yashsingh1/xdaforums huggingface dataset:
[General Topics] anonify:
All that is visible from the transaction listings are:

zip code

country

status: charged, etc

date of purchase

order number

product name

total paid

No emails, names, card numbers. It would be too hard for small devs if they had to deal with credit card info and PCI compliance. And none of this info goes to the servers.

On the servers, there is 0 data retention or logging of network traffic and IPs. The servers do validate a special token generated by google to check subscription status. Only active connection info is available. If someone, via subpoena or otherwise, gained access to a server while it was running and in use, they would know that an IP is connecting to Tor, only while that connection was active. They can't see the data, it's encrypted, and they can't know the destination, cause it's going to tor.

By the way, here's a link for you guys that will give out promo codes to get orxify free, 1 per day:

https://rideem.io/from/orxify/for/xda
[General Topics] LoneWolfSK:
Correct me if I'm wrong but here is how I see it:

Orxify uses your cellphone as a Tor relay, afterwards it acts as a regular VPN from within Tor, hoping for the "double anonymity" in terms of location, IP, browser ID etc. This all sounds too good to be true, because the Tor relay on your cellphone is easier to trace than the independent/desktop/remote relay. Can you please draw me a full but yet simple network access/routing map Orxify uses? Thank you :)
[General Topics] mrrocketdog:
ok , found new search engine (well , new to me). have only looked into it a little bit but if anyones interested :

http://search.yacy.de/
[General Topics] anonify:
This is incorrect. Orxify does not run tor as a relay on your phone, nor does it act as a VPN from within Tor. The VPN feature is used to route the network traffic of the phone into and out of the Tor network, in essence creating a VPN built on Tor. What this means is that from the view of an App, no change is required in order for its traffic to be routed through tor. Every app is now running via the tor virtual network.

A traditional VPN requires an external server to decrypt the traffic and forward it along to the destination. The VPN server always knows the source and destination of the traffic, otherwise it wouldn't be able to work. Orxify does not require any external server. It is self-contained, using tor to encrypt the traffic and route it directly out of your phone to the next relay.

When you use the 'hide tor traffic' (tunnel) option, an external server is used. However, all the server gets is encrypted tor traffic, which is itself encrypted. The server also doesn't know the true destination, because it is tor traffic moving through the tor network. The diagrams I made for post #366 are simplified representations of the flow of network traffic in both cases.
[General Topics] LoneWolfSK:
[Privacy] Protection For Advanced Android Users (2015 And Beyond:What You Did...

Clear enough, but I have some questions:

- Does this whole procedure slows down the internet speed

- What external VPN does the Orxify use

- Can we configure our own VPN such as tunnelbear etc, to work with Orxify?

Thank you
[General Topics] Mufftool:
....Orxify definitely does suffer a performance hit compared to using Tor over a regular VPN, I just tried Orfox over CyberGhost and it is blazing fast compared.
[General Topics] :
Hey

I just found this thread. It looks very promising.

On my old smartphone, a nexus 4, I used to use a custom rom without Gapps installed. Instead I got my apps from fdroid, email from posteo.de etc.

Now I'm using a Galaxy s6 without any available AOSP rom so I can't uninstall all of the gapps.

Is there a list of services/ apk names which I have to delete so my phone is the same like without gapps package installed?

Thanks for your help
[General Topics] anonify:
- Yes, Tor slows down your internet speed. It routes your traffic across three extra hops, which can be anywhere in the world. This is part of what gives anonymity.

- It does not use an external VPN.

- At the moment, Orxify requires the VPN control in android to manage the traffic. This means it can be the only VPN software running on your phone at a given time.

The limiting factor here is the Tor circuit you happen to end up with. If your hops are spread out across the world, your connection will be slow. If they are closer to you, then it will be faster.

If you just configured Orfox to use CyberGhost without Orxy or orbot, then you were not using Tor.
[General Topics] Mufftool:
So this actually answers the first question I asked on this thread - Orxify is just using the built-in Android VPN, which as I understand isn't really very secure?

