About¶
DivestOS is a full-time passion project (not a company) maintained solely by Tavi since 2014. It has many goals, but primarily: prolonging the life-span of discontinued devices, enhancing user privacy, and providing a modest increase of security where/when possible. The devices DivestOS supports are not fully free (as-in-freedom) and there are many security issues we cannot solve such as insecure proprietary blobs, insecure firmware, insecure bootloaders, and insecure ancient kernels. We are also fully aware of our "off-the-rails" approach, however mostly attribute it to the sheer effectiveness provided by "80%" solutions instead of mulling around and not doing anything. We genuinely believe that what DivestOS offers is something unlike any other project, especially with regards to the project scope and our persistence. We hope you find some benefit in our fruits, and remind you to have fun!
Donations¶
Please consider contributing in the form of testing, promoting, bug reports, code review, merge requests, translations, mirrors, and financially to ensure the project's longevity.
- All donation options here
- One-time:
- Recurring: via Liberapay
- BTC: bc1qkjtp2k7cc4kuv8k9wjdlxkeuqczenrpv5mwasl
- Monero: 41hwY8KL7ZW4LockC5ZzoR52LdVAoV2VjewGaXay8NRNFsxWwx2a1FCb1Q3HyzSBrvTbkg941hrkkK3d7EagF99MSD9iYHH
Attributions and Credits¶
The following do not necessarily have any direct involvement in DivestOS.
If you would like to be added or removed please create an issue on either the GitHub or GitLab website repository.
Information to financially support the below projects/people is also listed.
If you are listed below without your donation information, you are encouraged to reach out so it can be added! :)
Server Mirroring¶
- dotsrc.org - donate - mirror status - since 2023/10/14
- Academic Computer Club in Umeå, Sweden (ACC) - donate - mirror status - since 2023/10/17
- Oregon State University Open Source Lab - donate - since 2023/10/18
- deimosBSD - since 2024/05/31
Git Forge Hosting¶
DivestOS System¶
- Google and the Android Open Source Project
- LineageOS (and contributors) - Donate: Patreon, PayPal
- CyanogenMod
- GrapheneOS / AndroidHardening - Donate: All options
- Code Aurora Forum
- CalyxOS - Donate: Calyx Institute
ASB Backports¶
- @mkbestas - latest branch (21.0)
- @haggertk - supported non-latest branches (19.1 and 20.0)
- @flamefire89 - 17.1 - Donate: GitHub Sponsors
- @MSe1969 - 16.0 and 18.1
- @syphyr - 14.1
- @vasek.gello - previously 14.1
- @timschumi - previously 11.0
- @grzwolf - previously 11.0
System Hardening¶
- @thestinger - Donate: All options
- @MSe1969
Kernel¶
- Linux
- Red Hat
- Debian Kernel Team - Donate: All options
- Ubuntu Security Team
- Civil Infrastructure Platform
- OpenELA
- Project Zero
- @haggertk
- @cygwin - Donate: PayPal
- @nathanchance
Included Apps¶
- F-Droid (and community) - Donate: All options
- @relan - base for Mull-Fenix - Donate: Liberapay
- GrapheneOS Camera
- @PeterCxy - OpenEUICC - Donate: Patreon
- Fossify - Gallery - Donate: All options
- @stevesoltys - SeedVault
- arkenfox user.js (@Thorin-Oakenpants) - used by Mull and Brace
- Mozilla Foundation - Donate: All options
- @uazo - extra patches for Mulch
Previously Included Apps¶
- SMT - Gallery - Donate: All options
- microG/UnifeidNlp (@mar-v-in) - Donate: Liberapay / GitHub Sponsors
- Silence - Donate: 1LoKZXg3bx6kfwAhEFQqS9pgeCE1CFMEJb (BTC) / Liberapay
- Mark Harman - Open Camera
- Vanilla Music - Donate: 1adrianERDJusC4c8whyT81zAuiENEqub (BTC)
- @M66B - FairEmail - Donate: GitHub Sponsors, All options
- @n76 - Déjà Vu NLP Backends
- @dschuermann
- @csagan5 - extra patches for Mulch - Donate: All options
