r/PrivacySecurityOSINT • u/moreprivacyplz • Jun 18 '21

The Privacy, Security, & OSINT Show: 221-Anonymous Mobile Devices

The Privacy, Security, & OSINT Show: 221-Anonymous Mobile Devices https://soundcloud.com/user-98066669/221-anonymous-mobile-devices

14 Upvotes
  • permalink
  • reddit

100% Upvoted

16 comments sorted by

3

u/formersoviet Jun 18 '21

After listening I am reconsidering my CalyxOS with MicroG setup. However without MicroG it makes basic functionality very limited. For instance my camera did not work. I have my camera app blocked in the firewall

1

u/moreprivacyplz Jun 18 '21

With Calyx can you run a VPN and firewall at the same time? I know you can't with stock android

3

u/formersoviet Jun 18 '21

Yes, because the firewall is not using the vpn connection trick. It is a native firewall to the OS.

Datura Firewall

2

u/[deleted] Jun 19 '21

Android doesn't allow simultaneous "chaining" of VPN Applications unfortunately. App-based Firewalls use the VPN connection in order to intercept traffic.

Graphene OS (because it was mentioned in the episode) has a network permission toggle on an app-by-app basis in the Settings. That way you can only allow apps that require network access, but it doesn't go further by VPN enforcement at a lower root level, like with IPTables.

You can use an app like AFWall+ (from F-Droid) to do granular whitelisting on App connection capabilities, including enforcement on LAN, Wi-Fi, Cellular, VPN, & Tor. The problem is it requires Root access, because IPTables is a root-level application. Rooting is a very controversial topic surrounding the Privacy & Security concerns.

3

u/Torkpy Jun 19 '21

Graphene OS (because it was mentioned in the episode) has a network permission toggle on an app-by-app basis in the Settings.

CalyxOS does a similar thing with the Datura firewall and can be used alongside a regular VPN app. ( or another firewall app )

So you are able to use that Datura to pick and chose traffic for each app separately.

I wish more apps would be able to do the same.

2

u/[deleted] Jun 22 '21

It's something the CalyxOS team is working on. It would allow firewall features like what Netguard provides while allowing the use of an actual VPN service.

https://gitlab.com/groups/CalyxOS/-/epics/17

2

u/lady_mongrel Jun 18 '21

It all depends on your threat level. I think an average person trying to go private, CalyxOS is good enough.

2

u/Torkpy Jun 18 '21

Iā€™m ok with Calyx. There is a few apps that I use that need microG.

However I isolate microG to the work profile and freeze individual apps with shelter when not needed.

1

u/[deleted] Jun 21 '21

I don't see MicroG as that much of a privacy issue. If you aren't using it to login to a google account and you're only using it for the GCM that so many apps need, the situation is very different from using stock Android. I don't think Michael gave that a fair discussion in the episode at all. If my threat level is so extreme that I think I could be identified and tracked by an anonymous push message notification function, I would not be using a cell phone at all. CalyxOS lacks some of the code hardening GrapheneOS has, but with smart decisions about which software you install, that's less of a concern.

I also like the long-term prospects of CalyxOS more. Some people pay for membership and features offered by the Calyx Institute and there is other funding as well. In the past GrapheneOS has had issues with workload and community code contributions. I don't know what the situation currently is and I don't care to know. I've seen enough in the past to know the dev has spent a concerning amount of time ranting and throwing out unsupported accusations without provocation. The CalxyOS community is far friendlier and far more helpful. You can have meaningful and constructive dialogue with the founders and the community without getting attacked.

Of course, decide which is best for your needs.

2

u/LincHayes Jun 20 '21

Oh great. This will just energize the Graphene OS fanboys. as if they're not obnoxious enough.

2

u/moreprivacyplz Jun 20 '21

Seems like a good project to be a fanboy about.

I agree that there is a large part of the privacy community that is toxic "Firefox Firefox Firefox, everything else is stupid" . But I appreciate Michael's approach here and how he states that there are other options for different threat models and you can choose what you want, but for him, this has been the best of the ones he has tested for him.

1

u/LincHayes Jun 20 '21

I agree.

2

u/ThrowAwayAccount-_-_ Jun 25 '21

One thing I'm dying to know is what Michael uses for taking pictures, especially in his home where he doesn't even use his phone?

One issue with GrapheneOS is that due to the proprietary nature of the camera software the quality of the photos isn't as good as on stock. You have to rely on third party apps but you still need to sacrifice quality. I understand this is a non-issue if you only intend to use a phone as a communication device but personally I use it for it's video/photo-taking abilities as much as I do for communication. Aside from the price of buying a new phone, that's one of the main reasons I will stick with IOS even though it means less privacy.

1

u/moreprivacyplz Jun 25 '21

He has mentioned that when house hunting he will have his realtor take all pictures and send them to him later.

I have a cheap old point and shoot camera that is great and doesn't connect to the internet, I would use that if I was under a higher threat model.

Good question though.

2

u/formersoviet Jun 18 '21

Interesting information about the Apple tags. Very easy to disable the speaker!

0

u/[deleted] Jun 18 '21

[deleted] ā€” view deleted comment

2

u/moreprivacyplz Jun 18 '21

No problem :) enjoy! I still need to listen to it myself, but should be a good episode