I have a pixel with graphene os and now i am looking for the second best rom in terms of security for oneplus 7 pro, for my personal use
1 Like
As far as I know, yes divest is better as it have more hardening patches security-wise
4 Likes
I think you should also consider that DivestOS is actively developed and maintained by only one person, whereas CalyxOS has an organization behind (the Calyx institute) with more active developers and code commits from the community (so there is a chance that somebody else is looking at the source code…).
I think this aspect should be mentioned in the recommendations page: besides all the security hardening that DivesOS provides over CalyxOS, the size of the developer community behind the custom ROM should be put in consideration while choosing a custom ROM (this is explained also here: https://www.privacyguides.org/en/basics/common-threats/#security-and-privacy).
CalyxOS has been under scrutiny in the last years for their delays in releasing their security patches and the privacy around location services, but they acted on those feedback and improved their OS (source: CalyxOS: De-Googled geht anders - Custom-ROMs Teil2 • Kuketz IT-Security Blog).
I personally chose the combination FP5+CalyxOS: it has verified boot, security updates arrives some days after release, privacy is not the best in class but ok and the extra security hardening does not provide so much value considering my usage (texting + browsing). Both organizations (fairphone + calyx) acts on the feedback they receive and for me this is enough.
PS this is not an attack to DivestOS or a defense for CalyxOS. I hate the drama and wars between different ROMS, please I’m not looking for a fight.
Another source that you can use to choose the ROM right for you: Comparison of Android ROMs
You mean the ones that I sent them years before?
DivestOS still leads in this regard: https://divestos.org/misc/gnss.txt
In context of OP’s phone, CalyxOS isn’t even an option.
Aside:
At the same time however, I am not shipping A14 yet which CalyxOS has for months.
Competition is good and we have many good choices right now, pick whatever works best for you and/or aligns with your interests.
4 Likes
maintained by only one person
Eh, that is a fair point, but Tavi’s been around for years, always kept up with updates extremely quickly, and as far as I’m aware basically does this full-time. It’s not like this is some random person on XDA with their new [ROM] [UNOFFICIAL].
Overall, I would generally recommend Divest to people over Calyx, but Calyx is far better than most other alternate Android OSes, so I’ll give them credit there. Basically anything beyond Calyx is where it starts to get very silly very fast. I just wish that Calyx would focus more on hardening and actually improving Android’s privacy and security model like Graphene and Divest do, instead of just kind-of keeping it as is with a few tweaks here and there.
5 Likes
@SkewedZeppelin thank you for pointing out the fact you were the first one to report SUPL issue to Calyx, I just thought the report was from Kuketz’s blog a few months before the fix.
@Sharply I completely agree with you: considering the size and founding received the Calyx Institute can (and should) do better in terms of security hardening. For me, adhering to the AOSP security model, shipping security patches in a few days, a good reputation/size of the community and verified boot is enough for now and I’m fine with CalyxOS.
When I said @SkewedZeppelin is working alone on DivestOS I didn’t mean to discredit him or his work. I really appreciate what he’s doing for the community and the security of Android. I will love to see more people contribute to his project like he’s doing for the others.
1 Like
Yes it is better
DivestOS is far better than CalyxOS.
CalyxOS has a lot of developers and a shit ton of funding but DivestOS is still far better for security and privacy and usually delivers updates faster.