you cannot reflash after gos installed. its bricked afer gos

Good question. The pixel has acceptable global sales numbers and it’s a vanilla version of Android, without additional vendor changes like in Samsung. It just seems to be the obvious choice…

Thanks for pointing that out! I would suggest isolating the private stuff in one user account that doesn’t unlock with a fingerprint. Maybe call it something harmless like „kids“ or „drug trade“.

Good question. There was some talk on Reddit on audits. But I can’t find the link. Try the privacy subreddit for that…

Thanks! Pixel 4a is a great value phone and gets new life from graphene.

Yes. Your own VPN is coming up. Had to re-do the whole video because the maintainer of the easiest but also safe way noped out and nobody has taken the reigns. So the original video got useless.

Nope. Sorry

What note taker app do you use? I'm thinking of trying Joplin or Obsidian.

@@JohnDoe-iv5ns I use Standard Notes, which recently got acquired by ProtonMail guys, which I also use. I use it on my personal Linux PC and laptop and my Windows work laptop and can, of course, keep notes synced across all devices.

Very interesting ideas! Personal VPN is coming up next. Casual navigation is doable, but for professional travellers it’s very lacking. App recommendations is great, I have started the script on that.

Obsidian with Syncthing. Have two syncthing nodes at locations I control.

I wouldn’t use the pixel 4a as a daily driver or main phone. As a secondary it’s fine. Personally I go for last year’s pixel, that’s the right mix of lifespan and value. Getting them second hand is also a good way, if there is proof of the battery being replaced recently.

@@DigitalIndependent Thanks. Yeah, that it the plan. In the meantime I tried a Fairphone with a /e/OS, but I feel - albeit loving the concept, the Fairphone is not there yet technically....

Glad it helped!

Bitteschön! Freut mich zu lesen. Der Akzent sollte aber nicht so deutlich sein :)

Great Idea!

I usually install the apps on the admin user, then transfer them to the other users and delete them from the admin. This saves time, but only if you intend to have some apps in multiple local users. Otherwise just run through this on a per user basis

@DigitalIndependent I'd be also interested in what @acespade987 mentioned. And by they way, as @mistawinta asked below, any idea why Neostore hasn't been updated in a year? Is it still the way to go for apps? Thanks a lot in advance. Best regards

You are asking the right questions :) I install aurora and neo afterwards on the various profiles and add apps per user later on. This was just a shortcut to get the first set of local users up and running without having to duplicate steps. Should have mentioned that though :)) For apps requiring google play services: they are sandboxed and have reduced privileges in graphene. So I try to group apps into two additional users: one profile that really requires Google stuff (navigation mainly, but also meet and others) and one profile for specific apps that need Google play services (that’s a few banking and business apps). If you play games, then that would be a separate user, because I inherently don’t trust game developers security practices.

You are asking the right questions :) I still use neo store, it just pulls the f-droid stuff and presents it in a nicer way. Since I do updates and maintenance only once or twice a week I usually switch off the „install apps“ permission for these when I am not using them. Not sure, if you get a notification for my other comment, so here’s my answer: I install aurora and neo afterwards on the various profiles and add apps per user later on. This was just a shortcut to get the first set of local users up and running without having to duplicate steps. Should have mentioned that though :)) For apps requiring google play services: they are sandboxed and have reduced privileges in graphene. So I try to group apps into two additional users: one profile that really requires Google stuff (navigation mainly, but also meet and others) and one profile for specific apps that need Google play services (that’s a few banking and business apps). If you play games, then that would be a separate user, because I inherently don’t trust game developers security practices

I had a video done and ready on your personal VPN. But the maintainer noped out, killing my video. Redid it, it’s in post production.

Not much. Random MAC addresses in the setting for that specific WiFi and set your own dns, maybe Quad9 or another public dns server. But the traffic is going through that WiFi, not protected by a vpn. So that’s inherently un-private.

Thanks! Happy to help! Do try using ssh keys also :)

Same here, what did you end up doing ?

Also good that the 'why' of each setting/optimization is explained, rather than just 'do this, trust me it's secure!'.

Strange. It works for me on all profiles. Have you checked the profile settings to make sure you have allowed „make calls“?

@@DigitalIndependent yes I can make calls

You have to go to the profile settings of that specific profile and ensure you have activated „make calls and send messages“ (or something similar

I have 6, no maximum found until now