12 ms·

Free Your Android

242 points by comzeradd 12y ago

pestaa 12y ago
Cached version: http://webcache.googleusercontent.com/search?hl=en&q=cache%3Awww.roussos.cc%2F2014%2F05%2F08%2Ffree-your-android%2F http://webcache.googleusercontent.com/search?hl=en&q=cache%3...
antihero 12y ago
A good few steps for people looking for alternatives. You still have a proprietary radio chip in your phone though. That is where the bad stuff likely hides. I guess you have to ask yourself - who are you competing with? Do you just not want to be used as an advertising product? Or are you hiding from the NSA?
- comzeradd 12y ago
  Neither. Just better privacy that NSA special friends offer me.
- deleted 12y ago
  [deleted]
- seba_dos1 12y ago
  And what's more - modem often has full access to the main RAM without CPU control. It has the ability to read or even manipulate every bit of any executable or data you run on CPU without you knowing anything about it. And even if someone doesn't care about NSA and stuff, modem firmwares are often ridiculously buggy and easy to exploit, so go figure... While producing free radio chip is practically impossible due to both economical and legal reasons (the closest you can get to it is OsmocomBB running on old 2G TI Calypso modem, and the only reason it exists is that TI Calypso has mysteriously disabled checking of firmware signature even thought the functionality for it is present...), there are devices that mitigate the risks by connecting the modem as a "slave" (for instance via USB - this might impact the performance and battery life, as CPU is busy copying data from/to the modem, but it's way more safe than DMA access) or even implement "modem firewalls" that monitor any modem activity and alarm if it does something when it wasn't supposed to do it. Neo900 (http://neo900.org/ http://neo900.org/) is such project and soon there should be a longer article about this modem firewall solution published.
  - antihero 12y ago
    You seem like you would know - has anyone had any luck pulling the chip firmware and reversing it in order to sterilise it?
hellbreakslose 12y ago
bah... too much hasle. What do I have to hide anyways. I believe that we should be free and not monitored but at a second thought if you are really not doing anything to harm anyone I dont think NSA or any NSA will come after you. I
Kiro 12y ago
I don't care about NSA or privacy. Is there still a reason for me to choose Replicate instead of CyanogenMod? I want my device to be fast.
- babuskov 12y ago
  The main problem with Replicant seems to be wifi support.
- dublinben 12y ago
  Replicant is free software, unlike CyanogenMod.
bananas 12y ago
My approach is different. I still use a completely Google tied Moto G with everything turned on. Hiding in plain sight (the grey man principle) is a better tactic. If privacy is required, I leave the handset at home and get on my bike. There is no hiding unless you turn it all off.
- comzeradd 12y ago
  I always require privacy, and leaving my phone at home all the time is not a solution.
  - bananas 12y ago
    The two are entirely incompatible.
    - comzeradd 12y ago
      Nope. Privacy is not a black/white thing.
      - bananas 12y ago
        In this case it is. Privacy is about control and unless you have absolute control you cannot guarantee any privacy at all. And you don't control your phone's operating system, the GSM module OS/firmware, the carrier, the client applications and even the radio signals. What you want is an illusion of privacy. The two are vastly different.
        comzeradd 12y ago
        This is like saying there is no privacy for email so here I post my password on pastebin. I control the software I run on my phone, so I have a better privacy. It's not perfect I know. But doing nothing because it's not perfect is the biggest illusion of all.
        12y ago
Spittie 12y ago
As a small "experiment", I've been trying to use only free software for a while (firmware/driver blobs excluded) on my Nexus 7 (2012). I can say that it's definitively doable, but it really depends on what one need. If what you need is a browser (Firefox), an email client (K9 & the standard KitKat client) and a Terminal (ConnectBot, Hacker's keyboard), then you won't miss the Play store at all. There are also some good clients for social/media consummation (Tinfoil for Facebook, Twidere, TT-RSS...). If you need something more, then it's an hit or miss. For maps, OsmAnd+ is nice, but not nearly as good/user friendy as Google Maps. Forget about the latest/cool apps. Forget games, unless you want to emulate some console (and also, running closed games on top of an open emulator is "ethically right"?). It gets better if you're a little more lenient. For example, I have some Humble Bundle games installed. Those come drm-free, and (usually) don't depend on the Google services. One can also get applications from the Play Store, and install just the .apk for it (I can't remember if one can buy applications with the web interface, or has to do it from the mobile store). In the end, the choice is "I want to avoid Google" or "I don't want proprietary applications on my phone". In the first case, there are many alternative stores (SlideMe, AndroidPit, Amazon...). Another problem is that F-Droid is small, and doesn't even have all the (F)OSS applications available for Android. For many, the only way to get them is either the Play Store or compile the source. I'm not blaming the F-Droid project, they're doing a terrific work for their size, but it seems that there's little interest in a completely open store, even from the developers. That said, I'm still running this setup, but I'm considering just giving up and installing the Play Store/Google services because after a while seeing new cool applications but not being able to try them is kinda painful. On a side note, I haven't noticed any increase in battery life/speed of my device. So it seems that Google's applications aren't an huge battery/resource hog.
- icebraining 12y ago
  So it seems that Google's applications aren't an huge battery/resource hog. Tried Google+? Just opening it by mistake (and immediately closing it) is enough to start glgps and kill my battery in a couple of hours, until I reboot.
  - alandarev 12y ago
icebraining 12y ago
The good thing is that these parts are firmware, thus non-executable code. What? Firmware is definitively executable, it just doesn't run on the CPU. And besides, if you look at the list of proprietary files being copied, there are plenty of normal libraries: https://github.com/CyanogenMod/android_device_semc_iyokan/blob/gingerbread/proprietary-files.txt#L23 https://github.com/CyanogenMod/android_device_semc_iyokan/bl...
- ge0rg 12y ago
  With statements like this, the author is doing the community a disservice. It is very important to understand that a modern smartphone contains enough CPUs to be used against you, even if you only run Open Source on the primary one. This might not matter for most users, but it can decide about live and death for some, like journalists in crisis zones.
  - zanny 12y ago
