iPad security?

Hi, Lains. I know you can’t lock down a mobile device too much. I was just wondering if there was anything else I could do for my iPad. I use a vpn and a dns with split routing and brave browser. I don’t have cell data on my iPad. All the privacy settings like location etc is off. Basically, at this point I don’t know if there’s really much else I can do besides jail break it. Stay safe out there Lains.

I should clarify that all my iOS privacy settings are set correctly. Sorry.

>>14387 >Ipad Already insecure from the beginning.

>>14390 Yeah bro I already said I know you can’t lock a mobile device down too much thx for literally adding nothing to the conversation.

All I was asking was how I could make it secure as possible. I know it’s already compromised

>>14387 i only use my ipad as a reader, i don't connect it to the internet, and airplane mode is always on. i just use ftp to transfer books and manga to it from my laptop. if you still want to connect it then there's not much else you can do, it's an apple device.

>>14395 My preferable advice on the latter is to just sell it and replace it with something far more better like a Tab S.

use multiple icloud accounts, use a good VPN and set it up properly not some app, don't do anything on it you wouldn't show your mother, jailbreak it if that's still a thing, disable all tracking services, no gmail or google apps, remember that apple is not your friend. >t. ex-mac user

>>14484 >use a good VPN and set it up properly not some app Is this even possible on an ipad? I used to have a macbook and the VPN tool built into the OS didn't support openvpn. Only IPsec iirc. Wasn't a problem because you could just install openvpn but you can't exactly do that on an ipad, so you might have to use "some app".

>>14390 >I know you can’t lock down a mobile device too much. I was just wondering if there was anything else I could do for my iPad. Just use it as you would as normal consumer but keep in mind it can still do things like scan your entire local network thus giving away your device hardware addresses to a certain app or individual. I have an isolated network but it seems iPad can partially bypass my ingress filtering. If possible, you should isolate those unhardened devices on your network as they try to enumerate the devices you own (with ip neighbor shell). >I use a vpn and a dns with split routing and brave browser. I don’t have cell data on my iPad. >All the privacy settings like location etc is off. Brave is not bad but it's worse way before, although all their tracking intervention is ineffective as most tracking companies have a different way to permanently identify your devices. Even things like screen size + IP address + time zone is effective as fingerprint. Privacy hardening is good measure but this can at some point be 'reset' with you unbeknownst and they don't even need to identify your location data through gps anymore when there's things like: BluetoothLE beacons, A-ltBeacon. i-Beacon, S-ilverpush, and similar stuff like covid 0xFD6F trackers, High Energy wifi beacon (by proprietary routers), packets reshaped with gps by proprietary router with built-in gps or location data (if no gps) (this means your packets may be modified by your NAT router to contain your coordinates regardless of local anonymization unless you customize encryption or do things like XOR patch), NUHF/ACR (Audio Content Recognition) on "smart/cloud" devices with localized location data so apps would still know where you are exactly. VPN is pretty useless, as much as the onion where every node is glittery. In the age where data is oil you can't expect VPN services to not violate their word or have workaround over their carefully worded terms like "we never share to third party" which is literally no different than "biginternetcompany who owns us legally is not a third party" and there's not a lot of biginternetcompany anyways. They can say that "we don't ever do logs" but have deliberately get their servers get a total dragnet somewhere. >Basically, at this point I don’t know if there’s really much else I can do besides jail break it. There's no point if you don't even know the tracking technologies I've listed above. What's the point if you don't even know their hidden strategies, oh boy I haven't even listed them all!

Recently bought a new android tablet myself. While I wanted an iPad I basically ran into this issue. You have absolutely no control over it. Can install fdroid, have no control under the hood, can't flash roms on it to degoogle. iOS locks you in hard.

>>14485 Yeah, I have ProtonVPN and AdGuard. I set up AdGuard as the vpn and ProtonVPN as a IKEv2 then in settings as a personal vpn. It uses both. >>14488 I have been doing more research. I was new (still am obviously). I have changed to Firefox as brave seems to have some issues and seems to be a bit controversial in terms of security. I’m not doing anything super crazy where I’m worried about getting in trouble. I just don’t want these bastards making money off of me or spying on me as it’s the principle of the matter. Mostly I just keep multiple emails and other online privacy tactics, too. And not cross contaminate IP addresses when logging into different emails etc. I’ve also read that it seems that a jailbroken iOS is even easier to hack n track so I guess I’ll just stick with iOS. So while I can’t do everything, I’ll just try to make it a wee bit better.

