HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
dan-v
rattlesnakeos-stack
Go2018–2021
dan-v / rattlesnakeos-stack · Archived

rattlesnakeos-stack

Build your own privacy and security focused Android OS in the cloud.

15Distinct people
26Mentions
0Explicit recommenders
565GitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

Build your own privacy and security focused Android OS in the cloud.

GitHub

Where it is used

No documented product use was verified in the last source check.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year26 dated mentions

Observed mentions: 2018-06-20 20:21:57 UTC to 2021-10-25 18:53:51 UTC.

02468102018-01-01 00:00:00 UTC to 2019-01-01 00:00:00 UTC (exclusive): 10 mentions; 2 submissions, 8 comments20182019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 5 mentions; 0 submissions, 5 comments20192020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 8 mentions; 0 submissions, 8 comments2021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 3 mentions; 0 submissions, 3 comments2021

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20182018-01-01 00:00:00 UTC2019-01-01 00:00:00 UTC1028
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC505
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC808
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC303

What Hacker News says

26 sources
Sprint is extra chatty - from page 57 of https://propertyofthepeople.org/document-detail/?doc-id=2108...: > Ping: The network sends a message to the phones internal GPS receiver to report it's location (must see min. of 4 satellites. GPS coordinates of device and suspected radius from tower e-mailed(or through L-Site website) every 15 minutes for 30 days. Can be done manually every 5 minutes. I wonder if this is facilitated by one of those infamous "carrier app" backdoors included in stock OS but not e.g. in GrapheneOS: https://grapheneos.org/faq#cellular-tracking https://gist.github.com/thestinger/171b5ffdc54a50ee44497028a... https://github.com/dan-v/rattlesnakeos-stack/issues/69#issue...
In The FBI's internal guide for getting data from AT&T, T-Mobile, Verizon
CalyxOS is an awesome project. I have worked with the lead developer a bit over the past few years and it's been such a pleasure. We share some bits of code between our projects here: https://github.com/AOSPAlliance. If anyone is interested in building their own custom android OS in the cloud (AWS) with same ability to lock your bootloader like CalyxOS, you can checkout my project I've been maintaining for a few years now called RattlesnakeOS: https://github.com/dan-v/rattlesnakeos-stack. And if you prefer to not build in the cloud, there is also a really great project called robotnix (https://github.com/danielfullmer/robotnix) which provides a way to build many flavors of OS (AOSP, GrapheneOS, LineageOS, etc).
In CalyxOS – De-Googled Android Alternative
I've been using LineageOS since the good ol' CyanogenMod days and I am very grateful for how much work the developers put into it day in and day out. Thanks to them, I managed to get rid of Google Apps in my day-to-day life almost[0] entirely and drastically improve privacy for me: Instead of Google Play Services I use MicroG[1] and instead of Play Store, I use Aurora Store[2] and F-Droid. For syncing files there is Syncthing[3] and for backups there is Seedvault[4]. To isolate apps I don't trust I use NetGuard[8] and Shelter[9] and practically no internet-facing app has access to my internal "SD card" on which my photos and documents reside. As a bonus, getting rid of GApps and using LineageOS has increased my phones' battery life and their overall lifetime tremendously. (I've only owned three smartphones in my entire life, the original
Read the rest
