps that you install through it don't become "sandboxed" in any special way because they've been installed through that source.

All user installed apps are treated the same way, whether they come from the sandboxed play store, or from Aurora. You can manage individual permissions and scope access to your contacts and files for any app.

Here's their writeup that will explain it in more detail: https://grapheneos.org/features#sandboxed-google-play

[–] eager_eagle@lemmy.world 2 points 4 weeks ago (1 children)

is it anonymous? Last I checked I struggled to see the point of Aurora because it seems we still needed a google account. So I ended up just installing and using the play store

[–] mnemonicmonkeys@sh.itjust.works 4 points 4 weeks ago* (last edited 4 weeks ago) (1 children)

Yes, that's half the point of Aurora is that you can install and update apps without signing into a Google account

[–] eager_eagle@lemmy.world 4 points 4 weeks ago* (last edited 4 weeks ago)

ah, I probably got confused about why people were talking about using their own accounts with Aurora, but their own wiki seems to recommend that for stability

Do I need to use my own Google account to log in? Nope. Aurora Store can log you in with a dummy (anonymous) account that is stored in the token dispenser so that nothing gets linked to your own account. However, it is recommended to use your own Google account, or at the very least a throwaway one which you will not have to worry about if it gets banned. This ensures better stability and gives you the full potential with the features available in Aurora Store.

https://auroraoss.com/wiki#do-i-need-to-use-my-own-google-account-to-log-in

[–] DeadEndLink@lemmy.ca 1 points 4 weeks ago* (last edited 4 weeks ago) (1 children)

I'm hitting a wall with app downloading. Graphene recommends sandboxing google play (I want to avoid it altogether) but doesn't recommend aurora or fdroid.

So if I want to download tor browser or brave and keep it updated, I have to use google play?

[–] mnemonicmonkeys@sh.itjust.works 3 points 4 weeks ago* (last edited 3 weeks ago) (1 children)

Here's a discussion I ran into with further research that I found interesting: https://discuss.grapheneos.org/d/2299-install-apps-from-gplay-rep-fdoid-rep-or-githubwebsite/18

The key takeaway was "it depends". Often getting direct via the repository (sometimes using Obtainium) was best, sometimes Aurora/Play, sometimes FDroid.

So if I want to download tor browser or brave and keep it updated, I have to use google play?

Brave has an FDroid build, as explained here: https://github.com/brave/brave-browser/wiki/Installing-Brave-on-Android

Personally, I've been using FDroid to find FOSS apps, then using their links to find the original repositories. Then I install directly from the repo via Obtainiu..

That being said, I'm new to GOS and I'm currently getting my phone set up

[–] DeadEndLink@lemmy.ca 2 points 3 weeks ago

This was enlightening. Thank you.

[–] Luffy879@lemmy.ml -4 points 4 weeks ago (2 children)

are aurora store apps Sandboxed

Just as every other android program.

Aurora's anonymous download/install process

Aurora uses the same processes as the play store to download apps. Your data is still being collected, but instead of just google, now every person who knows the password for the 10 or so google accounts can access it and your data thats stored in the account through your downloaded apps too.

[–] mnemonicmonkeys@sh.itjust.works 2 points 4 weeks ago

Your data is still being collected, but instead of just google, now every person who knows the password for the 10 or so google accounts can access it and your data thats stored in the account through your downloaded apps too.

Try explaining this again without sounding like a Redditor with a chip on their shoulder

[–] Sidyctism2@discuss.tchncs.de 1 points 3 weeks ago

What data specifically? Like lets say i have the reddit app downloaded through auroras dummy accounts, what could somebody do if they have log-in access to that dummy?