    There is so much prorprietary firmware everywhere that can fuck you over. Your mainboards almost always have proprietary firmware. Coreboot is woefully underutilized and underfunded in this regard. All hard drives have proprietary firmware, and often have proprietary processors on board. They are for all intents and purposes isolated computers in and of themselves, and nobody talks about how closed they are. Graphics hardware is predominantly proprietary, even the most open discrete cards (AMD's) which have technical documentation have proprietary firmware blobs. I can only barely trust myself using these on the pretense that others have already decompiled the blobs and found nothing particularly malignant on a few older model cards. Every other manufacturer except Intel and very recently Broadcom with a single model of GPU are whole stack proprietary. Network radios, as mentioned in this article, are almost always either wholly proprietary or have a firmware blob like GPUs. CD drives also have proprietary firmwares like hard drives. All TVs are running proprietary whole stack firmware on internal computers. Dumbphones also are computers, just whole stack proprietary. Your fridge, toaster, many ovens, and microwaves, if digital, are also whole stack proprietary computers. This stuff is everywhere. There is literally no way to liberate yourself. Even Richard Stallman is driving a car with a proprietary on board computer, and probably cooks food in a proprietary Microwave.
anvandare 12y ago
What I would really like, is just to be able to install a bare-bones linux on my phone. Android (even Cyanogenmod) is just so limiting and 'user friendly' (i.e. as few configuration options as possible so as not to confuse the masses). I feel like I'm being hand-held by my hand-held.
- icebraining 12y ago
  http://developer.ubuntu.com/start/ubuntu-for-devices/installing-ubuntu-for-devices/ http://developer.ubuntu.com/start/ubuntu-for-devices/install...
- Spittie 12y ago
  You can install Linux in a chroot, it's not perfect but it should work in every phone. Otherwise if you have a Nexus phone/tablet, you can install MultiROM (http://forum.xda-developers.com/showthread.php?t=2011403 http://forum.xda-developers.com/showthread.php?t=2011403) and have both Android and something else installed.
s2dar 12y ago
I think Android will never be a 100% real free system but Firefox OS is the true open source and free system :)
- szatkus 12y ago
  But you still don't know what modifications a vendor made to original source code.
  - seba_dos1 12y ago
    That's why there are devices like Neo900, where technically you're a software vendor - just like on your PC.
    - icebraining 12y ago
      The baseband firmware of the Neo is still proprietary, though not having DMA is certainly a plus.
      - seba_dos1 12y ago
        Just like in any 3G USB dongle you attach to your PC (in fact, Neo900's modem operates in exactly the same way). For something as close to "free baseband" as possible, get a Neo Freerunner (or some other phone with TI Calypso) and install OsmocomBB - however, you won't be allowed to use it legally on public networks in most of jurisdictions in the world.
- seba_dos1 12y ago
  Firefox OS has exactly the same problem that Android has. Android is open and free and all, but most of the devices out there don't give the user this freedom at all. Firefox OS has exactly the same problem - Mozilla does not enforce by any way that the officially branded FxOS implementation should be open. Most of FxOS phones to date, maybe except Geeksphone, are simply closed and need some ridiculous rooting or unlocking in order to just reflash them with newer version of FxOS. Just look at GTA04/Neo900 (and possibly Freerunner too, but it would probably be massively underpowered) - you could run both Android (Replicant) and Firefox OS there without using any single line of closed source line - but that doesn't represent the usual customer experience for Android and FxOS branded phones. So where's the difference?
donniezazen 12y ago
More than anything I would like to use open protocol for chatting. Personal communication is a mess. I currently have Hangouts, Facebook Messenger, Skype, Viber and Whatsapp on my phone. General folks use whatever is popular and XMPP is not really a choice. Moreover I looked into Jabber and the account sign-up page's certificate has expired and account sign-up has been inactive for close to a year. It is hard to establish trust over such a network.
- adrusi 12y ago
  Hangouts chat uses Jabber, Facebook Messenger uses XMPP. Skype uses a proprietary protocol, and licensing restrictions prohibit any unofficial client from connecting to the Microsoft severs. I don't know much about Viber or Whatsapp internals, but I would hazard that Viber is similar to Skype. Chances are that you can connect with most people over Google or Facebook, but it's not perfect. If you are still using their servers, then it might defeat the purpose of avoiding their clients. You can use Off The Record (OTR) to avoid the privacy implications of using the servers with both of them, but none of the official clients support it, so they would have to use an alternative client as well, which defeats the purpose of using existing networks.
  - CHY872 12y ago
    Jabber and XMPP are the same thing. WhatsApp uses a version of XMPP with just enough encryption to stop anyone from creating their own WhatsApp compatible client.
  - zanny 12y ago
    Hangouts doesn't actually really totally use Jabber. It supports it if a Jabber client is involved, but between Hangouts sessions they use some proprietary bullshit. That is why my chat history on, say, telepathy won't show up if I was using the Android hangouts app to message someone. Also, there is literally no good foss voip and conferencing options. Jitsi videobridge is the closest thing I've found, and that isn't an XMPP standard and isn't supported by my preferred IM tools. Also, Jitsi is an ugly as sin Java app.... I'm definitely going to try putting aside a week this summer to see how hard it would be to implement videobridge in telepathy. If we could get that and group OTR encryption in it, there would finally be a FOSS communication alternative...
babuskov 12y ago
I find it quite interesting that blog post about such topic uses Google API JavaScript which can track you, and link to your Google account that you are reading it and mark that you are interested in such stuff.
- comzeradd 12y ago
  Citation needed (I guess you are talking about the Google webfonts).
  - babuskov 12y ago
    Yes. It makes three requests to googleusercontent.com and one to fonts.googleapis.com. It's interesting because the site has gone to some length to host jQuery, Bootstrap and other stuff you could see referenced in HTML source, but CSS file requires stuff from Google servers. So maybe they simply missed that one.
    - comzeradd 12y ago
      I see only google gonts on my console, but I'll look into that. Thanks
higherpurpose 12y ago
> Remove Google analytics from CyanogenMod by flashing freecygn. > Stop CyanogenMod from reporting tethering usage to your provider I get why they are using Analytics, but why is a ROM like CyanogenMod reporting tethering usage to the carriers? > Change DNS settings so that CyanogenMod stops using Google's DNS servers This is probably something "nice" they thought to do for their users, but I'd rather not have that enabled by default in CM. If they're still trying to be a "privacy ROM" and whatnot, they should be using an OpenNIC DNS or set up their own encrypted DNSChain (https://github.com/okTurtles/dnschain https://github.com/okTurtles/dnschain).
userbinator 12y ago
Looking at the Replicant status, I'm surprised that they managed to get Telephony/3G working without non-free firmware (presumably) but not WiFi/Bluetooth/GPS, since the telephony protocols from what I understand are far more "closed" than the rest.
mikevm 12y ago
I think this whole exercise gives you a false sense of security. The thing is, there's a closed-source firmware running on the baseband processor which can do rather nefarious things: https://www.fsf.org/blogs/community/replicant-developers-find-and-close-samsung-galaxy-backdoor https://www.fsf.org/blogs/community/replicant-developers-fin... So if you really want to be 'free', get rid of the cellphone.
