[Security Discussion] unclefab:
Mmmmh, that's strange.

The script seems ok, and you saved it in Unix/Android format which is fine.

It could be that one or more line breaks are missing, you can check it with 920 Text Editor since it has line count, but still, I don't see how that could interfere with su.

Or, do you use Xprivacy? Does AF+ have exec and su allowed in shell?

As for me I saved the script in data/data/dev.ukanth.ufirewall/app_bin (since a lot of AF+ stuff is there), and I set its perms to 755 (not 775).

BTW, thanks you guys for your questions and suggestions, it helps me to remember this or that that I had forgotten, and it helps me to make OP better, clearer and easier to understand.:good:

I added some stuff in OP and I reproduce it here, for those that have already read OP and don't want to go through the whole blah blah again :

IV – BASEBAND ISOLATION​

That's an important subject and here's an interesting link to start with :

https://blog.torproject.org/blog/mis...ty-and-privacy

You can uninstall STK.apk, LogsProvider.apk, CSC.apk, SecContacts.apk, SecContactsProvider.apk, SecPhone.apk and SecTelephonyProvider.apk altogether, problem solved, your phone isn't a phone anymore (obviously) but a WIFI only device.

Or, you can buy a WIFI only device and save some money compared to a GSM device.

As for me I solved the matter by uninstalling STK.apk, LogsProvider.apk, CSC.apk, SecContacts.apk and SecContactsProvider.apk, and by chmoding SecPhone.apk's and SecTelephonyProvider.apk's permissions to 000 in order to completely disables them (which is not the case when one freeze them, or when one uses the pm command, the apps are ineffective in the way that the user can't use them but they are on nevertheless). Then, I made a chmod 644/000 script to enable/disable them, done!

Of course it's not very practical, and if one only uses one's phone to call one's mum or one's girlfriend/boyfriend there's no need to turn to such extreme safety measures.

But if one lives in a rogue country (including, but not limited to, the states, India, Indonesia, China, Russia, Thailand, Cambodia, Myanmar, Bangladesh, the Stans) and if one could be put in danger because of one's phone then it's something that one has to consider.

Otherwise, if you don't want anyone to know that you are using that phone then use a public phone, because whatever we do our provider allways knows who we are calling, for how long etc., everytime we use the phone functions, and AFAIK there's no way to prevent that. Except maybe by using those apps that encrypt communications but I can't comment on that since I don't use my phone to call or to text.

Well, the thing is that if security really matters you shouldn't have a GSM device but a WIFi only device, or a GSM device where STK.apk, LogsProvider.apk, CSC.apk, SecContacts.apk, SecContactsProvider.apk, SecPhone.apk and SecTelephonyProvider.apk have been uninstalled, the above link about Tor project's blog explains well why.

One more thing, have you ever heard about IMSI catcher AKA fake cell towers?

Here's a very interesting project that deals with it :

http://xdaforums.com/showthread.php?t=1422969

Oh yeah, you may like that one too :

http://www.wired.com/2014/10/verizons-perma-cookie/

ANDROID 5.0 (Lollipop)​

Xposed is not yet compatible with ART, so no Xprivacy and no App Settings.

App Settings can be replaced by Permissions Denied Pro (paid), but make sure it's Lollipop compatible :

https://play.google.com/store/apps/details?id=com.stericson.permissions.donate&hl=en

Sorry for the play store link but that's the only non warez site I found about that app. If you want to purchase it you don't need to go through the play store though, just contact its dev and pay him with Pay Pal :

stericdroid@gmail.com

M. Stericson 15519 LakePoint Forest Drive Charlotte NC 28278

It's a powerfull app so before to start using it read its FAQ (when in the app swipe to the right until you get to it) and remember that you have to unlock permissions before you flash a new OS. Otherwise you may have a powerful bootloop, it happened to me once and believe me it wasn't funny (it took me time and energy to get my device back).

You can use the settings examples I put for App Settings (in the second chapter part 4) since Permissions Denied works more or less the same way.

It's a bit more tricky, if doable at all, to replace Xprivacy. Have a look at Donkey Guard, its dev said that he will make it Cydia substrate compatible but I'm not sure he managed :

http://xdaforums.com/xposed/modules/app-donkeyguard-security-management-t2831556

Alternatively, see if Pdroid is Lollipop compatible but AFAIK it isn't.

As for me I'll stay away from Lollipop, at least for now...

A FEW WORDS ABOUT COMMON SENSE​

Stay with older Android versions, like 4.1 or 4.2.

From 4.2 google has strengthned its grip on Android, and added some very unpleasant stuff.

In 4.2 it added FusedLocation.apk, to know better where you are, basically a spying app eventhough google calls it an “enhancement”.

That apk can neither be uninstalled nor be frozen (or well, it actually can but then the phone doesn't boot), but fortunately its receivers can be desactivated with Rom Toolbox and it can be greenified.

In Kit Kat it got worse, you will understand by yourself when you start uninstalling system apps and/or when you have a look at what's inside the system folder.

As I already said in the first chapter, you have to ask yourself whether you want to compromise your privacy to get the latest gimmick and the latest fancy color (that have anyway been made available on JB with Xposed modules) or whether you want to be safe.

Forget about Kit Kat, I think the game is worth the candle but it's up to you...