We should challenge some of those superlatives that projects such as GrapheneOS can coin from time to time. Those projects are not abstract master entities, they have people behind of it and they are not authorities in all subject matters. They are correct about Gecko browsers insecurities on Android however it may be questionable the use of the term “leagues ahead” in this comparative. I use GrapheneOS and Vanadium but I don’t believe that using some Gecko hardened browser would be so terrible like it sound. Specially if you are not a focused target. For example, I keep Tor as a secondary browser for some specific tasks on my phone.

People could perhaps start helping more the Servo project. They really need some help and for those that program in Rust or want to learn it this could be a very good place to devote your attention.

This looks promising, very similar to Metro but an active project. Thanks for sharing.

If you need it for Android, I tried quite a few. I had the same requisites, offline, lyrics for flac files, I ended up using Metro: https://f-droid.org/packages/io.github.muntashirakon.Music/

Very minimalist and do the job very well. I use the field “Composer” to sort my lists.

A significant security drawback with many alternative Android operating systems is that they either require or are commonly used with root access, which inherently weakens the device’s security model. GrapheneOS, by contrast, is designed to be used without root access. Traditional root implementations fundamentally compromise Android’s security mechanisms like verified boot, app sandboxing, and the principle of least privilege, making the device much more vulnerable to exploitation.

Google turning Pixels more and more complicated to have alternative OS isn’t a good sign. I hope GrapheneOS come up with a open source and secure phone alternative. Fairphone or TeraCubes using alternative OSes aren’t private or secure enough. I hate to say that but if I would be in the market today for a phone I’d be considering an IPhone.

I’d sleep the two days, nobody would mess with me.

The way that I see, Linux phones will only get traction when we are able to install android apps and use high end spec phones with good security. I hope that I’m wrong.

Let’s face it, who do you think elected the Mr. President?

Nausicaa president

Saitama vice

Why isn’t Secureblue included in the count?

Do you have a Netflix plugin 4K setup working?

I ask because even in the plugin page there are a few indications contradictory that indicates otherwise:

First is the warning in the main page: “DUE TO CHANGES TO THE WEBSITE THAT PREVENT THE PROPER PLAYBACK OF VIDEOS, THE DEVELOPMENT OF THE ADD-ON HAS BEEN SUSPENDED. THE VIDEO PLAYBACK, WHEN IT WORKS, IS LIMITED TO SD QUALITY AND ONLY ON SOME LINUX/ANDROID DEVICES.”

Second in the section “Reference table of high resolution” there is a footnote saying the following: “*4 Hardware decoding and 4k are supported only to devices with Netflix certification, Widevine Security Level L1 and HDCP 2.2 hardware.”

Third in the list of 1080P 4k Android tested devices we see basically only Netflix approved devices: https://github.com/CastagnaIT/plugin.video.netflix/wiki/List-of-1080P-4k-Android-tested-devices

Just a heads up about this approach, non approved boxes are limited by stream providers such as Netflix to 1080p HD:

https://androidpcreview.com/netflix-hd-android-tv-box/

So if you have a 4K TV and a 4K Netflix plan but plan to use a “custom” box your service will be limited to 1080p HD. Not entire bad but can be a frustration point if you get all built and realize it later.

I eco this, I like the app.

I can stream not only YT but also PeerTube videos from content creators that I follow. For me this is the big appeal that GrayJay provides and is pretty much underrated. One can have a centralized video platform with GrayJay.

If you have access to China only laptops market, the Lenovo ThinkBook 14/16 + Intel Core Ultra 7 255H are very capable all-in-one laptops that you can run an eGPU via TGX(Oculink) in a CPU that is tuned with 70w that you can’t get with the Thinkpads, maximum is 55w.

Clicked in this post because of the wallpaper.

Stayed here for the polemic.

Searching the wallpaper, now.

I’m following your path leap on Secureblue, because I found the project philosophy appealing to my interest.

I don’t feel the same about the others Atomic distros. I’m probably missing something but other Atomic projects don’t seem to be adding much value if you know your thing for workstation home users.

Also, to the OP, reading the comments it seems clear to me that even with the best product you won’t be able to please everyone. Although it definitely plants the interest on some that are coming across the topic for the first time, which I think is good. Learning something new should be on everyone’s list.

Some answers to your first question you can find here: https://madaidans-insecurities.github.io/guides/linux-hardening.html

For the second question about in what ways Secureblue do mitigate that you can find more here: https://secureblue.dev/features

The last question about usability, is very usable. If you use Bazzite you may have a similar experience. It is not like QubesOS that isolate all processes making it even not able to use a GPU.

Not exactly a product from ublue but something in the same line:

Secureblue because of the reasons aforementioned for the ublue images where things are really darn rock solid out of the box AND because Linux is fundamentally behind in security and this project is trying to mitigate some of the big flaws.

deleted by creator

Any thoughts about Madagascar or New Caledonia?