Sinisterly
Tutorial [Paranoia] 1: Mobile Privacy and Security - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Tutorial [Paranoia] 1: Mobile Privacy and Security (/Thread-Tutorial-Paranoia-1-Mobile-Privacy-and-Security)

Pages: 1 2 3

[Paranoia] 1: Mobile Privacy and Security - Blink - 12-13-2016

Paranoia 1: Mobile Security
Hey guys, I am making a new series of tutorials called Paranoia
This part will be on mobile security.

Nowadays big brother is never away, so we have to take extra precautions.
Most phones today are spied on by Google or Apple and the Government, this guide will be showing you ways to get around this.


Potential Complete Packages:
  • The Blackphone
  • The Turing Phone
  • Blackberrys
  • CyanogenMod-style ROMs
  • Replicant ROM
  • Copperhead OS

The Blackphone:
The Blackphone was created by silent circle, the Blackphone 2 retails at $599
I wouldn't put all my trust into it as it is made by a private company and is not open-source[ᶜᶦᵗᵃᵗᶦᵒⁿ ᴺᵉᵉᵈᵉᵈ], but it seems good enough.
However, it includes GAPPS (Google Apps) which completely destroys all your privacy.
Conclusion: Good for security, but useless when it comes to privacy

The Turing Phone:
Designed by Turing Robotics to be unhackable and running Sailfish OS, The Turing Phone is a likely candidate.
It looks awesome, but it seems like it won't go far.  I feel like it'll sell a few and then be forgotten.
It also looks expensive as hell.
You can find it here

Blackberrys:
Blackberrys are supposed to be super-secure, but they probably come pre-RATted by the government.
Also, THEY HAVE GOOGLE PLAY SERVICES
Conclusion: No, just no.

CyanogenMod-style ROMs:
Note: CyanogenMod has stopped development, this still applies to other AOSP based ROMs.
CyanogenMod is was a custom ROM based on AOSP that supports a large array devices, however it is not catored to privacy and security.  CyanogenMod does not come with GAPPS included.
CyanogenMod is great if you don't have a device that supports security/privacy-focused ROMs, but hardened ROMs are better for security.
Conclusion: Great, but there are better alternatives for security.

Replicant ROM:
Replicant is a rom for Samsung devices, it puts emphasis on freedom and privacy/security.
It seems good, but it also looks outdated, it is still on Android 4.2 and porting to Marshmallow is a slow process.
Conclusion: Needs to be updated.


Copperhead OS:
Open source, with an android port of PAX, Copperhead OS is a hardened rom for Nexus devices.
It seems like a great solution, but be sure not to install GAPPS.
It comes preloaded with F-Droid as an alternative for Google Play, we'll talk about this more later.
Conclusion: Seems Good, I will come back with a more detailed review when I get my Nexus.
Find it here


Alternatives for Common Apps:
  • Google Play - F-Droid [F-Droid is an open-source Android app store that only contains open-source apps]
  • Google Maps - MAPS.ME
  • Google Hangouts/Allo - XMPP (Any client works), Whisperchat, Signal
  • Messanger - QKSMS, Silence
  • Google Play Music - Apollo
  • Google Now/Google App - DuckDuckGo
  • Google Keyboard - AOSP Keyboard
  • Google Launcher - AOSP Launcher
  • Android Wear - Sony Smartwatch 1
  • Google Chrome - Firefox
  • Google Photos - Gallery (the one in F-Droid)
  • Google Camera - Camera (the one in F-Droid)
  • Whatsapp - Whisperchat, Signal
  • Gmail - Scryptmail, Protonmail, Tutanota, etc.
    (comment below for more ideas)

Reccomended Apps:
  • Orbot, Orfox and orWall
  • AIMSICD
  • AdAway

Good Ideas:
  • Only use Open-Source stuff (so anyone can look at the code to see if someone the app is spying on you)
  • Encrypt your Phone
  • Don't do stupid things
  • Add a [complex] password to your phone, another option is to use a fingerprint scanner, but a strong password can be better then a fingerprint scanner.
  • Don't give your phone to anyone

This concludes Paranoia Part 1, don't forget to watch for more Paranoia!

RE: [Paranoia] 1: Mobile Privacy and Security - pvnk - 12-13-2016

Signal is the best end to end encryption application for SMS alternatives.

RE: [Paranoia] 1: Mobile Privacy and Security - Blink - 12-13-2016

(12-13-2016, 12:57 AM)pvnk Wrote: Signal is the best end to end encryption application for SMS alternatives.

Thanks, updated!

RE: [Paranoia] 1: Mobile Privacy and Security - Bish0pQ - 12-13-2016

Nice thread, good formatting and usefull information. Keep it up!

RE: [Paranoia] 1: Mobile Privacy and Security - Pikami - 12-13-2016

I think you should have mention that there are open source custom ROMs that you can install on your phone, a lot of them come without GAPPS so you are free from big brother google.
I recomend "Replicant" for paranoid users if you don't like it you can use Cyanogenmod, but it's not targeted to paranoid users like Replicant is.

RE: [Paranoia] 1: Mobile Privacy and Security - mothered - 12-13-2016

I like the fact that this guide Is not cluttered with Info.

Straight to the point, effective and very Informative Indeed.
Good work.

RE: [Paranoia] 1: Mobile Privacy and Security - pvnk - 12-13-2016

(12-13-2016, 01:44 PM)Pikami Wrote: I think you should have mention that there are open source custom ROMs that you can install on your phone, a lot of them come without GAPPS so you are free from big brother google.
I recomend "Replicant" for paranoid users if you don't like it you can use Cyanogenmod, but it's not targeted to paranoid users like Replicant is.

It only officially supports Samsung devices lol. Also it looks like a horrrrrrrrrrible ROM. In terms of ghettooo

RE: [Paranoia] 1: Mobile Privacy and Security - Pikami - 12-13-2016

(12-13-2016, 04:42 PM)pvnk Wrote:
(12-13-2016, 01:44 PM)Pikami Wrote: I think you should have mention that there are open source custom ROMs that you can install on your phone, a lot of them come without GAPPS so you are free from big brother google.
I recomend "Replicant" for paranoid users if you don't like it you can use Cyanogenmod, but it's not targeted to paranoid users like Replicant is.

It only officially supports Samsung devices lol. Also it looks like a horrrrrrrrrrible ROM. In terms of ghettooo

>It only officially supports Samsung devices lol.
Porting a ROM to other phones takes a shit load of time.
>Also it looks like a horrrrrrrrrrible ROM. In terms of ghettooo
That's the price you pay for privacy...

RE: [Paranoia] 1: Mobile Privacy and Security - pvnk - 12-13-2016

(12-13-2016, 04:49 PM)Pikami Wrote:
(12-13-2016, 04:42 PM)pvnk Wrote:
(12-13-2016, 01:44 PM)Pikami Wrote: I think you should have mention that there are open source custom ROMs that you can install on your phone, a lot of them come without GAPPS so you are free from big brother google.
I recomend "Replicant" for paranoid users if you don't like it you can use Cyanogenmod, but it's not targeted to paranoid users like Replicant is.

It only officially supports Samsung devices lol. Also it looks like a horrrrrrrrrrible ROM. In terms of ghettooo

>It only officially supports Samsung devices lol.
Porting a ROM to other phones takes a shit load of time.
>Also it looks like a horrrrrrrrrrible ROM. In terms of ghettooo
That's the price you pay for privacy...
no, it's not. There are plenty of alternatives that won't have your phone looking like you got it from the junkyard.

RE: [Paranoia] 1: Mobile Privacy and Security - Blink - 12-13-2016

(12-13-2016, 01:44 PM)Pikami Wrote: I think you should have mention that there are open source custom ROMs that you can install on your phone, a lot of them come without GAPPS so you are free from big brother google.
I recomend "Replicant" for paranoid users if you don't like it you can use Cyanogenmod, but it's not targeted to paranoid users like Replicant is.
Thanks, updated!