11 votes

Need help deciding if I need to replace my Pixel running grapheneOS

Posted by b3_k1nd_rw1nd
Tags: google, security, ask.advice, phones.smart, pixel.6, grapheneos

so like most of the community, I wanted to do a dance when I saw https://tildes.net/~tech/1t09/motorola_and_grapheneos_foundation_partnership_announced. However I have a Google Pixel 6 and according to this page, that stops getting security updates this October.

now what I can't tell is is it a better idea to wait for the new moto+grapheneOS phone or bite the bullet and buy a supported pixel. I don't know if anyone know how long until a moto+grapheneOS phone actually hits the market. If it's next year, not a big deal to wait. If it's 2+ years, I get worried about missing out on security updates.

Not sure the best course of action, security wise.

12 comments

  1. [4]
    redshift
    Link
    The Motorola GrapheneOS phones won't be out until next year; GrapheneOS apparently tried working with Motorola to get this year's phones ready for it but things didn't quite come together. (I...

    The Motorola GrapheneOS phones won't be out until next year; GrapheneOS apparently tried working with Motorola to get this year's phones ready for it but things didn't quite come together. (I think it's hardware limitations rather than software, so they're not expected.)

    The Moto+GOS models that come out first will likely be Motorola's next flagship line. If you're willing to pay top dollar for the extra features those offer, then that could be a good option. Personally, I'm looking at the Pixel 10a, because I can get them for $250, about as cheap as a good smartphone can be had these days. Note that the 10a isn't officially supported by GOS yet, but they have a device in-hand and support is likely coming soon. The Pixel 9a is a similar price and apparently very similar hardware, and is supported now.

    I'm interested in supporting another manufacturer's efforts here, but not for four times the price and being something of a guinea pig with a brand-new line.

    4 votes
    1. [3]
      sparkle
      Link Parent
      Wow, where are you getting a Pixel 10a at that price? I can't find any for under about 400USD on eBay, Kijiji, Amazon, or Facebook Marketplace here in Canada. The 9a I do see around 250USD but not...

      Wow, where are you getting a Pixel 10a at that price? I can't find any for under about 400USD on eBay, Kijiji, Amazon, or Facebook Marketplace here in Canada. The 9a I do see around 250USD but not often.

      You've piqued my curiosity on upgrading - my Pixel 4 is getting a little long in the tooth. Didn't realize the 9a could be had at that price. Or if the Motorola models come to Costco, I might look into one of those too.

      3 votes
      1. [2]
        3WolfMoon
        Link Parent
        Maybe they're a Fi user referring to this promo?

        Maybe they're a Fi user referring to this promo?

        To qualify for the $250 discount, you need to do all of the following:

        • Purchase the device or currently be in a group plan with the purchaser.
        • Activate the device on an existing full service plan (data-only SIMs do not qualify) within 30 days of the shipment confirmation.
        • Remain active and in good standing on the qualifying device for 120 consecutive days. Pausing, changing, or suspending the account will void the promotion.
        3 votes
  2. [3]
    artvandelay
    Link
    Forgive my ignorance but why does it matter if Google's official support of the Pixel 6 ends? Does GrapheneOS only build upon the released security updates by Google? I was under the assumption...

    Forgive my ignorance but why does it matter if Google's official support of the Pixel 6 ends? Does GrapheneOS only build upon the released security updates by Google? I was under the assumption that they operated more like older custom ROMs where they'd backport security updates to older devices.

    To answer your question, I'd probably try to pick up one of the newer A-series phones for cheap and potentially use that? That way when the moto/GOS phones eventually do release, you could trade-in/upgrade if you like or just keep the Pixel.

    1 vote
    1. [2]
      3WolfMoon
      (edited )
      Link Parent
      https://grapheneos.org/faq#legacy-devices https://grapheneos.org/faq#device-lifetime

      GrapheneOS aims to provide reasonably private and secure devices. It cannot do that once device support code like firmware, kernel and vendor code is no longer actively maintained. Even if the community was prepared to take over maintenance of the open source code and to replace the rest, firmware would present a major issue, and the community has never been active or interested enough in device support to consider attempting this. Unlike many other platforms, GrapheneOS has a much higher minimum standard than simply having devices fully functional, as they also need to provide the expected level of security. It would start to become realistic to provide substantially longer device support once GrapheneOS controls the hardware and firmware via custom hardware manufactured for it. Until then, the lifetime of devices will remain based on manufacturer support.

      https://grapheneos.org/faq#legacy-devices

      GrapheneOS can only fully provide security updates to a device provided that the OEM is releasing them. When an OEM is no longer providing security updates, GrapheneOS aims to provide harm reduction releases for devices which only have a minimum of 3 years support. Extended support updates at minimum will be done until the next Android version. [ ... ] Harm reduction releases do not have complete security patches because it's not possible to provide full security updates for the device without OEM support and they are intended to buy users some limited time to migrate to a supported device.

      https://grapheneos.org/faq#device-lifetime

      3 votes
      1. artvandelay
        Link Parent
        Ah I should've just spent 5 seconds googling haha, appreciate it!

        Ah I should've just spent 5 seconds googling haha, appreciate it!

  3. moocow1452
    Link
    May want to go used on a newer Pixel if you’re going to be flashing Graphene on it anyway? Moto could push back the device another year or it could fall apart or be stupendously expensive to the...

    May want to go used on a newer Pixel if you’re going to be flashing Graphene on it anyway? Moto could push back the device another year or it could fall apart or be stupendously expensive to the point where a vanilla Pixel that you diy into Graphene would be a more capable device.

    1 vote
  4. [3]
    mild_takes
    (edited )
    Link
    Best course RE security; replace it before support ends. Avoid the Pixel 9 BTW. I have one and I seem to get way more apps crashing than I should and the screen seems to scratch more easily. Also,...

    Not sure the best course of action, security wise

    Best course RE security; replace it before support ends.

    Avoid the Pixel 9 BTW. I have one and I seem to get way more apps crashing than I should and the screen seems to scratch more easily. Also, a newer device will be supported for longer so maybe wait for the 11?

    1. [2]
      artvandelay
      Link Parent
      Could also be worth waiting for Pixel 10 prices to drop once the 11 releases

      Could also be worth waiting for Pixel 10 prices to drop once the 11 releases

      1 vote
      1. mild_takes
        Link Parent
        IMO with GrapheneOS when you spend the extra money on a new phone you're basically buying an extra year of support. OP is bumping up against the support window for their current phone, it's...

        IMO with GrapheneOS when you spend the extra money on a new phone you're basically buying an extra year of support.

        OP is bumping up against the support window for their current phone, it's something to consider for the next one.

        3 votes
  5. apz
    Link
    Buy the device that is most affordable to you from GrapheneOS's FAQ "Which devices are recommended?". GrapheneOS's FAQ "How long can GrapheneOS support my device for?" mentions the following:...

    Buy the device that is most affordable to you from GrapheneOS's FAQ "Which devices are recommended?".

    GrapheneOS's FAQ "How long can GrapheneOS support my device for?" mentions the following:

    GrapheneOS can only fully provide security updates to a device provided that the OEM is releasing them. When an OEM is no longer providing security updates, GrapheneOS aims to provide harm reduction releases for devices which only have a minimum of 3 years support.

    Since the OEM minimum support length for GP6 is 5 years (source), my guess is GrapheneOS will not provide harm reduction releases for GP6. I recommend buy a used A series phone.