2018-10-19 23:39:06
Small Privacy & Security Guide for Android1. Encrypt your /data partition and even sdcard.
2. Use Enforcing Selinux
(You probably knew all of this)
3. You can use AFWall+ to restrict internet acces and other permissions from other apps.
4. You can use a secure email and email client [Encrypted]
5. You can use more foss apps, and try to replace the apps you use everyday with foss ones.
6. You can restrict app permissions that aren't required with some apps
7. You could think of using something like MicroG instead of Gapps, or even living Gapps less.
8. You can use Encrypted chat apps [P2P]
9. You can use F-Droid android app store that only has
FOSS apps
10. Remember that even if you think you don't have software
backdoors, there can always be hardware
backdoors!
11. Use a VPN, preferably not NordVPN or things like that. VPN is for hiding your data from your ISP, and not for sending it to someone else instead. "Yeah but how you can be sure that VPN collects data" - Most of them do. It's just a thing to make money from. Think about these free VPNs, how do they make money? Selling data. Ads are not a thing to make a lot of money from in this century. I would recommend
Wireguard with Azire/Mullvad, as both value your Privacy & Security, supporting IPv6, P2P and no data monitoring.
12. Do not use Proprietary apps. "Why shoudn't i use them?" Because you can't know what is in the code, even if the app looks to not have anything shady. "So open source apps are always safe?" No they aren't. But at least the code can be modifyed for removing the data leaks or anything that might impact your Privacy or Security.
FOSS apps tend to not collect data13.
Remember even AOSP has some Google stuff in it. For example AOSP dialer has Google lookup, the Captive Portal is Google one.
14. Do not use Social Media platforms like Facebook, as they are simply data mines.
15. Use Custom Roms instead of Stock Roms as, you know, Stock Roms are Proprietary. Custom Roms also might have Security improvments or other nice features.
Why should i do all of this? No one tells you to do it. These are only some tips. And think about it, if a friend asked for your Email password and adress or Social Media one, would you gave it to him?
The answer is No most of the times. That's because you want a level of Privacy. If someone asked you to give him your phone password, you would probably have answered, I don't want to. Because you want a level of Privacy & Security. So if you know that Google or others companies can know a lot of things about you, would you still use Google stuff? Most say they don't care, as they think it is only for improving their product or their data will not get anywhere. But that is wrong. You can't be fully private or secure in this century, but you can at least be more than before with just some little changes.
[FOSS = Free Open Source Software]
[FLOSS = Free/Libre Open Source Software]
[P2P = Peer To Peer Connection]
[MicroG = Open Source alternative to Google
Play Services Framework for
Android]
[VPN = Virtual Private Network]
[Wireguard = New VPN technology, being called
The most simple, easiest to use and simplest VPN solution in the industry. Comparing to OpenVPN, Wireguard has around 4000 lines of code, while OpenVPN has around 120000 lines of code]
[Captive Portal = A captive portal is a Web page that the user of a public-access network is obliged to view and interact with before access is granted. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hot spots for Internet users]
Wikipedia definition of anonymous P2P: "An anonymous P2P communication system is a peer-to-peer distributed application in which the nodes or participants are anonymous or pseudonymous. Anonymity of participants is usually achieved by special routing overlay networks that hide the physical location of each node from other participants"
Guide by @Thespartann and his friends:)
6.7K viewsThespartann, edited 20:39
A
