Related
Hello and good day,
I haven't found any approach in this and ask this to everybody here around. Is there any interest in a security / privacy focused ROM that has the following features:
internet traffic through TOR
GPG / PGP KeyChain with Apps that support GPG / PGP
no apps that are calling home in any way
no facebook integration (but still possible to use facebook chat with OTR encryption)
without google play (add on possible) and focused on free software
possibillity to encrypt the whole phone OR specific folders
possibility to encrypt SMS text messages
Skype / WhatsApp / ICQ..... alternatives with encrypted OTR chat possibilities
video calling alternative based on XMPP or SIP (instead of skype and general video calls)
The apps for this are all there as free software. I just would compile everything in one CWM-flashable ROM that's ready to use.
Interest anyone?
In the first thoughts the following software would apply:
Based on stripped down (because ram matters in terms of fc and huge games) CyanogenMod 9
GPG/PGP: https://code.google.com/p/android-privacy-guard/
k9 mail: https://code.google.com/p/k9mail/
TOR (orbot): https://www.torproject.org/docs/android
browser: https://guardianproject.info/apps/orweb/
ad(-track) block: https://code.google.com/p/ad-away/
free software market: http://f-droid.org/
multi messanger: https://guardianproject.info/apps/gibber/
multi messanger: http://www.xabber.com/
multi messanger / video calls: https://jitsi.org/
maps: http://osmand.net/
openvpn service: http://code.google.com/p/ics-openvpn/
encfs / truecrypt: https://code.google.com/p/cryptonite/
lbe privacy guard (per app based solution to restrict permissions): http://forum.xda-developers.com/showthread.php?p=18948472#post18948472
search engine: https://duckduckgo.com/
kernel fxp216
I am interested in this! Even if there isn't much interest and you end up not making the rom, please post the names of the apps that it would contain for those interested
Sent from my R800i
updated 1st post with software suggestions
konstruktor said:
updated 1st post with software suggestions
Click to expand...
Click to collapse
I wish this idea would kick into high gear. After reading "No Place To Hide", I think it's time for a ROM with enough encryption and privacy options to make all of us safe.
JT
jttraverse said:
I wish this idea would kick into high gear. After reading "No Place To Hide", I think it's time for a ROM with enough encryption and privacy options to make all of us safe.
JT
Click to expand...
Click to collapse
the thing is you would be forced to use other services than that you are used to and that are common. you would have to say goodbye facebook, google, instagram and i dont know what most people use nowadays to give away their rights. as you can see in terms of replys - there are nearly none. no one with this device seem to be interested about that issue.
you would need to use services like jabber/xmpp instead of skype for example and tell your friends about the opportunity. it would be in interest for everyone but the effort for most people is too big.
and what you say about a safe phone - it's not even marginal possible. you can just encrypt your data so nobody can listen what you do. as you use a phone you can still be tracked by your phone number, other services you use with your browser, by blind sms messages used by feds...
edit: just check the first post. there are some alternatives. you can modify your phone like delete everything with the name google, facebook ......... in it and services / apps that require authentication and are calling home. there are several apps you can use to delete system applications and services. then install some new apps via f-droid that respect your privacy like some i mentioned in the first post
So, every device I've owned, I've had to use Messenger since they started it, as the messaging portion of the original app is disabled. There are workarounds for rooted phones to re-enable messaging without messenger.
I found a way to do it on my stock Sprint LS991 G4. I went into the play store and hit disable auto updates, went into app settings and uninstalled updates to both facebook and messenger, then I disabled messenger. Since then I've had full access to messaging in the native app, not a single popup asking for me to install messenger.
Don't know if anyone else is interested in this, but I figured I would post it, as a lot of people hate messenger.
Using m.facebook.com allows messaging without the app too.
Any faster fb chat app then massanger?
lisaquach said:
Any faster fb chat app then massanger?
Click to expand...
Click to collapse
Messenger not fast enough?
http://forum.xda-developers.com/showthread.php?t=2934179
I would use TinFoil for Facebook. Not a battery hog too!
Even if I click on the link for Facebook Lite or search it directly on the play store it doesn't come up. I've been able to find a workaround and since it's free and legal I've put the download link below. Looks like they've just pushed it out to a few countries.
