Android + PC Privacy/Security App Lists

[dogcat]

This link features prefer / avoid lists of programs that can help limit personal data harvesting from computer devices.

https://prism-break.org/en/all/

Posted to "security" as privacy and security can go hand in hand.

[dogcat]

Recommended apps list for Android devices with comparisons from the maintainer of DivestOS.

https://divestos.org/pages/recommended_apps

[8Geee]

Just checked in, and saw this... I've been using proton since I changed my website. A better choice than squirrel mail, titan mail, and other webhost choices.

regards
8Geee

[dogcat]

An interesting page that someone put together listing a bunch of FOSS F-Droid alternative apps with descriptions.

https://alternativeto.net/list/28655/th ... oid-setup/

F-Droid is an android repository that specializes in free and open source software that does not track or spy.

[dancytron]

https://simplemobiletools.com/index.html

You can put together a pretty much google free full function android phone with them.

A few app's cost a couple of bucks, but most are free.

They were making a phone or at least talking about it at one time viewtopic.php?p=75274&hilit=simplemobiletools#p75274

[dogcat]

https://simplemobiletools.com/index.html

You can put together a pretty much google free full function android phone with them.

A few app's cost a couple of bucks, but most are free.

They were making a phone or at least talking about it at one time viewtopic.php?p=75274&hilit=simplemobiletools#p75274

Simple Mobile Tools were just sold to Israeli company ZipoApps that specialize in buying open source apps and putting tracking adware in them. The whole suite of tools were sold.

https://www.ghacks.net/2023/12/05/warni ... publisher/
https://www.androidauthority.com/simple ... n-3391041/

The last clean versions will always be available at f-droid.org but it is the end of the line for them as far as being FOSS.

[dogcat]

Another good place to visit for FOSS Android apps that respect privacy and security.

https://github.com/offa/android-foss

[dancytron]

Sorry to hear that.

Do you think anyone will fork them under a different name?

[darksun]

already done

https://github.com/FossifyOrg

[dancytron]

already done

https://github.com/FossifyOrg

The only one that has made it to F-droid so far is Gallery. I assume they are going to post the rest of them.

I don't need them bad enough to side load.

[dogcat]

already done

https://github.com/FossifyOrg

The only one that has made it to F-droid so far is Gallery. I assume they are going to post the rest of them.

I don't need them bad enough to side load.

These are the simple mobile apps I see on f-droid, they are the final versions before the sale.
Funny that Simple Gallery Pro is missing, perhaps that is the (new) build that you found?

Code: Select all

https://f-droid.org/en/packages/com.simplemobiletools.keyboard/

https://f-droid.org/en/packages/com.simplemobiletools.notes.pro/

https://f-droid.org/en/packages/com.simplemobiletools.calendar.pro/

https://f-droid.org/en/packages/com.simplemobiletools.filemanager.pro/

https://f-droid.org/en/packages/com.simplemobiletools.draw.pro/

https://f-droid.org/en/packages/com.simplemobiletools.thankyou/

https://f-droid.org/en/packages/com.simplemobiletools.launcher/

https://f-droid.org/en/packages/com.simplemobiletools.smsmessenger/

https://f-droid.org/en/packages/com.simplemobiletools.flashlight/

https://f-droid.org/en/packages/com.simplemobiletools.voicerecorder/

https://f-droid.org/en/packages/com.simplemobiletools.dialer/

https://f-droid.org/en/packages/com.simplemobiletools.calculator/

https://f-droid.org/en/packages/com.simplemobiletools.musicplayer/

https://f-droid.org/en/packages/com.simplemobiletools.camera/

[dogcat]

already done

https://github.com/FossifyOrg

The only one that has made it to F-droid so far is Gallery. I assume they are going to post the rest of them.

I don't need them bad enough to side load.

Ok I get how these are being distributed, the new brand name is Fossify, changed from Simple Mobile Tools.

