trash
33
trash
@TheAnonymouseJoker
link
13
edit-2
3M

I answered someone on reddit on how to deal with “sus” centralised closed software that is a must to use. Quoting myself from here:


There are only few options to use centralised common apps/services. Pick your choices.

  1. Use them like a normal person does, with all permissions and network access unrestricted.

  2. Firewall them (and give internet access only when you need to use it temporarily and block its trackers via custom HOSTS rules in NetGuard), sandbox them in Android Work Profile and neuter their permissions.

  3. Learn OPSEC and try not to type comments that give too much details about your life on non-E2EE or spooky platforms.

  4. Learn stylography and how to maintain it for an highly improvised OPSEC.

  5. Share images, videos, documents and other media on such platforms exclusively after stripping metadata off the files.

  6. Delete the accounts and/or get rid of the communication platforms.

I do 2, 3, 4 and 5. When 2 stops me from letting use the platform, I will do 6.


Hope this helps.

Helix
link
13M

stylography

got any guides for that? I’d love to add them to my opsec overview.

@TheAnonymouseJoker
link
43M

I am not really sure, I learnt it over time. The gist of it is that you never use uncommon short forms, apostrophe glued words, capitalisation, correct use of tenses and grammar and so on, and also keep adjusting your identity depending on a fixed or nameless one, and also keep adjusting according to the userbase of a type of platform. Sounds vague, because it is that vague.

You also have to do this in a way that if you change identity, you never write in the same style as before, and you have a bunch of such styles always ready, at all times.

Of course, it is not really possible for people to do this in general, and even experienced trolls make mistakes. Nothing beats experience, vigilance and being on guard at all times.

If an OPSEC preacher fails a few times, it is game over for them on the internet. If they are performing OSINT or some investigation or some whistleblower style stuff, all it would take is one cover blowup.

P.S. I remember your username :)

Helix
link
23M

thank you, with your input I found more information, e.g. https://archive.is/b3rn3d.herokuapp.com.

@gwynne0190
creator
link
3
edit-2
2M

deleted by creator

@DnuOLp0
link
113M

I use the Apps TC (Tracker Control) and “open in whatsapp” from Fdroid. The first one blocks some tracking domains and also allows you to cut the internet connection totally. The second one allows you to open a contact in whatsapp without giving whatsapp any data except for the phone number. This is necessary because my android version doesn’t support work profiles yet. I think in normal operation all of your contacts will be uploaded to their servers.

To give whatsapp even less data you could try to get a second phone number which you can get rid of after deleting whatsapp. This way it will hopefully be harder for them and others to identify you later.

Helix
link
83M

You can have a second profile (work profile) for WhatsApp and have a completely separate list of contacts. That way the contact to your ass doctor or second girlfriend won’t leak to Facebook to correlate.

poVoq
link
83M

https://cgit.typeblog.net/Shelter/about/ Will help, but WhatsApp is a big pain to manage without access to your Phone’s main address book (Probably on purpose, dark pattern design).

@gwynne0190
creator
link
1
edit-2
2M

deleted by creator

@0x90
link
83M

PinePhone has an Android emulator which runs WhatsApp, there was a post about this few weeks ago

@gwynne0190
creator
link
1
edit-2
2M

deleted by creator

@AgreeableLandscape
admin
link
2
edit-2
3M

If you want to try out this option without a Linux phone, Anbox is available for Linux desktops. There is also an OS called Android x86 which can be run in a virtual machine, and it gives you, well, a custom Android OS that is compatible with desktop x86 processors. Your mileage with both may vary though, I’ve experienced stability and performance issues, and some apps might not work at all.

@ajz
link
63M

I would consider to get a cheap phone that is able to run WhatsApp.

@AgreeableLandscape
admin
link
5
edit-2
3M

Adding to this: If you’re comfortable with flashing custom ROMs or are willing to learn (it’s not actually that hard): get a used phone that is able to run LineageOS (typically you’re looking at an older Android phone that was the flagship of a major vendor a few years ago, they should give you pretty good bang for the buck) or a similar AOSP-based ROM, make sure you completely wipe the memory, install said OS on it, and then install whatever invasive apps on it. LineageOS has something called Trust which can help a little with privacy, and you also ditch most OEM specific trackers with an AOSP ROM. Turn the phone off when not in use.

@Gwynne@lemmy.ml

@gwynne0190
creator
link
1
edit-2
2M

deleted by creator

@ajz
link
3
edit-2
3M

deleted by creator

@Echedenyan
link
53M

How is that you have no choices?

WA doesn’t support third party Android builds officially so you can deal with it with a excuse. If you try to run it, it will warn you that there is no support provided.

Also, being this a case of job, they cannot force you in that by law. The same passes in the rest.

@gwynne0190
creator
link
2
edit-2
2M

deleted by creator

@Echedenyan
link
3
edit-2
3M

EMail, SMS/MMS, phone calls ?

@gwynne0190
creator
link
3
edit-2
2M

deleted by creator

You could get a second phone?

@PhoenixWright
link
33M

WhatsApp is just a mess, I worked with it several times and I hated it. You better use Telegram.

@peppermint
link
3
edit-2
3M

AVD raw or headlessly bridged through synapse.

https://docs.mau.fi/bridges/go/whatsapp/setup/index.html

@Lunacy
link
3
edit-2
3M

A good approach would be isolating WhatsApp within a secondary profile. Disable every permission you can disable.

If you can, try to use it only for work/school; use privacy friendly alternative like signal or element for talking to your family and your friends.

edit: beeper seems a good choice. It’s a pay service which permit to use different messenger services within only one application.

@ksynwa
link
33M

There is this app on fdroid whose name I can’t recall. It can create a work profile (an Android native feature) that you are can install privacy invading apps into and they are kept isolated from apps and files outside the work profile.

Sadly I forgot the name for it.

@iortega@lemmy.eus
link
43M

Can I also avoid WA from running and connecting to any network with that app?

@Echedenyan
link
53M

NetGuard (A simple way to block access to the internet per application) - https://f-droid.org/packages/eu.faircode.netguard

@Echedenyan
link
33M

You would have to install that app in the work profile in shelter too.

I recommend you to install F-Droid in the work profile and then that app.

@ksynwa
link
03M

No I don’t think so.

@ksynwa
link
13M

I haven’t used this but this looks good roo. Shelter is the one I have used.

@Echedenyan
link
23M

Shelter *

@ksynwa
link
13M

Hell yea

@gwynne0190
creator
link
1
edit-2
2M

deleted by creator

Ephera
link
23M

Shelter / a work profile will have a separate home-directory, so WhatsApp won’t be able to access your files, and there will be a separate address book, so it can’t upload your contacts.

However, it will still be able to correlate your phone number with others’ address books, so if others have your phone number in their address book, they will get you suggested and you might soon have more people expecting to be able to contact you through that than you’d like.
If you want to prevent that, you’ll have to get a second phone number for this.

@ksynwa
link
13M

I can’t say for sure. I am not a privacy expert but it’s better than nothing.

One thing that is convenient is that you can just turn off the work profile when you don’t want to use WhatsApp and it won’t run in the background.

@tracyspcy
link
-33M

Are you sure you have no choice? Has someone put a gun to your head? If yes, call police.

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

  • 0 user online
  • 25 user / day
  • 37 user / week
  • 176 user / month
  • 575 user / 6 month
  • 3.63K subscriber
  • 1.96K Post
  • 8.84K Comment
  • Modlog