- comzeradd 12y ago
  Yeap. BUT between trashing your phone and filling it with proprietary apps there is a huge gap. This is what this post is about. I don't claim you'll get ultimate privacy. I'm sure that most people reading my post or commenting here are using a smartphone.
  - TeMPOraL 12y ago
    Well the post mentioned NSA several times as a motivation for those privacy changes. But the NSA can "talk" to cell operators, and cell operators can talk to baseband chips, and baseband chips can "talk" (DMA) to the rest of your phone, so let's be explicit here: this will not protect you from intelligence agencies / state actors. This only might protect you from overly targeted ads.
    - comzeradd 12y ago
      True, but NSA is mentioned just because it made these discussions more vivid and relevant over the last months. The post doesn't claim that you get an NSA-proof phone. I don't think such thing exists.
      - spiritplumber 12y ago
        The real question is, would there be demand for it?
      - TeMPOraL 12y ago
        Agree, but when discussing privacy/anonymity it would be good if people talked more explicitly about the end result. Because most of the solutions that "will improve your privacy" and/or "security" will do so only against targeted ads and technically inept stalkers. Without calling out limits to which the solution improves our "privacy", we're just creating false sense of security in people.
dinduks 12y ago
Nice read. I too highly encourage people to use CyanogenMod. One thing that was worth being mentioned is one of the very best features of CyanogenMod: Privacy Guard. It basically allows grained control over what permissions can an application have (read/write contacts, phone logs, location, etc). It's of course possible to allow an access all the time, or just when needs it. Thanks to privacy guard, one can use applications that might compromise privacy, without compromising privacy. When using the "ask every time", I've been surprised how many applications try to access my info for no obvious reason, sometimes even when your phone's idle.
probably_wrong 12y ago
This is more of a rant, but still, mildly relevant. I tried to free my Android. I did, I really, really did. I overcame the "your version is not supported by Cyanogenmod" message with a custom build that took forever to find. I overcame the "download the Windows and Windows only installer". I managed to find the Windows-only instructions for unlocking the Bootloader. I managed to install custom drivers for the phone, despite the fact that Windows doesn't really want you to do that anymore. And then I got stuck, because my phone and Windows 7 are not in speaking terms, so the fastboot tool does nothing. I spent a couple hours on the task, and yet I haven't even managed to complete step 1. The dead links, the contradicting instructions, the forums full of unanswered questions, it just proved to be too much to me. I'm down to the magic advice now - advice in the lines of "try a different USB port", "change your USB cable" or "restart your computer" (of course). Should I succeed in my task, I may or may not have access to Bluetooth, video and/or tethering - there are contradictory accounts, so I won't really know until I'm done. "Very detailed instructions"? Yeah, right. How about useful instructions instead?
- coldpie 12y ago
  Yeah. I want to install Cyanogenmod on my phone, a T-Mobile Moto X. But their wiki page for this device[1] lists only nightly builds, no stable builds whatsoever. I'm sorry, I'm not going to install an automated nightly onto my phone. Their installation instructions are pretty worthless as well, as they're clearly built from a template with the device name swapped in. Shambles. [1] http://wiki.cyanogenmod.org/w/Xt1053_Info http://wiki.cyanogenmod.org/w/Xt1053_Info
  - deleted 12y ago
    [deleted]
  - Yetanfou 12y ago
    If you're serious about wanting to install CM (or another distribution) on your device I'd first read through the relevant development thread on the forum or mailing list used for the distribution. This is where you'll find out which version to install, which problems you're likely to encounter and - if you're lucky - even ways to solve those problems. You'll find loads and loads of opinionated posts by people who often don't have a clue what they're talking about but that should come as no surprise given the subject matter and the medium. There'll probably be some good posts by the original developer(s) and a core of knowledgeable people, just focus on those and ignore the noise. For the Motorola X you could have a look at the relevant XDA forum (http://forum.xda-developers.com/moto-x http://forum.xda-developers.com/moto-x), there might be something worth your while there. Not having one of those devices I can't tell.
liotier 12y ago
- Remove Google analytics from CyanogenMod by flashing freecygn. - Stop CyanogenMod from reporting tethering usage to your provider, by changing the "tether dun required" setting. How is that not default in Cyanogenmod ?
- aroch 12y ago
  1) Analytics are disabled by default 2) To pass the tests required to be carrier/google certified you must must report tethering
lukabratos 12y ago
Cryptocat is nice for messaging: https://crypto.cat https://crypto.cat
- UweSchmidt 12y ago
  The article, and other comments in this thread (mentioning "baseband" etc.) suggest that encryption on the phone can not possibly work. Closed-source code on a lower abstraction level could read the plaintext I type on the keyboard before it reaches your app. That code can apparently also "phone home" on its own term. Thoughts?
miguelrochefort 12y ago
Since when is privacy necessary for freedom? For all I know, privacy actually is what keeps us away from freedom. When is this meme going to stop? When are people going to realize that there's no point in glorifying and seeking privacy? This article is a perfect example of everything you lose when you get into this craze. Why would anyone actively limit their opportunities and disconnect themselves from others? For an imaginary reward? Privacy is not a trade-off. It's plain loss.
- pestaa 12y ago
  I'm sure you have the best intentions, but if privacy has no downsides for you, please tell us your phone number and street address.
  - Karunamon 12y ago
    Ad targeting is not similar to publicly posting your personal data. Stop parroting this tired, broken meme - they are not equivalent.
- CWuestefeld 12y ago
  Why would anyone actively limit their opportunities and disconnect themselves from others? ... It's plain loss I don't think you understand the meaning of freedom. Some people choose to do what you question because they want to. The nature of freedom is that people can do what they believe (so long as it hurts no one else), even if you think it's stupid.
  - miguelrochefort 12y ago
    First, people seek privacy because they take it for granted (they always had it) and because of they're being told that they should value it. In reality, I'm sure most people would prefer to be able to live in a world without privacy. Second, the whole quest for privacy ultimately hurts the freedom of everybody. How you ask? By leading to the creation of arbitrary laws that limit non-coercive access to information. A right to privacy give people an exclusive right over anything that's a product of their existence. "That photon bounces off of me and gets into your camera lenses? Well, I guess you'll have to hand over that tape if you don't want to get into troubles." No information should ever be made private by legal means. Only physical privacy must be allowed.
eli 12y ago
