this post was submitted on 19 Feb 2024
531 points (96.8% liked)

Privacy

31782 readers
334 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I created a google takeout and in that zip file I found some files containing a ton of data about me. It has logged every single page I visited while using the google search engine and chrome browser. It even logged every single time I opened an app on my old android phone. It even has VOICE RECORDINGS of me and a log of every time I used google assistant. This is just some of the data and I'm very sure there is even more data they have.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 23 points 8 months ago (9 children)

I might be looking into a new phone soon, what do you suggest?

[–] [email protected] 40 points 8 months ago (3 children)

A pixel, if you buy into GrapheneOS being the pinnacle of security. Otherwise, anything with an unlockable bootloader and LineagOS support.

[–] [email protected] 12 points 8 months ago (1 children)
[–] [email protected] 4 points 8 months ago
[–] [email protected] 6 points 8 months ago

It's actually quite ironic that the best phone to degoogle your life is sold by google.

[–] [email protected] 3 points 8 months ago (2 children)

Dont forget CalyxOS. IMHO better than Graphene

[–] [email protected] 4 points 8 months ago (1 children)

CalyxOS has pretty bad security. They install F-Droid and microG with root privileges, don't release updates regularly and lack many security features of GrapheneOS.

[–] [email protected] 2 points 8 months ago (1 children)

Different strokes, but I personally dont think yge Graphene devs are trustworthy, and much prefer Calyx.

I'm also not afraid of root. Its how I harden my device (eg firewall)

[–] [email protected] 0 points 8 months ago (1 children)

GrapheneOS has a built in Firewall that doesn't require root privileges. Also, you don't trust the GrapheneOS devs who arguably create one of the most secure operating systems on the planet, which is open source and can be verified by everyone, but you trust Calyx devs who regularly go months without releasing any Android security patches and include highly privileged third party apps in their operating system. Makes a lot of sense.

[–] [email protected] 0 points 8 months ago (1 children)
[–] [email protected] 2 points 8 months ago

Oh sorry, my bad. I meant it's not some third party app that has to be installed with root privileges, but rather just a well integrated part of the system, which uses Android's permission system to deny internet access.

[–] [email protected] 28 points 8 months ago (2 children)

Ironically enough, Google Pixels are great phones if you need to de-google with GrapheneOS.

[–] [email protected] 5 points 8 months ago (2 children)

I just can't buy it and support them

[–] [email protected] 10 points 8 months ago (1 children)
[–] [email protected] 7 points 8 months ago (1 children)

Shameless plug for backmarket. They're pretty solid

[–] [email protected] 2 points 8 months ago (1 children)
[–] [email protected] 2 points 8 months ago (1 children)

Depending on the state of the thing you're looking at, maybe? A pixel 6 pro goes for ~220 on backmarket and ~210 on eBay. Does eBay guarantee free 30 day returns and have a great 1 year warranty? Depends on the seller. Backmarket offers it sitewide. Id rather pay a few extra bucks to not have to fight with someone over getting my money back or my shit fixed

[–] [email protected] 1 points 8 months ago

I usually never spend more than $100 on a used phone. The $100 phones on eBay can't be found for the same price on backmarket

[–] [email protected] 1 points 8 months ago
[–] [email protected] 13 points 8 months ago (1 children)
[–] [email protected] 6 points 8 months ago (3 children)

Can you use banking apps on it?

[–] [email protected] 4 points 8 months ago (1 children)
[–] [email protected] 4 points 8 months ago* (last edited 8 months ago)

Will this still be true after safetynet is deprecated? Not trying to be difficult, just don't want to get my hopes up.

Edit: ah its adressed in the link lol

[–] [email protected] 2 points 8 months ago (3 children)

Why would you want to use a banking app on something as insecure as a phone??!?

[–] [email protected] 5 points 8 months ago (2 children)

When your bank tells you that the code booklet will be phased out and mobile app will be the only way in the future.

[–] [email protected] 2 points 8 months ago
[–] [email protected] 2 points 8 months ago

Change banks that take security seriously

[–] [email protected] 2 points 8 months ago (1 children)

As long as you don't use some shady, unofficial ROM on a phone, most phones are actually vastly more secure than your typical Linux/Windows OS.

[–] [email protected] 1 points 8 months ago

How long is your passphrase on your phone compared to your Linux/windows OS?

A phone is designed for quick usability, which is the enemy of security.

Sure, if you have a 20 char password on your phone and never install any sketchy apps, then it might be ok. But the whole phone ecosystem is just less secure because its designed for convince, not security.

[–] [email protected] 1 points 8 months ago (1 children)

A phone is more secure than most desktop computers. https://youtu.be/Wd4Pa03LvLk

GrapheneOS even significantly improves Android's already pretty good security model.

[–] [email protected] -1 points 8 months ago (1 children)

Riiight, someone's phone with a 4 digit pin that they tap out 100x per day in public in plain view of others (that I can easily pick out of your pocket) is more secure than a laptop with a 20 character passphrase that never leaves my house.

