best privacy & security - Samsung Galaxy S20 / S20+ / S20 Ultra Guides, News

Hello,
What are the best settings I can put on my Samsung GS20+?
I dont really want to install new apps, and I still want my phone to be usable (having the play store).
The Idea is really to see what are the samsung & google settings I can customize to increase my security and privacy while keeping a lot of usability
thank you!

Always airplane mode.

I'm struggling with the same thing. I came from a rooted phone with XPrivacyLua and AFWall, but now without root (and xposed), I'm using NetGuard (and of course donated) which helps.
https://forum.xda-developers.com/android/apps-games/app-netguard-root-firewall-t3233012

thank you
Thanks for the replies!
I was more looking for simple settings/tasks one can do to increase its security and privacy.
surely there are some modification from the default config to samsung/google that can help.
thanks

Related

[Q] Privacy on the Note 3

So I recently got my N3 and I've been looking around the forums for privacy features similar to those shipped with cyanogen-mod and AOKP with regard to apps. I really want to block apps like twitter and such from getting into my address book and this I could do with "Privacy Guard" on my old handset.
So I've been on the lookout for something similar for the N3 via a mod or root+tweak but haven't seen anything yet. Maybe there's some manual way to it? Any thoughts or ideas?
xposed framework + xprivacy module - all you need
Don't worry, the NSA has got everything anyways
How about some firewall + Titanium Backup..
You can freeze / delete all unwanted apps with Titanium Backup and put some apps behind firewall if you need them, but they just don't need to get internet access
I'm not that concerned with whatever the agencies do in this case... I however don't want to be part of this aggressive advertisement that companies run. Do you know this or that person e-mails...
Thanks for the tips. Will look into them

Setting up my N7 as a business showcase display.

Hello,
I'm trying to set up a showcase display at my business with my n7. I have all the hardware set up with a mount and display case so customers can peruse things. But unfortunately my expertise stops there and I need to get some good software, or guidance on how to configure the built in security settings. I'd like customers to be able to use the slideshow feature via the gallery app and or screensaver feature, access limited browser capabilities for my website, and maybe a few other minor things, but I dont want them to have any administrator privileges.
Thank you for your time.
Don't root it. And use a launcher that you can hide apps with. Then they can only see the apps you want them to use, and without root they can't mess it up to bad.
Doubt you'll find a better way.
Sent from my N5 cell phone telephone....
Something like this can help: https://play.google.com/store/apps/details?id=com.gears42.surelock
deltatux

[Q] Virus or Android now Untamed?

Hello Good People of XDA
I have been a i9506 owner for quite long, had a 9100 before,
I am used to root and mess with apps to customize things to my wim,
at the best of my knowledge (I lack android programming skills, but I can do things with terminal and filesystems).
All that before to say I am not totally a noob, but my lack of technical knowledge might bite me there.
System wise, I am under 4.2.2, rooted, unknow sources are not allowed, system check for apps is allowed,
I have an antivirus (more than one, but only one works each day, just to be sure I don't miss things)...
My problem is that I recently found out that some apps, actually system apps, blocked
with Titanium backup, or with gemini app manager, or app quarantine,
were actually running anyway.
They are marked as blocked in my app manager, but can still be force closed,
and they appear in battery displays (most of these under the android system block, in the list of services/apps used),
and in process running when using Ccleaner apps.
Also, my battery display show GPS is activated, while when I go into options, all boxes are off or unticked.
I thus wonder what's happening?
How is it possible to have these schrödinger apps tamed and blocked like I want them.
I want these to shut down and only work when I DO ALLOW these, for them not to suck my battery or do unauthorized chores like tracking me when I don't want.
How is it possible that they even behave like that? In i9100, I never observed that in Android 4.0.
I wonder if Google didn't change the workings for making us unable to disactivate what we don't want to work, which was pissing them off.
They already change the permissions displays in the market so permissions as intrusive as "contacts/sms message/USB stockage" are considered "not relevant/important",
while they are depending on the announced display of the app.
But I don't want to go on the "conspiracy route" (I am not like that, I am a pragmatist and I just observe facts, like these apps, with sensitive access, not being able to be deactivated), so let's focus on the technical part:
such apps were Maps, Samsung sync adapters, NFC service , Google Agenda/Contact synchronisation, sysscope, context provider, etc.
That's a lots of things that are supposed to communicate to cloud or other devices, with feels lot like a gaping flaw in the armor...
I want a phone and a tool, not something that track me or put me at risk of being stolen by somebody with technical knowledge.
Am I alone?
Thanks for any insights.
Blocked apps still working
I don't know if my title was too unclear, so I would like to change the title but am unable to do so?
Is it please possible for a moderator to do it (with the title of this post)?
Thanks by advance.
I feel like it is a true problem not being able to block some apps,
or even more, to believe they are blocked while they perfectly perform in the background,
and display activity only in secondary reports, not under their respective "buttons"/information tabs.
I wonder abourt the technical reason to such behavior.
Then delete those apps or block some of the permissions with an app (eg Privacyguard).
It's my opinion that an antivirus app (at the moment) is a waste of resources. Just think before you install something. Also if you are worried about security, you should always run the latest version of Android. 4.2.2 is an old version.
Lennyz1988 said:
Then delete those apps or block some of the permissions with an app (eg Privacyguard).
It's my opinion that an antivirus app (at the moment) is a waste of resources. Just think before you install something. Also if you are worried about security, you should always run the latest version of Android. 4.2.2 is an old version.
Click to expand...
Click to collapse
Thanks for your answer.
Well I don't want to delete system app when they might be useful at time.
I just want them to behave correctly, that is, not work when they are blocked.
That is not a solution to say "uninstall this", while the true problem is Android general behavior here.
I didn't installed system apps, they came with the thing, and all of them are not bloatware.
"NFC service" is something I want to keep for when I am ready to use it,
but I don't want to let it free and unleashed because of the opening it leaves on my phone.
Same goes for bluetooth, synced backups and so on.
I don't want backups on the cloud, so I deactivated the options, and blocked the apps.
Why are they running? It is not normal!
And my old version is maybe not secure, but actually trying 4.3 hasn't changed anything,
and I only suspect this to be some "new feature".
The antivirus is a waste for scans, I agree, still it has useful firewall features that justifies in itself its uses.

