yashsingh1/xdaforums huggingface dataset:
[General Topics] ZipAddict:
what do u mean about lg g2? there is Lp for it. u mean they are not pushing out an lg update to Lp? i just backed everything up to my sd card that i could by exporting contacts, messages, etc. and used titanium backup for apps. anything i couldnt save to sd card, i emailed myself or screenshot it. there might be a new app to do all this but i dont know. the app u linked is maybe ok on kk but prob not on Lp. make a nandroid backup before doing any upgrade or using that backup app and move nandroid to sd card and then if u forget to backup some important data, u can always restore nandroid to retrieve it.
[General Topics] LoneWolfSK:
[Privacy] Protection For Advanced Android Users (2015 And Beyond:What You Did...

Any Tor based browser

Go for Titanium backup or make a full nandroid flash backup using the mentioned app or imaging software directly from Windows (Acronis, Norton ghost etc.)
[General Topics] Fap_Trooper:
yeah Lg g2 does have LP now, but i meant the LG software when you plug in computer and you can put songs and backup etc like itunes for ios. The LG software doesnt work with lp but only with kk, thats what i meant. I dont want to use google or lg backup, thats why. But thanks. I know nandriod, but ya i will try it cheers:cowboy:

---------- Post added at 04:38 PM ---------- Previous post was at 04:37 PM ----------

ya i know Tb , i just meant backing up app without flash backup and all, other than tb. But i will try those, thanks:cowboy:
[General Topics] LoneWolfSK:
LG PC suite or My phone explorer does the job
[General Topics] Fap_Trooper:
LG pc suite doesn't supoort Lp tho thats why. But Will also look MPE. ty:good:
[General Topics] LoneWolfSK:
Make sure you download proper drivers as well
[General Topics] LoneWolfSK:
News for today: Tor messenger in beta

http://www.engadget.com/2015/10/30/tor-messenger-beta/
[General Topics] mrrocketdog:
http://www.wired.com/2015/11/signals-snowden-approved-phone-crypto-app-comes-to-android/

????

just found out will not run without google play services.

gaaaag.:banghead:

NEVERMIND !

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] Mufftool:
So...? Aren't you intending to use it on an Android phone? Still looks awesome - I just downloaded it.

---------- Post added at 08:34 AM ---------- Previous post was at 08:17 AM ----------

If anyone wants to play with the above app, pm me your number and let's give it a go.
[General Topics] mrrocketdog:
yes an android phone. which is more than enough google for me without piling on a gapps package.

but thats just my preference.

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] Mufftool:
May I ask why? I mean there are plenty of stripped down gapps packages if you're worried about bloatware
[General Topics] mrrocketdog:
nope. bloatware isnt the issue. thats fairly easy to get rid of. google is very .....

oh , here you go. some reading material.

http://www.business2community.com/trends-news/google-getting-intrusive-life-0941332

and thats about a year old. i'm quite concerned how invasive google has become.

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] Mufftool:
Yeah course. I mean that's how they get to give you all that awesome stuff like Maps, Earth and the best search engine on earth for 'free'.

I would like to think one can take advantage of all these things without giving away toooo much, but I also accept that the multiple billions of dollars of investment must come from somewhere.

My personal opinion on getting the most out of them while giving the least info back is to set up all Google accounts using VPN's and/or TOR. And then continue using these tools while on any device running Android with gapps.

---------- Post added at 02:01 PM ---------- Previous post was at 01:59 PM ----------

However, if you want true anonymity, I guess your approach is foolproof. Just seems a little over the top to escape some targeted ads.
[General Topics] Mufftool:
What's your preference for private convos [MENTION=5511100]mrrocketdog[/MENTION]?

I see there are heaps of options out there - this little list is quite nice and comes with pretty pictures :sly:

---------- Post added at 03:57 PM ---------- Previous post was at 03:57 PM ----------

http://www.whoishostingthis.com/blog/2015/04/29/im-encryption/
[General Topics] mrrocketdog:
currently using smssecure. my approach isnt fullproof , but i believe it is a step in the right direction.

and as a sidenote , i try not to text or say anything that i dont want in print. again , probably 'just'my paranoia

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] LoneWolfSK:
There is always Torchat.
[General Topics] mrrocketdog:
thank you

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] ZipAddict:
Ok I finally have the links in post #2 updated all the way. I will try to update it every week or so. If you see any errors or anything let me know. Sorry I have been scarce lately, but I am working hard learning programming so that I can be more useful to development.

http://abcnews.go.com/Technology/googles-scary-smart-feature-write-email-replies/story?id=34963530

^ google is at it again
[General Topics] LoneWolfSK:
[Privacy] Protection For Advanced Android Users (2015 And Beyond:What You Did...