Patches¶
- @MSe1969 - various
- @steadfasterX - various
- @ryneeverett - build container overhaul and website improvements
- @polkaulfield - hlte addition
- @GarciaLnk - davinci work
- @accountForIssues - GMapsWV open from support
- @godbless96 - IR Remote improvements and fixes
- @woheller69 - many improvements to GMapsWV - Donate: PayPal
- @dossalab - additional remotes for IR Remote
- @Biswa96 - improvements, tweaks, and additional remotes for IR Remote
- @ElCorzo - Dockerfile for compilation
- @be-neth - signature spoofing - never included
Graphics¶
- @iNtEgraIR2021
- @ChinoGoblino - fixing Mull monochrome icon
- zerpixelung - homepage splash
- Victor Stuber - old homepage splash
- Pawel Czerwinski - default wallpaper - Donate: PayPal
- @pgreen - Mulch feature graphic backdrop
- @W1nst0n - Favicon SVG Conversion
- Wallpapers: Adam Kool, Alex Holzreiter, Anton Repponen, Anton Sharov, Dan Carlson, Jakub Gorajek, Joshua Sortino, Luca Bravo, Nathan Anderson, Omendra Singh, Riccardo Chiarini, Sam Ferrara, Sean Afnan, Wil Stewart, Unsplash
Translations¶
- Weblate - donate
- Afrikaans: @iphukan
- Chinese (Simplified): Crit, 大王叫我来巡山, @Sdarfeesh
- Croatian: lukapiplica
- Czech: @Fjuro
- Estonian: Priit Jõerüüt
- Finnish: @huuhaa
- French: @Calvineries, @cardpuncher, @eUgEntOptIc44, cwpute
- Galician: josé m, @ghose
- German: @Balthazar1234, @js-xda, thereisnoanderson
- Greek: @sv1sjp
- Indonesian: Adrien N
- Italian: @airon90, @dantecpu, @Tomoms
- Japanese: honyaku
- Norwegian Bokmål: Even Bull-Tornøe
- Polish: Eryk Michalak, @mkljczk
- Portuguese (Brazil): lucasmz, ruanon
- Portuguese: inkhorn, ssantos
- Romanian: Renko
- Russian: Andrey, @yurtpage, @q1011
- Spanish: @sguinetti, gallegonovato, @vzamanillo, @senpai33/@Manuel-Senpai
- Turkish: @cardpuncher
- Ukrainian: Fqwe1
- Various: @iNtEgraIR2021
- Infrastructure: @Eloitor
Miscellaneous¶
- mini.css - website CSS - Donate: GitHub Sponsors
- Pagefind - website search
- @erfanoabdi, filipepferraz, and @Lanchon - copy partitions script
- @b3pio - Pixel 2 XL device donation
- @fossdd - app suggestions
- @AkechiShiro - various tweaks
- @PatrykMis - app maintenance
- @danielk43 - patch maintenance
- @dktzde - patch history work
- @zynpachi - tweaks
- @genodeftest - tweaks
- @mprasil - tweaks
- @222m5 - recommended app suggestions + other bits
- @fossys - device testing
- @mjk - messenger comparisons work
- @*IM* - messenger comparisons work
- @linsui
- @mimi89999
- @nvllsvm - freecyngn
- @p4block - AOSP pkgbuild
- @brandsimon
- @okgamr
- Animista - website animations
- Stack Exchange Network
Also a huge thanks to Daniel Micay; DivestOS utilizes many hardening patches from GrapheneOS and the AndroidHardening CM-12.1/13.0 archive. Time flies.
Notices¶
- Android is a trademark of Google LLC.
- CIP / Civil Infrastructure Platform is a trademark of The Linux Foundatsion.
- CVE / Common Vulnerabilities and Exposures is a trademark of The MITRE Corporation.
- ClamAV is a trademark of Cisco.
- GrapheneOS is a trademark of the GrapheneOS Project.
- LineageOS is a trademark of LineageOS LLC.
- Linux is a trademark of Linus Torvalds.
- Mozilla Firefox is a trademark of The Mozilla Foundation.
- Tor is a trademark of The Tor Project, Inc.
- Divested Computing Group and its projects are not affiliated with Cisco, Google, GrapheneOS, LineageOS, Linus Torvalds, Mozilla, the Android Open Source Project, The Civil Infrastructure Platform, The Linux Foundation, The MITRE Corporation, or The Tor Project.
- DivestOS is not sponsored or endorsed by Google, the Android Open Source Project, LineageOS, or GrapheneOS.
- GMaps WV is not sponsored or endorsed by Google.
