Skip Navigation

Why is GrapheneOS against GNU?

grapheneos.social GrapheneOS (@GrapheneOS@grapheneos.social)

@lunar_dust_463@mstdn.social They want you to use an OS which doesn't provide firmware updates and therefore doesn't protect you from serious known vulnerabilities. The firmware is still present when using an OS not updating it. Pretending as if the hardware and firmware isn't closed source by not...

They say that GNU is spreading misinformation and "stop getting info from charlatans"?

52 comments
    • I'm afraid to ask this because I'm not a dev, but I have a fair amount of linux experience. Why is it that the ability to install Google Play Services on GrapheneOS makes it not FOSS/open source, while the ability to install Google Chrome (or any proprietary software, I guess) on Linux doesn't make is non-FOSS/open source?

      I'm not articulating that question very well, and I'm assuming I'm missing some key component, but they seem comparable to me, as a regular user. Is it something like the level of access that GPServices has to the kernel?

    • Unfortunately, the FSF isn't against firmware blobs, only against those updatable by a user.

      From their Respects Your Freedom requirements page.

      However, there is one exception for secondary embedded processors. The exception applies to software delivered inside auxiliary and low-level processors and FPGAs, within which software installation is not intended after the user obtains the product. This can include, for instance, microcode inside a processor, firmware built into an I/O device, or the gate pattern of an FPGA. The software in such secondary processors does not count as product software.

      This means that proprietary firmware flashed at the factory and impossible to replace gets a pass, while hardware with firmware updates through blobs is rejected. Important security fixes (CPU microcode) or stability improvements will be missing if you can't update the firmware.

  • Way to distract from otherwise good argument about firmware. Really dumb take. In case you think I'm being flippant, let me present an alternative blob:

    GNU are striving for the ideal goal of fully open source hardware and software. Their statement correctly highlights the compromises of the reality of using proprietary hardware which requires proprietary firmware; compounded by the reality of oligopolies maintaining their market positions via proprietary software. Our take is that providing an otherwise open source OS within this reality is significantly better for people than letting full corporate control reign until open mobile hardware becomes practical and common, if it ever does.

  • I think we need uncompromising people in this world. Doesn't mean we have to listen or follow everything they say though. Those are my thoughts on GNU.

  • I think your question is answered by the thread you linked. Is there something in particular you don't understand?

    GNU/the FSF says that GrapheneOS does not qualify as free software (which is true, it's not completely FLOSS as per the FSF's definition—the linked GNU article classifies plenty of popular Linux distros we consider to be FOSS as non-free, btw, they're not singling out Graphene), and GrapheneOS is saying they don't want to fit the FSF's definition of free software because it would mean a lack of security (which is also true; they need proprietary firmware updates from Google). The FSF has a strict definition of free software which a lot of software does not meet, and usually an entire operating system would only meet the FSF's definition out of a deliberate, conscious, ideological decision to exclude all non-free software. In their article they even list Debian as a distro which no longer meets their standards, despite Debian being known for their strict policy around only including FOSS in their repos.

    This is an instance of two different entities (GNU and GrapheneOS) having fundamentally different goals (one values a strict definition of free software at all costs, one values security at all costs). You are more than welcome to do things GNU's way if you don't like GrapheneOS's way, or vice versa.

  • Because strcat is fucking nuts

    However I'm still using GOS as theres no other better options

52 comments