>>14488 >Brave is not bad but it's worse way before, although all their tracking intervention is ineffective as most tracking companies have a different way to permanently identify your devices. Even things like screen size + IP address + time zone is effective as fingerprint. brave is undeniably better than firefox. test it out urself by going to brax.me/geo on a few dif browsers + play w/ the browser setting to see what the website can fingerprint. if the fingerprint starts w/ "brax" it couldn't create a true fingerprint so it just generated a random number instead. brave appears to websites to be chrome (due to it being based off chromium), so websites cannot easily tell that you're using brave. brave also lies to the websites on 6 out of 29 datapoints and changes those values everytime u start it up. This means that a fingerprint cannot determine your identity when using a brave browser. Those 6 are: audio, device memory, hardware concurrency, canvas, webgl, and data. This does not include any other security/anonymity tools you are using, like a vpn There are a few ways websites can get around this, like cookies, but thats besides the issue. if you're gonna complain about those, just turn all ur security settings to max and block javascript, and enjoy being able to only use websites that havent been updated since 2008. trackers could hypothetically use a psuedofingerprint (a partial fingerprint) that excludes those six, but it wouldn't really work that well. its like the cia only writing down people's first names and then trying to find them. you go from being identifiable w/i millions of people to w/i thousands. >>14671 >I have changed to Firefox as brave seems to have some issues and seems to be a bit controversial in terms of security. See my response above, and the people who complain about brave not being secure enough have a threat model that the cia is looking for them more than snowden. brave is enough for the average user.

>>14859 Thanks for the info, AnPsi...I’ll stick with brave then

>>14859 I like GNU icecat

>>14859 https://digdeeper.neocities.org/ghost/browsers.html#brave https://stackoverflow.com/questions/36523448/how-do-i-tell-if-a-user-is-using-brave-as-their-browser (not tested, but if random goons on SO have ways around it, then you can bet big corporations do too) http://tv54samlti22655ohq3oaswm64cwf7ulp6wzkjcvdla2hagqcu7uokid.onion/posts/you-want-tor-24tFBCJV/ I searched for number of active Brave users, supposedly it's 20 million or something. That would be pretty good, but considering that it's probably popular mostly with people who want to larp as being private, most of them probably don't disable javascript, and install unique set of addons, so you can't really bet on hiding in a big crowd (I don't know how many people use vanilla brave, but it's definitely not 20 million). And even then you have a freaking IP address attached to your name either way. >There are a few ways websites can get around this, like cookies, but thats besides the issue. if you're gonna complain about those, just turn all ur security settings to max and block javascript, and enjoy being able to only use websites that havent been updated since 2008. Lol. So you want to say that it does all that great lying about 6 OUT OF 29 datapoints (wow!), but gets tripped on something like cookies? So all of these measures are literally useless and don't do anything for regular use? Then why even mention them? Also that "beside the issue" lol. Yeah bro, privacy is beside the issue, shhh don't mention that I've been trying to wage slave Brave for privacy my entire post! >This does not include any other security/anonymity tools you are using, like a vpn >VPN >anonimity/security tool Lol x2. Using a VPN you are basically shifting from your ISP provided IP address to the VPN company's one. What good does that do exactly? You still have an IP address that identifies you attached to you lmao. You do realize that most people already share their IP address with a pool of users? The same thing that a VPN does? If anything, thanks for the laugh.

>>14870 >neocities ur link deadass just claims that all browsers suck for privacy. duh. lmao, if u want absolute privacy just dont browse. we're aiming for effective annonymity and security. its not like the cia is knocking on doors looking for most of us >stack overflow kudos, didnt know ab this. point valid. U know how ddg figures this out? >crowd anonymity on brave is like kicking dead whales down the beach in my experience in the privacy community, its about 50/50 on the crowd anonymity vs hard ass issue. that means that anywhere from 3-10 million people are browsing the web w/ the exact same setup. this combined w/ the features brave provides is what crowd anonymity is supposed to mean >cookies reveal info u know u can disable cookies and javascript on brave, right? lollll. try browsing w/o them tho. even half of the onion ib's break down w/o it. just delete ur cookies n soykaf >vpns dont work regular ips give ur general location. vps dont. its that simple lmfao. it adds another ficticious data point to fuarrrk w/ fingerprints ur argument is that brave isnt that good. my point is that its good enough (w/ other tools) for everyday web soykaf. its obviously way better than most mainstream browsers.

>>14860 np, Rabbit lol welcome to the community, hope u lurk a while

>>14900 >ur link deadass just claims that all browsers suck for privacy. duh. lmao He doesn't, he actually didn't mention all of them from what I have seen. >kudos, didnt know ab this. point valid. U know how ddg figures this out? No idea, and I don't care because I'm not a brave user. >u know u can disable cookies and javascript on brave, right? lollll. try browsing w/o them tho. even half of the onion ib's break down w/o it. just delete ur cookies n soykaf Did you never hear about something like first party isolation? I don't know what to tell you dude. >regular ips give ur general location. vps dont. its that simple lmfao. it adds another ficticious data point to fuarrrk w/ fingerprints Ok, and who exactly do you need to hide your general location from? I don't understand the point. First of all, I have a dynamic IP address, and it usually shows the location to be in the country, but pretty far away, always at least few cities away. I have never had an IP that actually revealed the city I live in. Is that the information worth hiding? If it's about the country you live in, since you don't isolate cookies per domain, they already can easily determine your general location from a ton of other things. So what's the point exactly? What do you gain by using a VPN? >in my experience in the privacy community, its about 50/50 on the crowd anonymity vs hard ass issue. that means that anywhere from 3-10 million people are browsing the web w/ the exact same setup. this combined w/ the features brave provides is what crowd anonymity is supposed to mean I obviously can't argue against your personal experience. It's your word against mine, so a pointless argument if I say so myself. Your point is that brave is good for everyday use. Sure it is, but it's no different than any other mainstream browser. If you want privacy, use a browser that actually provides it. This is like wearing a fishnet instead of a condom and thinking you are protected. Also you mention "other tools". Out of curiosity, what are these tools? I will tell you this, if you mention browser extensions I will have no choice but to laugh.

