Hello guys. I recently acquired a Pixel 8A and it was Google stock os I bought it from a man locally all with cash I brought It home and I flashed grapheneos onto this phone.
What else needs to be done to anonymous this phone and make it a privacy phone and a spy free phone no tracking phone no interception phone and no monitored phone.
Any advice welcome!
Thanks.
First off, and most importantly, it is not an anonymous phone.
The phone is tied to your location, your identity with your cell phone carrier, the IMEI, the IMSI, many identifiers you will not be able to change. From a threat modeling perspective, you cannot be attached to a network without tracking, interception, and monitoring.
You can use your phone in a way to minimize third-party tracking, and unnecessary data leakage. You did a good job by installing graphene OS.
Just be mindful of the applications you install on it, if you install sandbox Google apps, just realize Google will still have access to your location and push notifications etc.
If your threat model truly includes not being observed, disable the cell phone part of the phone. Only use the phone via Wi-Fi. That’ll reduce a lot of the risk surface
I have already inserted a sim card into this phone. The sim card is a kyc sim card. I want to do best I can without compromising my identity. My threat model does involve government interception and tracing, but it’s more about staying Safe with this phone whilst I’m possibly under surveillance. Local police entities. More so than government contractors / third parties. What is best VPN to use in this phone? I rely in the sim card in this phone so always keeping in aeroplane mode isn’t possible as this is my primary number and I need to have constant connection to it. In this case, what shall I do with this phone?
https://www.privacyguides.org/en/vpn/
Privacy guides is a great place to start. They have lots of advice on many things for your digital life.
Running graphene OS is great. Just be deliberate about what apps you run. Use an encrypted messenger such as signal, or simple x, for your secure phone calls and messaging.
Even if you used a SIM card, that you paid for in cash, with no KYC. You’re still not anonymous. If you use your SIM card at your house, the network operator will know that, and over a period of time will know where you live. Only so many people live there. They’ll know where you travel, they’ll know where you spend time, they’ll know when you make phone calls, and who you make phone calls too. That’s just the cost of being attached to the network
So when people are telling you if the network is your threat, don’t attach to the network, they’re not being unreasonable. It just requires you to be clear about what your threats are
If you want to be sure you cant be tracked, monitored, spyed on, and calls can’t be intersepted:
Don’t ever connect it to WiFi and don’t insert a sim card.
Graphene or not, your ISP can still share your position or other meta data with government and stuff (in the us they can also be forced to not tell you) - in some countries they legally sell to third party’s, in some probably illegaly
Calls are normally not encrypted so the os doesn’t matter as much if its the government who can force your ISP or if someone is skilled enough for a Man in the middle attack.
Android is a highly complex system, it will never be 100% safe.
If you just want to decrease spying by companies and less powerful people:
Use neo store or fdroid (no google play or aurora) as all apps there are Foss
Don’t install gapps or any other google services/packages
Use shelter for less trusted apps
Use netguard to block apps from accessing the internet
Physically block your cameras
If you want to be absolutely sure no one is recording audio: destroy mics with a needle and connect headset only when you need it
To only use communication apps which are encrypted and you hold the keys should be not needed to be said: matrix, signal, element, xmpp are good, (telegram (normal chats), Facebook, WhatsApp etc is a no go)
Plus: its google/us hardware. They could always hide something in lower level software like drivers or bios.
(Cant find the arricle i was thinking of, maybe false): It was recently discovered that snapdragons pinged their home server when turning on, which was not noticeable in android as it was on a deeper software level
Don’t ever connect it to WiFi and don’t insert a sim card.
So… don’t ever use the Internet?
I think they are trying to illustrate the value of being explicit about your threat model.
So if your threat is the network, you can’t use the network. Because the original poster is so vague about what their actual threat is, it could be as simple as use Firefox and an ad blocker, or don’t connect to the network ever for any reason…
I’m going to pivot this answer, to the more general: what’s good data hygiene for my phone?
No specific threats, but what’s the easiest things I can do to regain as much privacy and autonomy as possible.
Using graphene OS is great, good job.
Using always on VPN, like mullvad.
Set up a work profile, and install Google services inside the work profile, you can use shelter to do this. Then anything you need that requires Google, like Google maps, Uber, Lyft you can use it from that profile.
Use a secure messenger like signal, or simple x, with your friend group. To prevent metadata and unencrypted cell phone calls from leaking
I highly, highly, highly recommend you read privacy guides https://www.privacyguides.org/en/
People keep talking about threat models, that’s an important exercise for everyone to do eventually. Figure out who your adversaries are what the downsides of them discovering information is and how much effort you’re willing to put into prevent that.
For instance, keeping your phone private from snooping roommates fairly easy. Little bit of effort has good dividends
Being a whistleblower, much more difficult, depending on who your adversary is they could use a lot of asymmetric resources. Boeing has a tendency for their whistleblowers to become suicidal, through some means. And if that was your scenario, you’d have to be very careful.
But the biggest threat of all, the absolute worst threat you could ever face with technology, is a bored battle buddy working in signals intelligence… There is no law, there is no restraint, there is no safety… They will find your s***, and they will embarrass you.
I use TrackerControl (f-droid).
It’s an app that can turn off entirely internet access to an app or granurarly tweak which domains can comunicate with.