Instead of rooting...?

If I recall correctly, the Priv's OS has some application that checks the integrity of the OS, thus prevents rooting.
And can't we simply flash a new ROM which would be just a clean Android? Maybe unlocking the bootloader would be easier than cat-and-mouse play with the real BB Android.
no it does not exist and the drivers for some hw on the device to work like izat and keyboard won't work, also the priv kernel is also secure along with bootloader so if i see a custom or AOSP rom for this device i will be like on twilight zone
There have been lost opportunities here and there but BlackBerry has been active on patching all security holes and that is why is important to the company that a root has to be impossible or this effort has been all for nothing and they became the newest "Blackphone" (now that rooting was unfortunate for a device sold as a "secure" phone).
I know that there are audience in Android just for root capacity but not everybody are in a "real" need for it.
I like that the BlackBerry Launcher leave most of AOSP element, except for icons and notifications sounds.
Personally I only ever use root for CPU control and ability to delete ANY app I deem fit, and on my previous SGS5 that meant all those heart rate and other nonsense apps that ran in background and chunked the battery to no end.
Gonna assume the Priv then has no CPU management ability due to the lack of root, correct?
Skv012a said:
Personally I only ever use root for CPU control and ability to delete ANY app I deem fit, and on my previous SGS5 that meant all those heart rate and other nonsense apps that ran in background and chunked the battery to no end.
Gonna assume the Priv then has no CPU management ability due to the lack of root, correct?
Click to expand...
Click to collapse
Correct. Though, they do use the interactive governor, and while I would kind of like to underclock the CPU a bit to deal with overheating, the default CPU management isn't too shabby. And since the Priv is almost completely stock, removal of unwanted apps is minimal, and all the carrier apps I had weren't system apps, so I was able to actually uninstall them, and what BB apps I didn't care for, I simply disabled. Learning that life without root isn't so bad on the Priv.
I just want root for Adblock for both YouTube and Chrome. I don't care if it's just a temp, as long as it lets me update the Filters for AdAway I am alright with it, I'll deal with the youtube ads.
KOAO said:
I just want root for Adblock for both YouTube and Chrome. I don't care if it's just a temp, as long as it lets me update the Filters for AdAway I am alright with it, I'll deal with the youtube ads.
Click to expand...
Click to collapse
Well, you could use Firefox. It supports extensions on Android, and ublock works nicely to kill ads, though I find functionally that Chrome runs infinitely better on Android than Firefox does, so your kilometerage may vary.
Artemis-kun said:
And since the Priv is almost completely stock, removal of unwanted apps is minimal
Click to expand...
Click to collapse
Not true! The Priv is full of bloatware that you can only deactivate but not uninstall (Yahoo Finances, for example). And some of those apps will stay active and make the phone unusable despite being 'deactivated'. Like BB Hub. I deactivated it from the start and just recently saw that it still had several permissions (location, contacts, messages, calendar etc). So I revoked those permissions. Now it constantly pops up and wants permissions. I can't even add a contact without granting these permissions. Annoying as hell. It's ridiculous that BB regard themselves as a secure company with secure smartphones (which was rebutted several years ago) that emphasize on privacy but when it comes to their own apps, it can't get any more privacy invading. I so hate BB!
So I'm waiting for
a) another producer to make an Android phone with a hardware keyboard or
b) someone to make root for the Priv happen so that I can install a ROM of my choice.
Shani Ace said:
Not true! The Priv is full of bloatware that you can only deactivate but not uninstall (Yahoo Finances, for example). And some of those apps will stay active and make the phone unusable despite being 'deactivated'. Like BB Hub. I deactivated it from the start and just recently saw that it still had several permissions (location, contacts, messages, calendar etc). So I revoked those permissions. Now it constantly pops up and wants permissions. I can't even add a contact without granting these permissions. Annoying as hell. It's ridiculous that BB regard themselves as a secure company with secure smartphones (which was rebutted several years ago) that emphasize on privacy but when it comes to their own apps, it can't get any more privacy invading. I so hate BB!
So I'm waiting for
a) another producer to make an Android phone with a hardware keyboard or
b) someone to make root for the Priv happen so that I can install a ROM of my choice.