You can download the latest version of Facebook Lite here:
https://f-droid.org/repository/browse/?fdfilter=Facebook+Lite&fdid=org.indywidualni.fblite
..Sent from an impeccable LG G4 on Verizon..
You can re-enable the facebook chat, no root required. Just did it on my brand new phone.
http://forum.xda-developers.com/android/apps-games/app-facebook-chat-enabler-t2934179
I just got my Pixel XL yesterday since I've set it up I've had this problem. When I open links, regardless of the app I open them from, they do not open in Chrome or whatever I have set for my default browser. Instead they open a sort of overlay WebView window. To clarify, these are not opening in the apps internal browsers (Like what is available in Twitter or Facebook). I have cleared all the default handlers, changed default browsers, tried from multiple apps, but this continues. I even did a chat with Google support and they claim this is supposed to happen. I have a video below of what I'm talking about. In the video I am clicking a link and instead of Chrome coming up, a window appears on top of Twitter and the link is rendered there.
Does anyone have any idea what would be causing this?
https://youtu.be/NHeNalBXG7s
Do you have any 3rd party browsers installed or any "multi-window" apps installed?
Scott said:
Do you have any 3rd party browsers installed or any "multi-window" apps installed?
Click to expand...
Click to collapse
I do not. Chrome is the only installed browser. Every app I have was also on my S7 before I switched and it did not have anything like this going on, even on the Nougat beta. I have never seen anything like this before.
Gotcha, and what app are you using to show the links to begin with? Sorry if I missed it in the OP.
EDIT: It has to be the originating app?
Scott said:
Gotcha, and what app are you using to show the links to begin with? Sorry if I missed it in the OP.
EDIT: It has to be the originating app?
Click to expand...
Click to collapse
This happens regardless of the originating app. It happens in Gmail, Inbox, Facebook, Twitter, my Reddit client, everywhere that has links that would normally be handled by the default browser.
This is part of nougat.. kind of.
Previously in android apps could use something called web view. Basically it was a built in generic mini browser that the app developer could customize to their liking and make it look however they wanted.
Now with Nougat they are trying to keep everything looking similar so apps can now use the mini browser thing which is part of Google chrome. Sounds like those apps your using might be using the old web view still
aholeinthewor1d said:
This is part of nougat.. kind of.
Previously in android apps could use something called web view. Basically it was a built in generic mini browser that the app developer could customize to their liking and make it look however they wanted.
Now with Nougat they are trying to keep everything looking similar so apps can now use the mini browser thing which is part of Google chrome. Sounds like those apps your using might be using the old web view still
Click to expand...
Click to collapse
This is not a WebView window like I've ever seen. Nor is it a Chrome Custom Tab. I have never seen anything like what my video shows.
I guess I'm just going to have to do a screen share support call with Google and hope they have a solution, even if it is a factory reset.
Have you tried opening your Google app from the app drawer, going into settings > accounts and privacy, and disabling "open web pages in app"?
Ya, this is a confusing one.
moot4prez said:
I just got my Pixel XL yesterday since I've set it up I've had this problem. When I open links, regardless of the app I open them from, they do not open in Chrome or whatever I have set for my default browser. Instead they open a sort of overlay WebView window. To clarify, these are not opening in the apps internal browsers (Like what is available in Twitter or Facebook). I have cleared all the default handlers, changed default browsers, tried from multiple apps, but this continues. I even did a chat with Google support and they claim this is supposed to happen. I have a video below of what I'm talking about. In the video I am clicking a link and instead of Chrome coming up, a window appears on top of Twitter and the link is rendered there.
Does anyone have any idea what would be causing this?
Click to expand...
Click to collapse
I watched your video. Yes that's different from what I get. Looks kinda cool. Looking forward to hearing what Google tells you.
A factory reset did the job. The only explanation I can think of is that for some reason my phone couldn't set a default browser. Anything that had an open to go from internal to external browsers (such as Twitter or Facebook) showed "Open in" instead of "Open in Chrome" even though my system settings showed Chrome as my default. Also, one of my default browsers listed was the Setup Wizard. I am thinking this is shenanigans from doing a USB transfer setup from an S7 on the Nougat beta.