Do you even think about what you're saying?

[–] [email protected] 2 points 8 months ago (1 children)

I'm talking about the security model of the platform, not the way you use your devices. If you do your online banking in a browser on your computer and your system gets infected with malware, that malware can access all the files on your computer. Including application data of your browser. It can access your cookies, which your bank's website uses to store your login information. Such an attack is impossible on a mobile device, since apps can only access their own data, and inter-process communication is heavily restricted. Additionally, mobile operating systems like Android have complex permission systems, as well as kernel-based mandatory access control like SELinux/SE for Android. Your typical desktop OS has none of that. Android also has a strong implementation of Verified Boot, which makes sure that malware can't persist on your system partition, even after your device gets infected. I recommend this video if you want to learn more about mobile device security: https://youtu.be/yTeAFoQnQPo

[–] [email protected] -1 points 8 months ago (1 children)

QubesOS and TAILS solve this issue. If people dont use those, then I recommend a distinct computer for finances only. Thats more secure than using an Android app for banking.

[–] [email protected] 2 points 8 months ago (1 children)

No, Tails doesn't solve this issue at all. It's built for maximum anonymity, not security. It also uses Tor for all connections, which will get your bank account locked immediately. Qubes is a good option for security, but it's way too complicated for most users. Stop making up some random shit and accept that mobile devices running modern operating systems are reasonably secure and definitely more secure than your ordinary desktop.

[–] [email protected] 1 points 8 months ago* (last edited 8 months ago) (1 children)

You can't get persistent malware if all browser history and installed apps disappear every time you reboot. Yes, TAILS was designed for security. Yes, TAILS was also designed for privacy. Obviously its no longer anonymous if you log into your bank.

Tor Browser is by far the most hardened & secure web browser. If a bank is blocking Tor, that bank probably doesn't understand security and its a red flag. Choose another bank. Or, better, use monero. Its way more secure than banks.

Disclaimer: I used to work in info security for a bank in Europe.

[–] [email protected] 0 points 8 months ago

Basically every bank blocks Tor and many even block VPNs. Also, Tor Browser is not particularly secure. It's been designed for fingerprinting resistance and network anonymity through the Tor network. The Tor Browser is based on Firefox, which lacks many important security features like site isolation, Control Flow Integrity or any meaningful sandboxing. I absolutely hate Google and their monopolistic business practices, but Chromium is by far the most secure browser. Especially when it's running on a secure mobile operating system. GrapheneOS goes even further than Android and deploys a hardened memory allocator (which was actually ported from OpenBSD), which significantly reduces the risk for memory coruption. On the newest generation of mobile SOCs (ARMv9), GrapheneOS enables memory tagging by default. Again, find me a desktop platform with MTE. This once again proves my point that mobile devices are simply more secure. Every single piece of hardware and software in your phone has been built with a strong focus of security.

Or, better, use monero.

I absolutely agree on this one. Look at the Lemmy instance I'm on. I'm a big fan of Monero, but unfortunately there aren't many places that accept XMR.

[–] [email protected] 11 points 8 months ago

If you want a normie phone that you can install a privacy-focused OS on, Google Pixel is a surprisingly good option. Just take a look at the LineageOS's and GrapheneOS's officially supported devices lists before purchasing a specific model. You can also choose Xiaomi or Motorola but you won't be able to lock the bootloader with a custom OS installed on that phones which can create some vulnerabilities. If you want to run Linux on your phone though, you either need a PinePhone or a OnePlus 6 series

[–] [email protected] 8 points 8 months ago* (last edited 8 months ago)

Look for DivestOS supported devices. What I cannot recommend is Fairphone. Several Hardware issues, support refuses to accept them. The support in general is horrible.

Kind regards
A Fairphone 4 user with /e/OS

[–] [email protected] 7 points 8 months ago (1 children)

Look at which devices are supported my grapheneos, calyxos, /e/os and ubuntu touch/droidian and get the newest one of those that you can afford. Usually a google pixel (ironically) but also fairphone are well supported and are better IMO.

[–] [email protected] 1 points 8 months ago (1 children)

Ubunto Touch is still a thing? Does it get updated forever like normal Linux distros do?

[–] [email protected] 2 points 8 months ago

Yeah buddy. It's still getting updates; for how long though depends on the developers of course. Use it and bung them a donation! You can even install full Linux apps on it via Libertine, although it's slightly easier on Droidian IIRC. Very, very cool stuff.

[–] [email protected] 4 points 8 months ago

I bought a fairphone 4 awhile ago from Murena, the only US distributor. Other phones have more bells and whistles but I feel better knowing I can repair it if something goes wrong. If you're in Europe the FP5 is a good bet but I don't think anyone is selling them in North America. I don't know about distribution elsewhere.

[–] [email protected] 4 points 8 months ago

Get a Pixel and install a custom ROM. Any ROM is fine, just dont install gapps. You actually have to go out of your way to install google crap. By default a new install is google-free