Orfox opens Orbot by default and runs Tor according to the Tor check page, so yes, I'm definitely using it.

It's difficult to do speed tests because they all seem to require flash, which is disabled in Tor. I'm just saying it seems a hell of a lot faster for browsing if I use Orfox over services like CyberGhost, Mullvad or AirVPN. And from what I'm understanding, these VPN's are way more secure as well.

So forgive me if I'm missing something, but what exactly is it that Orxify is giving me that I'm paying 2 USD a month for?
[General Topics] anonify:
The most recent flaw required installing a local app that could intercept connections from the VPN interface. Every android vpn app uses the android vpn service, or some workaround that eventually equates to using the android vpn service. It is the only official way to control the network traffic on the phone, which is a basic requirement of any vpn app.

There are many factors at play here, including the circuit selection. The main difference is with orxify all the traffic is going through tor, where as with your configuration only orfox traffic goes through tor. As for being more secure, they are centralized services that get access to all your traffic (dns, http, smtp, etc) unless it is encrypted (ssl, tor, etc).

There are two optional items offered for Orxy, the main app. Both items can be used independently of each other. The first is Orxify, a one time purchase add-on to Orxy that forces all other apps through Orxy (tor) without having to configure them, including DNS. The second is the 'Hide Tor Traffic' option, which is the monthly subscription, that tunnels your traffic through one of the proxies in order to hide the fact that you're using tor. This option is more along the lines of using Tor within a VPN, except there is no sign up requirement, and only tor traffic is accepted.
[General Topics] LoneWolfSK:
[Privacy] Protection For Advanced Android Users (2015 And Beyond:What You Did...

The built-in Android VPN routines and protocols are suited to fit Google, not the users. This makes it harder to stay anonymous on your cellphone, not to mention the following:

- Orxy or Tor connect you to Pakistan/China/whatever relay, and you want to login to your fb/mail/any other 2-step verification enabled website, this will be hard, complicated and confusing, not to mention that you can accidentally allow untrusted connections and potential hackers to access your accounts while thinking it's just your VPN/Orxy/whatever; you can even get your account(s) suspended for multiple logins from two or more IPs originating in different countries;

- messing with two-step verification can mess up your smartphone, address book, data, photos, videos and provide unwanted access to your files for some 3rd party hackers or exploiters. Feel free to correct me if I'm wrong :)
[General Topics] anonify:
To clear things up, the built in android VPN Service is not the same as the built in android VPN Client. The VPN Client is likely built using the VPN Service. Apps use the VPN Service, not the client.

The android VpnService allows an app to route network traffic only. It does not dictate nor provide routines or protocols to protect or forward the traffic. The app is responsible for any routing, encryption, etc the traffic needs. Orxify uses the VpnService to prevent traffic from leaving the phone until Tor has encrypted it.

Here are some tips that are listed on the Orxy play store page:

- If you log in to a website using your username and password, you are no longer anonymous to that website.

- Logging in to sensitive sites while using Orxy, such as online banking or email sites, is not recommended. These sites usually have checks to verify your identity using your common locations. If you suddenly appear as logging in from another country, you may get blocked. You must also be careful to ensure proper HTTPS is used to prevent someone from seeing your password. It's best to simply avoid these sites to be safe.

- Google search will sometimes present a CAPTCHA while using Orxy. If it persists, use another anonymous friendly search engine such as http://ddg.gg (or http://3g2upl4pq6kufc4m.onion)

Visit The Tor Project for more info on Tor, including tips on remaining anonymous and protecting yourself.
[General Topics] mrrocketdog:
am i correct in that android does not support full disc encryption?

"err on the side of kindness"
[General Topics] FloatingFatMan:
Even if such a thing were possible, you could not do it with video. That's only 24fps, nowhere near enough frames to capture all these "vibrations" you seem to think are visible (and are not).

It's. Not. Possible.
[General Topics] LoneWolfSK:
[Privacy] protection for advanced android users (2015 and beyond:what you did...

