Mobile sec

Hello folk. Do u know good guide about mob sec? How to make my android become anonymous?

The only way I know for sure to is to use GrapheneOS and only use apps from F-Droid.

>>13965 How does Graphene compare to Lineage?

>>13968 Graphene is by all accounts a better and more secure OS than lineage. The main reason people use lineage is because graphene only targets one brand of phones (Google's pixel line). On the other hand, graphene is a lot more opinionated than lineage, so you're more likely to run into the restrictions in what you can do with your device software that you would experience with regular google android. The justification foe this is security, but you may value customization options over security, and lineage is possibly better in that aspect. This isn't the best analogy, but in terms of linux distros if graphene is fedora then lineage is arch. >>13964 Your phone will never be fully anonymous as long as it is connected to a carrier network. This does not however mean that the things you do with it cannot be, to some extent, done anonymously. How exactly this is accomplished will depend on what you want to do and who you would like to hide your identity from. Anonymity in this day is more about decoupling your secret identities and activities from your "real" identity than it is about hiding details of your real identity. If this is your goal, the approach is similar to a regular PC. Use end to end encrypted services and anonymizing proxies. Minimize leaks and do not let different identities pollute eachother or become correlated.

>>13968 GraphineOS has the ability to fully relock the bootloader for a full chain-of-trust boot. The processes and permissions are sandboxed and isolated in the kernel. Its essentially a hardened aosp. Keep in mind "rooting" an android device is exploiting it so graphineOS goes out of it way to make sure rooting is not possible. The idea is security comes first. Lineage is a more open system focused on assuring users can have very fine grain control over their phone. The system is much more customizable but also can have serious security issues like no boot chain verification and usermode root access. Lineage is for the creators and devs/graphine is for the paranoid and hackers

>>13964 >How to make my android become anonymous? Privacy =/= Anonymity =/= Security You can't have all of these with Android. The android scene is very limited because its FOSS community is small, nobody really gives a soykaf since it's all volunteers and no one wants to do an effort to reverse engineer modern phones. You want security? buying a supported smartphone, keeping it updated and not installing garbage apps you don't need is enough to keep you away from most threats,but you'll have Google and your phone's manufacturer harvesting your data. You want anonymity or privacy? grab a suitable smartphone and install a custom ROM like Lineage, but the security is fuarrrking trash on these ROMs, some go for months or even years without being updated and the "developers" are usually struggling at keeping the system stable, let alone care about maintaining a secure system. Again, you can't have both.

>>14028 GrapheneOS get regular updates and is probably more secure than any desktop PC - except Qubes maybe. Granted, the future security updates are entirely in Google's vicious hands, they don't seem to care and don't support their phones after very few years.

>>14028 >The android scene is very limited because its FOSS community is small, And every android device is unique. It's not like the PC market where a single linux ISO will run on any Intel/AMD machine. Every phone model needs its own ROM which multiplies up into a large maintenance burden that even the vendors can't keep up with which is why they end of life soykaf so quickly. >>13964 >Do u know good guide about mob sec? How to make my android become anonymous? Secure from who? Anonymous from who? What's your threat model? e.g. If you want to be secure from cyber-thugs using public exploits, then use a current android phone and keep it updated. If you want to be secure from google then you can't use an android phone because google has 24/7 backdoor access via the update system. You need to specify a threat model otherwise you'll get useless, contradictory advice.

>>14029 GrapheneOS is exactly the kind of stuff i'm talking about supposedly one of the better supported ROMs, has barely 8 working on it. don't kid yourself.

What do you guys think about paranoid android? I've tried LOS but it doesn't give so much confidence

My best guess is to keep a business phone connected to networks and then get another phone, remove the WiFi/cellular antennas, and install a custom ROM to keep personal files on. Redundant, yes, but that's the only thing I can think of to keep your personal files safe on mobile. You can't really do much about being tracked if you need to have a internet connected device that makes calls.

Phones again? >android >>>/Ω/res/32595 >dumbphones & internet phones >>>/sec/13700

>android >>>/Ω/32595 >dumbphones & internet phones >>>/sec/13700

Theyre built to spy on you. Even dumb phones do it. You will need something not fuarrrking android

>>>/Ω/32596 >>13969 This. But if you don't have the budget or availability, stick with Lineage or Mokee but do >>>/Ω/32596 >Your phone will never be fully anonymous as long as it is connected to a carrier network. This is absolute truth. Just owning one means you've exposed your location with triangulation techniques. If you have let's say you have LTE band 1 and 3, people can narrow down your location to a straight line by looking at your signal strength and it's also impossible to turn off bands and explicitly set your device to use only one band. Most phones are quadband or more on LTE/3G/GSM and it's even more precise with that in mind. BaseStations has logs per IMEI. There's also a problem with low energy beacons since everyone is literally using wifi/bluetooth blobs on mobile phones so turning it off isn't exactly a kill switch.

>>13974 Such a great comparison. As a user of both, I wouldn't have put it any other way.

>>13964 Only the journalist-tier distros like Graphene and Calyx. Although what you do after you installed either matters the most (that even using any device as long as you know what you do with it makes any device appear anonymous in theory).