Thanks to everyone for the suggestions!
moot4prez said:
A factory reset did the job. The only explanation I can think of is that for some reason my phone couldn't set a default browser. Anything that had an open to go from internal to external browsers (such as Twitter or Facebook) showed "Open in" instead of "Open in Chrome" even though my system settings showed Chrome as my default. Also, one of my default browsers listed was the Setup Wizard. I am thinking this is shenanigans from doing a USB transfer setup from an S7 on the Nougat beta.
Thanks to everyone for the suggestions!
Click to expand...
Click to collapse
The good news is you got it straight! :good:
Sorry to necro, but I have this problem now and I'm really not trying to factory reset after all the work I've done making this phone mine. Are there any developments on this? The WebView thing doesn't support YouTube which is killing me the most. A Google product that doesn't support YouTube...madness....
If anyone else finds this, disabling the Setup Wizard app resolves the issue. That app just tries to open all links rather than letting the default browser do the job.
I went through this exact situation, and couldn't figure it out. Here is a link to the thread i had started going through the entire process, its about 3 pages. It started with gmail, then got widespread. My end result was a reset also.
Here Is The Thread
So, eBay willing I will get my Huawei Mate Xs in about 10 days time.
And I have a difficult decision ahead of me. Do I Google or not?
Installing GMS and the Google apps will make my phone more like my existing Android device. But it will also introduce inevitable stability (and possibly security) issues.
Sticking to the Huawei apps avoids these, but limits my options somewhat.
What do you guys think. Do I Google or not?
If you can do without Google docs and drive, I say skip the Google hack. It's kinda risky. Even if you use the Mate XS as is without the hack, you can still use some Google services.
Gmail still works through Microsoft Outlook. Google calendar works through Business Calendar. Google Maps load fine even though can't sign in. Chrome works. Facebook Instagram WhatsApp all work.
So the only thing I use often that's missing for me is really Google drive, doc, YouTube. For latter I just go on the web browser to watch and it's ok. Not as good as app but not terrible.
I made a video of the whole setup if you're interested.
https://m.youtube.com/watch?v=JBzmPXS7KrA&
rcs1000 said:
So, eBay willing I will get my Huawei Mate Xs in about 10 days time.
And I have a difficult decision ahead of me. Do I Google or not?
Installing GMS and the Google apps will make my phone more like my existing Android device. But it will also introduce inevitable stability (and possibly security) issues.
Sticking to the Huawei apps avoids these, but limits my options somewhat.
What do you guys think. Do I Google or not?
Click to expand...
Click to collapse
radioraheem2 said:
If you can do without Google docs and drive, I say skip the Google hack. It's kinda risky. Even if you use the Mate XS as is without the hack, you can still use some Google services.
Gmail still works through Microsoft Outlook. Google calendar works through Business Calendar. Google Maps load fine even though can't sign in. Chrome works. Facebook Instagram WhatsApp all work.
So the only thing I use often that's missing for me is really Google drive, doc, YouTube. For latter I just go on the web browser to watch and it's ok. Not as good as app but not terrible.
I made a video of the whole setup if you're interested.
https://m.youtube.com/watch?v=JBzmPXS7KrA&
Click to expand...
Click to collapse
I agree. I'm using stock browser, email, and messenger. I can do almost everything just as if I was using Google.
misleading
radioraheem2 said:
If you can do without Google docs and drive, I say skip the Google hack. It's kinda risky. Even if you use the Mate XS as is without the hack, you can still use some Google services.
Gmail still works through Microsoft Outlook. Google calendar works through Business Calendar. Google Maps load fine even though can't sign in. Chrome works. Facebook Instagram WhatsApp all work.
So the only thing I use often that's missing for me is really Google drive, doc, YouTube. For latter I just go on the web browser to watch and it's ok. Not as good as app but not terrible.
I made a video of the whole setup if you're interested.
https://m.youtube.com/watch?v=JBzmPXS7KrA&
Click to expand...
Click to collapse
all due respect that video is not yours. its Ben from ben gadget review. please stop lying
rcs1000 said:
So, eBay willing I will get my Huawei Mate Xs in about 10 days time.
And I have a difficult decision ahead of me. Do I Google or not?
Installing GMS and the Google apps will make my phone more like my existing Android device. But it will also introduce inevitable stability (and possibly security) issues.