I watched all the vids in this topic, which doesn't mean I agree to all of them. This is what privacy and democracy is all about: I want you to have the right to express your opinion even if it is not in concord with either my opinion or the one of the general atitude :)
[General Topics] ZipAddict:
Thanks for participating in the thread! Lonewolf that is respectable to say that we all have right to express our opinion and i agree that it is not the opinion of the general public lol! I respect everyone elses opinion too and agree with you. Thats why i made this thread hoping that it would stir up some controversy on the topic! Ran out of thanks today but will give you both thumbs up tomorrow.

For me when i see a video from a widely recognized tech college like MIT, showing them deriving sound from a video from behind soundproof glass, and me knowing about algorithms, I consider it proof of its existence. But thats my opinion because i saw it with my own eyes and since way crazier things have been proven true. Most things were considered impossible until technology proved them possible. However they could be lying, which i think is what you are getting at since you saw it too. I dont believe everything i see, although you may think i do. If they are lying, then someone is still probably attempting this which means i will still be concerned about its inception. Haha i will stop talking about it now and move on. Thanks again for voicing your opinions guys!
[General Topics] LoneWolfSK:
It is really amazing what can be done with sound, video and text these days, so none of this surprises me. I am not saying that it is a lie, I just find it hard to believe. It is time-consuming and speculative, unreliable to say the least. You don't think the NSA would take them in their staff should they have made a true discovery? The videos were not censored or taken down, and that's what makes this "myth" less plausible.
[General Topics] downtimeguy:
Excellent find. Apart from the more devious opportunities for surveillance that such technology offers, I think the medical implications are substantial. Combine visual change detection capabilities with some sort of google-glass wearable optics and I know several medical professionals who would be first in line to employ such a gadget. It would be a great improvement over looking away to a EKG monitor display or relying on audio beeps and blips in a noisy situation.
[General Topics] ZipAddict:
Well put. The nsa could very well be in on it from the start though, or it could just be amateurs thinking they know what they are doing, but not really knowing what they are doing. Look at theMK-Ultra program. It was decades before we found out what govt was up to and they used something like 44 colleges amongst other facilities to carry out their sponsered research. This was one of the biggest privacy invasions thinkable as unwilling participants were tortured and experimented on.

Good idea. I like the positivity. I sometimes forget about the medical benefits and focus on negative.

How about mind controlled exoskeletons and such?

http://www.smithsonianmag.com/scien...hnology-beyond-exoskeletons-180951710/?no-ist

I originally though, "bad idea!" but then i saw a video of completely paralized person walking for the first time in over 10 years and it almost made me cry with happiness for him.

Once i get more thanks, i will hit those thanks buttons for your contributions guys. Im having a blast talking with you guys!
[General Topics] downtimeguy:
I can't forget the negative too much. I just read the big teardown assessment of Amazon workplace practices on NYTimes and I instantly realize how much those Amabot hiring managers would crave to have a way of visually monitoring the pulse of their nervous interviewees. So sorry, your heartbeat seems rather excessive and jumpy, you're just not the talent we're seeking for in our inhuman enterprise. How twisted is a company trying to out-innovate humanity itself just to sell products to other human beings. I'm sure they will prefer to hire actual robots which don't suffer from sleep or family commitments as soon as becomes feasible. I'd never go near that company until getting an exoskeleton of my own first.

For more of the upsides to emerging technologies, search youtube for EnChroma and watch grown adults see colors for the first time. It's like watching that quote from Confucius come to life: “A common man marvels at uncommon things. A wise man marvels at the commonplace.”
[General Topics] ZipAddict:
wow i hadnt seen that nytimes article. Just read it now. sounds like an exoskeleton might be a job requirement in a few years! I saw a youtube video about Enchroma, but had forgotten about it. Thanks for refreshing my memory. I will read a little more on it tonight. thanks for bringing those to the table!
[General Topics] ZipAddict:
Researchers have found that, based on enough Facebook Likes, computers can judge your personality traits better than your friends, family and even spouse. University of Cambridge. "Computers using digital footprints are better judges of personality than friends and family." ScienceDaily. ScienceDaily, 12 January 2015. www.sciencedaily.com/releases/2015/01/150112154456.htm
[General Topics] ZipAddict:
Have you ever added something to your cart in amazon or other shopping site? If you didnt buy it right away, did you feel like it was weird that the price went up on almost everything? Probably not a coincidence!