- Hypatia is not sponsored or endorsed by Cisco.
- Mulch is not sponsored or endorsed by Google.
- Mull is not sponsored or endorsed by Mozilla.
- The DivestOS checker/patcher program and corresponding database is not sponsored or endorsed by Linus Torvalds, The Civil Infrastructure Platform, The Linux Foundation, or The MITRE Corporation.
- AOSP source code is available here.
- CIP source code is available here.
- Chromium source code is available here.
- Firefox source code is available here.
- GrapheneOS source code is available here.
- LineageOS source code is available here.
- Linux source code is available here.
- The CVE list is available here.
- All product names, logos, and brands are property of their respective owners. Use of these names, logos, and brands does not imply sponsorship or endorsement.
Contributing¶
Effective July 29th 2021 all contributions to DivestOS and related projects must be signed-off as per the DCO:
Developer Certificate of OriginVersion 1.1 Copyright (C) 2004, 2006 The Linux Foundation and its contributors. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Developer's Certificate of Origin 1.1 By making a contribution to this project, I certify that: (a) The contribution was created in whole or in part by me and I have the right to submit it under the open source license indicated in the file; or (b) The contribution is based upon previous work that, to the best of my knowledge, is covered under an appropriate open source license and I have the right under that license to submit that work with modifications, whether created in whole or in part by me, under the same open source license (unless I am permitted to submit under a different license), as indicated in the file; or (c) The contribution was provided directly to me by some other person who certified (a), (b) or (c) and I have not modified it. (d) I understand and agree that this project and the contribution are public and that a record of the contribution (including all personal information I submit with it, including my sign-off) is maintained indefinitely and may be redistributed consistent with this project or the open source license(s) involved.
Our Contributions Back¶
- No IMSI to SUPL:
- Option to enable Save-Data HTTP header:
- Reduced APK size:
- Switched OpenWeatherMap API URLs to HTTPS:
- andOTP: Report for an authentication bypass
- Bitwarden: Add support for Mull (rejected)
- Brave: Report for GMS related account breakage
- Briar:
- CalyxOS:
- Cheeseburger build guide: Signing help
- CIP Kernel CVE Tracker: Added AOSP branches
- Conversations:
- CPAProxy: Backport patch for TROVE-2018-004
- CVE patcher integration: links here
- DNS66: Support loading settings from /system (pending rewrite)
- F-Droid:
- Fennec F-Droid: Regular version updates & other fixes
- FFUpdater:
- Firejail: Profile for AOSP compilation
- GrapheneOS:
- Invizible: Default enable per-app isolation
- KISS Launcher: Memory leak fix
- LeOS-GSI: Impetus to release sources
- LineageOS:
- Magisk DRM Disabler: Related work on the removal of proprietary blobs
- Meshtastic:
- microG:
- Mozilla Firefox:
- Nunti: Use HTTPS for default feeds where possible
- Orbot:
- Add more exit country codes (declined)
- Expose IsolateDestAddr options
- Expose *ConnectionPadding options
- Expose IPv6 related options and enable IPv6 support
- Expose *CircuitPadding options
- Enable IsolateDestAddr on HTTPTunnelPort if set
- Fixup snowflake limit check
- Limit snowflake by default
- Actually enable AvoidDiskWrites (again)
- Only enable pdnsd debug output when debug logging is enabled
- Expose IsolateDestPort and IsolateClientProtocol
- Fixup node prefs
- postmarketOS: Blob removal
- Privacy Browser: (upstream declined) Added Tor support, DNT support, extra search engines, and extra user agents.
- Privacy Friendly Weather: Fix Celsius to Fahrenheit conversion
- Quik SMS: Update included MMS configs
- RadioDroid:
- RedReader:
- Replicant: Related work for the removal of the proprietary AmbientSDK blob email and resulting commit
- Session IM: Request to document group chat server hosting
- Shelter: Request to support direct APK installs
- SuperTuxKart: Use a lower internal rendering resolution (broken)
- Tutanota: Set FLAG_SECURE (PoC)
- Universal Android Debloater: blob corrections
Work that we never attempted to upstream:
- Remove proprietary libraries: AnySoftKeyboard, D-Sub, Muzei, Substratum
- RedReader: WebView hardening
- Signal: Force WebSocket mode even when Google Play Services is detected
- Twelf: Additional icons