This Google's "know-it-all tool" is nothing more than a word analyst: it would start emails with "dear sir/madam" and end them with "yours truly", like a Cleverbot would do. In spite all this, I would never let even another MAN/WOMAN compose my emails, not to mention some sh*tty content prediction algorithm
[General Topics] ZipAddict:
agreed. not complex, just invasive.

any opinion on the webxray software mentioned in this article?...

http://theconversation.com/think-yo...s-youre-likely-paying-with-your-privacy-49694
[General Topics] LoneWolfSK:
Use Adblock plus and the advertisers are all dead/blocked. In combination with Tails/AnonymOS it can be bulletproof if set up properly.
[General Topics] ZipAddict:
i do use adblock plus on pc (amongst other things) and i have different method on android, but i think im going to try this webxray because i think it might provide more info than ad tracking. i will let you know if its worth anything in a couple days
[General Topics] LoneWolfSK:
Try Ghostery instead
[General Topics] Mufftool:
[MENTION=6832035]ZipAddict[/MENTION], while your list of links in post #2 is certainly a great start - how are we meant to know which to click without any kind of indication of what they are ?

I know it's a load more work on top of what you already have done there, but a brief description of each is surely the only usable way, unless one opens all in one go and sifts through each link to find what you're needing...?

---------- Post added at 09:39 AM ---------- Previous post was at 09:32 AM ----------

....however, I can't stress enough how grateful I am for said list. There are a lot of questions I would like to ask, but am scared to for fear of them already having been answered. So that will be great help and will potentially save time and annoyance for all.

---------- Post added at 09:59 AM ---------- Previous post was at 09:39 AM ----------

Ok. This is one of the n00b questions that has probably been been asked and answered - but my little brain cannot get round this fundamental choice. Which is better for anonymity:

1. To use TAILS and reveal that one is using TOR to one's ISP.

2. To use a good VPN and then Orweb/Orfox on top of that.

It seems to me that if one is using one location frequently, option 2 is better. But for anonymity across multiple machines and locations, TAILS is going to be way better. Am I barking up the wrong tree?
[General Topics] LoneWolfSK:
[MENTION=7020826]Mufftool[/MENTION] the topic name is Privacy protection for ADVANCED Android users, and if noobs don't know the purpose of tools they can google by the app's name and see what is it about. Imagine editing a post with 50-100 tools linked: no way Josè :D if you guys are total noobs, don't expect to get it all on a silver plate but put some effort into getting the knowledge. We were not born as learnt, but we also learned along the way AND from each other. Neither one of us is an expert, but we are better than experts when we join our knowledge.
[General Topics] Mufftool:
I now see that at least the links are categorised into either picture/software/news. Which is very helpful. My bad...
[General Topics] ZipAddict:
thank u for feedback on post #2. i am trying 2 other formats to address this issue. initially i wanted to have the whole url show so that it gave a better description but it took too much space and such. this will be fixed this week and arranged in a better way for everyone. thank u for ur appreciation!

ask any question anytime. regarding ur last question, that has a lot of variables. my opinion is that either option leaves a trace so usb tails is best for not storing info and linux always better than windows. when u must use android, windows, or software that is unavail for tails or is invasive by nature, vpn +tor and tor browser is nice. other software and guides are available to enhance anonymity based on ur needs and goals and the ones posted in this thread will be more easy to find once i finalize changes to post2. thanks again for ur input and good question.
[General Topics] Mufftool:
You're a gentleman ☺
[General Topics] LoneWolfSK:
Privacy oriented phone Blackphone 2 review:

http://www.theguardian.com/technolo...hone-2-review-privacy-usability-silent-circle
[General Topics] gc_coxen:
Dang, there is a lot more that can be done than I thought. Time to up my security
[General Topics] ZipAddict:
Updated Link #2 to provide easier browsing. Hopefully it will be easier to keep track of where you are in the links now. Only other way is to group each link type(like "software") together in hidden menus but that would require some time to edit so its a last case scenario.