Search for Fossify at https://apt.izzysoft.de/fdroid/index.php
The search found Fossify Gallery, Fossify Calendar & Fossify File Manager
These are being maintained by one of the original developers of the simple mobile tools apps.
Nice to see they hit the ground running!

Izzysoft Is distributing them for now, Izzy is associated with f-droid and is a safe official alternate repository of both current and all older versions of what f-droid has offered in the past, and now these bleeding edge apps that are not yet available on f-droid.

[dogcat]

This is a nice list of privacy respecting FOSS apps recommended by users of /e/ OS forum.
https://community.e.foundation/t/list-r ... ions/32970

[Jasper]

@dogcat

Have you used/tried a panic app eg Ripple (Guardian Project) ?

The only issue I have with these applications is that I don't have a phone that I can just wipe & clean for testing. Which is annoying as if and when you ever need it, you have no idea if it will work on not.

[dogcat]

@dogcat

Have you used/tried a panic app eg Ripple (Guardian Project) ?

The only issue I have with these applications is that I don't have a phone that I can just wipe & clean for testing. Which is annoying as if and when you ever need it, you have no idea if it will work on not.

@Jasper Test Dummy at your service! I just installed Ripple from f-droid to see what it does, the download was built in 2019, kinda old. It found 6 apps that are compatible on my tracking device. The apps it found were Molly, Silence, Briar, Deltachat, NewPipe and OpenKeychain. The trigger is only to hide the apps on the menu on these, no other option. It allows you to choose which app(s) to run the trigger on, I just enabled Molly and ran it through, it did not hide it on my menu. I uninstalled it. You can experiment on one of the apps I listed to see if it does anything on yours, not something I would use. There is no list of compatible apps either.

[Jasper]

@dogcat

Thanks for doing that for me The only app on my list that is similar to yours is NewPipe ..... not using LIbreTube ?? Just like NewPipe but behind a proxy for your requests (....maybe downloads too?) .

I found similar application on FDroid called "Wasted" (Lock and wipe on emergency)

It is also on GitHub:

https://github.com/x13a/Wasted/releases

Ideally, I would like the phone if someone enter the PIN code wrong (x attempts) or better still a pre-supplied PIN that would do a factory reset.

[dogcat]

Ideally, I would like the phone if someone enter the PIN code wrong (x attempts) or better still a pre-supplied PIN that would do a factory reset.

@Jasper Locker maybe?
https://f-droid.org/en/packages/net.zygotelabs.locker/

I will not test that one though, too much can go wrong!

Will give LIbreTube a looksee too.

[Jasper]

@dogcat

That's what I was looking for.

So, to use the application, I would need to setup and encrypted volume on the phone that contained all the applications and data.

The panic key would be set then if the designated incorrect PIN was entered.

This would trigger the phone to carry out a factory reset.

I think I read that you can leave the phone screen off so that the user is not aware that these commands are running in the background.

A factory reset doesn't really achieve much its the creation of an encrypted mountable volume that hosts the applications and the data.

Does that sound right to you?

BTW another useful application (untested by me atm ) ...... Remote Video Cam, no configuration required apparently and works on a LAN.

https://f-droid.org/en/packages/org.avm ... evideocam/

[dogcat]

@dogcat

That's what I was looking for.

So, to use the application, I would need to setup and encrypted volume on the phone that contained all the applications and data.

The panic key would be set then if the designated incorrect PIN was entered.

This would trigger the phone to carry out a factory reset.

I think I read that you can leave the phone screen off so that the user is not aware that these commands are running in the background.

A factory reset doesn't really achieve much its the creation of an encrypted mountable volume that hosts the applications and the data.

Does that sound right to you?

BTW another useful application (untested by me atm ) ...... Remote Video Cam, no configuration required apparently and works on a LAN.

https://f-droid.org/en/packages/org.avm ... evideocam/

@Jasper
I dont know what if any encrypted volumes are needed for locker itself but your android version may require encryption to implement the security. My android 12 automatically encrypts the internal storage and optionally encrypts the sdcard storage
Found some info about Locker at these links
https://nexus5.gadgethacks.com/how-to/m ... n-0157407/
https://archive.softwareheritage.org/br ... directory/
Looks interesting, would be useful if there was a need to protect the phone data.