> "...stops using Google's DNS servers, that has a permanent log policy." This is misleading. Google's DNS privacy policy is very reasonable. The only permanent logs are at the city/metro level. I trust their servers far more than I trust Comcast's or Verizon's. https://developers.google.com/speed/public-dns/privacy https://developers.google.com/speed/public-dns/privacy
- comzeradd 12y ago
  " ISP, and location information (kept permanently) are stored on the servers." https://en.wikipedia.org/wiki/Google_DNS#Privacy https://en.wikipedia.org/wiki/Google_DNS#Privacy
  - Cameron_D 12y ago
    Right, so Google end up with the IP address of the NAT gateway that my mobile provider puts me through. Hundreds, if not thousands, of other people will be sharing the same gateway. In addition, DNS doesn't send my GPS co-ordinates along with the request, so it will just be IP geolocation data which Google will collate for their own stats on their DNS servers (So they can see/log what regions people access from, etc.). Just because it mentions storing location doesn't mean they are trying to monitor every step you take when using their DNS.
    - comzeradd 12y ago
      True, but let me prefer DNS providers with "no log" policy.
      - estel 12y ago
        Any particular recommendations?
        comzeradd 12y ago
        I prefer OpenNIC, but check out here for a couple of more: https://prism-break.org/en/categories/gnu-linux/#dns https://prism-break.org/en/categories/gnu-linux/#dns
joelanders 12y ago
I just submitted a blogpost from the Tor Project (Mission Impossible: Hardening Android for Security and Privacy) which covers everything between removing the microphone (from a Nexus 7) and baseband software to recommended apps and configurations. On HN: https://news.ycombinator.com/item?id=7715041 https://news.ycombinator.com/item?id=7715041 Original: https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy https://blog.torproject.org/blog/mission-impossible-hardenin...
- irickt 12y ago
  Wow! The OP here barely scratches the surface of this resource. Thanks.
greenwalls 12y ago
"So if you are using Iphone or Windows Phone, let me remind you that both of these companies are in the infamous NSA slides for giving access to users private data." I checked the link he refers to and it shows Google is also a Prism company, am I wrong? Oops, I see now he mentions this.
- comzeradd 12y ago
  That's why you shouldn't use Google's android builds. Keep reading the post.
explorigin 12y ago
Please don't consider F-Droid to be secure. See Moxie Marlinspike's comments here: https://github.com/WhisperSystems/RedPhone/issues/143 https://github.com/WhisperSystems/RedPhone/issues/143
- kasabali 12y ago
  Huh? He claims F-Droid is insecure but doesn't even give a single point to back his claim.
poopsintub 12y ago
I stopped skimming at "Firefox".
- untog 12y ago
  Wow, sounds like you really dedicated yourself to the task.
  - poopsintub 12y ago
    The article is a list of what you'll be limited to using if you want to steer clear of the NSA, right? Firefox has less than half percent of mobile market share for a reason. Maybe I should get out my flip-phone to stay safe instead.
    - openjck 12y ago
      When was the last time you used Firefox for Android? It was completely redesigned two years ago, and currently has higher ratings than Chrome.
      - poopsintub 12y ago
        I realize data might shift, but it had less than half a percent of market share at last look. Let me emphasize: LESS THAN HALF A PERCENT. I used it last week for testing purposes.
ghalusa 12y ago
It's much too late for all of us. What's done is done. You can't reverse it.
gtklocker 12y ago
The idea of freeing your phone is cute, however, there are some considerable dangers. * The software that you give access to your phone (be it drivers or the recovery images themselves) isn't signed by anyone. Some of the software isn't even available via HTTPS. I think it's a bad idea to trust some HTTP and unsigned executable more than Google, who are making all they can to ensure the integrity of anything that runs on your phone. * Unlocking your bootloader is a bad idea. Google erases all your data whenever you unlock your phone[1]. They don't hate you, they've just realized the security issues that come from having an unlocked phone. Take this for example: You're at the airport and ready to leave. However, TSA stops you for a "random" check. They have your phone for about 5 minutes and there's nothing you can do about it. Now, they could ask you for your passcode but then you'd know something's wrong. Now, your bootloader is unlocked, which means they can see your device at firmware level and alter it to their liking it. Nothing can stop them from plating a backdoor in there or just making a copy of all your files and you wouldn't know. That's why Google does [1]. [1]: http://wiki.cyanogenmod.org/w/Install_CM_for_maguro#Unlocking_the_device http://wiki.cyanogenmod.org/w/Install_CM_for_maguro#Unlockin...
- comzeradd 12y ago
  * I claim no such thing. Installing apps through f-droid come from a secure channel, mot http. * There is a way to lock your bootloader again.
  - gtklocker 12y ago
    * I'm not talking about F-Droid. I'm talking about CM as a whole and the recovery someone may use. * There is a way, however it's common practice to leave it unlocked and I'm not sure you mention that in your article.
xaneem 12y ago
I believe most of these can be achieved by using Android Firewall. Rooted phones only, but then CM requires the same. You can select what all apps get internet access, and it works perfect.
cwyers 12y ago
This is silly. There's two types of people in the world: people who are not of interest to the NSA, and people who are. FOR PEOPLE WHO AREN'T OF INTEREST TO THE NSA (THIS IS MOST PEOPLE): You're putting massive amounts of effort into keeping the NSA from getting your data, which, let's be honest, is just chaff they're collecting so they can pick through it for wheat. You really want to do something against the NSA? Start sending your data directly to them so they have to waste time sifting through the logs of what cat photos your friends want you to look at. IF YOU ACTUALLY ARE A TARGET OF INTEREST TO THE NSA: Everything in here is completely inadequate to secure you against the NSA. In fact, you are probably increasing your own inconvenience more than you are theirs.
qb 12y ago
This list of FOSS alternatives to popular proprietary Android apps is longer and more usable than a simple blog post: http://droid-break.info/ http://droid-break.info/.
tempodox 12y ago
Ditch Your Android.
1010011010 12y ago
How does the 'freedom' of Android compare with iOS and Windows Phone?
- dublinben 12y ago
  It is much better. iOS and Windows Phone are actively antagonistic to user freedom. Android is just potentially threatening.
stayparanoid 12y ago
Well dude, that's exactly what I've done on my phone some months ago, but you know what? after heartbleed i installed back gapps and some other non free (as in freedom) apps. Heartbleed has been a lightening to me. It statistically says a lot about software.
quadrangle 12y ago
Actually, Cyanogenmod is going in a not-so-free direction and the better option now is OmniROM. Also, the best reference for all these issues is http://prism-break.org/ http://prism-break.org/
voidlogic 12y ago
" CyanogenMod is not perfect. It contains scripts that extract proprietary code necessary for some phone components (eg. camera) to work. The good thing is that these parts are firmware, thus non-executable code." I'm either misunderstanding what is being said, or the author has no idea what they are talking about if they think firmware does not execute...