Welcome to the conversation! We are all still learning new things everyday. Things will only get more complex in the future. Glad to hear you are interested in securing your device.
[General Topics] LoneWolfSK:
[Privacy] Protection For Advanced Android Users (2015 And Beyond:What You Did...

I know I am being monitored and am still under search of a proper tutorial/routine on how to fully kill the eavesdroppers and wiretappers. It will either get me to waste my time porting Tails to my phone or buying a Blackphone
[General Topics] ZipAddict:
Cyberghost VPN android app stepped up its game in last update with new security options. will test them out...

i am on the hunt as well. also i am currently focused on learning how to program kernels. i believe this will be a great way to closely interact with the hardware and modify security without sacrificing performance. will maybe have an opportunity in a month or two to fork a kernel and maintain it and that will teach me more on how i can make a security kernel in the future that can help u with a project as i learn more programming languages and similar skills.
[General Topics] LoneWolfSK:
How to hide photos, apps and files in Android:

http://www.androidauthority.com/how-to-hide-files-photos-apps-android-652711/
[General Topics] jayvl:
how does cyberghost hold up against proxydroid or hotspotshield elite?
[General Topics] mrrocketdog:
yeah. +1 ?

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] ZipAddict:
i think that would require some testing and research to answer fairly. they have some differences. i like cyberghost for a couple reasons. i read that they dont store data on hardrive but only on ram, so it keeps overwriting itself. somewhere else said they got raided several times for user data and nothing was accomplished because of their security. they are not based in usa. doesnt slow device unless combined with tor. best for any services bought to use bitcoin or something. those apps look promising though. let me know ur experience with them anytime.
[General Topics] ZipAddict:
big news. check it out...

http://mobile.reuters.com/article/idUSKCN0T739V20151118
[General Topics] LoneWolfSK:
A very interesting experiment:

http://motherboard.vice.com/read/th...izens-browsing-data-i-tried-collecting-my-own
[General Topics] mrrocketdog:
can someone please check this and maybe uhh .... dumb it down for me.

just not quite gettin it.

http://xdaforums.com/showthread.php?t=3045350

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] LoneWolfSK:
^ it holds a tutorial on routing your outbound connections via hosts file or any other file that would contain known malicious and/or tracking/spying URLs. This is a nice try but you simply cannot "block all ad trackers and spies worldwide" using only one file filled with malware URLs. Could try this on my own.
[General Topics] mrrocketdog:
thank you [MENTION=6383270]LoneWolfSK[/MENTION]. if you do try would you please report back effectiveness/lack of. i wouldnt know how to check if was working or not , but will start doing some serious reading.

thanks again for checking this out.:thumbup:

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] dr3s4n:
I haven't got time to read the whole thread but here are some tricks&tips:

1. Cyberghost is a good vpn if you want to unlock content restricted to other countries, speeds are fine but for privacy sucks. They've got a really bad implementation of the openvpn protocol, to be more specific the handshake is completely weak.

2. Don't know if it was mentioned before but DNSCrypt always and forever.

3. Use a user agent spoofer for your browser.

4. LSOS or flash cookies, well, don't use flash at all, html5 (disable canvas function!) or shumway(desktop).

5. Ssl3.dhe_rsa_aes_128_sha and 256 are weak, disable them if you haven't done it yet.

6. https everywhere plugin for firefox?

7. Use PGP, mailvelope is an easy implementation for the browser.

8. TOR no need to mention.

11. Check what information you leak at ipleak.net.

12. privatesearch.io or search.disconnect.me for searching.

Hope it helps :)
[General Topics] ZipAddict:
thank u for contributing this info to the thread! half of what u mentioned has not been discussed here so im sure it will be helpful.

has anyone used csploit to check for vulnerabilities on ur device? its on f-droid app store and here...

https://f-droid.org/repository/browse/?fdfilter=csploit&fdid=org.csploit.android

[MENTION=6383270]LoneWolfSK[/MENTION] how would csploit compare to the software u mentioned before for pentest? im sure what u used was prob better but was it for android or pc?
[General Topics] dr3s4n:
Thanks! I'll try to read the whole thread and keep adding stuff that has not been mentioned before. I wrote in my previous post that Cyberghost it is not that good for privacy, but I forgot to write the requisites (In My Opinion) for a good VPN.