[Jasper]

Free VPN Apps on Google Play Turn Phones into Proxies - March 26, 2024

Several free Android VPN apps have been found to support a malicious residential proxy operation named ‘Proxylib.’

Proxylib infects Android devices with an agent that conceals malicious activities such as ad fraud, bot usage, or more dangerous operations like malware distribution and phishing campaigns. The agent routes user traffic through the infected Android devices, making it appear as if it originates from a legitimate, non-blocklisted source, which is essentially a residential IP address.

Here’s a list of the Android free VPN apps that acted as network traffic proxies:

Lite VPN
Byte Blade VPN
Fast Fly VPN
Fast Fox VPN
Fast Line VPN
Oko VPN
Quick Flow VPN
Sample VPN
Secure Thunder
Shine Secure
Speed Surf
Swift Shield VPN
Turbo Track VPN
Turbo Tunnel VPN
Yellow Flash VPN
VPN Ultra
VPN Run

Source:
https://restoreprivacy.com/free-vpn-app ... o-proxies/

[wiak]

Free VPN Apps on Google Play Turn Phones into Proxies - March 26, 2024

Several free Android VPN apps have been found to support a malicious residential proxy operation named ‘Proxylib.’

Proxylib infects Android devices with an agent that conceals malicious activities such as ad fraud, bot usage, or more dangerous operations like malware distribution and phishing campaigns. The agent routes user traffic through the infected Android devices, making it appear as if it originates from a legitimate, non-blocklisted source, which is essentially a residential IP address.
...
Source:
https://restoreprivacy.com/free-vpn-app ... o-proxies/

Android provides such useful mobility, but seems to me that only Linux can be trusted to avoid most (not all) major issues like these. At least we have a lot of control over our Linux OS operations, but tend to be slaves to whatever the likes of Android, and other OS devices, provide.

I do use Android, and usefully sometimes as a hotspot, but simple ones provided as official with main phone. I'd trust the likes of vnc client and/or server usually, depending on where its source comes from; I want to any way cos planning to use larger Android tablets as remote access to single Linux laptop to save carrying too many heavier laptops around. VPN software is nice, but I'll stick to Linux and implementations that have a good reputation now...

[Jasper]

ASUS refunds UK Zenfone buyer for failing to provide bootloader unlock tools as promised

05 April 2024

Unlocking the bootloader of an Android phone is a way of getting full access to the system. It allows you to manipulate the software already installed on the device and even uninstall it and reinstall a new version of Android. While this is often complicated to do, it provides a way for smartphone owners to continue to use their devices after an OEM has terminated support.

Given that ASUS has one of the worst software support commitments in the Android world, many tech-savvy ASUS buyers have depended on bootloader unlocking to continue using the company’s phones far beyond the dismal two-year window ASUS provides. In fact, ASUS has essentially acknowledged this phenomenon by promising to continue providing the necessary tools to bootloader unlock its phones.

However, last year, it reneged on that promise by disabling the unlocking tools and refusing to give users the codes they needed to perform the procedure. It started removing posts about bootloader unlocking in its ZenTalk forums. Mods of that forum started giving explanations about the unlocking tools being under maintenance or getting overhauled for compliance reasons but giving no information on when they would become active again.

Source:
https://www.androidauthority.com/asus-b ... t-3431818/

[dogcat]

ASUS refunds UK Zenfone buyer for failing to provide bootloader unlock tools as promised

05 April 2024

Unlocking the bootloader of an Android phone is a way of getting full access to the system. It allows you to manipulate the software already installed on the device and even uninstall it and reinstall a new version of Android. While this is often complicated to do, it provides a way for smartphone owners to continue to use their devices after an OEM has terminated support.

Unlocking the bootloader allows an operating system change if there has been one compiled for that exact device.