http://thesovereigninvestor.com/privacy-invasion/new-privacy-invasion-will-cost-you/
[General Topics] ZipAddict:
Privacy software developed with the help of the NSA? Yet the president and co-founder of the app says, "We believe the NSA cannot break our encryption." :confused:

Didnt we already prove that encryption as we know it, can be easily cracked by NSA that developed it?

http://privacyblog.com/2015/06/01/nsas-new-privacy-software-will-soon-be-available-for-everyone/

The NSA, for national security reasons, has encouraged commercial development of secure mobile communications in large part to help American businesses protect their valuable intellectual property (IP) from theft, estimated to result in billions of dollars worth of stolen trade secrets and IP.

Sounds to me like NSA wants nobody spying unless its them! For some strange reason, I dont trust this!
[General Topics] paysen:
Very interesting topic.

What are your thoughts on the Blackphone (2)?

https://silentcircle.com/

Or is a phone running ubuntu the better alternative?

Are there any roms yet that provide better security? Can't believe nobody started developing one.
[General Topics] LoneWolfSK:
[Privacy] Protection For Advanced Android Users (2015 And Beyond:What You Did...

Blackphone is still under development and I wouldn't trust them because their team consists of double/rogue agents who know the spying habits of US/Russian operatives. Imagine people who know almost every spying routine now being "illuminated" and going for a redemption by helping you maintain your privacy: yeah right. They would sell your data to the highest bidder, for sure.

P.S. Their phone is still an Android, no matter how much modified. It can be hacked, because it would not have been massproduced if else.
[General Topics] ZipAddict:
Thank you! And thanks for participating in this discussion! Sorry for late reply but i was doing research in between all the kids activities and school. I had heard of blackphone but did not know much about it, so u inspired me to do a little homework. I agree with [MENTION=6383270]LoneWolfSK[/MENTION].

There is a big push by govt agencies to maintain control over all surveillance. So in turn much software is made to protect, but actually makes it easier to watch. Faking security and identity theft is big business. They hope everyone will feel secure again and think they are invincible and no one can watch them anymore like old times before edward snowden (which was never true). The first blackphone was hacked pretty easily. Not seeing many specific details regarding second one. My opinion is that blackphone would not be considered by me until changes at the hardware level are made more secure, but its a step in the right direction as it is attracting attention to privacy. I dont think ubuntu is better alternative either unless coupled with more secure hardware, but thats my opinion. some aspects of linux based os are more secure but still easy to hack. mobile tails ran from micro sd would be best linux mobile os in my opinion. the more i learn, the more i believe that building a phone from safer hardware is the way to go for best privacy. All the privacy software is only so good when raw backdoors exist. Although much software helps protect from amateurs, but not full blown psycho intelligence geniuses.

There was a great report online created several years back that proposed a prototype of building this device from secure hardware in great detail. I have reason to believe it was either wiped from net, or bought and deleted by a competitor trying to do something similar. It listed many features such as non-nfc battery, isolated baseband radio (very important), rfid blocking, and much much more. but i cannot for the life of me find it now and its bothering me a bunch. This was genius idea to me and was going to be something i tried myself.

In fact I am offering a bounty for anyone that can locate this webpage i described above (if possible), or something extremely similar. Unfortunately the bookmark i made is no longer there and using all search keywords i have ever used regarding the topic nets no results similar. All i can remember is that i think it had a yellow background and was from maybe 2009-2010 ( I remember thinking, "This is amazing and cutting edge for how old this is!"). It was not a popular website and may have even been a college students paper. I am broke so all i can offer is a couple bucks and some major thanks button pressing lol!

This was a good article...

https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy

but not even close to the above mentioned article. It was much more thorough.