242 points by comzeradd 12y ago

Cached version: http://webcache.googleusercontent.com/search?hl=en&q=cache%3Awww.roussos.cc%2F2014%2F05%2F08%2Ffree-your-android%2F http://webcache.googleusercontent.com/search?hl=en&q=cache%3...

antihero 12y ago

A good few steps for people looking for alternatives. You still have a proprietary radio chip in your phone though. That is where the bad stuff likely hides. I guess you have to ask yourself - who are you competing with? Do you just not want to be used as an advertising product? Or are you hiding from the NSA?

comzeradd 12y ago
Neither. Just better privacy that NSA special friends offer me.
deleted 12y ago
[deleted]
seba_dos1 12y ago
And what's more - modem often has full access to the main RAM without CPU control. It has the ability to read or even manipulate every bit of any executable or data you run on CPU without you knowing anything about it. And even if someone doesn't care about NSA and stuff, modem firmwares are often ridiculously buggy and easy to exploit, so go figure... While producing free radio chip is practically impossible due to both economical and legal reasons (the closest you can get to it is OsmocomBB running on old 2G TI Calypso modem, and the only reason it exists is that TI Calypso has mysteriously disabled checking of firmware signature even thought the functionality for it is present...), there are devices that mitigate the risks by connecting the modem as a "slave" (for instance via USB - this might impact the performance and battery life, as CPU is busy copying data from/to the modem, but it's way more safe than DMA access) or even implement "modem firewalls" that monitor any modem activity and alarm if it does something when it wasn't supposed to do it. Neo900 (http://neo900.org/ http://neo900.org/) is such project and soon there should be a longer article about this modem firewall solution published.
- antihero 12y ago
  You seem like you would know - has anyone had any luck pulling the chip firmware and reversing it in order to sterilise it?

hellbreakslose 12y ago

bah... too much hasle. What do I have to hide anyways. I believe that we should be free and not monitored but at a second thought if you are really not doing anything to harm anyone I dont think NSA or any NSA will come after you. I

Kiro 12y ago

I don't care about NSA or privacy. Is there still a reason for me to choose Replicate instead of CyanogenMod? I want my device to be fast.

babuskov 12y ago
The main problem with Replicant seems to be wifi support.
dublinben 12y ago
Replicant is free software, unlike CyanogenMod.

bananas 12y ago

My approach is different. I still use a completely Google tied Moto G with everything turned on. Hiding in plain sight (the grey man principle) is a better tactic. If privacy is required, I leave the handset at home and get on my bike. There is no hiding unless you turn it all off.

comzeradd 12y ago
I always require privacy, and leaving my phone at home all the time is not a solution.
- bananas 12y ago
  The two are entirely incompatible.
  - comzeradd 12y ago
    Nope. Privacy is not a black/white thing.
    - bananas 12y ago
      In this case it is. Privacy is about control and unless you have absolute control you cannot guarantee any privacy at all. And you don't control your phone's operating system, the GSM module OS/firmware, the carrier, the client applications and even the radio signals. What you want is an illusion of privacy. The two are vastly different.
      - comzeradd 12y ago
        This is like saying there is no privacy for email so here I post my password on pastebin. I control the software I run on my phone, so I have a better privacy. It's not perfect I know. But doing nothing because it's not perfect is the biggest illusion of all.
        12y ago

Spittie 12y ago

As a small "experiment", I've been trying to use only free software for a while (firmware/driver blobs excluded) on my Nexus 7 (2012). I can say that it's definitively doable, but it really depends on what one need. If what you need is a browser (Firefox), an email client (K9 & the standard KitKat client) and a Terminal (ConnectBot, Hacker's keyboard), then you won't miss the Play store at all. There are also some good clients for social/media consummation (Tinfoil for Facebook, Twidere, TT-RSS...). If you need something more, then it's an hit or miss. For maps, OsmAnd+ is nice, but not nearly as good/user friendy as Google Maps. Forget about the latest/cool apps. Forget games, unless you want to emulate some console (and also, running closed games on top of an open emulator is "ethically right"?). It gets better if you're a little more lenient. For example, I have some Humble Bundle games installed. Those come drm-free, and (usually) don't depend on the Google services. One can also get applications from the Play Store, and install just the .apk for it (I can't remember if one can buy applications with the web interface, or has to do it from the mobile store). In the end, the choice is "I want to avoid Google" or "I don't want proprietary applications on my phone". In the first case, there are many alternative stores (SlideMe, AndroidPit, Amazon...). Another problem is that F-Droid is small, and doesn't even have all the (F)OSS applications available for Android. For many, the only way to get them is either the Play Store or compile the source. I'm not blaming the F-Droid project, they're doing a terrific work for their size, but it seems that there's little interest in a completely open store, even from the developers. That said, I'm still running this setup, but I'm considering just giving up and installing the Play Store/Google services because after a while seeing new cool applications but not being able to try them is kinda painful. On a side note, I haven't noticed any increase in battery life/speed of my device. So it seems that Google's applications aren't an huge battery/resource hog.

icebraining 12y ago
So it seems that Google's applications aren't an huge battery/resource hog. Tried Google+? Just opening it by mistake (and immediately closing it) is enough to start glgps and kill my battery in a couple of hours, until I reboot.
- alandarev 12y ago

icebraining 12y ago

The good thing is that these parts are firmware, thus non-executable code. What? Firmware is definitively executable, it just doesn't run on the CPU. And besides, if you look at the list of proprietary files being copied, there are plenty of normal libraries: https://github.com/CyanogenMod/android_device_semc_iyokan/blob/gingerbread/proprietary-files.txt#L23 https://github.com/CyanogenMod/android_device_semc_iyokan/bl...

