(1/2) Lemmy does not allow too long post walls

UPDATED 16/8/2020: Major edit, replaced closed source App Ops and Shizuku with AppOpsX (Free Open source) on F-Droid. This guide is nearly FOSS supported now.

UPDATED 17/9/2020: MAJOR EDIT, replaced closed source Access Dots with Privacy Indicator (FOSS) on Izzy’s F-Droid repo. This guide is completely FOSS.

Hello! I am the founder of /r/privatelife . Finally my smartphone non root guide is back, and there are some big upgrades. I was taking time to test everything myself on my daily driver, so apologies for keeping everyone in the wait, but stability and ease of use is the important goal to strive in my playbook. Privacy must be accessible to maximum amount of people without being annoying or tedious.

A kind request to share this guide to any privacy seeker.

#User and device requirement

  • ANY Android 9+ device
  • knowledge of how to copy-paste commands in Linux or Mac Terminal/MS-DOS Command Prompt (for ADB, it is very simple, trust me)

#Why not Apple devices?

iPhone does not allow you to have privacy due to its blackbox nature, and is simply a false marketing assurance by Apple to you. Recently, an unpatchable hardware flaw was discovered in Apple’s T1 and T2 “security” chips, rendering Apple devices critically vulnerable.

17/9/2020: Apple gave the FBI access to the iCloud account of a protester accused of setting police cars on fire.

Also, they recently dropped plan for encrypting iCloud backups after FBI complained. They also collect and sell data quite a lot. Siri still records conversations 9 months after Apple promised not to do it. Apple Mail app is vulnerable, yet Apple stays in denial.

Also, Apple sells certificates to third-party developers that allow them to track users, The San Ferdandino shooter publicity stunt was completely fraudulent, and Louis Rossmann dismantled Apple’s PR stunt “repair program”.

Also, Android’s open source nature is starting to pay off in the long run. Apple 0-day exploits are far cheaper to do than Android.


#LET’S GO!!!

ALL users must follow these steps before “for nerdy users” section.

Firstly, if your device is filled to the brim or used for long time, I recommend backing up your data and factory resetting for clean slate start.

NOTE: Samsung users will lose Samsung Pay, as Samsung has been caught and declares they sell this data: https://www.sammobile.com/news/samsung-pay-new-privacy-policy-your-data-sold/

  • Make DIY camera covers, for front camera notch use a tiny appropriate-sized thin opaque plastic cutout and use an invisible tape to stick it in place, replace every month (cost: tape roll and one minute of your time per month). My rear camera cover

  • Install F-Droid app store from here

  • Install NetGuard app firewall (see NOTE) from F-Droid and set it up with [privacy based DNS like Uncensored DNS or Tenta DNS or AdGuard DNS]

NOTE: NetGuard with Energized Ultimate HOSTS file with any one of the above mentioned DNS providers is the ultimate solution.

NOTE: Set DNS provider address in Settings -> Advanced settings --> VPN IPv4, IPv6 and DNS

  • In F-Droid store, open Repositories via the 3 dot menu on top right and add the following links below:
  1. https://rfc2822.gitlab.io/fdroid-firefox/fdroid/repo?fingerprint=8F992BBBA0340EFE6299C7A410B36D9C8889114CA6C58013C3587CDA411B4AED

  2. https://apt.izzysoft.de/fdroid/repo?fingerprint=3BF0D6ABFEAE2F401707B6D966BE743BF0EEE49C2561B9BA39073711F628937A

  3. https://guardianproject.info/fdroid/repo?fingerprint=B7C2EEFD8DAC7806AF67DFCD92EB18126BC08312A7F2D6F3862E46013C7A6135

Go back to F-Droid store home screen, and hit the update button beside the 3 dot menu.


###LIST OF APPS TO GET

  • Get Firefox Preview web browser from F-Droid (install uBlock Origin addon inside (if technically advanced, try doing this)). Also get Firefox Klar if you like a separate incognito browser.

