Remix.run Logo
charcircuit 2 days ago

Most of AOSP is licensed under the Apache 2.0 license and GPLv2 for the Linux kernel. These are FOSS licenses recognized by the FSF.

https://www.gnu.org/licenses/license-list.html#apache2

https://www.gnu.org/licenses/license-list.html#GPLv2

dns_snek 2 days ago | parent | next [-]

Android is a proprietary operating system developed by Google. Try running your "free" modified AOSP in the real world, on a real device, like a real person would and see how far you get before being blocked and restricted due to hardware attestation.

preisschild 2 days ago | parent [-]

I have been running AOSP-based LineageOS and now GrapheneOS for more than a decade now. While some apps are restricted to Google-certified operating systems, most are definitely not. I can use my countries eID apps and my banking app without issue. The only thing not working is nfc payments (since they are limited to Google Wallet)

scheeseman486 2 days ago | parent [-]

It doesn't matter if it's only some apps if those apps are critical. MyGov in Australia for example requires Play Integrity or it crashes. Your government's app does not... for now.

The grip of Google, Microsoft and Apple are tightening. Microsoft's TPM requirements for Windows 11 are ostensibly for security, but they're also a mechanism to enforce hardware/software integrity and authentication. Google wants to extend their integrity APIs to Chrome and I doubt Microsoft would object to implementing something similar.

Soon enough computing and the web may end up segregated, with there being devices authenticated and controlled by a central authority and those that are not. In a lot of ways this is already the case, I can't access the 4K Netflix streams I'm paying for on Linux because of DRM and using anything other than stock Chrome can often get you flagged for annoying captchas. But it can get so much worse than that.

preisschild 2 days ago | parent [-]

> Your government's app does not... for now.

My govt's app did, but after bugging them a lot they removed safetynet.

pjmlp 2 days ago | parent | prev | next [-]

AOSP is only a subset of what makes Android, an actual mobile phone OS.

danieldk 2 days ago | parent | prev [-]

I think that they are pointing at that using Android in daily life in a meaningful way requires installing Google Play Services because many apps require it.

BrenBarn 2 days ago | parent | next [-]

I wouldn't say that means it's not FOSS, it just means things being FOSS isn't enough to ensure things are good.

fsflover 2 days ago | parent [-]

This is a very misleading wording. FOSS is enough for everything unless a monopolistic megacorp forces you into their proprietary software (and your government stays silent).

charcircuit 2 days ago | parent | prev | next [-]

And my point is throwing out all of AOSP because of that is throwing out the baby with the bathwater. Whatever other FOSS OS someone comes up with won't have Google Play Services built in either.

danieldk 2 days ago | parent | next [-]

Oh yes, I fully agree. AOSP is the best shot at getting an alternative OS and sandboxed Google Play (like in GrapheneOS) is a good transition method.

m4rtink 2 days ago | parent | prev [-]

Isn't AOSP developed behind closed doors, with infrequent code drops & zero community participation ?

Good luck building anything on top of that & keeping it in sync long term.

charcircuit 2 days ago | parent [-]

AOSP has yearly releases for the new major versions, but you can contribute code upstream.

cyberax 2 days ago | parent | prev [-]

You can use microG which provides a lot of Google Play Service functionality.

umbra07 2 days ago | parent [-]

at the mercy of Google, yes.

cyberax 2 days ago | parent [-]

???

No. microG is an ABI-compatible replacement for Google libraries, just like wine is a replacement for Win32 APIs.