[Security Discussion] unclefab:
Sorry guys, I m very busy at the moment, but the D day approaches:p

[MENTION=5979475]Froschohnenamen[/MENTION]:

1, done in OP

2 and 3, done in OP, thanks for the reminder;)

4, I personnaly don t like that Krypton Browser, I think that Pale Moon (for full desktop experience), and any between Lightning, Tint, Atlas or Naked Browser are much better. Sorry for disagreeing with you on this one;)

5, not really since the free versions only work with installed apps.

I made a script to disable apps and receivers and I added it to OP. Here it is, modify it as per your needs:

#!/system/bin/sh

/system/bin/pm disable android/com.android.server.BootReceiver

/system/bin/pm disable android/com.android.server.DRMEventReceiver

/system/bin/pm disable android/com.android.server.TimaServiceEventReceiver

/system/bin/pm disable android/android.accounts.ChooseAccountActivity

/system/bin/pm disable android/android.accounts.ChooseAccountTypeActivity

/system/bin/pm disable android/android.accounts.ChooseTypeAndAccountActivity

/system/bin/pm disable android/android.accounts.GrantCredentialsPermissionActivity

/system/bin/pm disable android/android.content.SyncActivityTooManyDeletes

/system/bin/pm disable android/com.android.internal.app.ChooserActivity

/system/bin/pm disable android/com.android.internal.app.DisableCarModeActivity

/system/bin/pm disable android/com.android.internal.app.HeavyWeightSwitcherActivity

/system/bin/pm disable android/com.android.internal.app.NetInitiatedActivity

/system/bin/pm disable android/com.android.internal.app.PlatLogoActivity

/system/bin/pm disable android/com.android.internal.app.ResolverGuideActivity

/system/bin/pm disable android/com.android.internal.os.storage.ExternalStorageFormatter

/system/bin/pm disable android/com.android.server.DrmEventService

/system/bin/pm disable android/com.android.server.MasterClearReceiver

/system/bin/pm disable android/com.android.server.ShutdownActivity

/system/bin/pm disable android/com.android.server.TimaService

/system/bin/pm disable android/com.android.server.updates.CertPinInstallReceiver

/system/bin/pm disable android/com.android.server.updates.SmsShortCodesInstallReceiver

/system/bin/pm disable android/com.android.server.wifi_offload.AppRunnOverWifiDialog

/system/bin/pm disable android/com.carrieriq.iqagent.service.IQService

/system/bin/pm disable android/com.carrieriq.iqagent.service.receivers.EnableToggleImpl

/system/bin/pm disable android/com.carrieriq.iqagent.service.ui.ShowMessage

/system/bin/pm disable android/com.carrieriq.iqagent.service.ui.UserPage

/system/bin/pm disable android/com.carrieriq.iqagent.stdmetrics.survey.android.QuestionnaireActivity

/system/bin/pm disable android/com.carrieriq.iqagent.stdmetrics.survey.android.QuestionnaireLaunchActivity

/system/bin/pm disable ccc71.at.free/ccc71.at.receivers.phone.at_boot_receiver

/system/bin/pm disable ccc71.at.free/ccc71.at.receivers.phone.at_boot_script_receiver

/system/bin/pm disable ccc71.at.free/ccc71.at.receivers.phone.at_sd_link_receiver

/system/bin/pm disable ccc71.at.free/ccc71.at.receivers.phone.at_battery_plug_receiver

/system/bin/pm disable ccc71.at.free/ccc71.at.receivers.phone.at_battery_unplug_receiver

/system/bin/pm disable ccc71.at.free/ccc71.at.receivers.phone.at_media_receiver

/system/bin/pm disable de.esoco.android.clipboard/de.esoco.android.clipboard.ClipNoteBroadcastReceiver

/system/bin/pm disable com.jb.mms/com.jb.mms.transaction.MmsSystemEventReceiver

/system/bin/pm disable com.jb.mms/com.jb.mms.transaction.SmsReceiver

/system/bin/pm disable com.jb.mms/com.jb.mms.transaction.MmsSystemEventReceiver

/system/bin/pm disable com.jb.mms/com.jb.mms.ui.security.StartSecurityReceiver

/system/bin/pm disable com.ceco.gm2.gravitybox/com.ceco.gm2.gravitybox.BootCompletedReceiver

/system/bin/pm disable com.oasisfeng.greenify/com.oasisfeng.greenify.Startup

/system/bin/pm disable android/com.carrieriq.iqagent.service.receivers.BootCompletedReceiver

/system/bin/pm disable com.lostnet.fw.free/com.lostnet.fw.AutostartReceiver

/system/bin/pm disable com.googlecode.networklog/com.googlecode.networklog.BootCompletedReceiver

/system/bin/pm disable org.torproject.android/org.torproject.android.OnBootReceiver

/system/bin/pm disable org.palemoon.mobile/org.mozilla.gecko.background.announcements.AnnouncementsBroadcastReceiver

/system/bin/pm disable org.palemoon.mobile/org.mozilla.gecko.background.healthreport.upload.HealthReportBroadcastReceiver

