SafetyNet on /e/OS Community "dev" devices - let it in or not?

It’s not this exactly.

  1. Regarding Privacy & Google:
    a) we remove all AOSP native calls to google servers, such as connectivity check, NTP servers, etc.
    b) we replace core services such as location (when not using GPS) when it’s possible (in this specific case this is using Mozilla Location services)
    b) we put a lot of effort into making as many Android apps as possible work on /e/OS, while not exposing /e/OS users to Google personal data collection. This is made possible because all those services that are part of Google Play services are used to consolidate data on commercial Google Android, using users’ Google accounts. In /e/OS the approach in this case is to address the required APIs without a Google account behind. So those calls are seen as anonymous and Google can very hardly consolidate personal data this way (technically it would be difficult but potentially possible, but in the real world, they don’t need to address this kind of specific case when they already know about 80% of smartphone users on the planet)
  1. Regarding other privacy features: /e/OS is adding extra features related to apps personal data collection with the tracker control unit in Advanced Privacy + more or less exotic features (faking IP address, mocking location…)

In order to sumarize: /e/OS is neither into ideological postures nor into hardened security that could be useful to targetted people, but rather into a pragmatic approach to offer a usable mobile OS while protecting (normal) user’s personal data collection from Google & commercial apps publishers.

10 Likes

So you need a S build :wink:

Haha. True. Unlucky enough to pass safetynet I had to lock bootloader on my 11 FP4 dev phone…

As there is no ota to 12 (inccontrast to stable) I am not able to upgrade without unlocking/data loss dueto mynneed for compliance :sweat_smile:

Sad story. So I probably have to stick with /e/OS 1.5 currently

I don’t trust anything Google. With the Great Reset underway, I would not be surprised this Google’s SafetyNet is part of their strategy to control everything people do.

As we have 85 devices that already do not have the problem, (Build S or Murena Phones), I think the best use of time is for those popular phones still using older Builds is to try and get them to Build S. If that is not possible, (My LeEco S2 for example) AND a lot of people ask for it (which I doubt there will be for that phone.), then MAYBE port that device. Just put in the description whether SafetyNet is supported or not. Let’s keep moving forward.

Maybe ask @schwarz how he did it. I have tried lest year with a locked bootloader on stable via sideloading and it did not let me :sweat_smile:

1 Like

Thanks for the hint! :blush:

Not exactly, in fact only a modified boot.img has to be reflashed after each /e/update (it could be an old one),
then you have to update it using magisk

1 Like

Right, you have to reinstall magisk not as an application, but as a boot. I have been using it for about 2 years.

1 Like

It worked for my FP3:

4 Likes

Hi
Am not a developer and I do not catch 100% of all the technical explanation shared here.

As I will soon become an e/ “normal” user the I give a lot of importance to protect me to google control.
This is what I expect from e/os.
If protection has to change or put at risk against google, and nearly only for banking apps, I would prefer not safetynet.

But as a normal user (next week on a S9+) I trust e/ tecnicians-developers to keep google out of any type of tracing.

Thanks.

3 Likes

I don’t really understand what is at stake here (so I won’t be voting on anything) but as a rather less tech-savy user my perspective is that I want an OS that just works, also in the aspects of banking apps. If e-OS won’t be easy to use, won’t be easy to install or certain important Apps (like banking apps) are not working I have to switch to something else. I don’t have the time nor the knowledge to work around problems hence why I’m here in the first place.

1 Like

The (inconvenient?) truth ist that any App which depends on microG in /e/OS to make it work without the genuine Google Apps and services might fail to work at any given time.

In practice up until now this turns out to be less dramatic than it sounds in theory, because microG does a really good job posing as Google in the absence of Google, and Google don’t try to actively sabotage microG with changes on their side too often, at least not visibly (with the user noticing Apps acting up or not working). Banking Apps are even more tricky because of their increased security requirements.

In the end overall a lot of Google-dependent Apps are working just fine on /e/OS.
But the possibility that any such App stops working just fine for a while (or for good in a worst case) is always there, awareness of this is important and should play a role in the individual decision whether to use /e/OS or not.

3 Likes

I’m all for modularity. We need to make a patch that would change this. For example to install in Magisk or TWRP.

1 Like

If I didn’t have an FP4 with eOS 1.7 and A12, I would vote to have SafetyNet.
I chose eOS to have a phone with the same features as others with Android stock, while looking for an alternative to Google’s dominance.
Otherwise, as I did in the past, I would have rooted my phone and installed others ROMs, but I should have had a second phone for banking apps, identification apps and who knows which others.
(Traduced from italian with LibreTranslator)

SafetyNet is used by many proprietary apps, like bank apps and the like, so it is absolutely necessary.
Adb root is also a must have, though only at times (for backup or change something out of reach for the regular user).

So I would suggest an easy way to turn adb root on/off, if possible at all

1 Like

Thank you for this poll.
I will definitely not do without Magisk. Not only because it provides a simple way to backup app data and gives much more features for advanced apps but also because there are modules to remove the increasing number of weird “safety features” that come with every new Android version. Additionally I can use the patched Play Store that enables to run paid apps with license check.

I have SafetyNet pass already with the Universal SafetyNet Fix module, so I have both already.

If I understand you correct your poll is only relevant until Android 11. As you already provide Android 12 builds the simplest resolution in my view is to add the option to pass SafetyNet from that build on.

You write that you cannot provide two different builds. But I guess you will provide the option to deactivate that feature for those who want a complete de-googled phone.

1 Like

Hi,

Thanks for this poll, it’s nice asking users before such an important change :slight_smile:

At least, could unofficial ROM builders be offered the choice to build with SafetyNet or ADB root?
For example, using Docker method, with a new variable.

This way:

  • users unhappy with Murena policy should be able to build their own ROM fitting their need
  • builders for unsupported devices (I’m one of them) could offer 2 ROM images with/without SafetyNet
2 Likes
  1. So do I understand the original post that after we are at e/OS-s (Android 12) that the issue will not apply?

  2. I just installed my banking app yesterday on my e/OS-r, but I will never use it just wanted to see if it would install. In the rare emergency I need to use my phone to bank, I can use the browser, yes?

So I guess my opinion is keep adb root, even though I don’t use that either LOL. Can someone clarify my points above?

  1. Exact
  2. I wouldn’t be so confident :slight_smile:
2 Likes