tail best updates, pdf macro

This commit is contained in:
anarsec 2023-07-09 14:59:19 +00:00
parent 11986c34cb
commit 0031e85f7a
No known key found for this signature in database
15 changed files with 62 additions and 22 deletions

View file

@ -10,6 +10,8 @@ tags = ["intro", "mobile", "easy"]
toc = true
blogimage="/images/graphene.avif"
dateedit=2023-05-10
a4="grapheneos-a4.pdf"
letter="grapheneos-letter.pdf"
+++
[Anarchists shouldn't have phones](/posts/nophones/). If you absolutely must use a phone, it should be as difficult as possible for an adversary to geotrack, intercept messages, or hack. This means using GrapheneOS.
@ -157,7 +159,7 @@ Applications like Cwtch and Briar have Tor built in, and should not be used thro
# Recommended Settings and Habits
* **Settings → Security → Auto reboot:** 8 hours [Owner user profile]
* Auto reboot when no profile has been unlocked for several hours will put the device fully at rest again, where [Full Disk Encryption](/glossary/#full-disk-encryption-fde) is most effective. It will at minimum reboot overnight if you forget to turn it off. In the event of [malware](/glossary/#malware) compromise of the device, Verified Boot will prevent and revert changes to the operating system files upon rebooting the device. If police ever manage to obtain your phone when it is in a lock-screen state, this setting will return it to effective encryption even if they keep it powered on.
* Auto reboot when no profile has been unlocked for several hours will put the device fully at rest again, where [Full Disk Encryption](/glossary/#full-disk-encryption-fde) is most effective. It will at minimum reboot overnight if you forget to turn it off. In the event of [malware](/glossary/#malware) compromise of the device, [Verified Boot](https://www.privacyguides.org/en/os/android-overview/#verified-boot) will prevent and revert changes to the operating system files upon rebooting the device. If police ever manage to obtain your phone when it is in a lock-screen state, this setting will return it to effective encryption even if they keep it powered on.
* Keep the Global Toggles for Bluetooth, location services, the camera, and the microphone disabled when not in use. Apps cannot use disabled features (even if granted individual permission) until re-enabled.
* **Settings → Connected devices → Bluetooth timeout:** 2 minutes
* Quite a few applications allow you to "share" a file with them for media upload. For example, if you want to send a picture on Signal, do not grant Signal access to "photos and videos", because it will have access to all of your pictures then. Instead, in the Files app, long-press to select the picture, then share it with Signal.