Is it worth even trying with a samsung?
from bridgeenjoyer@sh.itjust.works to privacy@lemmy.ml on 27 Jan 00:49
https://sh.itjust.works/post/54168005

Im stuck with an s23 for a while yet. Is it even worth the trouble of trying to use f droid, shutting off google play services and disabling all the other shit on my phone, when at its core its all spyware?

I really wish an alternative existed that wasn’t just a prototype or $1000.

#privacy

threaded - newest

RotatingParts@lemmy.ml on 27 Jan 00:53 next collapse

Check this out. It may help. universal android debloater next generation

iturnedintoanewt@lemmy.world on 27 Jan 05:41 collapse

Try best as you’re setting the phone new. If anything fails you only need to do a factory reset. Also you’ll likely need to perform a do-over after every system update.

Charger8232@lemmy.ml on 27 Jan 00:59 next collapse

Hi there! I mentioned this in the other thread but I’ll go into more detail here. GrapheneOS was created as a replacement operating system for mobile devices. It’s based on Android, but improves security and removes the invasive surveillance. It’s currently only available to install on Google Pixel devices, because while Google is bad with privacy, they are good with security. In 2026-2027 GrapheneOS plans to release their own smartphone in partnership with an OEM. GrapheneOS has 400,000 users and counting. Linux phones have a lot of security issues, especially when rooted. GrapheneOS worth looking into. You can buy a Pixel for around $200 second hand, that way you don’t line Google’s pockets to get one.

actionjbone@sh.itjust.works on 27 Jan 01:04 collapse

OP said they are stuck with the s23 for a while. So this doesn’t help them.

Charger8232@lemmy.ml on 27 Jan 01:07 collapse

Being stuck sucks, but eventually OP will have the option to switch and it’s a still good to hear about it.

bridgeenjoyer@sh.itjust.works on 27 Jan 16:27 collapse

Yeah, ill switch in a few years when this battery goes kaput. But financially it wouldn’t make sense right now. Thanks!

CodingCarpenter@lemmy.ml on 27 Jan 00:59 next collapse

I’m on the same phone. I fucking hate this thing. Screw Samsung I don’t even know who to go to next though

bridgeenjoyer@sh.itjust.works on 27 Jan 01:03 collapse

Yeah its shit. It was free so u kind of had to take it but maybe im thinking the Lightphone could be a good contender…idk

corvus@lemmy.ml on 27 Jan 01:30 next collapse

No, IMO. For a real private android experience you have to switch to Lineage or Graphene and F-droid apps. I’m writing this from a Galaxy A5 2016 with LineageOS with F-droid only apps in one (main) profile and WhatsApp and a couple of other (in my case, sadly unavoidable) proprietary apps in another profile.

Here is a list of supported phones by LineageOS in case you are willing to switch.

InternetCitizen2@lemmy.world on 27 Jan 01:51 next collapse

Yes, getting started is still a start. Also means your workflow will be as ready as can be for GOS

monovergent@lemmy.ml on 27 Jan 02:00 next collapse

Worth it, especially if you are stuck with the phone. Find FOSS equivalents of the built-in utilities (gallery, files, etc.), disable what you can (judiciously) with uad-ng, block the apps that can’t be disabled from network access using Rethink DNS, and use the websites of services on a computer browser instead of apps whenever possible.

It’s still far from what privacy ROMs can do for you, but until you can get a GrapheneOS, etc. friendly phone, taking some action is much better than just letting the spyware run wild.

bridgeenjoyer@sh.itjust.works on 27 Jan 16:27 collapse

Yep ive been doing some of these!

One issue is personalDNSfilter blocks mullvad so i cant use both at once. Not sure why. Still confused on all the networking terms everyone throws around because theyre so ambiguous. I really dont get what dns is even though ive read the definition a hundred times.

monovergent@lemmy.ml on 27 Jan 17:34 collapse

Sorry if this analogy has already been thrown at you dozens of times, I like to think of DNS like an address book for the internet. On a traditional phone, I can’t just type in someone’s name, I have to type in a number. Without DNS, the internet would be like that, accessing any website would require recalling and typing in the IP address. But DNS translates domain names (hence Domain Name System), the part of the URL leading up to .com, .ml, etc, into the proper IP addresses for you.

