4 ms·

Speaking of Little Snitch, I suggest you look at 'iodé', an android phone with similar features built-in the OS.As far as I know this is the only true firewall

Speaking of Little Snitch, I suggest you look at 'iodé', an android phone with similar features built-in the OS.As far as I know this is the only true firewall on android

aembleton 6y ago
Another option is to set the DNS of your Android phone to use one provided by https://nextdns.io/ https://nextdns.io/ Then you can allow or deny domains or apply blocklists.
SubzeroCarnage 6y ago
iodéOS [0] does not appear to be open source at all [1]. And only supports a handful of devices. Shamless plug, my ROM DivestOS [2] is available and takes source seriously with most scripts being GPLv3 [3]. Furthermore it appears that they are mixing incompatible license HOSTS sources for their blocker. And according to their FAQ the are shipping devices with the bootloader left unlocked, just like /e/. How awful. And to your last point, NetGuard is available [4]. [0] https://iode.tech/en/iode-solution/ https://iode.tech/en/iode-solution/ [1] https://gitlab.com/iode/ota https://gitlab.com/iode/ota [2] https://divestos.org/ https://divestos.org/ [3] https://gitlab.com/divested-mobile https://gitlab.com/divested-mobile [4] https://github.com/M66B/NetGuard https://github.com/M66B/NetGuard
- andysch 6y ago
  Does DivestOS come with bootloader relocked? If it is the case what devices are supported?
  - SubzeroCarnage 6y ago
    DivestOS does not come with anything as DivestOS doesn't sell devices. Selling devices with outdated vendor firmware with known security issues would be immoral. However on select devices you can successfully relock the bootloader with DivestOS installed, as it is properly signed [0] and enables verity on supported devices. Other alternatives that support relocking are GrapheneOS [1], CalyxOS [2], #!OS [3], and RattlesnakeOS [4]. They too do not sell devices. [0] https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Common/Functions.sh#L143 https://github.com/Divested-Mobile/DivestOS-Build/blob/maste... [1] https://grapheneos.org/ https://grapheneos.org/ [2] https://calyxos.org/ https://calyxos.org/ [3] https://github.com/hashbang/os https://github.com/hashbang/os [4] https://github.com/dan-v/rattlesnakeos-stack https://github.com/dan-v/rattlesnakeos-stack

Speaking of Little Snitch, I suggest you look at 'iodé', an android phone with similar features built-in the OS.As far as I know this is the only true firewall on android

aembleton 6y ago

Another option is to set the DNS of your Android phone to use one provided by https://nextdns.io/ https://nextdns.io/ Then you can allow or deny domains or apply blocklists.

SubzeroCarnage 6y ago

iodéOS [0] does not appear to be open source at all [1]. And only supports a handful of devices. Shamless plug, my ROM DivestOS [2] is available and takes source seriously with most scripts being GPLv3 [3]. Furthermore it appears that they are mixing incompatible license HOSTS sources for their blocker. And according to their FAQ the are shipping devices with the bootloader left unlocked, just like /e/. How awful. And to your last point, NetGuard is available [4]. [0] https://iode.tech/en/iode-solution/ https://iode.tech/en/iode-solution/ [1] https://gitlab.com/iode/ota https://gitlab.com/iode/ota [2] https://divestos.org/ https://divestos.org/ [3] https://gitlab.com/divested-mobile https://gitlab.com/divested-mobile [4] https://github.com/M66B/NetGuard https://github.com/M66B/NetGuard

andysch 6y ago
Does DivestOS come with bootloader relocked? If it is the case what devices are supported?
- SubzeroCarnage 6y ago
  DivestOS does not come with anything as DivestOS doesn't sell devices. Selling devices with outdated vendor firmware with known security issues would be immoral. However on select devices you can successfully relock the bootloader with DivestOS installed, as it is properly signed [0] and enables verity on supported devices. Other alternatives that support relocking are GrapheneOS [1], CalyxOS [2], #!OS [3], and RattlesnakeOS [4]. They too do not sell devices. [0] https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Common/Functions.sh#L143 https://github.com/Divested-Mobile/DivestOS-Build/blob/maste... [1] https://grapheneos.org/ https://grapheneos.org/ [2] https://calyxos.org/ https://calyxos.org/ [3] https://github.com/hashbang/os https://github.com/hashbang/os [4] https://github.com/dan-v/rattlesnakeos-stack https://github.com/dan-v/rattlesnakeos-stack