Please feel free to bring up any other ideas or topics anytime! This will be great place to have all these ideas and links in one thread!
[General Topics] LoneWolfSK:
The article (and many those similar) is still available at Tor security forums, but only accessible via Tor or similar browser. There are a lot of security related issues described and resolved at Darknet but many rookie hackers are making it hard to separate the proper topics from those inapropriate such as "how to hack facebook" etc. As for Linux and Android, if the phone's bootloader and kernel are unlocked, the best solution for privacy is to port Tails or AnonymOS and boot them as primary systems + enable call & message logging to an encrypted SD card that can be pulled out anytime. There are apps for anonymous and/or encrypted:

- bluetooth/irda transfers

- instant messaging

- browsing the web

- photo/blog/video upload.

Any other "security" on Android makes it up to only some antiviruses, and the heads of the antivirus making companies are mostly under NSA/country parliament control. This is inevitable, and if they turn data spying policy into a ROUTINE, we are all down definitely.
[General Topics] paysen:
Can you recommend me a keyboard? I am currently using the Galaxy S6. I disabled everything I could without rooting it (I don't want to trip Knox, because I am going to sell it for the next Nexus device coming soon)

Swiftkey, Swype etc want a ridiculous amount of permissions. I searched the store but nothing is really satisfying. Closest is this one:

https://play.google.com/store/apps/details?id=com.klye.ime.latin&hl=de
[General Topics] LoneWolfSK:
Use Swype and kill the permissions when root
[General Topics] ZipAddict:
Thanks for your support here!
[General Topics] LoneWolfSK:
Always there to help if I can :)
[General Topics] paysen:
Thanks for your reply, I will do that once the Nexus arrives.

The problem is, if I root the Galaxy S6, it will trip Knox. You can't reset the Knox counter and the phone loses warranty etc forever and I can't sell it anymore. Well I could, but it wouldn't be fair.

I just bought it because I needed a phone until the next Nexus arrives.

So I decided to do as much as I can without rooting the phone.
[General Topics] samurai92:
Hi every body i just wanna know a method to change Android mac adress.thank
[General Topics] LoneWolfSK:
[Privacy] Protection For Advanced Android Users (2015 And Beyond:What You Did...

1. My point exactly: this goes for any social network and/or email account, so you are NOT anonymous at ANY site that requires a secure login; your login data and search/usage history CAN be visible by the site, by your ISP and by the NSA, advertisers or 3rd party marketers. So, no anonymity?

2. My point exactly: no anonymous payment, no anonymous email, so - what exactly IS anonymous? Browsing? :)

3. Freakout: if Google offers you more than 3 captchas after seeing you logged in from 3 different IPs in the same day, you are bound to have your gmail account suspended. No gmail = no logins or no access to accounts created through that email address: fb, twitter, instagram, vimeo, vine, linkedin or any other site. This so called "anonymity" is not worth it. Too risky, and almost no benefits whatsoever.
[General Topics] ZipAddict:
Thanks for reading. Sorry i cant help with gs6. Maybe ask in that device forum because it may already be known, or source code will need to be analyzed probably.

Use xprivacy in my opinion

[MENTION=5696732]anonify[/MENTION] [MENTION=6383270]LoneWolfSK[/MENTION] [MENTION=7020826]Mufftool[/MENTION] and everyone thanks for all the interesting info! Nice reading for everyone. Sorry been scarce lately had a death in family. More thanks coming tomorrow to everyone
[General Topics] Mufftool:
This is exactly why I got rid of Orxy. Its maybe good on a dedicated phone for sensitive use only - but a phone to which you have your Google account linked, your email, Facebook (a normal person's phone in other words) - these sites will give you endless Captchas and "your account was logged into from a new browser" hassles. Not worth it at all.

Rather have a solid VPN protecting the phone as a whole, and use Orfox for any Tor related activity - which is gonna be yep, you got it, mainly browsing ?

Sorry to hear that dude - but welcome back!
[General Topics] ZipAddict:
Not 100% sure but i think this was one of those things where they say it does, but technically it doesnt. Wish i could say more to clarify

Thank you
[General Topics] LoneWolfSK:
My condolences for your loss