  • Get Aurora Store from F-Droid for apps from Play Store without actually using Play Store, use Anonymous option to sign in

  • for 3rd party APKs source them only from APKMirror OR APKPure OR APKMonk, quite trusted, BUT TRY AND AVOID IT IF POSSIBLE

  • Get Privacy Indicator from F-Droid for iOS 14 like camera/mic dot indicator feature

  • Get OSMAnd+ from F-Droid or Qwant Maps inside web browser for maps and/or print physical maps if you live and travel in one or two states or districts.

NOTE: Qwant Maps has better search results than OSMAnd+

  • Get PilferShush Jammer from F-Droid to block microphone (use this in malls, restaurants or such public places if you can to prevent beacon tracking)

  • Get OpenBoard (user friendly) OR AnySoftKeyboard (nerd friendly) from F-Droid instead of Google GBoard, Microsoft SwiftKey et al, they are closed source keylogger USA spyware

  • Get FTP Server (Free) from F-Droid and FileZilla on computer for computer-to-phone internet less file sharing

NOTE: for phone-computer sync or sharing, can TRY KDE Connect, available for Android, Windows, Linux

  • Get TrebleShot instead of SHAREIt for phone to phone file sharing

  • Get K-9 Mail or FairEmail as e-mail client

  • Get NewPipe for YouTube watching, or YouTube in Firefox Preview/Klar

  • Get QKSMS from F-Droid as SMS client app

  • Get Shelter from F-Droid to sandbox potential apps that you must use (eg WhatsApp or Discord or Signal)

  • Get SuperFreezZ from F-Droid to freeze any apps from running in background

  • Get Librera Pro from F-Droid for PDF reader

  • Get ImgurViewer from F-Droid for opening reddit/imgur/other image links without invasive tracking

  • Get InstaGrabber from F-Droid for opening Instagram profiles or pictures without invasive tracking (seems like a revived fork is here, thanks u/sad_plan )

  • Get GreenTooth from F-Droid to set Bluetooth to disable after you have used it

  • Get Material Files or Simple File Manager from F-Droid for file manager app

  • Get ImagePipe from F-Droid if you share lot of pictures, and want to clear EXIF metadata snooping (often photos contain phone model, location, time, date)

  • Get Note Crypt Pro from F-Droid for encrypted note taking app

  • Get Vinyl Music Player from F-Droid for music player

  • Get VLC from F-Droid for video player


###CRITICAL FOR CLIPBOARD, LOCATION AND OTHER APP FUNCTION BLOCKING

I would say this is one of the critical improvements in my guide, and will solve the problem of clipboard and coarse location snooping among other things.

AppOpsX is a free, open source app that allows to manage granular app permissions not visible normally, with the help of ADB authorisation without root. This app can finely control what granular information apps can access on your phone, which is not shown in app permissions regularly accessible to us.

Now that you would have set up your phone with installing apps, now is a good time to perform this procedure.

Step 1: Install AppOpsX from F-Droid. (https://f-droid.org/en/packages/com.zzzmode.appopsx/)

Step 2: Plug phone to computer, and enable USB debugging in Settings --> Developer Options (you probably already did this in the starting of the guide)

Step 3: Keep phone plugged into computer until the end of this procedure! Open AppOpsX app.

Step 4: On computer, type commands in order:

adb devices

adb tcpip 5555

adb shell sh /sdcard/Android/data/com.zzzmode.appopsx/opsx.sh &

Step 5: Now open “AppOpsX” app, and:

  • disable “read clipboard” for apps except your messengers, notepad, office suite, virtual keyboard, clipboard monitor apps et al.

NOTE: Most apps that have text field to copy/paste text require this permission.

  • disable “modify clipboard” for every app except for your virtual keyboard or office suite app or clipboard monitor/stack special apps.

  • disable “GPS”, “precise location”, “approximate location” and “coarse location” for every app except your maps app (Firefox and OSMAnd+)

(2/2) in comment below.

  • @cmxns
    link
    24 years ago

    You are coming off as agressive. Kindly request you to be a gentleman even if we have disagreements.

    To be honest, I don’t see where I was aggressive in my comments. All I was doing is asking questions and arguing about your choice of words in the article.

    Apple employees were selling data in China, which you can read.

    There’s a difference between Apple and an Apple’s employee who’s got an unauthorised access to data.

    For the iTunes lawsuit, it was found that iTunes does collect personal data on you, but I will give you the leeway and benefit of doubt.

