diff --git a/_items/Guide.md b/_items/Guide.md index 6636f2c..05fcd77 100644 --- a/_items/Guide.md +++ b/_items/Guide.md @@ -84,6 +84,10 @@ _Disclaimer: This is for education / research._ - -\>> _[Desktop](#desktop-1)_
-\>> [Mobile](#mobile)
+- -\>> _[GrapheneOS](#grapheneos)_
+- -\>> _[GrapheneOS Hardening](#grapheneos-hardening)_
+ + - -\>> _[External Applications](#external-applications)_
- -\>> _[Tor](#tor-1)_
@@ -1017,6 +1021,12 @@ The location of the device is known by the cell provider. To be truly "anonymous" with a mobile device, you must not have an installed SIM card. It is not advisable to try to be "anonymous" on a mobile device. +Android allows us to have more access over our device such as installing applications from third-party repositories and having access over `ADB` and changing permissions. + +
+ +### GrapheneOS + To be as private as possible, it is advisable to install [GrapheneOS](https://grapheneos.org). GrapheneOS is a hardened version of Android running on the *secure* Google Pixel. GrapheneOS will not have any sort of Google analytics. @@ -1028,11 +1038,25 @@ The cell service provider **WILL** know your location. For additional information, view the [GrapheneOS Section](./graphene). With GrapheneOS, you can utilize the profiles function to create separate identities with each profile. -We can use Orbot to route traffic over Tor on a per-profile basis. +We can use [Orbot](https://github.com/guardianproject/orbot) to route traffic over Tor on a per-profile basis. You could utilize an application such as [Shelter](https://gitea.angry.im/PeterCxy/Shelter) to provide a "work profile". *Note: UDP is not supported by Tor* +
+ +### GrapheneOS Hardening + +If you've opted to install [GrapheneOS](https://grapheneos.org) on a Google Pixel, we can take some extra measures to secure our setup. + +To fully prevent VPN leaks: + +`Settings` -> `Network & Internet` -> `VPN` -> `settings icon` -> Enable `Always-on VPN` , `Block connections without VPN` + +`Network & Internet` -> `Internet connectivity check` -> `Disabled` + +VPN leaks are now prevented +
@@ -1042,6 +1066,13 @@ Assuming you are using Android, APKs are used to install applications. These can be dangerous as installing a malicious application can be detrimental to your system. It would likely be best to install various APKs from a source you can reasonably trust, or you can build your own and verify the signatures. +Various repositories: + +- [Accrescent](https://accrescent.app) an Android app store built and focused on security. +Allows for app signing, signed repository metadata and automatic updates. + +- [F-Droid](https://f-droid.org) an Android app repository, allowing you to use custom repositories or create your own. +
### Tor @@ -1299,7 +1330,7 @@ Very useful if you're at an airport, hotel or other public area in which you nee
[PortaPow USB Data Blocker](https://www.amazon.com/PortaPow-3rd-Gen-Data-Blocker/dp/B00QRRZ2QM/) - The gold standard of USB data blocking. -This is a USB-A connector with a built-in "SmartChip" designed to increase charging speeds. +This is a USB-A connector withqubesqubes a built-in "SmartChip" designed to increase charging speeds.