Click to expand...
Click to collapse
I wouldn't call it full of bloat. Full of bloat is what Samsung has on offer. Yes, there are some bloatware apps that you can't uninstall, but they disable just fine. Sounds to me like your hub got re-enabled, mine has been disabled since day one, and still has no permissions, and doesn't harass me about anything.
Artemis-kun said:
Sounds to me like your hub got re-enabled, mine has been disabled since day one, and still has no permissions, and doesn't harass me about anything.
Click to expand...
Click to collapse
Interesting. Did you do any of the BB OTA updates (mine's running the most recent version, 6.0.1, security patch from August 5th)?
The Hub is still deactivated, but it doesn't seem to 'care' about that. I activated and deactivated it again to no effect.
So you're telling me when you go into Settings -> Apps -> BB Hub -> Permissions, all six permissions (calendar, camera, contacts, storage, phone and BB Productivity Suite) are turned-off?
I'm pretty sure I had these turned off when I got the phone in May. So maybe some of the OTA updates changed something about it. Unless you're running the same version that I am.
Oh and the fullscreen pop-up says Blackberry Hub+, maybe this is a new thing then?
And yes, other manufacturers may have more Bloatware. But at least there you can uninstall them or flash a different ROM. And all the BB services like BB Hub count as Bloatware for me, too.
Maybe I should sell my Priv and get a S6 Edge Plus (again). I still got the keyboard cover for that model and it's flashable, although Samsung also makes it hard for the users. But the keyboard cover is not back-lit and the phone is even bigger than the Priv (already too big for my taste).
EDIT: Ah wait! I just saw that the 'Blackberry Services' were activate, so I deactivated it and revoked all its permissions and now the pop up is gone. I definitely had this deactivated before the update, but as with the other BB apps, you have to deactivate them again after each update. Guess I just overlooked this one. Yay!
Shani Ace said:
Interesting. Did you do any of the BB OTA updates (mine's running the most recent version, 6.0.1, security patch from August 5th)?
The Hub is still deactivated, but it doesn't seem to 'care' about that. I activated and deactivated it again to no effect.
So you're telling me when you go into Settings -> Apps -> BB Hub -> Permissions, all six permissions (calendar, camera, contacts, storage, phone and BB Productivity Suite) are turned-off?
I'm pretty sure I had these turned off when I got the phone in May. So maybe some of the OTA updates changed something about it. Unless you're running the same version that I am.
Oh and the fullscreen pop-up says Blackberry Hub+, maybe this is a new thing then?
And yes, other manufacturers may have more Bloatware. But at least there you can uninstall them or flash a different ROM. And all the BB services like BB Hub count as Bloatware for me, too.
Maybe I should sell my Priv and get a S6 Edge Plus (again). I still got the keyboard cover for that model and it's flashable, although Samsung also makes it hard for the users. But the keyboard cover is not back-lit and the phone is even bigger than the Priv (already too big for my taste).
EDIT: Ah wait! I just saw that the 'Blackberry Services' were activate, so I deactivated it and revoked all its permissions and now the pop up is gone. I definitely had this deactivated before the update, but as with the other BB apps, you have to deactivate them again after each update. Guess I just overlooked this one. Yay!
Click to expand...
Click to collapse
https://puu.sh/qYFcI/bca42bb0e9.png here is a screenshot I just took. I should also point out that I have everything else BB disabled as well, and I've never had to re-disable any of them. I'm on the MM beta program, so that might also make some kind of diffeerence, but I stay up to date with patches, and haven't had to disable anything again. Not sure how it happened in your case, but glad that you got it sorted.
Another thing I do feel I need to bring up, this is also a BB phone made for BB people, so it does make sense that they include the software suite that their fans have grown to love. Sure, those of us who couldn't care less about BB's software, and just wanted in on their amazing hardware prowess, will find these apps bothersome, but if nothing else, visually they left Android alone, and for that, I can't not happily thank them. They could have given us something like a BB10 inspired touchwiz, could you imagine? Lol.
Yeah that's true and I'm also happy that they didn't over-customize their ROM. It's just hard to accept any deviation when you've been used to having full freedom on all kinds of custom ROMs for the last ten years.
Strange though that you didn't have to re-deactivate the apps after the updates. Then I guess I'll look into the beta program (had seen it before but didn't mind).
