this post was submitted on 20 Jul 2026
32 points (97.1% liked)

No Stupid Questions

49113 readers
867 users here now

No such thing. Ask away!

!nostupidquestions is a community dedicated to being helpful and answering each others' questions on various topics.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules (interactive)


Rule 1- All posts must be legitimate questions. All post titles must include a question.

All posts must be legitimate questions, and all post titles must include a question. Questions that are joke or trolling questions, memes, song lyrics as title, etc. are not allowed here. See Rule 6 for all exceptions.



Rule 2- Your question subject cannot be illegal or NSFW material.

Your question subject cannot be illegal or NSFW material. You will be warned first, banned second.



Rule 3- Do not seek mental, medical and professional help here.

Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.



Rule 4- No self promotion or upvote-farming of any kind.

That's it.



Rule 5- No baiting or sealioning or promoting an agenda.

Questions which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.



Rule 6- Regarding META posts and joke questions.

Provided it is about the community itself, you may post non-question posts using the [META] tag on your post title.

On fridays, you are allowed to post meme and troll questions, on the condition that it's in text format only, and conforms with our other rules. These posts MUST include the [NSQ Friday] tag in their title.

If you post a serious question on friday and are looking only for legitimate answers, then please include the [Serious] tag on your post. Irrelevant replies will then be removed by moderators.



Rule 7- You can't intentionally annoy, mock, or harass other members.

If you intentionally annoy, mock, harass, or discriminate against any individual member, you will be removed.

Likewise, if you are a member, sympathiser or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people, and you were provably vocal about your hate, then you will be banned on sight.



Rule 8- All comments should try to stay relevant to their parent content.



Rule 9- Reposts from other platforms are not allowed.

Let everyone have their own content.



Rule 10- Majority of bots aren't allowed to participate here. This includes using AI responses and summaries.



Credits

Our breathtaking icon was bestowed upon us by @Cevilia!

The greatest banner of all time: by @TheOneWithTheHair!

founded 3 years ago
MODERATORS
 

Short version: if I get a used google pixel from eBay that already has GrapheneOS on it, is there a serious danger of malware also being added (by the seller, not graphene)?

My iPhone is at the end of its life and I decided a while ago that I’m not getting another iPhone. I was gonna get just a normal android phone (probably a Samsung thought I did check out the Motorolas) but when I was trying them out they all shove that stupid Gemini ai shit down your throat. I was already aware of GrapheneOS but initially I was thinking I’d get an android, wait for that Motorola GrapheneOS phone to come out, and see if it looks worth switching to that since I’d prefer to not give google my money. Now though, I think I’ll just switch to graphene immediately for my own sanity

Since I don’t want to give google money by buying a new pixel tho, I was considering getting a pre-owned one on eBay that already has graphene installed on it. My question is if that’s dangerous. Like, can the person that puts graphene on it also add other dangerous stuff? Or is that not really a concern? Or should I just get a new pixel bc realistically me buying one phone, while not perfect to my values, is still not the end of the world? And that way I know it should last me for a good 4-5 years at least before I need a new phone. Also realistically, I will be running the sandboxed google play services for at least some apps so I’ll still sort of be “supporting” google in that sense

Also, if anyone has any advice/tips about graphene, I’d love to hear them! I’ve been watching videos about it and reading through the website’s documentation but hearing from actual users is always helpful!

Side note: I like how my brief lemmy post history is just me getting advice/support on my journey of switching to Linux/open source/user centric alternatives since I don’t know anyone irl that knows about this kind of stuff. Y’all have really helped so much in improving my life so thank you <3

top 24 comments
sorted by: hot top controversial new old
[–] Squizzy@lemmy.world 2 points 6 days ago

It is absolutely simple to install. Change a few settings, plug into a laptop and press install

[–] lokalhorst@feddit.org 47 points 1 week ago (1 children)

Yes there is a possibility the seller has tampered with the phone, but it is small. I would just reflash it though just to be sure. It's absolutely fine buying a used device!

[–] 9point6@lemmy.world 32 points 1 week ago (2 children)

If you buy a phone that doesn't come with the stock OS with a locked bootloader, just reflash as a precaution.

Identity theft is not worth saving yourself a half hour of messing about

Good point! Thank you!

[–] LibertyLizard@slrpnk.net 5 points 1 week ago (1 children)

a half hour

You overestimate my power...

[–] chicken@lemmy.dbzer0.com 7 points 1 week ago

I was honestly surprised how user friendly the install process is, they've got a web installer that basically does everything, you just follow a small number of extremely simple instructions

[–] Bonje@lemmy.world 30 points 1 week ago* (last edited 1 week ago) (2 children)

Alternatively, grab any pixel off eBay and flash grapheneos yourself. They make it very very simple, all through your browser. I was genuinely surprised how simple they made it having never put custom ROMs on any device before.

[–] jnod4@lemmy.ca 4 points 1 week ago* (last edited 6 days ago)
[–] village604@adultswim.fan -2 points 1 week ago

Or get a Nitro phone if you want something off the shelf.