Sticking to the Huawei apps avoids these, but limits my options somewhat.
What do you guys think. Do I Google or not?
Click to expand...
Click to collapse
You can have the best of both worlds by downloading vmos. I have the Huawei mate xs and it is working well.
The issue I have with VMOS is that I know *nothing* about the company who makes it. You are giving an awful lot of power to a company where the owners are unknown, that has no obvious revenue model, and where the code is closed source.
I sent a message using their contact us form, to understand what they were doing and to see if I could help with commercialisation (I'm a reasonably successful tech entrepreneur).
But I got no response.
So... I might use VMOS to run Uber in, but I'm not connecting my Google account to it.
Just got mine, tried without... but it was just not possible, there were about 10 apps I use regularly that do not want to work without Google services. Plus there are several apps I have purchased that I could either not use at all or would have had to use the free version full of ads - just not an option.
The videos posted in this thread were really hard to follow, ommitted important steps etc.
For me this one was great, even if it was still a pain and I needed 3 hard resets before getting there.
https://www.youtube.com/watch?v=lYOU_YxrHhc
Now I only have 2 apps I can't use: Google Play music (but that plays fine in the browser so no big deal, also on VMOS if needed to be offline), and... the most stupid of things, the McDonald's app for getting coupons. That damn app is more protected than games and banking apps, it's ridiculous... it won't run on VMOS either.
EDIT: Damn it's been a while since I've been here, [email protected]
radioraheem2 said:
If you can do without Google docs and drive, I say skip the Google hack. It's kinda risky. Even if you use the Mate XS as is without the hack, you can still use some Google services.
Gmail still works through Microsoft Outlook. Google calendar works through Business Calendar. Google Maps load fine even though can't sign in. Chrome works. Facebook Instagram WhatsApp all work.
So the only thing I use often that's missing for me is really Google drive, doc, YouTube. For latter I just go on the web browser to watch and it's ok. Not as good as app but not terrible.
I made a video of the whole setup if you're interested.
https://m.youtube.com/watch?v=JBzmPXS7KrA&
Click to expand...
Click to collapse
What about youtube music or banking apps?
Youtube Music works for me. Google play music didn't but since that's going to be killed shortly and once should migrate to YTM and use that it's what I did.
Banking apps most of mine work, only one doesn't.
im think for buy the huawei xs but if the xda dont want unlock root ....
I'm getting mine tomorrow and I'll try it without GMS and see how I like it. Biggest drawback I see is the lack of native Youtube app support, I prefer not to use the browser version.
So i've just seen this video with the title: How to De-Google LineageOS by Mental Outlaw
Content:
Changing the DNS server
Changing the Captive Portal
Changing the Android System WebView implementation
Changing the SUPL Host server
Changing the NTP server
Removing bloatware Google packages
What i already did on my phone running lineageos: set DNS to Quad9 and disable google SUPL, actually i'm not sure which term to use, is SUPL the same as google con check?
Steps taken:
• disable connectivitycheck.gstatic.com (google con check)
• rooted with magisk app
• install termux app
• run termux and type following commands one by one:
su
whoami (verify you are root)
settings put global captive_portal_mode 0
settings list global | grep portal
So instead of changing the "SUPL" server as the person in the video did, i've set it to 0, asuming this is good enough.
But what about the rest, are these steps important? For example is webview implementation permanently active and could it phone home to google or is it only active when viewing a webpage inisde of an app?
LineageOS is de-Googled by default.
Do a clean install of LineageOS, but don't flash your OpenGapps/MicroG zip, only your LineageOS zip.
catto_ said:
LineageOS is de-Googled by default.
Do a clean install of LineageOS, but don't flash your OpenGapps/MicroG zip, only your LineageOS zip.
Click to expand...
Click to collapse
Did you even read my post??? LineageOS isn't fully de-googled, zzz.
Privacydroid said:
So instead of changing the "SUPL" server as the person in the video did, i've set it to 0, asuming this is good enough.
Click to expand...
Click to collapse
you've probably broken something GPS related then since it cant ping for some data.
not sure what tho, and if you dont care about gps or dont use that specific gps feature it doesnt matter anyways, just anytime it tries to ping that site it'll time out since 0 isnt a dns/ip address
Privacydroid said:
But what about the rest, are these steps important? For example is webview implementation permanently active and could it phone home to google or is it only active when viewing a webpage inisde of an app?