and I do not have 'Secure Start-up' turned-on.
There's enough bloatware that I'd like to remove, such as "Hang-Outs" & BBM is eating data with stupid pics of available 'stickies' & other crap I don't want to see/read about & my ONLY choice for disable is "Do you want to restore this app to Factory Default?". No, I don't I want to Restore it to Factory Default - I want to DISABLE it. I do understand that the PRIV's supposed to be secure & yes that's a Good Thing. I also understand that most users LIKE to be kept informed. I am NOT 'social' - Let ME decide what I want to be informed about & when. I didn't even get a choice of what subscription (?) I wanted (which is NONE). There's a bunch of apps that I can only Restore to Factory default. That, too me, means I CANNOT Remove or Disable them. I call that bloatware. Un-wanted bloatware. If I could remove them without Rooting, then I would not be looking to do so! I have an 'Essential Tremour' & I NEED a physical keyboard or I'd look elsewhere.
OK: I managed to get BBM to stop shouting at me (as noted: I make mistakes, but I do learn from them); it's just down to wanting to get rid of apps I don't want taking-up space. Rooting a PRIV appears to be dicey, with no firm info from Oct/2016, onwards, regarding 'safe' rooting of my device. I'm running 6.0.1 & Bell is my provider. If it makes any difference, I do not have 'Secure Start-Up' turned-on. As noted, if I didn't need a physical keyboard, I probably would not have chosen this make/model. Guess I'll live with it & keep looking for ways to put my phone on diet (& the battery barely lasts a day, unfortunately). I basically use it as a PDA - no games, few calls, occasional checking notes & calendar - it should last longer.
Bootstrap69 said:
There's enough bloatware that I'd like to remove, such as "Hang-Outs" & BBM is eating data with stupid pics of available 'stickies' & other crap I don't want to see/read about & my ONLY choice for disable is "Do you want to restore this app to Factory Default?". No, I don't I want to Restore it to Factory Default - I want to DISABLE it. I do understand that the PRIV's supposed to be secure & yes that's a Good Thing. I also understand that most users LIKE to be kept informed. I am NOT 'social' - Let ME decide what I want to be informed about & when. I didn't even get a choice of what subscription (?) I wanted (which is NONE). There's a bunch of apps that I can only Restore to Factory default. That, too me, means I CANNOT Remove or Disable them. I call that bloatware. Un-wanted bloatware. If I could remove them without Rooting, then I would not be looking to do so! I have an 'Essential Tremour' & I NEED a physical keyboard or I'd look elsewhere.
OK: I managed to get BBM to stop shouting at me (as noted: I make mistakes, but I do learn from them); it's just down to wanting to get rid of apps I don't want taking-up space. Rooting a PRIV appears to be dicey, with no firm info from Oct/2016, onwards, regarding 'safe' rooting of my device. I'm running 6.0.1 & Bell is my provider. If it makes any difference, I do not have 'Secure Start-Up' turned-on. As noted, if I didn't need a physical keyboard, I probably would not have chosen this make/model. Guess I'll live with it & keep looking for ways to put my phone on diet (& the battery barely lasts a day, unfortunately). I basically use it as a PDA - no games, few calls, occasional checking notes & calendar - it should last longer.
Click to expand...
Click to collapse
In order to disable some of the apps on this device they must be restored to factory default. I have hangouts and BBM disabled. My battery life is pretty good. You have to figure out what's killing yours. Do you use a case that has the preview window on the front?
On non rootable devices I use AdGuard to have a firewall and adblocker. It works by routing everything through a local vpn server. Great concept and working fine for me.

GPS/Location spoofing when location is off??? Yes or No?

Howdy!
3 part question:
1) I am on rooted OOS9.0.17 + Omega kernel + xXxNoLimits and use App Ops to put my apps on a leash( those dirty buggers! ), and a VPN. I have location services turned off, sandboxed facebook and fb messenger, use Privacy Browser or Tor, and use App Ops to turn off location for the ton of apps that use it but do not ask for permission. Do I still need to use a gps/location spoofer for all the system level stuff that I won't/don't mess with? It seems some stuff still knows where I am. It seems that, in spite of all I have done, a few apps still know where I really am.
2) what app have you personally had success with? I have searched the sight and didn't seem to find "that" one app everyone uses and loves.
3) What is the impact on battery life? I had to made some adjustments with my VPN after the last update to either Eddie or OpenVPN as my battery started tanking again. Still not totally happy on that front.
Thank you in advance!

Categories

Resources