After unlocking and installing a different build of android it may be important for some people to relock the bootloader as there are apps that will refuse to work with an unlocked bootloader, such as banking apps, etc.

One thing that is important is if a phone has an unlocked bootloader and has important user data because you have been using the phone with the bootloader unlocked, by relocking the bootloader the phone will be reset and all user data will vanish. Playing with the bootloader without a backup of important data is a no-no.

Just thought that was worth a mention.

[dogcat]

How to set up a free account on the Cloudflare Warp VPN server.

The Cloudflare Warp VPN server uses the Free and Open Source Wireguard VPN as the communications protocol for their VPN services.

What is nice about Cloudflare using WireGuard as their VPN protocol is that you can use the official FOSS Wireguard client to access the Cloudflare VPN. Cloudflare does not tell you that and only references their Cloudflare 1.1.1.1 closed source client for install.

These are instructions to set up an account on the Cloudflare Wireguard VPN server using the FOSS Wireguard Client for access. These instructions work for Linux, Android and some other operating systems. On Android the Wireguard VPN client is not only open source but is very much lighter on the battery than the official closed source Warp client.
https://bobcares.com/blog/setup-cloudfl ... rd-client/

The wgcf utility mentioned in the instructions
https://github.com/ViRb3/wgcf/releases

Android Wireguard client info & download at izzysoft f-droid repo
https://apt.izzysoft.de/fdroid/index/ap ... rd.android

Wireguard various clients and install methods from their official page for all supported operating systems.
https://www.wireguard.com/install/

Wireguard home page
https://www.wireguard.com/

This works on both Android and Linux PC.

[dogcat]

Android Non-Rooted Phone Debloat Tool
viewtopic.php?t=9193

Some android devices have built-in nasty spyware from the manufacturer that cannot be prevented from running. They sell your personal information to whoever wants it.

This GUI tool works using the ADB (Android Debug Bridge) with a Linux or Windows computer to disable programs you choose from loading or running.

[Jasper]

The first column refers to the Android build number and the corresponding Linux Kernel.

Useful if you are looking to reflash Android devices and need to know which kernel has the firmware for your device.

[dogcat]

Extirpater is an android app that makes sure deleted files on android flash memory are actually deleted.

Extirpater erases (overwrites) unused space on flash memory and sd cards. Can take a few hours to run if you have a lot of free space. On my android it took 3 hours to overwrite 100GB on my sd card.

https://f-droid.org/en/packages/us.spotco.extirpater/
An Android free space eraser for flash memory and sd cards.

The link opens a page at fdroid where you can read about the app and download it.
No trackers. FOSS (free and open source) like Puppy.

[Jasper]

@dogcat

Thanks for sharing ......... I was a bit intrigued as to why you would use a native android application when you could use Linux cli tools like dd ?

Alternatively, you can use the format tool from the SD Association:

sd-memory-card-formatter-for-linux-x86-64 ( small binary )

https://www.sdcard.org/downloads/sd-mem ... -download/

Just a final note, by running these commands you most probably will placing a lot of 'wear & tear' on the card.

[dogcat]

@dogcat

Thanks for sharing ......... I was a bit intrigued as to why you would use a native android application when you could use Linux cli tools like dd ?

Alternatively, you can use the format tool from the SD Association:

sd-memory-card-formatter-for-linux-x86-64 ( small binary )

https://www.sdcard.org/downloads/sd-mem ... -download/

Just a final note, by running these commands you most probably will placing a lot of 'wear & tear' on the card.

Hi@Jasper,
The native android app I mentioned does not zero out the whole drive, just the unused areas where there was once data.

The methods you mentioned are ~generally used for either zeroing out the whole drive or formatting the whole drive.

I like to keep things as simple as possible especially when there is a chance of accidently destroying data.

[dogcat]

Privacy analysis of many web browsers

https://privacytests.org

Many browsers tested for privacy & security. Categories for android, ios and desktop systems. Side by side comparisons of the browsers.