this post was submitted on 14 Sep 2024
41 points (93.6% liked)

Privacy

31991 readers
465 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I've had a Galaxy S22+ for 2 years and still want to use it. When I look up how to maximize privacy on Android, many results say to install custom ROMs which I can't since its a US model and the bootloader is locked. I just want to minimize tracking and sharing of personal information. I could use a firewall app like RethinkDNS to block trackers, but could I completely block tracking from Google and Samsung? Are there any lists of packages to uninstall to improve privacy? (I've used ADB to remove a bunch of bloatware. Ex: pm uninstall -k --user 0 com.samsung.android.arzone)

top 37 comments
sorted by: hot top controversial new old
[–] [email protected] 15 points 2 months ago (1 children)
[–] [email protected] 14 points 2 months ago (2 children)
[–] [email protected] 3 points 2 months ago (1 children)

Thanks for posting this! Didn’t know the original was not maintained anymore.

[–] [email protected] 2 points 2 months ago

Last Git commit to the old UAD repo was on April 10th, 2023, so yeah, I think it's fair to say that it's unmaintained. For comparison, UADng was last updated yesterday.

[–] [email protected] 1 points 1 month ago

Can also use Canta directly on the phone without needing a PC.

[–] [email protected] 8 points 2 months ago* (last edited 2 months ago) (1 children)

disable Google Play Services and the Google Play Store. And that will help a lot. And if you still need apps from the Google Store, you can use the Aurora Store from f-droid

Edit: you may also want to look into controld.com since their free dns blocks known malware, ads, and trackers. They have several options including standard DNS, DNS over HTTPS, and DNS over TLS, and Android supports DNS over TLS. So you can use it directly.

[–] [email protected] 3 points 2 months ago

I've found disabling play services on Samsung causes weird errors.

You can try, it may work.

Thanks for the DNS link!

[–] [email protected] 5 points 2 months ago (1 children)

Every time I think about running custom roms or degoogled stuff, I remember that NFC payments will no longer work and then I get sad.

[–] [email protected] -1 points 2 months ago* (last edited 2 months ago) (1 children)

Wdym? Google Wallet won't work, that's correct, but if your banking app works and has a built-in nfc payments support, then you'll be alright.

[–] [email protected] 2 points 2 months ago

Yes I mean google wallet. I've never heard of a banking app supporting NFC payments by itself, I was not aware that was even a thing... googling suggests that might be an EU-only thing.

[–] [email protected] 4 points 2 months ago (1 children)

What I did on my old Oneplus 7t (from a fresh install) was using Shelter to create a work profile and keep anything google related there. On the main profile I didn't sign in to google or installed any google apps. I also disabled all OEM bloatware and apps I didn't use. Not ideal, but better than nothing and all I could do before getting a new phone without unlocking the bootloader.

[–] [email protected] 2 points 2 months ago

The reverse may be a better option(?), as you can completely remove / disable ALL google services (google play, google play services, google framework, etc.) within the work profile

I use insular, which is a fork of shelter/island.

[–] [email protected] 3 points 2 months ago

I limit as much as I can through a combination of privacy-respecting apps and fewer apps (if I can reliably use the web browser for something, I will) and then use custom DNS filters (NextDNS) to minimise further leakage. I also disable any pre-installed applications I don't need (you can remove them with Universal Android Debloater but I don't need the extra storage space). I also use a VPN at all times.

[–] [email protected] 2 points 2 months ago (1 children)

many results say to install custom ROMs which I can’t since its a US model and the bootloader is locked.

Are you sure it can't be unlocked?

https://xdaforums.com/t/guide-to-root-galaxy-s22-plus-b-e-n-0-unlock-bootloader-and-flash-official-firmware-noob-friendly.4404351/

Many phones that don't officially support unlocking can be exploited to do so anyway. Some will lose relatively minor functionality in the process (camera enhancements were lost on mine, but the camera still works fine) but the tradeoff is often worth it.

[–] [email protected] 1 points 2 months ago

He is right, because usa samsungs coming snapdragon exclusive and most of them not unlockable nowdays. Exynos version is fine.

[–] [email protected] 1 points 2 months ago

You can "increase" your privacy but there's some limit, you can't block the manufacturer integrated trackers, the best you can is using something like rethink to block foreign app's trackers. Nothing more.

[–] [email protected] 1 points 2 months ago* (last edited 2 months ago)

The biggest hurdles are unavoidable under stock Android, but it really depends on your needs. What are you trying to protect against?

[–] [email protected] 1 points 2 months ago (1 children)

Cutoff internet access on all apps that expressly do not need it. Install Netguard or the likes if you don't used a VPN and see what apps are calling home.

[–] [email protected] 1 points 2 months ago (1 children)

I thought you needed root for app-level firewalls?

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago) (1 children)

Straight from their site.

NetGuard provides simple and advanced ways to block access to the internet - no root required. Applications and addresses can individually be allowed or denied access to your Wi-Fi and/or mobile connection.

Blocking access to the internet can help:

reduce your data usage save your battery increase your privacy

Edit: Uses the same slot as VPN on a phone. Thus you have one or the other. Not both. PC is different.

[–] [email protected] 1 points 2 months ago (2 children)

Unfortunately I cannot use a VPN because several apps I use (including android auto) do not work with it.

[–] [email protected] 1 points 1 month ago (1 children)

in netGuard you can create exceptions for apps that "do not work with" a vpn

[–] [email protected] 1 points 1 month ago (1 children)

how on earth does that work? I thought it had to have an always-on VPN connection to do any filtering (or not)

[–] [email protected] 1 points 1 month ago (1 children)

it's an "always-on vpn connection". NetGuard passes through the apps in the exception list unfiltered

[–] [email protected] 1 points 1 month ago

exactly... it needs the vpn to even pass anything through... but the apps that don't work with vpns... don't work with vpns. as in, it detects the presence of an android vpn connection and refuses to work, it's not related to what internet connection it actually uses, just that a system-controlled vpn is active on the device.

[–] [email protected] 0 points 2 months ago (1 children)

Then perhaps this could be a way for you to lockdown internet traffic to and from your device. Major privacy improvement.

[–] [email protected] 1 points 1 month ago

I don't understand how if this requires a VPN which I can't use?

[–] [email protected] -1 points 2 months ago

I would strongly recommend getting something with Lineage OS support at least. You can get a old phone for reasonably cheap

[–] [email protected] -5 points 2 months ago* (last edited 2 months ago) (2 children)

Just buy a new phone. Don't waste your life micro-managing malware. Spend your time on making money to buy a new phone.

Downvoted by broke bois but they ain't finding privacy anytime soon

[–] [email protected] 3 points 2 months ago (1 children)

Good advice but people have to suffer to learn these lessons.

Example: i spent years fighting windows but linux "too complicated" ... instead of wasting years learning linux i was running scripts and editing registry which always broke the OS eventually... rinse repeat...

[–] [email protected] 5 points 2 months ago (2 children)

This is the thing that gets me about that level of user. I understand basic users who dont care prefering windows, but I always kind of found it amusing to watch people "Linux too hard booo CLI.........now excuse me while I learn to manipulate the registry, and run scripts/disable certain things via the checks notes CLI."

[–] [email protected] 4 points 2 months ago (1 children)

guilty 🤡

the entire loop was idiotic waste of life instead of acquiring a valuable skill. let's be real any self respecting homeadmin has to be fluent in linux nowadays.

but at the end of the day it is proton/steam that opened the gates for this type of user to switch. if you are a gamer, you can figure linux mate lol

but yet we still people accepting windows parasite because CoD or BF, same guy prolly still buying intel chips 🫢

[–] [email protected] 4 points 2 months ago

Eh, no use crying over spilt milk, youre here now. :) Linux is still stuck in a weird cultural hole, its not your fault it took a while.

Ive always been familiar but a daily driver of windows. I started self hosting a year or two ago, and recently switched my office PC to Linux with a secondary win partition. Ive just never had issues with windows but I'm pretty tired of what they've been up too lately so for me it was time. Whenever I get around to grabbing another m.2 for my living room rig I'll do the same for it.

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago) (1 children)

Are there actually Windows users that say Linux is too complicated but then jump through hoops with registry even CMD prompt?!

[–] [email protected] 1 points 2 months ago

I can't speak to how often, but it definitely happens.

Its a perception thing, they see it as "I dont have to'learn' anything I just follow these tutorials" even though a similar amount of effort would get them through the few commands they might need on Linux.

[–] [email protected] 1 points 2 months ago (1 children)

I'm not micromanage it, that may be a privacy tradeoff i make for convenience. I want to see what I can do without constant maintenance.

[–] [email protected] 1 points 2 months ago* (last edited 2 months ago)

Like the other guy said, some only learn the hard way.