ge0rg 12y ago
With statements like this, the author is doing the community a disservice. It is very important to understand that a modern smartphone contains enough CPUs to be used against you, even if you only run Open Source on the primary one. This might not matter for most users, but it can decide about live and death for some, like journalists in crisis zones.
- zanny 12y ago
  There is so much prorprietary firmware everywhere that can fuck you over. Your mainboards almost always have proprietary firmware. Coreboot is woefully underutilized and underfunded in this regard. All hard drives have proprietary firmware, and often have proprietary processors on board. They are for all intents and purposes isolated computers in and of themselves, and nobody talks about how closed they are. Graphics hardware is predominantly proprietary, even the most open discrete cards (AMD's) which have technical documentation have proprietary firmware blobs. I can only barely trust myself using these on the pretense that others have already decompiled the blobs and found nothing particularly malignant on a few older model cards. Every other manufacturer except Intel and very recently Broadcom with a single model of GPU are whole stack proprietary. Network radios, as mentioned in this article, are almost always either wholly proprietary or have a firmware blob like GPUs. CD drives also have proprietary firmwares like hard drives. All TVs are running proprietary whole stack firmware on internal computers. Dumbphones also are computers, just whole stack proprietary. Your fridge, toaster, many ovens, and microwaves, if digital, are also whole stack proprietary computers. This stuff is everywhere. There is literally no way to liberate yourself. Even Richard Stallman is driving a car with a proprietary on board computer, and probably cooks food in a proprietary Microwave.

anvandare 12y ago

What I would really like, is just to be able to install a bare-bones linux on my phone. Android (even Cyanogenmod) is just so limiting and 'user friendly' (i.e. as few configuration options as possible so as not to confuse the masses). I feel like I'm being hand-held by my hand-held.

icebraining 12y ago
http://developer.ubuntu.com/start/ubuntu-for-devices/installing-ubuntu-for-devices/ http://developer.ubuntu.com/start/ubuntu-for-devices/install...
Spittie 12y ago
You can install Linux in a chroot, it's not perfect but it should work in every phone. Otherwise if you have a Nexus phone/tablet, you can install MultiROM (http://forum.xda-developers.com/showthread.php?t=2011403 http://forum.xda-developers.com/showthread.php?t=2011403) and have both Android and something else installed.

s2dar 12y ago

I think Android will never be a 100% real free system but Firefox OS is the true open source and free system :)

szatkus 12y ago
But you still don't know what modifications a vendor made to original source code.
- seba_dos1 12y ago
  That's why there are devices like Neo900, where technically you're a software vendor - just like on your PC.
  - icebraining 12y ago
    The baseband firmware of the Neo is still proprietary, though not having DMA is certainly a plus.
    - seba_dos1 12y ago
      Just like in any 3G USB dongle you attach to your PC (in fact, Neo900's modem operates in exactly the same way). For something as close to "free baseband" as possible, get a Neo Freerunner (or some other phone with TI Calypso) and install OsmocomBB - however, you won't be allowed to use it legally on public networks in most of jurisdictions in the world.
seba_dos1 12y ago
Firefox OS has exactly the same problem that Android has. Android is open and free and all, but most of the devices out there don't give the user this freedom at all. Firefox OS has exactly the same problem - Mozilla does not enforce by any way that the officially branded FxOS implementation should be open. Most of FxOS phones to date, maybe except Geeksphone, are simply closed and need some ridiculous rooting or unlocking in order to just reflash them with newer version of FxOS. Just look at GTA04/Neo900 (and possibly Freerunner too, but it would probably be massively underpowered) - you could run both Android (Replicant) and Firefox OS there without using any single line of closed source line - but that doesn't represent the usual customer experience for Android and FxOS branded phones. So where's the difference?

donniezazen 12y ago

More than anything I would like to use open protocol for chatting. Personal communication is a mess. I currently have Hangouts, Facebook Messenger, Skype, Viber and Whatsapp on my phone. General folks use whatever is popular and XMPP is not really a choice. Moreover I looked into Jabber and the account sign-up page's certificate has expired and account sign-up has been inactive for close to a year. It is hard to establish trust over such a network.

adrusi 12y ago
Hangouts chat uses Jabber, Facebook Messenger uses XMPP. Skype uses a proprietary protocol, and licensing restrictions prohibit any unofficial client from connecting to the Microsoft severs. I don't know much about Viber or Whatsapp internals, but I would hazard that Viber is similar to Skype. Chances are that you can connect with most people over Google or Facebook, but it's not perfect. If you are still using their servers, then it might defeat the purpose of avoiding their clients. You can use Off The Record (OTR) to avoid the privacy implications of using the servers with both of them, but none of the official clients support it, so they would have to use an alternative client as well, which defeats the purpose of using existing networks.
- CHY872 12y ago
  Jabber and XMPP are the same thing. WhatsApp uses a version of XMPP with just enough encryption to stop anyone from creating their own WhatsApp compatible client.
- zanny 12y ago
  Hangouts doesn't actually really totally use Jabber. It supports it if a Jabber client is involved, but between Hangouts sessions they use some proprietary bullshit. That is why my chat history on, say, telepathy won't show up if I was using the Android hangouts app to message someone. Also, there is literally no good foss voip and conferencing options. Jitsi videobridge is the closest thing I've found, and that isn't an XMPP standard and isn't supported by my preferred IM tools. Also, Jitsi is an ugly as sin Java app.... I'm definitely going to try putting aside a week this summer to see how hard it would be to implement videobridge in telepathy. If we could get that and group OTR encryption in it, there would finally be a FOSS communication alternative...

babuskov 12y ago

I find it quite interesting that blog post about such topic uses Google API JavaScript which can track you, and link to your Google account that you are reading it and mark that you are interested in such stuff.

comzeradd 12y ago
Citation needed (I guess you are talking about the Google webfonts).
- babuskov 12y ago
  Yes. It makes three requests to googleusercontent.com and one to fonts.googleapis.com. It's interesting because the site has gone to some length to host jQuery, Bootstrap and other stuff you could see referenced in HTML source, but CSS file requires stuff from Google servers. So maybe they simply missed that one.
  - comzeradd 12y ago
    I see only google gonts on my console, but I'll look into that. Thanks

higherpurpose 12y ago

> Remove Google analytics from CyanogenMod by flashing freecygn. > Stop CyanogenMod from reporting tethering usage to your provider I get why they are using Analytics, but why is a ROM like CyanogenMod reporting tethering usage to the carriers? > Change DNS settings so that CyanogenMod stops using Google's DNS servers This is probably something "nice" they thought to do for their users, but I'd rather not have that enabled by default in CM. If they're still trying to be a "privacy ROM" and whatnot, they should be using an OpenNIC DNS or set up their own encrypted DNSChain (https://github.com/okTurtles/dnschain https://github.com/okTurtles/dnschain).