1. Good handshake, this is currently the weakest point. There is a paper explaining it called "Imperfect Forward Secrecy" or just read about logjam attack. Sorry, I can't publish links yet.

2. Killswitch, this means in case the VPN connection fails it shuts the internet connection instead of leaving you exposed, I've seen some VPNs without this functionality.

3. Logs policy, no VPN or server can work without logs, no questions. You need to read the logs policy, what information they keep and for how long, maybe some of them the information they keep it is completely irrelevant.

4. Warrant Canary, your VPN provider MUST have this service. It's the way your provider has to inform you if they have been compromised or are under investigation.

5. Jurisdiction, where is your company? ;)

Regarding to cSploit there is a similar tool called Zanti, I think it was coming from the same guys that released the Stagefright exploit (Zimperium).

Appart from that, if you want a secure desktop OS take a look at Qubes OS.
[General Topics] LoneWolfSK:
I mentioned Kali (Backtrack) Linux distribution which is definitely the best set of tools for pentesting purposes. The pentesting directly from Android sounds fun, I'll try "hacking" my own wireless network and seeing the full netmap/netstat. If it works via this Android app, I'll let you know. If it doesn't, you'll have one less fake tool to worry about :)
[General Topics] LoneWolfSK:
[Privacy] Protection For Advanced Android Users (2015 And Beyond:What You Did...

UPDATE: this cSploit is a total cr*p, here are your proves:

1. Google Playstore working fine, downloaded the csploit apk from their motherwebsite:

2. Installed the apk, gave it full control over the device and here's what happened the first time I started the damn thing:

So, this cr*p was uninstalled after 4-5 attempts to start up this "network interface". The WiFi was always ON, 3/4g as backup connection and still the dumb app failed to connect to a network interface of its own or whatever. To conclude, this app is a pile of s**t.

Tested on:

- a tablet Alcatel Pixi 8

- Virtualbox Android

- a Sony Xperia Z smartphone.

Huge fail.
[General Topics] mrrocketdog:
thank you for testing and report. one more NOT to try and use.:thumbup:

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] LoneWolfSK:
Tested under 3 different platforms, tablet, smartphone and virtual environment. All three segments have failed so don't try pentesting or doing anything with this lame app.

UPDATE: I tried the URL list method by blacklisting the hosts in Android, as described in the aforementioned tutorial, here are some remarks:

THE GOOD: block a website by this method and it remains blacklisted, unable to get any data packages and/or tracking cookies or other malware inbound

THE BAD: it's not auto-configurable and it's up to the user to set it to his needs; this can mean it could become a memory hog that would need lots of RAM in order to constantly compare the link you visited with the "prohibited" links from the txt file. This consumes both CPU and RAM and it did not go as smooth as I expected. Basically, it's a do-it-yourself URL blocker.
[General Topics] ZipAddict:
thanks! yes it was dsploit, then dev joined zimperium and it was turned into zanti and someone forked dsploit and made csploit. i think.

its working for me. i havent tested every option yet though. i downloaded from f-droid app. maybe u have busybox issue?

more thanks coming to everyone tomorrow. out for today
[General Topics] LoneWolfSK:
Downloaded it from their official website and it didn't work on tablet, smartphone or virtualbox
[General Topics] Fap_Trooper:
SElinux , is it better to disable it or permissive or enforcing? Which will be the best option? Ya, i know Nsa is writing Selinux, so i dont trust it. But what willl it do if disabling it ?
[General Topics] LoneWolfSK:
Disable and see if it messes anything up. If it doesn't, just keep it that way. If it does, it's easily re-enabled.
[General Topics] ZipAddict:
as of last year there were 235 different permissions that an app could request including 165 to access hardware and 70 access user info. unbelievable.

