Why I deleted GrapheneOS
Louis Rossmann1 HN recommender · recommended in 1 month, 2023–2026
commentary · general · 2023–2026 on HN
Louis Rossmann explains why he stopped using GrapheneOS, describing his interactions with its lead developer Daniel Micay. It includes chat logs shown in the video.
HN uses it as the key reference in arguments about Micay's conduct and GrapheneOS leadership, with some defending it and some urging skepticism.
Up next
11 mo on HNBehind the Scenes of iOS Security
Black Hat
9 HN recommender · 2016–2026
11 mo on HNWhy Electronic Voting Is Still A Bad Idea
Tom Scott
11 HN recommender · 2020–2026
10 mo on HNUSENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
10 HN recommender · 2018–2026
10 mo on HNDefcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
6 HN recommender · 2012–2019
9 mo on HN28c3: The Science of Insecurity
28c3
9 HN recommender · 2012–2024
8 mo on HNDEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
DEFCONConference
11 HN recommender · 2017–2023
7 mo on HNElevator Hacking: From the Pit to the Penthouse
DeviantOllam
9 HN recommender · 2014–2026
7 mo on HNCompiling C to printable x86, to make an executable research paper
suckerpinch
8 HN recommender · 2018–2023
7 mo on HNBreak Me00 The MoVfuscator Turning mov into a soul crushing RE nightmare Christopher Domas
Adrian Crenshaw
6 HN recommender · 2017–2026
7 mo on HNBlackHat USA 2011: SSL And The Future Of Authenticity
Christiaan008
9 HN recommender · 2011–2017
7 mo on HN27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
basti0007
8 HN recommender · 2011–2024
7 mo on HNFrank Abagnale | Catch Me If You Can | Talks at Google
Talks at Google
8 HN recommender · 2018–2023
12 comments from Hacker News
> It's objectively clear though, that this is a very low quality video full of baseless speculation, and severely lacking any technical understanding and knowledge. "Baseless" could not be further away from the truth. You literally have the GOS developer messages coming in live while he rehashes frivolous accusations and threatening to exposing him. To claim objectivity, when you seem to cherry pick the parts of the video that would (loosely) fit your narrative. Where is your evidence that Rossmann is in anyway associated to harassment campaign against the project ? > This is exactly the same as going to a restaurant, having an argument with the owner, and then claiming that they might be putting poison in the food, even though there's absolutely zero evidence or anything that might indicate that, solely because you had a disagreement with someone and now want to harm their reputation. Damn, so close, you were almost there. A more accurate analogy you could have come up with, had you actually critically listened to Rossmann's argument in his video. Yes, it's like going to a restaurant and having a disagreement with the cook, for the latter to explicitly threaten to harm onto you. At that point, is it that far fetched to think he might poison the food ? When you know he has full control over the kitchen ? You can disagree with Rossmann perception of the actual threat, but you should at least admit that it is not absurd for Rossmann to think that someone who demonstrated such i
Apologies, I didn’t catch this reply. I believe this video discusses some of these, I’ll have to scroll through Mastodon to find more. ▶ this video Edit examples: I’m referring to Daniel Micay using the official account to fight other people. Seems I’m not up to date, he supposedly “stepped down” from fighting others, link I firmly recall within the past two years witnessing similar actions but I’ll have to keep searching
More context on experiences with Micay[1]. Also went on long rant at Louis Rossmann[2] in an very knee-jerk tone, which led Rossmann to stop using it despite being a long-term advocate for GOS, due to trust issues. Likewise I don't doubt they're talented. [1] link [2] ▶ this video
Why would you call the Fairphone an insecure device? It has long update support and can re-lock the bootloader, which is like the one criteria ROMs like that pick as the security feature. What is your attack scenario, what your security criteria here? microG is not a drawback, it's a proper FOSS implementation, which I vastly prefer to running Gapps in a sandbox. App compatibility has been perfect for me. The main criteria for it to be strictly better is that you do not give root to a dev that hallucinates enemies and then send their goons to attack them. See ▶ this video . It's nice that Graphene has a hardened kernel, that helps nothing if you can't trust the developer - different attack scenarios.
> They then started making up stories about me and throwing around unfounded accusations. That sounds oddly similar with Louis Rossmann's video when in disagreement with some (the?) project owner. ▶ this video
Rossman did nothing of the sort. Watch his video for reference. ▶ this video What Rossman referred to is easily revealed in this very thread from Daniel's comments. I refuse to use GrapheneOS because of Daniel's behavior. He has attacked me personally on this site multiple times.
Fuck. I just last year integrated this in a project of mine. Thinking: "Yeah, Google fucked me over here before when I used their, but it's Mozilla, it will be fine." It is not okay to stop providing a service like this. Not if you are Mozilla, with that mission and money, not something that is so deeply entrenched. Though, reading it more calmly, I can see how them being hit by a patent troll can make their investment in this project untenable. There is a comment about the Graphene Foundation maybe providing an alternative. That would be great - but having ▶ this video in mind, with that maintainer still active the project and foundation is a complete no-go. The organic maps comment is the one to follow instead.
Behavior akin to a paranoid delusion. See ▶ this video . The developer is gone, so no need to avoid the project completely, but CalyxOS is an interesting alternative anyway.
Speaking of which, what ever happened with all of the kerfuffle going on around GrapheneOS leadership, anyway? I remember Louis Rossmann posting a video[1] that felt pretty damning regarding project leadership, especially given that he seemed to be implicated in the mess for almost no reason at all. In general I wouldn't give a good god damn about drama, but I'll admit it: it's ALREADY hard to trust operating systems, and especially security software, that's effectively made by effectively random strangers on the Internet, but much worse so if it's unclear they wouldn't be willing to abuse their position. Daniel Micay (aka strcat on here I believe) apparently announced they were stepping down from leadership roles in the project shortly after, according to tweets that appear to now be deleted, but that Wikipedia has links to an archive of.[2] At least from the code side of things though, they are still working quite actively.[3] Which is not a bad thing, but it doesn't tell us much about what happened. What I'd hope to hear is that Daniel Micay is in better mental health, but they made the almost-certainly wise choice to stop engaging with social media, and I can't find much information about what actually went down, so I guess it's a question mark. This is unfortunate because as I understand it, the closest competitor to GrapheneOS, CalyxOS, is not nearly as sophisticated. I'd really prefer to just be able to trust GrapheneOS, but I'm left absolutely unsure about what even h
The usual: Voice some opinion that doesn't exactly match theirs, Ina friendly way, get insulted, get accused to be part of another group that allegedly is conspiring to harm them... Later found this is apparently a pattern and happened to others in a very similar way, e.g. ▶ this video
I use GrapheneOS, and I've donated to its development. To say that "None of the claims are true" and that they are "baseless" is incorrect. Louis Rossman was a supporter of the project until he and Daniel had a failing out in which Daniel behaved inappropriately [1], all over a Youtube comment. There's proof for that and other claims [2, 4, 5]. Daniel can be a talented developer, privacy advocate and asshole at the same time. It's sad to see him (and others, like yourself) say stuff like "examine the baseless claims", without providing any sources. After all the drama with Calyxos, Techlore, Louis Rossmann etc, at some point one has to notice a pattern of behavior. 1: ▶ this video 2: link 3: link 4: link 5: link
I'd never heard of GrapheneOS till 15 minutes ago. I couldn't understand why someone would randomly start swatting an OSS project maintainer.. googling around a bit lead me to this Louis Rossmann video: ▶ this video Also this: link Yikes. Hope this Daniel guy can get some help and find some peace, poor dude seems incredibly unstable. :(