yeah the android thing is a huge privacy hole. getting a custom OS like Lineage, Calyx, or Graphene should be in everyone’s top 3 first things to do. it will plug a lot of holes.
dont worry. this step isnt super difficult, definitely not a losing battle. just take it one step at time! i did the same, and i feel like im in a good place now, so it’s definitely doable :)
Is this about browsers or about privacy in general?
But your privacy should be tailored to your specific threat model and desires. Or, you can choose to be private as possible while keeping your convenience, and slowly be more private. You should not just be hardcore and right away. This will leave you feeling hopeless.
As far as browsers, i recommend Librewolf or mullvad browser, or Brave for Chromium. You do not need to use TOR for everything. A good quality VPN like mullvad vpn or proton is more than sufficient for most people.
Which setting exactly are you referring to?
it seems like you merely need to disable the “Block connections without VPN”.
Then in your android settings there should be a toggle to deny network access to certain apps in the android permission settings. so the apps that are split tunneled you can just deny or allow network
should we? what do they do exactly? or what have they done?
im asking purely out of curiosity. i dont know much about them
tuta has an open source email app, have you tried it?
Just use cash or prepaid. Simple.
ik but signal doesnt give you the option even
check out freetube for invidious
check out newpipe as well for peertube
i assume that the official telegram client uses FCM. but the Telegram FOSS client on Fdroid and its forks use a background service.
yeah funny how the oh-so-private and amazing signal allows bad actors to take over your account with sim access, and telegram does not.
Cromite is the closest thing i can think of to Librewolf. Tons of hardening. but i dont think he ships a Linux version. just android and windows.
this is a physical access attack. if they already have physical access they can do a million other things too. this is kind of not important to be fair.
with OSS you dont get all those neat hidden surprises :( no fun
I’ve thought about this for a long time. Nice to see it getting attention.
this is why I don’t really appreciate Graphene’s sandboxed google play services as much as I appreciate MicroG. MicroG allows you to control which GPS-compatible apps get registered to your random ID on google’s servers.
It’s also worth studying your individual apps and how exactly they handle google push notifications. I know that there are various configurations, some which allow Google to see the content of the notification and some which done. of course, regardless of that, metadata such as who it gets delivered to and when, is still there.
you want to do scans before the content is posted? or you want to scan existing content online that you posted?
you could self-host LanguageTool for paraphrasing capability, which would vastly reduce stylometry correlations
simplex uses relays/servers, but incoming and outgoing messages are configured to pass through separate servers. you can see this in the network settings