T-Mobile G1, the HTC One M8 and the BQ Aquaris Pro.) I couldn't be happier. That being said, I've closely been following GrapheneOS[5] because I find its additional security guarantees very attractive. In fact, just a few hours ago my new Pixel 5 arrived and I'm looking forward to giving it a try. Though I already know I will miss MicroG… Maybe I'll end up building my own custom Android ROM, using Hashbang or RattlesnakeOS[6, 7]? Overall, I don't really understand people who criticize Android for not being open while loudly claiming a "pure" Linux phone would be so much better. (There was yet another discussion here on HN just a few days ago.) Yes, Android is a not your typical open-source project and clearly in the hands of Google. Yes, most phone and chip manufacturers still haven't open-sourced their hardware binary blobs. We definitely have to fight these fights. But with a Linux phone I'd probably be struggling with window-manager-related bugs in the worst possible moments (say, an emergency call) and risk all my data getting stolen whenever I install a new app. As much as I like Linux – I dabbled with it the first time almost two decades ago and have been using it as a daily driver for more than a decade – but its stability and security guarantees are orders of magnitude worse than Android's. I secretly hope that Fuchsia will find its way to the desktop at some point and be able to replace my Linux system. [0]: I still use Google Maps every now and then [1]: https://microg.org . See https://lineage.microg.org/ for LineageOS images that come with MicroG pre-installed. [2]: https://auroraoss.com/ [3]: https://syncthing.net [4]: https://github.com/seedvault-app/seedvault [5]: http://grapheneos.org/ [6]: https://github.com/hashbang/aosp-build [7]: https://github.com/dan-v/rattlesnakeos-stack/ [8]: https://netguard.me/ [9]: https://f-droid.org/en/packages/net.typeblog.shelter/
In LineageOS 18.1
DivestOS does not come with anything as DivestOS doesn't sell devices. Selling devices with outdated vendor firmware with known security issues would be immoral. However on select devices you can successfully relock the bootloader with DivestOS installed, as it is properly signed [0] and enables verity on supported devices. Other alternatives that support relocking are GrapheneOS [1], CalyxOS [2], #!OS [3], and RattlesnakeOS [4]. They too do not sell devices. [0] https://github.com/Divested-Mobile/DivestOS-Build/blob/maste... [1] https://grapheneos.org/ [2] https://calyxos.org/ [3] https://github.com/hashbang/os [4] https://github.com/dan-v/rattlesnakeos-stack
In Your Computer Isn't Yours
If you're concerned with privacy but still want a phone that mostly works, I recommend installing MicroG [0]. It's an open-source implementation of Google Play Services that gives you support for things like location and push notifications without installing proprietary Google stuff on your device. The easiest way to install it is their LineageOS build. If one isn't available, NanoDroid [2] provides flashable ZIPs that work with Magisk. If you're not okay with either of those but you can spend a bit of time, you can add it to your own AOSP builds. If you really really care about security and don't care too much about all the apps in the world working, there's also GrapheneOS for Pixel devices [3]. The cool thing about Pixel devices is that they allow you to add your own verified boot key and re-lock your device with a third-party ROM inst
Read the rest
alled. GrapeheneOS supports this and a variety of other security-focused features like reproducible builds [4]. And final honorable mention goes to RattlesnakeOS [5] which allows you to set up your very own AOSP build system complete with OTAs and ROM signing. It also allows you to add MicroG [6]. [0]: https://microg.org/ [1]: https://lineage.microg.org/ [2]: https://gitlab.com/Nanolx/NanoDroid [3]: https://grapheneos.org/ [4]: https://grapheneos.org/build#reproducible-builds [5]: https://github.com/dan-v/rattlesnakeos-stack [6]: https://github.com/RattlesnakeOS/microg
In WordPressiOS Locked by App Store
Depending on what your goals are, I'd recommend going down the route I chose: run AOSP. Tagged releases of AOSP are the same base code that all the retail distributions of Android are based on, so should be just as safe. If you have a Pixel device, the RattlesnakeOS project [0] will allow you to run your own automated AOSP distro, complete with OTAs, on AWS. It also supports adding a few modifications like MicroG. All but the most recent Pixel devices are also supported by GrapheneOS, which is a security-focused ROM. Both of these projects support signed builds, so once you flash them to your device, you can lock the bootloader. [0]: https://github.com/dan-v/rattlesnakeos-stack [1]: https://grapheneos.org/
In System Hardening in Android 11

Showing the 15 most recent of 26 sources. Enable JavaScript to search and browse every indexed mention.

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.