Some apps will rely on Google services to determine whether they are running on a “secure” device (ie determined by Google). This is refered to as hardware attestation. But there is a Google version of it and a generic version of it (which is implemented in GrapheneOS). If the bank relies on the Google version, it will fail on GrapheneOS, despite actually having hardware attestation.

You can read more about it here : https://grapheneos.org/articles/attestation-compatibility-guide

https://serverpartdeals.com/

I know, but OP says they want to use onboard apps and don’t want to use two remotes.

Would you connect it to the internet with all its consequences to be able to use one remote instead of two?

Thank you! It seems the ongoing 3.35 version is reimplementing the auto-upload logic, so this is promising. It is still in RC stage, but hopefully will be stable soon.

What’s the link to the issue? I’d like to follow its progress. Thank you!

Surprised I had to scroll this much to see her being mentioned.

Made a sizable donation. I encourage you all to help them manage this situation, defend themselves and keep up their good work.

That’s already my SSID, please don’t use it too

Microsoft has an additional requirement where “_optout” has to be somewhere in the SSID (not necessarily at the end). This was detailed in a now deleted support post.

This is a good precision to be aware of.

It is still an important function because in some places law enforcement may be legally authorized to compel a user to unlock their phone using biometrics, but of course if you disable biometrics, there are less options to force you to enter your passphrase/password etc.

Public money, public infra and public funding? :)

Same, using the default storage template.

I’ve not been able to make it work reliably with photos backed up using immich on my android phone, is if working for you? I read somewhere storage templates are not very robust/reliable.

Google can’t control the device if you’re not running Google. GrapheneOS will still work like before, allowing you to run the apps you want. But the jury is still out on how long… I hope we can have a long term GrapheneOS solution regarding hardware.

I salute the effort, but it would really drive the point home if you also tracked changes to the settings available as well, as in settings disappearing and new settings appearing. The default values for those new settings is also crucial, and finding out about a setting no longer being available could also be useful.

Interesting setup. Funnily, I have one specific subdomain hosted on an actual cloud provider, publicly and all other subdomains are private and local. It works just fine :)

In the end, there’s like a tradeoff between enjoying your system as is and pouring I don’t know how many hours in setting it up when it’s a new idea haha

I’m not trying to expose it to the internet and there are indeed multiple solutions to get HTTPS. This one works with a real domain name is what works best for me :)

Yes it does. Are you using Firefox? And you can’t resolve local ip addresses, so that’s why you are setting this exception?

Wouldn’t that require me to use tailscale even at home on my home network? It also does not provide HTTPS unless you maybe use magic DNS, but then we’re back to using a public domain I guess.