    Yes, I’m 100% sure that this lawsuit is bullshit because:

    1. This is not the first time someone claims something like this.
    2. There’s no proof that Apple sells iTunes data.
    3. There’s a common sense that says me this is bullshit.

    You can tell me I was wrong after the court will rule that Apple was selling user data. But I doubt this will happen. As you said, “Until it is proven, I will just declare it to be FUD garbage.”

    How about Siri recording conversations, and continuing to record them 9 months after they promised they would not do it.

    Yep, they collecting user’s recording and only recently allowed you to opt-out. Still, they didn’t sell it.

    You can watch The Hated One’s video on Apple as well, discussing the Epsilon values on differential privacy fake claims.

    To watch a YouTuber discussing differential privacy? Yeah, sure. Right after he will show me his PhD degree in math.


    I see you went crazy on HN’s comments but my point was not to insult you but instead to address your comment:

    The thread is about the guide I made, and it seems to contain facts that others are not criticising except you.

    The whole point of this discussion for me was simply to ask you to be more careful with accusations in the article. There’re no proofs on Apple’s selling user data and I would be highly surprises they do this after all their effort in making their devices, software and SDKs more privacy-aware.

    Instead of throwing such a strong claims you could instead say something like “placing your trust in companies and giving away your personal info is not a good idea if you’re privacy conscious person” or something. But you just grabbed few links with headlines like “YO YO Apple selling your data, no shit” without even reading them. I suppose, to give more weight to your article and for hype? This makes really hard to take the rest of the guide seriously.

    • @TheAnonymouseJokerOPM
      link
      04 years ago

      Apple employee is Apple’s responsibility, and if Apple did not fire them before they did this, they count as Apple employee, and thus it is Apple’s doing.

      Yep, they collecting user’s recording and only recently allowed you to opt-out. Still, they didn’t sell it.

      Why are they collecting data when “what happens on iPhone stays on iPhone”? Is that not false advertisement about claiming to protect a human right?

      To watch a YouTuber discussing differential privacy? Yeah, sure. Right after he will show me his PhD degree in math.

      Calling The Hated One an ordinary YouTuber on the subject of privacy is not just disingenuous, but ignorant and shows a lack of understanding. He is educated enough to talk about it, which almost nobody else talks about.

      There is proof of Apple selling user data (Apple employee is not separate from Apple), so they are clearly doing it, as well as having some lovely relations with data give and take with Facebook and Google.

      Enough people are taking my guide seriously, and it helps with privacy of their personal data or metadata, so it is good enough for now. Bickering people have not done anything to help the majority of people, and keep basking in the glory of custom ROM and tinkering all day. I am helping that lowest common denominator, which needs the most help and improves the privacy of others as a net indirect result.

      • @cmxns
        link
        24 years ago

        Apple employee is Apple’s responsibility

        That’s why they were prosecuted.

        they count as Apple employee, and thus it is Apple’s doing

        By your logic, if a citizen of a country will kill another citizen then it’s the country who killed that citizen. Pretty flawed, huh?

        Why are they collecting data when “what happens on iPhone stays on iPhone”? Is that not false advertisement about claiming to protect a human right?

        How’s it related to selling user data? There’s a lot of things to blame Apple for. But this is off topic.

        Calling The Hated One an ordinary YouTuber on the subject of privacy is not just disingenuous, but ignorant and shows a lack of understanding.

        I don’t care about YouTubes. What’s his accomplishments except for retelling other sources? How is his content different from lifehacks and minecraft letsplays? Did he proved a flaw in differential privacy? If so, where can I take a look at the paper?

        There is proof of Apple selling user data (Apple employee is not separate from Apple)

        I’ve showed that this doesn’t work like that. This is also contradicts their privacy policy. Are you saying that they are lying in their public legal document? Then why no one won a lawsuit agains them given that there were lawsuits?

        For the third day in a row I’m asking you to provide a source for your claim and we’re still here. That’s not even funny anymore.

        ——

        I’m not saying that your guide is complete garbage or anything like that. I believe that there are people who will find it useful. Your claims on Apple selling personal data and pointing to unrelated links as an “evidence” is the problem. Well, you’re not the first one in the hype train and you’re definitely not the last one.

