Hacker News Reader

With graphene you can install sandboxed play services. Which allow you to run google play services without any system/root privileges, in the sane application sandbox as normal applications.

This is definitely superior to the mircog approach which means enabling signature spoofing for applications.

View on HN

Why should I be concerned with the specific type of signature spoofing used by microg? AIUI it only enables signature spoofing for their specific keys, not applications/publishers generally.

What if I do not want to run Google Play Services at all (or any proprietary code from Google)? Can Graphene sandbox microg instead?

> What if I do not want to run Google Play Services at all (or any proprietary code from Google)? Can Graphene sandbox microg instead?

It might be able to, but AFAIK microg works by pretending to actually be google services, so it's possible it depends on the system privileges that google services usually has?

With CalyxOS, Signature Spoofing is only allowed for microG: https://calyxos.org/docs/tech/microg-details/

Reply on news.ycombinator.com