A new version of the CalyxOS 2.8.0 project is available, which develops firmware based on the Android 11 platform, freed from bindings to Google services and providing additional tools to ensure privacy and security. Ready firmware version prepared for Pixel devices (2, 2 XL, 3, 3a, 3 XL, 4, 4a, 4 XL and 5) and Xiaomi Mi A2.
Platform Features:
- Monthly generation of automatically installed updates, including the latest fixes for vulnerabilities.
- Prioritizing the provision of encrypted communications. Using the default messenger Signal. Built-in calling interface support for encrypted calls via Signal or WhatsApp. Delivery of K-9 mail client with OpenPGP support. Using OpenKeychain to manage encryption keys.
- Support for devices with two SIM cards and programmable SIM cards (eSIM, allows you to connect to mobile network operators through activation by a QR code).
- The default browser is DuckDuckGo Browser with ad and tracker blocking. The system also has Tor Browser.
- Integrated VPN support - you can choose to access the network through free VPN Calyx and Riseup.
- When using the phone in access point mode, it is possible to organize an exit through VPN or Tor.
- Cloudflare DNS is available as a DNS provider.
- To install applications, the F-Droid catalog and the Aurora Store application (an alternative client for Google Play) are offered.
- Instead of the Google Network Location Provider for location information, a layer is offered to use the Mozilla Location Service or DejaVu. OpenStreetMap Nominatim is used to convert addresses to location (Geocoding Service).
- Instead of Google services, a set of microG is supplied (an alternative implementation of the Google Play API, Google Cloud Messaging and Google Maps, which does not require the installation of proprietary Google components). The inclusion of microG is at the request of the user.
- There is a Panic button for emergency data cleaning and removal of certain applications.
- Provided exclusion from the call log of confidential phone numbers, such as helplines.
- By default, unknown USB devices are blocked.
- There is a function to turn off Wi-Fi and Bluetooth after a certain period of inactivity.
- The Datura firewall is used to control application access to the network.
- To protect against spoofing or malicious modification of the firmware at the boot stage, the system is verified using a digital signature.
- An automatic system for creating backup copies of applications is integrated. Ability to move encrypted backups to a USB drive or Nextcloud cloud storage.
- There is a visual interface for tracking application permissions.
Among the changes in the new release:
- Round icons and rounded dialog corners are enabled by default.
- Moved the August vulnerability fixes from the AOSP repository.
- Added protection against access to the network of devices connected via hotspot, bypassing the VPN if the "Allow clients to use VPNs" setting is enabled.
- Added the ability to hide icons to turn off the microphone and camera in the βSettings -> Status bar -> System iconsβ settings.
- The Chromium browser engine has been updated to version 91.0.4472.164.
- Added a button to SetupWizard to configure eSIM.
- Updated app versions.
Source: opennet.ru