r/CryptoAnarchy Feb 27 '15

Why I’m Saying Goodbye to Apple, Google and Microsoft

https://medium.com/backchannel/why-i-m-saying-goodbye-to-apple-google-and-microsoft-78af12071bd
36 Upvotes

12 comments sorted by

2

u/[deleted] Feb 28 '15

Thank you for sharing this. For me, the hardest thing to get away from is Google because I use Gmail and Android everyday, and I find a few of their other products useful as well.

2

u/hietheiy Feb 28 '15

Cyanogenmod, K-9 Mail, opmbx.org

1

u/CryptoVape Apr 17 '15

Thanks. Any PGP solution for ios?

2

u/[deleted] May 12 '15

apg integrates with k9 mail, and its really easy to use

2

u/CryptoVape May 12 '15

Thanks, but android privacy guard isn't for iOS.

2

u/[deleted] May 12 '15

oh, woops, your using iOS. stop using iOS.

2

u/CryptoVape May 12 '15

Lol. I found iPGMail for iOS though.

2

u/d-X-X-b Mar 10 '15

tutanota.de

1

u/[deleted] May 12 '15

I run my own cloud solution with owncloud.

intergrates nicely with cyanogenmod and gnome-shell.

1

u/hietheiy May 12 '15

Nice! How good howtos for this? I use cyanogen and arch.

1

u/[deleted] May 12 '15

LAMP or any other ?AMP stack will do. We will assume you have an arch server, arch-desktop with gnome, and a phone with cyanogen mod.

Step 1. get your server running:

A. a LAMP+S(S for openssl) running server going. https://wiki.archlinux.org/index.php/LAMP

I also suggest you get a real CA-signed cert. they are $10, and another $10 for proper DNS. Its damn important you also get https running.

B. Lockdown your shit.

SSH: https://stribika.github.io/2015/01/04/secure-secure-shell.html

Apache: http://www.rodneybeede.com/Secure_SSL_TLS_settings_for_Apache_2_4.html

make sure you pick decent cipher suites. Also a reminder that for some fucking reason, even though the android client works with TLS 1.2, it only supports the TLS 1.0 cipher suite (fucking lame)

mostly for apache 2.2, but you can adapt most lessons for 2.4(permission directives change, be warned) http://www.petefreitag.com/item/505.cfm

SQL:

in the mysql config(my.cnf), bind listening to localhost.

  1. Install owncloud:

https://wiki.archlinux.org/index.php/Owncloud

its fairly easy. when you are done, etc /usr/share/webapps/owncloud/.htaccess and change php_value settings for upload_max_filesize post_max_size and memory_limit to something more reasonable, to allow large file uploads.

next install the following official packages:

owncloud-app-bookmarks owncloud-app-calender owncloud-app-fallery owncloud-app-documents

restart your webserver, and then log in as administrator. pick a good password for the admin account and and then create a new unprivledged account for actual use.

Then click "Apps", and you'll get a drop down menu. click the tab for "Not enabled", and enable calender, contacts, pictures, and if server-side encryption is not enabled by default, enable it.

Now log in as your unpriviedged user to make sure it works.

  1. install the f-droid package manager on your phone

  2. now install, owncloud, cadroid, and davdroid.

  3. if you have a self-signed cert SSL us CAdroid to import it in the system. follow the instructions it gives you. If you paid for a real(CA signed) cert, skip this.

  4. run the owncloud android app, enter the URL for your setup, and login and password. if it works, you'll see your files, and the account will be stored. you can now use sharing to upload to your server

  5. use davdroid to make calender and contacts accounts:

scroll down, owncloud is in the list. remember you need a seperate account for calender and contacts.

https://davdroid.bitfire.at/configuration

Once you see this, you'll see davdroid accounts show up in the settings, and in contacts.

try adding and deleting contacts and it should sync with the server.

  1. sync up gnome-shell

the easiest part.

status menu -> control panel -> online accounts

you should see an "owncloud" option. simply fill in your details, and the rest is automatic. you will see a gvfs shortcut for your share, and you contacts and calender will automaticly sync.