Unless you self-host, the DNS service is hosted on someone else’s server, and many devices default to communicating with the DNS server in plain text. Which is why you want to trust your DNS provider since they can keep a list of which sites you visit. And DNS over HTTPS mitigates the possibility of interception by encrypting your DNS requests.

merde@sh.itjust.works on 27 Jan 02:25 next collapse

Im stuck with an s23 for a while yet. Is it even worth the trouble of trying to use f droid, shutting off google play services and disabling all the other shit on my phone, when at its core its all spyware?

it of course is.

i’m guessing you already know how to debloat your phone using adb.

in addition to what’s already posted you can use a private dns that filters system trackers as well ☞ mullvad.net/en/…/dns-over-https-and-dns-over-tls

keep in mind, netGuard (or rethink) is less efficient when you use private dns

I really wish an alternative existed that wasn’t just a prototype or $1000.

a reconditioned second hand pixel or 1+ from a trusted seller must be less than 200. if you go for a nonPixel, check before buying if the model is supported on wiki.lineageos.org/devices/

N0x0n@lemmy.ml on 27 Jan 07:34 collapse

keep in mind, netGuard (or rethink) is less efficient when you use private dns

Care to explain? What do you mean by “less efficient”?

merde@sh.itjust.works on 27 Jan 11:54 collapse

(64) Can you add DNS over TLS/HTTP?

If you mean to intercept DNS over HTTP (DoH) or DNS over TLS (DoT) requests to resolve domain names, this is not possible because DoH/DoT traffic is encrypted, which is the whole point of DoH/DoT.

Please see here about how you can use DoH/DoT with NetGuard anyway.

github.com/M66B/NetGuard/blob/master/FAQ.md#user-…

N0x0n@lemmy.ml on 27 Jan 14:21 collapse

Thank you for your answer ! Wasn’t aware of this !

However, this isn’t an issue if all your DNS goes through a pihole with DoH/DoT ?

merde@sh.itjust.works on 27 Jan 16:55 collapse

i think so

in that case, if I’m not wrong, you won’t be needing private dns from android

KazuchijouNo@lemy.lol on 27 Jan 03:14 next collapse

I’ve had my J7 for almost 10 years now. It’s got TWRP and I have root access with majisk. While this particular model is not supported in GrapheneOS or even LineageOS, I still did my best to personalize it, so I gutted it with SDMaid and removed all the bloat I could (be careful if you’re going to do this, since there are some apps that look like bloat but are actually quite necessary). I also use Termux with root access sometimes (be careful). Personally I don’t think I’m ever changing it until I lose it or it breaks.

autonomoususer@lemmy.world on 27 Jan 05:32 next collapse

Yes, only libre apps, it makes switching easier.

BigBolillo@mgtowlemmy.org on 27 Jan 06:32 next collapse

Samsung is shit.

fierysparrow89@lemmy.world on 27 Jan 09:10 next collapse

You sound not yet ready to unplug 😃

But to provide another perspective, havent used a Samsung phone for 10yrs. I generally buy a cheap phone with as little as possible preinstalled spyware. Except for browsing and messaging, every app I use daily comes from fdroid.

bridgeenjoyer@sh.itjust.works on 27 Jan 16:23 collapse

It’d be great but I have a technically inept social circle, and I travel so need all of those apps that come with that (turo, airline apps, lyft Uber, hotel keypad apps, hell to even start some of these damn new cars you need a phone)

And they NEED to work or youre stuck in an unknown place with nothing. They’ve really got us over a barrel there

If I stay in my basement and play with linux all day, sure I could go without all those apps. But thats not reality unfortunately.

Lfrith@lemmy.ca on 28 Jan 13:59 collapse

I think best approach if you need to use privacy invasive apps like uber and so on is to have a degoogled personal phone, and second stock phone whether it is android or apple for all those other apps that don’t play well on custom roms.

Compartmentalizing is best that can be done if there isn’t much choice in not using certain apps, and cuts down on headaches of trying to get them working on custom roms. And that stock phone can just be a cheap crappy budget phone, since its main use will be to just launch those junk apps when needed.

SharkWeek@lemmy.blahaj.zone on 27 Jan 10:55 next collapse

I just got a new phone when my old be crapped out on me while in Vietnam, and the local guy I found who deals in cash only had iphones or Samsungs. So, I held my nose and got a Jump2.

I’ve been through, disabled as much as possible, added fdroid stuff for all the daily use things, and put a killswitch VPN on.

Seems to be doing alright … I’m not obsessive about security, and I need Play Store stuff for work, so this is about as good as it gets, lol

pineapple@lemmy.ml on 27 Jan 11:14 next collapse

Yes. I have an s22 and am stuck with it just like you, I would love a google pixel.