>>14900 >U know how ddg figures this out? js function > people are browsing the web w/ the exact same setup unique fonts js fingerprint >cookies reveal info cookie-less trackers (page variables) DOM etc. >vpns dont work DPI >>14859 >brave is undeniably better than firefox. This is true, since firefox tried to hide safebrowsing URL/DL hashing for several years now and claim that they're the champion of privacy with DoNotTrack when it's not even a w3c standard and no one complies to it anyways. UGC = Pale moon >= Librewolf > Brave >Icecat > Firefox with user.js > Soykaf > Firefox vanilla > Firefox Dev. etc. > Chromoium > GC UGC >no leak, near perfect >possibly ded after chromium v90? Pale moon >safebrowsing = off since around >2014, true fork >needs some polishing upon first boot Librewolf >safebrowsing = off >recent project >some minor leaks to MLS and cf IP which is main firefox bug/feature inherited from upstream Brave >cons: brave services, revenue model, somewhat possible to turn off >built with privacy in mind >useful for accessing botnetwebs Icecat >safebrowsing = on >telemetry = ??? >anonymity/anti tracking addons >contradicting anonymtiy when you have safebrows? Firefox with user.js >safebrowsing = on >telemetry = off Firefox vanilla >safebrowsing + telemetry = on Firefox Dev. etc. >safebrowsing + telemetry + crash dump = on Chromoium >self explanatory >debian microphone blob GC >self explanatory >googleupdate.exe >access to certain peripherals (i.e microphone) (legal by accpeting the TOS by using it)

>>14902 >He doesn't, he actually didn't mention all of them from what I have seen. scroll down to the bottom of the page lol its under summary. he advocates for pale moon >Did you never hear about something like first party isolation? I don't know what to tell you dude. first party isolation has been obsolete since apple come out with it on safari before steve jobs died. trackers saw what safari was doing, so they had their ads link to their website and then redirect to where u want to go. now the tracker is white-listed as a first party >Ok, and who exactly do you need to hide your general location from? I don't understand the point. First of all, I have a dynamic IP address, and it usually shows the location to be in the country, but pretty far away, always at least few cities away. I have never had an IP that actually revealed the city I live in. Is that the information worth hiding? If it's about the country you live in, since you don't isolate cookies per domain, they already can easily determine your general location from a ton of other things. So what's the point exactly? What do you gain by using a VPN? not everyone can choose their isp. mine is not dynamic. if u lookup my default ip its w/i 20 miles of my location lol. plus brave does something similar to first party isolation where it divies cookies up into partitions per site >Your point is that brave is good for everyday use. Sure it is, but it's no different than any other mainstream browser. If you want privacy, use a browser that actually provides it. This is like wearing a fishnet instead of a condom and thinking you are protected is ur argument that i should use tails daily and only visit websites that support tor + no javascript? Its unreasonable to tell ppl with modern lives to cut most of the clearnet off I dont think that anology works for this situation. im hedging my bets so that i will have increased privacy and 99% web functionality. even the most schitzo larper on lain prolly has some type of info leak plus u literally agreed w/ my point. why r u arguing w/ me lmaoooo >Also you mention "other tools". Out of curiosity, what are these tools? I will tell you this, if you mention browser extensions I will have no choice but to laugh. browser isolation, misinformation, frequent browser + device wipes, etc. I kinda left it open on purpose lol >>14926 >js function wow i had no idea 0_0 thx for clearing that up >unique fonts, js fingerprint did u not read my other post lol? brave lies ab font and blocks most non-essential js fingerprinting. thats why its faster than chrome >cookie-less trackers (page variables), DOM etc. care to elaborate? >DPI what that gotta do w/ vpns >This is true, since firefox tried to hide safebrowsing URL/DL hashing for several years now and claim that they're the champion of privacy with DoNotTrack when it's not even a w3c standard and no one complies to it anyways. the choice ppl are left w/ is where they want to draw the line. i draw it right at brave

Get rid of it and get a laptop. You are literally eating your own tail if you expect to get anywhere with this.

I use nextdns.io for my iphone and my wifi device runs tor so the iphone gets a tor circuit as well.

>>14859 >>14900 >>14901 >>14968 Didn't know this name user came from lainchan. Please don't post on our little tealgreen chan again. Brave sh!lls and browser threads are the absolute disease of any /g/. Sage for offtopic