MicroG requires signature spoofing, which Graphene deliberately does not support. It is more secure to run the real Play services in a sandbox that forces it to be a userland app than to run MicroG as a privileged system app with spoofing.
Google play services is a monolith, that does a plethora of stuff on the phone, including features like quick share, location services, various Firebase APIs for instant notifications stuff, find my device and whatnot, so I think the size is pretty reasonable.
10 Comments
leoboehm@lemmy.world · 8 pts · 1y
Why dont you use MicroG?
jerb@lemmy.croc.pw · 12 pts · 1y
MicroG requires signature spoofing, which Graphene deliberately does not support. It is more secure to run the real Play services in a sandbox that forces it to be a userland app than to run MicroG as a privileged system app with spoofing.
leoboehm@lemmy.world · 2 pts · 1y
Oh, I didn't know that, thanks.
Turret3857@infosec.pub · 5 pts · 1y
Saying signature spoofing for all ROMs is less secure is misinformation, see CalyxOS's explanation: https://calyxos.org/docs/guide/microg/#is-microg-a-security-risk-in-calyxos-because-it-requires-signature-spoofing
blindbunny@lemmy.ml · -1 pts · 1y
Too hard to install 😥
leoboehm@lemmy.world · 4 pts · 1y
Literally just an apk on fdroid
blindbunny@lemmy.ml · -2 pts · 1y
What now?
pfr@lemmy.sdf.org · 1 pts · 1y
You mean graphine? It's actually really easy
nokturne213@sopuli.xyz · 7 pts · 1y
For it is a human number
FrameXX@discuss.tchncs.de · 5 pts · 1y
Google play services is a monolith, that does a plethora of stuff on the phone, including features like quick share, location services, various Firebase APIs for instant notifications stuff, find my device and whatnot, so I think the size is pretty reasonable.
3aqn5k6ryk@lemmy.world · 4 pts · 1y
adbenitez@lemmy.ml · 2 pts · 1y