DivestOS: long term device support with enhanced privacy and security

Wouldn’t getting local time from the nearest cell tower work?

Accurate time is important but doesn’t tell you when the sun will rise or set.

You can accurately calculate the sunrise and sunset from coordinates using various equations:

https://cs.android.com/android/platform/superproject/+/master:frameworks/base/services/core/java/com/android/server/twilight/TwilightService.java;l=272

1 Like

It seems like they should, or could, especially “In older hardware where satellite search is slower, a cold start may take more than the full 12.5 minutes” Time to first fix - Wikipedia And I could’ve sworn my TTFFs were longer right after fresh ROM install, and shorter after using Dejavu for a while.

@anon46495926

TTFF is already helped through the A-GPS SUPL and XTRA almanacs.

GPS (with help from SUPL and XTRA/IZat) and Fused (Google Play Services/microG/UnifiedNlp) are two distinct methods of acquiring location.

1 Like

Signatures, plural? “Attack surface”? Please check my understanding, specific to DivestOS:

SkewedZeppelin had posted “DivestOS, if microG was enabled (it isn’t), restricts signature spoofing only to apps signed with the system key”

ref: https://github.com/Divested-Mobile/DivestOS-Build/…/Patches/LineageOS-18.1/android_frameworks_base/0003-Harden_Sig_Spoofing.patch

/core/res/AndroidManifest.xml
android:protectionLevel=“signature”

ref: https://developer.android.com/guide/topics/manifest/permission-element

My takeaway is that, under this constraint, neither 3rd-party prebuilts nor post-installed 3p apps will be granted spoofing permission. No “attack surface”, since nothing other than items which have been signed by the OS builder’s key will be granted the permission.

Graphene OS will include Google Services if not already in, they don’t care about open source and F-Droid, but more about security, and they need an app store so they try to sandbox Play…

That’s a really great rom you launched there :rocket:

Having regular ota’s and a lineageos based rom with essentials (silence, fdroid, …) already super charged is a great deal!

Also the amount of supported devices is quite good :+1:

Wonder if support for the “Galaxy S4 GT-I9506” alias ks01lte could be added. Currently it doesn’t has a official Lineageos maintainer but the device is supported with the most recent version unofficial 18.1

Sources:

Keep up the great work @SkewedZeppelin and thank’s a lot for all the hours you spend delivering such a great rom to the community :clap:

Accurate time is important but doesn’t tell you when the sun will rise or set.

You can accurately calculate

I could be wrong again, but those did not appear to account for local tree lines, tall structures, mountains, clouds, etc., which affect ones perception of sunlight.

We seem to waste a lot in precise calculations where approximate results would work OK. I want my screen to go reddish whenever I choose to sleep, whatever the sun visibility state. The phone does detect ambient light and dim; maybe a popup for less motion or slower typing than usual: “Would you like red screen or lullaby music now?”

So I’ve turned off all location back ends, and wifi and bluetooth background scans, but NLP self-check says network-based location is still enabled, somehow. OTOH it reports no last known, and does not get location within 10 seconds. Will report back if red screen goes nuts, or navigation location stops working. :slight_smile:

Is it possible that devices with A/B partition can use the factory reset option while spamming the power button? I think that it is possible to make an emergency button in older android phones, which calls the recovery partition to factory reset the device.

factory reset option while spamming the power button

out of scope.

Is this feature atleast planned to be added? I imagine that if a device was about to be forcefully removed from someones hands, then they would want to factory reset the device by using an emergency combination like spamming the power button, but maybe I’m just imagining things.

@chad not an exact match with what you described, but some alternatives are mentioned here:
. App to wipe phone clean a moment's notice : fossdroid

2 Likes

@ctnk, thank you.

The app Locker, although from over five years ago not revised, works as described in the F-Droid Store on my Phone with LineageOS 18.1 and DivestOS Mobile 18.1 / 11.0 / R.

1 Like

Motorola Moto G 2015

DOS build divested-17.1-20211003-dos-osprey.zip

Things that won’t work:

  • audio
  • newpipe playback
  • bluetooth

osprey_2021-10-05.zip (156.7 KB)

Not good for those of us who use double-push-power to start camera, and sometimes have to do it a couple times.

Maybe Automation or “panic” apps (also from Guardian Project repo) could do it. But does it really take so long to do Factory Reset in Settings? Better practice doing it while running, and after saving a backup. :smiley:

LG G4 INTL h815 - DivestOS 14.1 / 7.1.2 / Nougat

DOS build divested-14.1-20211006-dos-h815.zip

The initial situation was a stock Android 6. Unlocking the bootloader requires an LG account. The unlock code “unlock.bin” is created automatically and is immediately forwarded by email. Thus, the LG G4 H815 can be equipped with a custom recovery and a custom ROM in a few minutes.

The installation was done according to the DivestOS link according to the LineageOS Wiki Instead of the DivestOS recovery I used TWRP 3.5.2_9-0-g4.img from the maintainer @steadfasterX.

After DivestOS 14.1 / 7.1.2 / Nougat aka divested-14.1-20211006-dos-h815.zip was installed, the system started. First the LG logo was displayed, then the animated DivestOS. There were two or three DivestOS logo colour changes, then the system rebooted and repeatedly showed the same sequence = bootloop.

The DOS*.zip installation was done once by TWRP “Install” and once by “adb sideload”. Both attempts ended in the described bootloop. A system installation was not possible..

Pictures LG G4 INTL h815 - DivestOS 14.1 / 7.1.2

Afterwards, three custom ROM versions from @steadfasterX were installed: e-0.19-p-20210927-UNOFFICIAL-h815.zip and e-0.19-p-20210927-CUSTOM-h815.zip as well as the official /e/ OS release e-0.18-p-20210815130098-dev-h815.zip. All three editions booted properly and could be set up and used.

Congratulations on the launch!

Btw, RethinkDNS + Firewall goes right in the recommended apps section, right (:

Highlights from the October :jack_o_lantern: 2021 changelog:

  • A new Support app is included with links to common resources.
  • 17.1 and 18.1 now feature a quick settings tile to globally block all apps from accessing the camera, microphones, and sensors.
  • All versions now have an option to disable sensors on a per-app basis, thanks to @MSe1969
  • hardenDefconfig function has been reworked to better ensure all changes are made to all devices.
  • The Patch Levels page now details the number of proprietary blobs each device includes and has removed.
  • DivestOS now maintains a hardened Chromium fork called Mulch. Primarily for the system WebView, but also available in our F-Droid repository as a standalone browser.
  • Credits section has been made more readable and better displays donate links for them.
  • Lastly and not listed, there was a small tweak that potentially fixes the issue with newer devices not booting.
4 Likes

That’s nice to see. I didn’t tried it yet but I guess it’s comes without extension support?

I used the “Ungoogled-Chromium-Android Extension Version” for a while because it was the only other solution beside the firefox(fennec) based browser on android which supported ublock-origin (making the web actually brows-able). Sad thing the version with extension support is now EOL so again the only browser usable on android for “really” surfing the world wide web needs to be a (heavy) firefox based one. Specially hard on older devices with limited ram…

Mulch indeed doesn’t support extensions.
It is mostly vanilla Chromium in order to reduce maintenance.
Also standalone Mulch is probably not very friendly on lower RAM devices due to some of the hardening options, compared to say Bromite.

I still do recommend you use Mull or Bromite over Mulch.