Comment by angusturner | Hacker News Reader

Comment by angusturner | Hacker News Reader

I recently made the shift to graphene from iOS and am mostly enjoying it.

The user profiles was slow to set up and not having shared filesystem between the user profiles creates friction. But I love that I can effectively sandbox my work apps, sandbox the Zuck apps etc, with different VPN profiles for each user.

Getting a burner google account (for gplay services) is a PITA if you are determined to get a clean slate from Googles tracking. Gplay is the only safe way to get certain apps at the moment, and make certain apps pass the device integrity checks.

I suspect one of the biggest barriers to mass adoption will be the fact that tap to pay doesn't work. IIUC apple/google pay are generally considered a privacy and security improvement over physical cards, since you don't give every merchant your actual card number.

Overall love the project and really nice to see such high quality open source software.

> The user profiles was slow to set up and not having shared filesystem between the user profiles creates friction. But I love that I can effectively sandbox my work apps, sandbox the Zuck apps etc, with different VPN profiles for each user.

It's worth noting this is a standard Android feature along with work profiles and Private Space which are nested in another user. Private Space has built-in sharing functionality and work profiles can have it via the management app.

GrapheneOS enhances user profiles and Private Space but doesn't add the baseline features.

> I suspect one of the biggest barriers to mass adoption will be the fact that tap to pay doesn't work. IIUC apple/google pay are generally considered a privacy and security improvement over physical cards, since you don't give every merchant your actual card number.

Curve Pay, PayPal tap-to-pay and a bunch of European banks provide tap-to-pay support. Google Pay doesn't allow GrapheneOS but works on it on a technical level so if it was tricked into believing it was an old stock OS device, it would work, but that's not something feasible to keep working as they don't want to allow it.

Interesting... Maybe I need to investigate PayPal as an option here. Best case would be my bank eventually adds tap to pay natively

PayPal's tap-to-pay availability is currently very limited and is likely still only in Europe. Curve Pay is in all of the UK and European Economic Region. I don't know how many countries have options for tap-to-pay via banking apps without Google Pay, but it's definitely available in most of Europe.

Reply on news.ycombinator.com