i dont want to sound like a dick but they really should’ve just forked the LineageOS apps that are maintained like they did with seedvault. this feels like theyre reinventing the wheel, or NIH
Would be great if those two could play nicely. Lineage features with GOS security would be the bees knees.
I think Calyx OS would strike that balance
As a Calyx user, only kinda. A lot of the hardening done in GOS is missing from Calyx. Likewise, a lot of features in COS (firewall rules per connection type per app for instance) are missing from GOS.
They could just… work with the community and use preexisting community apps
That is not how they role I guess
When you have a unique goal and set of constraints that are not shared by most users and are actually opposed to the interests of most users and developers it’s not a good idea to try to add them into an existing general purpose project.
Part of the memory tagging support of graphene for example is that the applications need to actually support it too. You can force them to deal with it, but that causes instability and crashes.
Shouldn’t all applications support memory tagging? Well that would be nice but it makes everything slower and only a few schizoid weirdos want it. Clearly the better option is to rewrite the basic system apps that everyone expects to support all the optional security features graphene requires.
Bear in mind graphenes security competition is ios. The system applications in ios all got rewritten to support emte when apple rolled out os level support for it combined with concurrent releases of new hardware with silicon support.
They’re playing a different game than the aosp community.
You are correct, TrollAccount.
From recent posts on the Fediverse I’m afraid their slopping these apps …
What posts?
In the announcement threaded, they replied they us AI code analysis and code review tools to review security.
I hate AI, absolutely. without question.
however, code reviews and security reviews are in the top 5 acceptable uses for an LLM.
why? because I can’t be bothered to read the newbies 10k lines of changes for a CSS rule change.
do I review the review? absolutely! does it make any changes to the code? absolutely NOT.
Another thing to keep in mind is ai is what people are going to be using to try to find vulnerabilities in the software so using it to beat them to the punch is just good development practices.
It still goes through a human before it’s pushed to the repo. That’s very different thing than “slop”. Slopcode is generating the actual app code via claude or whatever and shipping it as-is.
Hopefully we can get a calendar app!!
Cheers to the GOS team, doing the lord’s work truly.
Etar isn’t half bad. But yeah I wouldn’t complain if they improve the landscape.
Calendula is FOSS and very good. I liked it so much I donated.
THE GOAT
It’s a big ask, but might that include the browser?
They could contribute dev time to the Servo browser project.The already have vanadium
That’s just Chromium with some removed “features”, not a whole new app.
Well they can’t do everything, can they?
Apparently, they plan to.
On a long enough timeline they can