userbinator 12y ago

Looking at the Replicant status, I'm surprised that they managed to get Telephony/3G working without non-free firmware (presumably) but not WiFi/Bluetooth/GPS, since the telephony protocols from what I understand are far more "closed" than the rest.

mikevm 12y ago

I think this whole exercise gives you a false sense of security. The thing is, there's a closed-source firmware running on the baseband processor which can do rather nefarious things: https://www.fsf.org/blogs/community/replicant-developers-find-and-close-samsung-galaxy-backdoor https://www.fsf.org/blogs/community/replicant-developers-fin... So if you really want to be 'free', get rid of the cellphone.

comzeradd 12y ago
Yeap. BUT between trashing your phone and filling it with proprietary apps there is a huge gap. This is what this post is about. I don't claim you'll get ultimate privacy. I'm sure that most people reading my post or commenting here are using a smartphone.
- TeMPOraL 12y ago
  Well the post mentioned NSA several times as a motivation for those privacy changes. But the NSA can "talk" to cell operators, and cell operators can talk to baseband chips, and baseband chips can "talk" (DMA) to the rest of your phone, so let's be explicit here: this will not protect you from intelligence agencies / state actors. This only might protect you from overly targeted ads.
  - comzeradd 12y ago
    True, but NSA is mentioned just because it made these discussions more vivid and relevant over the last months. The post doesn't claim that you get an NSA-proof phone. I don't think such thing exists.
    - spiritplumber 12y ago
      The real question is, would there be demand for it?
    - TeMPOraL 12y ago
      Agree, but when discussing privacy/anonymity it would be good if people talked more explicitly about the end result. Because most of the solutions that "will improve your privacy" and/or "security" will do so only against targeted ads and technically inept stalkers. Without calling out limits to which the solution improves our "privacy", we're just creating false sense of security in people.

dinduks 12y ago

Nice read. I too highly encourage people to use CyanogenMod. One thing that was worth being mentioned is one of the very best features of CyanogenMod: Privacy Guard. It basically allows grained control over what permissions can an application have (read/write contacts, phone logs, location, etc). It's of course possible to allow an access all the time, or just when needs it. Thanks to privacy guard, one can use applications that might compromise privacy, without compromising privacy. When using the "ask every time", I've been surprised how many applications try to access my info for no obvious reason, sometimes even when your phone's idle.

probably_wrong 12y ago

This is more of a rant, but still, mildly relevant. I tried to free my Android. I did, I really, really did. I overcame the "your version is not supported by Cyanogenmod" message with a custom build that took forever to find. I overcame the "download the Windows and Windows only installer". I managed to find the Windows-only instructions for unlocking the Bootloader. I managed to install custom drivers for the phone, despite the fact that Windows doesn't really want you to do that anymore. And then I got stuck, because my phone and Windows 7 are not in speaking terms, so the fastboot tool does nothing. I spent a couple hours on the task, and yet I haven't even managed to complete step 1. The dead links, the contradicting instructions, the forums full of unanswered questions, it just proved to be too much to me. I'm down to the magic advice now - advice in the lines of "try a different USB port", "change your USB cable" or "restart your computer" (of course). Should I succeed in my task, I may or may not have access to Bluetooth, video and/or tethering - there are contradictory accounts, so I won't really know until I'm done. "Very detailed instructions"? Yeah, right. How about useful instructions instead?

coldpie 12y ago
Yeah. I want to install Cyanogenmod on my phone, a T-Mobile Moto X. But their wiki page for this device[1] lists only nightly builds, no stable builds whatsoever. I'm sorry, I'm not going to install an automated nightly onto my phone. Their installation instructions are pretty worthless as well, as they're clearly built from a template with the device name swapped in. Shambles. [1] http://wiki.cyanogenmod.org/w/Xt1053_Info http://wiki.cyanogenmod.org/w/Xt1053_Info
- deleted 12y ago
  [deleted]
- Yetanfou 12y ago
  If you're serious about wanting to install CM (or another distribution) on your device I'd first read through the relevant development thread on the forum or mailing list used for the distribution. This is where you'll find out which version to install, which problems you're likely to encounter and - if you're lucky - even ways to solve those problems. You'll find loads and loads of opinionated posts by people who often don't have a clue what they're talking about but that should come as no surprise given the subject matter and the medium. There'll probably be some good posts by the original developer(s) and a core of knowledgeable people, just focus on those and ignore the noise. For the Motorola X you could have a look at the relevant XDA forum (http://forum.xda-developers.com/moto-x http://forum.xda-developers.com/moto-x), there might be something worth your while there. Not having one of those devices I can't tell.

liotier 12y ago

- Remove Google analytics from CyanogenMod by flashing freecygn. - Stop CyanogenMod from reporting tethering usage to your provider, by changing the "tether dun required" setting. How is that not default in Cyanogenmod ?

aroch 12y ago
1) Analytics are disabled by default 2) To pass the tests required to be carrier/google certified you must must report tethering

lukabratos 12y ago

Cryptocat is nice for messaging: https://crypto.cat https://crypto.cat

UweSchmidt 12y ago
The article, and other comments in this thread (mentioning "baseband" etc.) suggest that encryption on the phone can not possibly work. Closed-source code on a lower abstraction level could read the plaintext I type on the keyboard before it reaches your app. That code can apparently also "phone home" on its own term. Thoughts?

miguelrochefort 12y ago

Since when is privacy necessary for freedom? For all I know, privacy actually is what keeps us away from freedom. When is this meme going to stop? When are people going to realize that there's no point in glorifying and seeking privacy? This article is a perfect example of everything you lose when you get into this craze. Why would anyone actively limit their opportunities and disconnect themselves from others? For an imaginary reward? Privacy is not a trade-off. It's plain loss.

