How about intune?
Comment on Unremovable Spyware on Samsung Devices Comes Pre-installed on Galaxy Series Devices
Arghblarg@lemmy.ca 11 hours ago
I took the jump and installed GrapheneOS on my Pixel 9 this weekend. Easiest alternate OS load I’ve ever done, didn’t even need to see a command line. (I’ve put LineageOS on many a phone and GrapheneOS’s web-based installer is amazing).
Loving it so far. I have three profiles, the main ‘Owner’ with NO google services/app store at all; and two more ‘Personal’ and ‘Work’ profiles that have Google stuff.
Amazingly GrapheneOS even lets you deny Google App Store itself permissions to install from untrusted sources (in this case, Google App Store itself) – I was suprised to see installing just App Store triggered attempts to then load: My Pixel, Google Photos, Fitbit(!!? WTF), and a few others, without any confirmation first. Was able to shut that shit down immediately.
I hope GrapheneOS spreads to other phone models. And I’m sure Google has a team planning on how to strangle it before it does…
kalpol@lemmy.ca 7 hours ago
Arghblarg@lemmy.ca 7 hours ago
Forgive me but what is intune? I did a quick search and just found some Microsoft endpoint protection thingie – there is mention of a Managed Google Play but I have no idea what that would mean.
flubba86@lemmy.world 7 hours ago
I think the user is referring to the fact that MS Intune is famously very cautious about verifying the device it is running on.
Many people need to use Intune on their device, to get access to work apps (eg, Teams and Outlook). If you have a rooted device, or run a non-stock OS, then Intune will fail the validation and prevent you from signing into your work accounts.
This is the reason I don’t currently use a rooted or alternative android on my primary smartphone.
NewNewAugustEast@lemmy.zip 3 hours ago
Will intune work without a sim card? I have an old phone that is in airplane mode, no sim card but does have Google services.
I just realized as long as it gets the notifications wirelessly it could be my intune authenticator device and live for only that purpose.
Does it require a phone number or only a ms login?
I currently have intune in a jail on my other android device but I want to get graphene os.
Attacker94@lemmy.world 5 hours ago
Is it just not in the cards to request a separate device for work, I know I would tell my employer that I cannot guarantee that my personal device will meet their expectations.
amateurcrastinator@lemmy.world 10 hours ago
How does it deal with banking apps? What about camera apps? How is the camera workings with other camera apps?
modular950@lemmy.zip 9 hours ago
I am US-based. I have a handful of credit card apps, and a few banking / investment apps - all of them in my experience have worked fine. ONE of them required me to toggle a GrapheneOS option that enables you to exempt certain apps from some of Graphenes more hardened safety measures.
“Exploit Protection Compatibility Mode” is the toggle which can be flipped per-app, and is very easy to access so you can quickly troubleshoot whether that’s related to any app troubles or not.
Similar to the other comment, I also use Pixel Camera by downloading the Google pixel cam APK and installing. I’ve removed all permissions from the camera (and photos) app besides to the camera lense itself, and file permissions of course. You can even use Pixel Cam’s hefty features like unblur, erase me, etc. - though certain ones require you to temporarily give network access to the camera app so that it can reach out and download necessary packages. Once done, you can remove network permissions and the downloaded function will remain functional.
Zetta@mander.xyz 10 hours ago
All my bank apps work, I have the stock pixel camera app and it works perfectly
ramenshaman@lemmy.world 6 hours ago
Chase is the only bank app that hasn’t worked for me on GOS. Also using the stock pixel camera app.
JaddedFauceet@lemmy.world 3 hours ago
Banking app privsec.dev/…/banking-applications-compatibility-…
timhayes1991@lemmy.zip 6 hours ago
I haven’t had problems with Canadian banking apps, and I use 3 of them. Sadly, my favourite budgeting app doesn’t work with Graphene OS. I use it every day (and have paid for lifetime premium access), so it was unfortunately a pretty big issue. But I love what they do. A cause worth donating to.
Arghblarg@lemmy.ca 7 hours ago
I haven’t yet tried – planning to do that in the next day or so when I get the time.
Others already replied with promising results, I sure hope they work for me as well (Scotiabank in Canada is particularly annoying in this respect in my experience, with LineageOS I had to use Magisk and define stealth rules specifically for their banking app).