I keep emailing my (Labour) MP about this, I suggest you do the same! I get the standard "protecting the children" response. I am not voting Labour again if this madness is still in place (or worse!) at the next GE.

MPs are pretty bad at dealing with anything that doesn't come from the party or the newspapers. I'm donating to the Open Rights Group to care about this on my behalf.

(my MP is SNP, so I benefit from not being in the two party trap)

Hey! The demo didn't work in Firefox. It said something about setting up the database then it crashed the tab.

It doesn't work in Incognito mode. Did you try it without incognito?

Why?

Basically sqlite on opfs mode: https://sqlite.org/wasm/doc/trunk/persistence.md#incognito

Oh actually, sorry I lied. I recently switched to Vanadium as my default browser which is the modified Chromium instance that ships with GrapheneOS. Apologies

You can use tailscale services to do this now:

https://tailscale.com/docs/features/tailscale-services

Then you can access stuff on your tailnet by going to http://service instead of http://ip:port

It works well! Only thing missing now is TLS

This would be perfect with TLS. The docs don't make this clear...

> tailscale serve --service=svc:web-server --https=443 127.0.0.1:8080

> http://web-server.<tailnet-name>.ts.net:443/ > |-- proxy http://127.0.0.1:8080

> When you use the tailscale serve command with the HTTPS protocol, Tailscale automatically provisions a TLS certificate for your unique tailnet DNS name.

So is the certificate not valid? The 'Limitations' section doesn't mention anything about TLS either:

https://tailscale.com/docs/features/tailscale-services#limit...

I think maybe TLS would work if you were to go to https://service.yourts.net domain, but I've not tried that.

It works, I’m using tailscale services with https

Thanks for clarifying :) I'll try it out this weekend.

NatWest and Monzo work fine on my Pixel 9a running GrapheneOS. Community maintained list of supported banking apps here:

https://privsec.dev/posts/android/banking-applications-compa...

Google Wallet is not supported at all.

Curve works and you can set that up as a replacement for Google Pay.

with avbroot ?

I didn't have to do any resigning or repacking apks. It just worked installed from the play store.

The UK is no longer in the EU; The UK is still in Europe and is very much European.

Here's a community maintained list of apps and whether or not they work:

https://privsec.dev/posts/android/banking-applications-compa...

This is linked to from the Banking Apps section on GrapheneOS docs: https://grapheneos.org/usage#banking-apps

Sample size of 1: my UK banking apps all work fine.

Yeah spot on. I think this is the only thing that's been announced so far: https://www.androidauthority.com/graphene-os-major-android-o...

This is similar to Deno Sandbox[1] which was announced a couple of weeks back. Apparently also something similar is done with fly.io's tokenizer[2][3]

[1]: https://deno.com/blog/introducing-deno-sandbox

[2]: https://hackernews.hn/item?id=46874959

[3]: https://github.com/superfly/tokenizer

My friend made this site to try and surface the best place to buy music: https://streamtoshelf.com/

He also made a section of the site that allowed you to login via Spotify and it would aggregate your listening history and tell you how much it would cost to buy all of your most listened to albums. Annoyingly Spotify seems to restrict the oauth app creation process, so users have to be invited by email to access that.

Huh, I did not know this. This is also present on GrapheneOS too! (I'm installing it now)

It is extremely flaky on GrapheneOS, at least on my Pixel 8 Pro. Just typing Ctrl-D to exit will corrupt it, requiring a full reinstallation of the Debian VM

The built-in terminal app seems to be similarly flaky on my Pixel 8. Also, the kernel it boots into is really stripped down, and it lacks a ton of essential features. I was not able to install VirtualHere client to pass through USB devices, and there's no built-in functionality. There's also no way to open it full-screen on the Pixel 8's DP-over-USB-C desktop mode. Hopefully it continues to improve, but it seems like Google is more into extracting value than they are improving their products at this point.

Oh wow. I did a very basic test this morning `ping google.com` and then ctrl+c and it seemed to work okay. Not done any more extensive testing than this though.

Could it be that it's just very flaky on all pixel devices? Or maybe something graphene is doing to harden the OS doesn't play nicely with how it's been implemented?

On my stock firmware Pixel 9 Pro I also corrupted the install a few times.

To be fair, the feature was still labeled as experimental in the dev settings when I enabled it.

Control-D works fine for me. It just terminates the VM and you can restart.

It's not 100% reproducible, but at least 50% of the time for me:

https://social-cdn.vivaldi.net/system/media_attachments/file...