/system/bin/pm disable eu.chainfire.pryfi/eu.chainfire.pryfi.BackgroundServiceReceiver

/system/bin/pm disable com.android.settings/com.android.settings.accounts.AccountReceiver

/system/bin/pm disable com.android.settings/com.android.settings.accounts.AddAccountSettings

/system/bin/pm disable com.android.settings/com.android.settings.accounts.ChooseAccountActivity

/system/bin/pm disable com.android.settings/com.android.settings.accounts.SyncSettingsActivity

/system/bin/pm disable com.android.settings/com.android.settings.wifi.WifiStatusReceiver

/system/bin/pm disable com.android.settings/com.android.settings.nearby.MountReceiver

/system/bin/pm disable com.android.settings/com.android.settings.SettingsIntentReceiver

/system/bin/pm disable com.android.settings/com.android.settings.powersavingmode.PowerNotiReceiver

/system/bin/pm disable com.android.settings/com.android.settings.nfc.SBeamStateReceiver

/system/bin/pm disable com.android.settings/com.android.settings.dormantmode.DormantModeNotiReceiver

/system/bin/pm disable com.android.settings/com.android.settings.ethernet.EthernetConfigure

/system/bin/pm disable com.android.settings/com.android.settings.ethernet.EthernetEnabler

/system/bin/pm disable com.android.settings/com.android.settings.EthernetSettings

/system/bin/pm disable com.android.settings/com.android.settings.FactoryResetBroadcastReceiver

/system/bin/pm disable com.android.settings/com.android.settings.FactoryResetDialog

/system/bin/pm disable com.android.settings/com.android.settings.KiesLocationReceiver

/system/bin/pm disable com.android.settings/com.android.settings.MasterClearModemReset

/system/bin/pm disable com.android.settings/com.android.settings.MediaFormat

/system/bin/pm disable com.android.settings/com.android.settings.MediaFormatSd

/system/bin/pm disable com.android.settings/com.android.settings.nearby.NearbySettings

/system/bin/pm disable com.android.settings/com.android.settings.nfc.NfcGateReceiver

/system/bin/pm disable com.android.settings/com.android.settings.UsageStats

/system/bin/pm disable com.android.settings/com.android.settings.UsbSettings

/system/bin/pm disable com.android.settings/com.android.settings.UserDictionarySettings

/system/bin/pm disable com.android.settings/com.android.settings.XmlBackup

/system/bin/pm disable com.android.settings/com.samsung.wfd.WFDSourceService

/system/bin/pm disable com.sec.android.app.controlpanel/com.sec.android.app.controlpanel.PackageIntentReceiver

/system/bin/pm disable com.keramidas.TitaniumBackup/com.keramidas.TitaniumBackup.schedules.BootReceiver

/system/bin/pm disable com.vipercn.viper4android_v2/com.vipercn.viper4android_v2.receiver.BootCompletedReceiver

/system/bin/pm disable com.vipercn.viper4android.xhifi/com.vipercn.viper4android.xhifi.receiver.BootCompletedReceiver

6, done.

Regarding AOSP vs stock, it s the same mate.

I ve digged until the far bottom of my Samsung rom, and I didn t find anything questionable (but I had already removed about 150 apps, so there wasn t many apps left) from Samsung.

From google it was a different story, I had to remove a lot of garbage, garbage that is present on AOSP too (compare the apps permissions and the network connections in an AOSP ROM and in a stock ROM).

For me the difference is that AOSP has many bugs if not installed on a nexus, whereas stock ROMs haven t.

Then, to remove the spying that lies inside the apps and the jars one doesn t need the source code, one can do it at smali level.

It s the same with open source apps and closed source apps.

Most people think that open source apps are safe and thus the ultimate solution, but it s not quite true.

I ve gone through the code of many apps and I found many bad open source apps (for example conversations.apk, it claims to be secure but it connects to google's dns, or textsecure.apk that gets your phone number and your location without telling you cuz it doesn t use any permissions for that:eek:), and OTOH I found some very good and respectable closed source apps, with no undue permissions and no connections here or there on the net:p.

I don t say that all open source apps are bad and all closed source apps are good, I just say that it s a bit more complicated than what most people think, open doesn t necessarly mean good and closed doesn t necessarly mean bad.

I do use some closed source apps, because they work very well and don t have any open source quivalent, because they only have the strict minimum as permissions and don t try to do anything on my back, and because I decompiled them, examined what s inside and saw nothing bad.

Some people don t want to open source their app not because they have something to hide, but maybe because they don t want their hard work to be taken by others, or maybe to avoid what happened with Pdroid, or for whatever reason they have, at the end of the day it s their choice.

You should neve trust open source apps or ROMs. Open it, check what s inside, and then you ll know if it s trustworthy or not...

[MENTION=4289125]HeathenMan[/MENTION] ;

that script is very restrictive indeed.

It s the way I like it, but thanks to you I understood that it may not be the case for everybody.

So I modified it in OP, thank you for the hint!:good: