4 ms·

Interesting, I had never heard of that project before. I'm currently using CM13 without Gapps. The "privacy guard" and other app permission configs are absolute

Interesting, I had never heard of that project before. I'm currently using CM13 without Gapps. The "privacy guard" and other app permission configs are absolutely terrible ui-wise. There's several places (hidden in nested "Advanced" menus) you need to go to set app permissions (some permissions can be set from two different places and I'm not sure which one has the final say) and it still requires you to manually set permissions for new apps, theres no way to set for instance no internet access as a default for new apps.

deep_attention 10y ago
You can use a firewall like AFWall+ to deny every app internet by default.
- deleted 10y ago
  [deleted]
secfirstmd 10y ago
Yeh Copperhead, Guardian Project and Tor is definitely the way to go for a locked down Android. Though only supported on the Nexus and Pixel devices I think.
- bsilvereagle 10y ago
  You are correct. > The hardware for this prototype is the Google Nexus 6P. While we would prefer to support lower end models for low income demographics, only the Nexus and Pixel lines support Verified Boot with user-controlled keys. We are not aware of any other models that allow this, but we would love to hear if there are any that do.
  - mtgx 10y ago
    I'm hoping that as the Pixel line turns into more of a real business for Google, they will actually start making phones that cost half as much or even 1/4 as much as the current Pixel devices. Google raised the (pricing) entry bar for secure Android devices to the level of iPhones, and that leaves most people without any real options for secure phones especially when most Chinese phones seem to come with backdoors by default. I also think Google needs to increase OS update time to at least 3 years, and security updates to 4 or 5 years. The entire life cycle of a device should be taken into account when support is considered for devices. And no, two years is not the lifetime of a smartphone. That's a lie, mostly pushed by carriers (and of course manufacturers). A smartphone can easily last 4+ years, and it doesn't have to have the same owner during this period.
cmdrfred 10y ago
There is a "on by default" option on my CM13 privacy guard. It would suck for an unsavy user to use though I admit.
- necessity 10y ago
  Yes there is this option but it does nothing, since the default permissions privacy guard allows when "on by default" seem to be the permissions the app requires, I.e. you have to manually set them either way.

deep_attention 10y ago

You can use a firewall like AFWall+ to deny every app internet by default.

deleted 10y ago
[deleted]

secfirstmd 10y ago

Yeh Copperhead, Guardian Project and Tor is definitely the way to go for a locked down Android. Though only supported on the Nexus and Pixel devices I think.

bsilvereagle 10y ago
You are correct. > The hardware for this prototype is the Google Nexus 6P. While we would prefer to support lower end models for low income demographics, only the Nexus and Pixel lines support Verified Boot with user-controlled keys. We are not aware of any other models that allow this, but we would love to hear if there are any that do.
- mtgx 10y ago
  I'm hoping that as the Pixel line turns into more of a real business for Google, they will actually start making phones that cost half as much or even 1/4 as much as the current Pixel devices. Google raised the (pricing) entry bar for secure Android devices to the level of iPhones, and that leaves most people without any real options for secure phones especially when most Chinese phones seem to come with backdoors by default. I also think Google needs to increase OS update time to at least 3 years, and security updates to 4 or 5 years. The entire life cycle of a device should be taken into account when support is considered for devices. And no, two years is not the lifetime of a smartphone. That's a lie, mostly pushed by carriers (and of course manufacturers). A smartphone can easily last 4+ years, and it doesn't have to have the same owner during this period.

cmdrfred 10y ago

There is a "on by default" option on my CM13 privacy guard. It would suck for an unsavy user to use though I admit.

necessity 10y ago
Yes there is this option but it does nothing, since the default permissions privacy guard allows when "on by default" seem to be the permissions the app requires, I.e. you have to manually set them either way.