[–] deafboy@lemmy.world 15 points 1 week ago* (last edited 1 week ago) (1 children)

Short answer: yes.

Long answer: You can use the attestation app bundled with graphene to check the integrity of the system. The catch is, you need another phone with graphene os to do it properly. There is also an online attestation check, but IF the OS is purpusfully infected, you can't rely on what the app itself says.

If I were you, I'd try to reinstall it. The whole procedure can be done by following the instructions in any chromium based web browser. https://grapheneos.org/install/web

[–] schwim@piefed.zip 13 points 1 week ago (1 children)

I would opt to install myself but "dangerous" is a relative term. Its definitely more dangerous than installing yourself since you can't verify their install source or process. You can factory reset when you get it but again can't validate the Rom used as the reset image.

If risk is a concern of yours, I'd buy used and install yourself. Not only will you save money, you'll know you installed from a legitimate source.

The install is so easy for graphene, Theres so little risk of messing up. It takes less than 10 minutes.

[–] _haha_oh_wow_@sh.itjust.works 8 points 1 week ago

Probably fine, just reflash it first to be safe(r).

[–] other8026@lemmy.ml 6 points 1 week ago (1 children)

You don't need to reinstall as many people have suggested. There are instructions on the website for this https://grapheneos.org/faq#preinstalled-devices. Basically, verify the installation and do a factory reset from Recovery.

[–] Object@sh.itjust.works 5 points 1 week ago (1 children)

Technically, possible, but realistically, not much of a concern. You probably know better than anyone else as to whether you are that much of a person of interest that it warrants an attacker who is motivated enough to:

  • Figure out that you are interested in a GrapheneOS phone
  • Put up an offer and somehow ensure you buy that
  • Rebuild GrapheneOS and load a malicious one into it and hope you don't reinstall one, or use a really fancy trick that it persists across wipes

If it still bothers you, you can install it yourself. GrapheneOS has a web installer through which you can install GrapheneOS. It's really weird how your browser can access all that, but yeah, you can install it within a website and a phone plugged into that computer. Once you do it yourself, I really doubt there's anything malicious left.

I figured it’d be that kind of situation, but I don’t know much about phone security so I wasn’t sure if there were added vulnerabilities. Thank you!

[–] db_null@lemmy.dbzer0.com 4 points 1 week ago (1 children)

I moved from an iPhone to Graphene about a year ago. I miss the quality hardware that Apple makes, metal and glass feel nicer than plastic. The pictures the Pixel 8 Pro takes are crap compared to my old iPhone too. However.. I bought the Pixel used to test the software primarily and will stick with Graphene for the forseable future. It runs great and instead of buying a better quality Pixel, I am waiting for what Motorola will offer next year.

Some advice regarding the switch. Apple will make it annoying to leave their ecosystem. I recommend to move gradually, get your Graphene set up and keep your iPhone as a daily driver until you're confident everything works on Graphene. I did this for about a week. I moved my pictures off of iCloud with Proton Drive and for NFC payments I switched to a bank that supports it from their own App. (Although I also switched to using 95% cash, it's good to have a backup on the phone.) Using a Mac or going to icloud.com will make exporting your contacts and calendar a lot easier than trying it on iOS.

Two profiles is my setup. The main without Google for Threema, Signal, OrganicMaps, Voyager for Lemmy and all the other dailies. The secondary profile has the GooglePlay services running for my two banks. I use OLauncher for a clean home screen and HeliBoard as a keyboard, neither of these two have network access.

Chat me if you have specific questions, I enjoy tinkering with this stuff and chatting about it :)

Thanks for the advice! I wasn’t gonna trade in my phone anyways bc I only get like $50 for it, so I was thinking I’d keep it to make the transition easier, like you said. I’ll probably shoot you some questions once I get the phone and get graphene on it. Thank you!

[–] fr4nk_j4eger@lemmy.world 1 points 1 week ago (2 children)

Buying a pixel is by itself risky because the hardware is mediocre from both an engineering and quality pov: cases of screens with stripes or green tinted, the usb is soldered on the motherboard so if it's busted you are f***d (samsung and apple are much much more modular), on top of that to remove the battery you have to remove the screen and a wierd carbon insulator that looks like a last minute patch. oh and of course battery is shit, guess you cannot expect anything good from an exynos right? Yes I, have one, yes it has graphene and yes I am waiting for Motorola to put out something decent. If i were you i would wait.

[–] bootstrap@lemmy.dbzer0.com 3 points 1 week ago

My pixel 8 w graphene is the best phone Ive ever had. Battery life is phenomenal without google services and build quality seems fine. The smaller size from most androids on the market is great.

You must have had a bad experience or are cherry picking issues - which can be true of any device.

I would wait if I could but my phone is in “so old it’s no longer working for basic functionality” at this point. So I need to get something for now, even if I end up reselling/trading in in a year or two. This gives me good stuff to think on tho! Thank you!