        • @jsgohac
          link
          24 years ago

          If he or she modified the claim to say “Apple profits from collecting user data”, would that satisfy your concern? This way unprovable claims of financial transactions with third parties would be removed, but still acknowledges the collection process.

          • @cmxns
            link
            34 years ago

            Yep, that sounds about right. But it’s up to the author if he/she wants to modify it. I don’t insist, I’m just arguing about the choice of words.

        • @TheAnonymouseJokerOPM
          link
          04 years ago

          But you did not acknowledge the prosecution, and denied that it had anything to do with Apple. This is the problem with the way you are arguing. Your criticism seems acceptable, but then it becomes a bad faith argument couple sentences later.

          Apple is not a country, but a corporation that makes tall claims of protecting privacy in exchange for $1000+ device people buy, then backstab them. Understanding this is fundamental to educating masses about privacy.

          How’s it related to selling user data? There’s a lot of things to blame Apple for. But this is off topic.

          Apple makes privacy claims then does these backstabbing things, which clearly indicate that privacy is a marketing tool to them, and not a human right as Tim Cook stated publicly.

          Did he proved a flaw in differential privacy? If so, where can I take a look at the paper?

          He is not proving a theory himself but making the information about Epsilon values of handled data by these corporations more visible to public. I am sure this can be checked via searching.

          Then why no one won a lawsuit agains them given that there were lawsuits?

          I hope you are joking. Apple is the national brand of USA, and US government is there to protect them. Besides, Apple has nearly infinite money and political power to crush people criticising them via lawsuits.

          For the third day I showed you couple sources that prove Apple sells and collects data, and you are continuing to stay in denial or argue in a nullifying manner.

          You are not the first and last one to believe in the religion of Apple. There are plenty of those at reddit.com/r/privacy.

          • @ex_06
            link
            1
            edit-2
            3 years ago

            deleted by creator

            • @TheAnonymouseJokerOPM
              link
              0
              edit-2
              4 years ago

              Go live in the woods if you want, because that is NOT realistic.

              Apple got no eyes on it because it is closed source, and will stay that way. Closed source by definition means you cannot verify the code directly.

              If The Hated One is an edge lord, then you are a straight up Apple cultist in that sense, going by your comment.

              you are one of those “open source is good” but probably never read one line of code ever. Having Apple sandboxing apps is better than having fdroid to download stuff no one knows and so it’s less checked.

              Brainwash someone else. I know how to decompile and read code, and open source code has 100x more eyes on it compared to closed source where only the codemaking organisation can see the code.

              If you want to start playing with ROMs, it’s different but you are going to either give up on services like banking by phone OR, to access them, give back your phone to google telemetry.

              Thinking Apple telemetry is any better than Google telemetry, and Apple telemetry does not go to NSA, and that Apple telemetry is somehow a “protective Big Brother” with good bytes instead of bad bytes is very stupid. Apple makes a mockery out of folks like you, and you keep doing the good service.

              Keep being delusional. This is why I want to protect people from folks like you, who advocate closed source stuff, and always try to take a jab at or condemn open source alternatives. (I think you might be owning loaned or EMI’d Apple devices and want to defend your costly purchases.)

                • @TheAnonymouseJokerOPM
                  link
                  04 years ago

                  The problem is Android has had camera and mic notification since Android 9.0 Pie. Apple shills are creating the narrative that their camera mic notifications are somehow magic.

                  Calling for regulation is the most effective PR campaign for themselves. Tesla, Microsoft and others come out everyday “asking” for it to look good to people.

                  Their direction is anti right to repair, anti privacy, anti open source and thus I do not want people to do anything with them. Same goes for masses who I try to tell about these things.

              • @ex_06
                link
                2
                edit-2
                3 years ago

                deleted by creator

                • @TheAnonymouseJokerOPM
                  link
                  -1
                  edit-2
                  4 years ago

                  The one who is shit is probably you, not “open source”. Go back to your closed source capitalist Windows/MacOS/iOS cave.

                  Advocating for Apple and privacy in the same sentence is like advocating for child protection laws and pedophilic justice together.