Click to expand...
Click to collapse
nope, its not permanentally active
its just chromium
mental outlaw (and alot of other linux youtubers) antagonize chromium (for good reason, im a firefox user myself) but they blow it out of proportion, after all chromium isnt riddled with spyware (unlike chrome).
getting rid of the systemwebview is more of a "F** YOU" to google to disturb their market share
yes chromium has some google components (not sure if the webview has any tho) but afaik they dont phone home normally unless you connect to a google account
and yes, its only active while browsing the web using an app that utilizes webview. if you do all your web browsing on a different browser (eg. firefox, brave, bromite) then theres no webview to worry about.
pro-tip btw: use the web versions of all social medias, you avoid using the integrated web view and dont need extra bloat on your device. even the heavier javascript-riddled ones work okay on my 2014 galaxy s5 (72C cpu tho..)
RDS5 said:
you've probably broken something GPS related then since it cant ping for some data.
not sure what tho, and if you dont care about gps or dont use that specific gps feature it doesnt matter anyways, just anytime it tries to ping that site it'll time out since 0 isnt a dns/ip address
nope, its not permanentally active
its just chromium
mental outlaw (and alot of other linux youtubers) antagonize chromium (for good reason, im a firefox user myself) but they blow it out of proportion, after all chromium isnt riddled with spyware (unlike chrome).
getting rid of the systemwebview is more of a "F** YOU" to google to disturb their market share
yes chromium has some google components (not sure if the webview has any tho) but afaik they dont phone home normally unless you connect to a google account
and yes, its only active while browsing the web using an app that utilizes webview. if you do all your web browsing on a different browser (eg. firefox, brave, bromite) then theres no webview to worry about.
pro-tip btw: use the web versions of all social medias, you avoid using the integrated web view and dont need extra bloat on your device. even the heavier javascript-riddled ones work okay on my 2014 galaxy s5 (72C cpu tho..)
Click to expand...
Click to collapse
Well, "F** YOU GOOGLE" sounds great to me. Might just not be worth the time if webview doesn't phone anyways, but i rather be sure on that instead of guessing.
I wouldn't be so sure that google components don't phone home without a google account.
So an app utilizes webview means it'll phone home to google, then when is webview utilizesed, permanently while that specific app is in use or only while that app who has the capability of utilizeising webview does actually make use of the "feature".
Bromite is great, just falls behind on updates lately.. there aren't really other great options..
Yeah using services via webbrowser instead of installing an app is always preffered.
PS; most of social media is a cancer, i don't use any )
Privacydroid said:
Well, "F** YOU GOOGLE" sounds great to me. Might just not be worth the time if webview doesn't phone anyways, but i rather be sure on that instead of guessing.
I wouldn't be so sure that google components don't phone home without a google account.
So an app utilizes webview means it'll phone home to google, then when is webview utilizesed, permanently while that specific app is in use or only while that app who has the capability of utilizeising webview does actually make use of the "feature".
Click to expand...
Click to collapse
afaik it doesnt tho, thats why many use chromium. if it does its likely "anonymized" to some extent (still can be de-anonymized) but its minimal enough that most linux distributions (including those with stricter rules) allow plain chromium into their repos.
most apps i use are web-based anyways so i just use them in firefox..
Privacydroid said:
Bromite is great, just falls behind on updates lately.. there aren't really other great options..
Click to expand...
Click to collapse
i wish firefox supported webview (possible since geckoview exists) but there doesnt seem to be any work on that done. im not going to use bromite as the minor "im not phoning home the 0.3% of the time i actually need to use an app that uses webview" is too little for the "i have to flash new bromite versions as root any time i wanna update it"
Privacydroid said:
Yeah using services via webbrowser instead of installing an app is always preffered.
PS; most of social media is a cancer, i don't use any )
Click to expand...
Click to collapse
yeah
in general i only use youtube because of the educational and tutorial content on there (which they clearly dont realize is one of the most important parts of their platform, hence the removal of the dislike) but their algorithm is very in favor of clickbait and its ruining these channels..
i wish more would use something like newpipe