See them all here as well as descriptions, # of apps using, and % of apps using...

http://www.pewinternet.org/interactives/apps-permissions/
[General Topics] LoneWolfSK:
[MENTION=6832035]ZipAddict[/MENTION] can you recommend me an app for permission management under Android 4.0? Only that version was able for install to my laptop
[General Topics] ZipAddict:
can u use xposed? if so xprivacy works on 4.0.3 and up...

https://github.com/M66B/XPrivacy/blob/master/README.md

if not let me know and i will do some research on some others i heard of to see if they are compatible. not sure if cyanogenmod had privacy guard back but i dont think so.
[General Topics] LoneWolfSK:
I tried to compile it on my own because it didn't work out of the box, but it seems that 4.0 on my laptop fails to support it. Any alternatives, or newer Cyanogenmod roms for Intel Atom laptops? I'm thinking of "peeking under the hood" of Cyanogenmod and maybe trying to port Tails after all. It seems like a Sisyphus' work. Any other recommendations?
[General Topics] mrrocketdog:
ok , just wondering and i know this might be a broad question ; but here goes :

which might be a more secure rom ; slimKK (which i understood to be built from pure AOSP) , or a pure AOSP lollipop ?

any opinions/suggestions/comments welcome. :thumbup:

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] ZipAddict:
when i have heard people use xposed on pc they used bluestacks. i dont think it works on x86 android linux distro. I have only used CM since last year so i am unsure if it will work for your pc. i will do a bit of research to see if i can find more info for u. Haha nice analogy for porting tails! I would love to help but not sure ive learned enough yet. going to stay with the c language for a bit before moving on to other languages and things. i will be forking and maintaining a custom kernel soon to gain experience and then i plan to build a security based kernel(i have amazing ideas for this!) before moving on to another language.

my initial opinion would be that security is similar. kernel is prob similar. because open source anyone can help fix bugs, etc. Slim is most likely synced with pure so when changes happen to pure they happen to slim too and slim keep its modifications. only difference in security would be if slim added security features to pures code. most roms are adding performance and battery but not security. ask the slim dev if there are any security features for their rom. i have not used the rom and i dont have links to roms so this is my opinion with the little info that i have now. any particular security features are u looking for?
[General Topics] mrrocketdog:
no , just a general "as is" ; is one more secure than the other. here is the AOSP lolli

http://xdaforums.com/showthread.php?t=3208859

and the slimKK (from their website) has moved on to lolli i'm pretty sure.

thank you for input.

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] LoneWolfSK:
SlimKK is less secure than Lollipop AOSP, because newer version of Android is always more customizable than the previous one. This enables you to further tweak speed, performance, permissions, apps, policies, connections etc.
[General Topics] ZipAddict:
[MENTION=5511100]mrrocketdog[/MENTION] oops! i missed the very important part where you mentioned kk sorry! [MENTION=6383270]LoneWolfSK[/MENTION] is dead right!:good:
[General Topics] mrrocketdog:
thank you both [MENTION=6383270]LoneWolfSK[/MENTION] & [MENTION=6832035]ZipAddict[/MENTION]. :cool:

"all i can really do is stay out of my own way and let the will of heaven be done"
[General Topics] ZipAddict:
There are a few nuggets of info here that have not been discussed here in thread if you get bored and dont mind reading over some basics to find them...

https://ssd.eff.org/

https://www.bestvpn.com/the-ultimate-privacy-guide/
[General Topics] LoneWolfSK:
[Privacy] Protection For Advanced Android Users (2015 And Beyond:What You Did...

Hackers identified security flaws in modern day toys:

http://www.forbes.com/sites/thomasb...arget-hello-barbies-iphone-but-its-good-news/

Private data collected on a global scale:

http://www.globalresearch.ca/does-m...rivacy-data-collected-on-global-scale/5493358
[General Topics] LoneWolfSK:
The risks behind using Flash player:

http://www.technmau.com/when-is-adobe-flash-player-risky-to-privacy-and-security-7509

PHP: the most hackable programming language (your phones use it too)

http://motherboard.vice.com/read/ne...ackable-programming-language-is-php-by-a-mile
[General Topics] ZipAddict:
i wish every company respected privacy like this. but somewhere things went wrong and it became popular and legal to practically be an identity thief...

http://www.prnewswire.com/news-releases/dotloop-announces-new-data-privacy-guarantee-300188686.html