I have gone through all the “trouble” of doing all that and it’s definetely worthwhile, you can get rid of a lot of unessesary things. Definetly DON’T sign up for a samsung account, although it will try very hard to make you sign up.

F-droid isn’t a pain, it’s an awesomeness. Everytime you try to download a simple app like a stopwatch or something it’s usually really bad and littered with spyware and ads, the developers who make these apps don’t use the apps themselves. The quality of F-droid apps and other open source apps are so much better while having better privacy.

ScoffingLizard@lemmy.dbzer0.com on 28 Jan 12:44 collapse

I still have not figured out why people dislike Froid. I’ve been using it for over a year. No issues.

Fijxu@programming.dev on 27 Jan 13:35 next collapse

Not worth, samsung is terrible and they do not care about the freedom of modifying your phone.

hexagonwin@lemmy.sdf.org on 27 Jan 14:33 next collapse

it’s not bad when Universal Android Debloater is used. I’ve used an Android 13 based samsung device for a year, debloated to hell with UAD and there were no weird network requests happening other than NTP timesync and google connectivitycheck. Do run RethinkDNS in allowlist mode though, just in case.

If you have an unlockable bootloader (specific region and not upgraded to OneUI 8 yet), just install a custom rom.

swelter_spark@reddthat.com on 27 Jan 18:47 next collapse

When I use a Samsung, I use a firewall to block connections to samsung.com.

bridgeenjoyer@sh.itjust.works on 27 Jan 18:51 collapse

On device or network ?

Can personaldnsfilter do this?

ScoffingLizard@lemmy.dbzer0.com on 28 Jan 12:42 collapse

Yes. Download NextDNS.

bridgeenjoyer@sh.itjust.works on 28 Jan 19:06 collapse

I did, and this is great! Seems very cheap for what it can do. Is it worth having both next dns and mullvad? Or do they interfere ?

ScoffingLizard@lemmy.dbzer0.com on 28 Jan 12:39 next collapse

Take off all that shit with Shizuku and Canta. Leave play store alone so you don’t brick your stuff. Just use Canta to disable it. Get NextDNS and start using the built in filters. No Google is a good one.

I bought an S25 and just gave up. Got the new Fairphone 6 with e/os and never been happier. Spoofed IP, fake geolocation, detection of trackers in apps built in. Then I just use NextDNS and am happy.

Mwa@thelemmy.club on 28 Jan 17:06 next collapse

Fellow Samsung user here:
NO(especially after the removal for bootloader unlocking)

bruzzard@lemmy.world on 28 Jan 19:21 next collapse

I jumped through hoops with the Samsung. ADB-ed the hexk out of it and broke functionality in so many ways.

If I can save you the effort - DON’T even bother trying. There is just too much interconnectedness to undo without breakage.

I moved to a hunch of Pixels running Graphene and have lived happily ever after.

With the added Israeli spyware coming to Samsung, I cannot think of any reason to put any effort into it.

Additional info: Skip the Pixel 6 and 7. Its better to spend a little more in the Pixel 8. I got mine used and its brilliant. I also liked how the Pixels 4 and 5 were as well. Very good devices.

somegeek@programming.dev on 28 Jan 22:12 collapse

Very wierd of you to assume there will be spyware on samsung but not google phones

NewOldGuard@lemmy.ml on 28 Jan 22:47 next collapse

They aren’t running Google software, they’re using GrapheneOS. And the spyware they’re referring to on Samsung phones is very pubic knowledge, just as the data collection and surveillance in stock Pixel software is. But that’s not relevant

somegeek@programming.dev on 29 Jan 09:50 collapse

Ever heard of hardware backdoors and spyware?

bruzzard@lemmy.world on 29 Jan 15:20 collapse

Perhaps you have some useful suggestions to share. Always happy to listen and learn.

hateisreality@lemmy.world on 28 Jan 22:53 next collapse

If you install Graphene OS on the Pixel you will start with 0 bloat wear.

ThunderQueen@lemmy.world on 28 Jan 23:20 collapse

Samsung phones have hardware kill switches, so it is impossible to turn the spyware off without fully breaking functionality. Older pixels are fully rootable, so you can fully remove any spyware from the root level, not just disable at the os gui level like samsung

hateisreality@lemmy.world on 28 Jan 22:52 collapse

Go get a Pixel 7 or 8 and install Graphene OS.