pestaa 12y ago
I'm sure you have the best intentions, but if privacy has no downsides for you, please tell us your phone number and street address.
- Karunamon 12y ago
  Ad targeting is not similar to publicly posting your personal data. Stop parroting this tired, broken meme - they are not equivalent.
CWuestefeld 12y ago
Why would anyone actively limit their opportunities and disconnect themselves from others? ... It's plain loss I don't think you understand the meaning of freedom. Some people choose to do what you question because they want to. The nature of freedom is that people can do what they believe (so long as it hurts no one else), even if you think it's stupid.
- miguelrochefort 12y ago
  First, people seek privacy because they take it for granted (they always had it) and because of they're being told that they should value it. In reality, I'm sure most people would prefer to be able to live in a world without privacy. Second, the whole quest for privacy ultimately hurts the freedom of everybody. How you ask? By leading to the creation of arbitrary laws that limit non-coercive access to information. A right to privacy give people an exclusive right over anything that's a product of their existence. "That photon bounces off of me and gets into your camera lenses? Well, I guess you'll have to hand over that tape if you don't want to get into troubles." No information should ever be made private by legal means. Only physical privacy must be allowed.

eli 12y ago

> "...stops using Google's DNS servers, that has a permanent log policy." This is misleading. Google's DNS privacy policy is very reasonable. The only permanent logs are at the city/metro level. I trust their servers far more than I trust Comcast's or Verizon's. https://developers.google.com/speed/public-dns/privacy https://developers.google.com/speed/public-dns/privacy

comzeradd 12y ago
" ISP, and location information (kept permanently) are stored on the servers." https://en.wikipedia.org/wiki/Google_DNS#Privacy https://en.wikipedia.org/wiki/Google_DNS#Privacy
- Cameron_D 12y ago
  Right, so Google end up with the IP address of the NAT gateway that my mobile provider puts me through. Hundreds, if not thousands, of other people will be sharing the same gateway. In addition, DNS doesn't send my GPS co-ordinates along with the request, so it will just be IP geolocation data which Google will collate for their own stats on their DNS servers (So they can see/log what regions people access from, etc.). Just because it mentions storing location doesn't mean they are trying to monitor every step you take when using their DNS.
  - comzeradd 12y ago
    True, but let me prefer DNS providers with "no log" policy.
    - estel 12y ago
      Any particular recommendations?
      - comzeradd 12y ago
        I prefer OpenNIC, but check out here for a couple of more: https://prism-break.org/en/categories/gnu-linux/#dns https://prism-break.org/en/categories/gnu-linux/#dns

joelanders 12y ago

I just submitted a blogpost from the Tor Project (Mission Impossible: Hardening Android for Security and Privacy) which covers everything between removing the microphone (from a Nexus 7) and baseband software to recommended apps and configurations. On HN: https://news.ycombinator.com/item?id=7715041 https://news.ycombinator.com/item?id=7715041 Original: https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy https://blog.torproject.org/blog/mission-impossible-hardenin...

irickt 12y ago
Wow! The OP here barely scratches the surface of this resource. Thanks.

greenwalls 12y ago

"So if you are using Iphone or Windows Phone, let me remind you that both of these companies are in the infamous NSA slides for giving access to users private data." I checked the link he refers to and it shows Google is also a Prism company, am I wrong? Oops, I see now he mentions this.

comzeradd 12y ago
That's why you shouldn't use Google's android builds. Keep reading the post.

explorigin 12y ago

Please don't consider F-Droid to be secure. See Moxie Marlinspike's comments here: https://github.com/WhisperSystems/RedPhone/issues/143 https://github.com/WhisperSystems/RedPhone/issues/143

kasabali 12y ago
Huh? He claims F-Droid is insecure but doesn't even give a single point to back his claim.

poopsintub 12y ago

I stopped skimming at "Firefox".

untog 12y ago
Wow, sounds like you really dedicated yourself to the task.
- poopsintub 12y ago
  The article is a list of what you'll be limited to using if you want to steer clear of the NSA, right? Firefox has less than half percent of mobile market share for a reason. Maybe I should get out my flip-phone to stay safe instead.
  - openjck 12y ago
    When was the last time you used Firefox for Android? It was completely redesigned two years ago, and currently has higher ratings than Chrome.
    - poopsintub 12y ago
      I realize data might shift, but it had less than half a percent of market share at last look. Let me emphasize: LESS THAN HALF A PERCENT. I used it last week for testing purposes.

ghalusa 12y ago

It's much too late for all of us. What's done is done. You can't reverse it.

gtklocker 12y ago

The idea of freeing your phone is cute, however, there are some considerable dangers. * The software that you give access to your phone (be it drivers or the recovery images themselves) isn't signed by anyone. Some of the software isn't even available via HTTPS. I think it's a bad idea to trust some HTTP and unsigned executable more than Google, who are making all they can to ensure the integrity of anything that runs on your phone. * Unlocking your bootloader is a bad idea. Google erases all your data whenever you unlock your phone[1]. They don't hate you, they've just realized the security issues that come from having an unlocked phone. Take this for example: You're at the airport and ready to leave. However, TSA stops you for a "random" check. They have your phone for about 5 minutes and there's nothing you can do about it. Now, they could ask you for your passcode but then you'd know something's wrong. Now, your bootloader is unlocked, which means they can see your device at firmware level and alter it to their liking it. Nothing can stop them from plating a backdoor in there or just making a copy of all your files and you wouldn't know. That's why Google does [1]. [1]: http://wiki.cyanogenmod.org/w/Install_CM_for_maguro#Unlocking_the_device http://wiki.cyanogenmod.org/w/Install_CM_for_maguro#Unlockin...

comzeradd 12y ago
* I claim no such thing. Installing apps through f-droid come from a secure channel, mot http. * There is a way to lock your bootloader again.
- gtklocker 12y ago
  * I'm not talking about F-Droid. I'm talking about CM as a whole and the recovery someone may use. * There is a way, however it's common practice to leave it unlocked and I'm not sure you mention that in your article.

xaneem 12y ago

I believe most of these can be achieved by using Android Firewall. Rooted phones only, but then CM requires the same. You can select what all apps get internet access, and it works perfect.

cwyers 12y ago

This is silly. There's two types of people in the world: people who are not of interest to the NSA, and people who are. FOR PEOPLE WHO AREN'T OF INTEREST TO THE NSA (THIS IS MOST PEOPLE): You're putting massive amounts of effort into keeping the NSA from getting your data, which, let's be honest, is just chaff they're collecting so they can pick through it for wheat. You really want to do something against the NSA? Start sending your data directly to them so they have to waste time sifting through the logs of what cat photos your friends want you to look at. IF YOU ACTUALLY ARE A TARGET OF INTEREST TO THE NSA: Everything in here is completely inadequate to secure you against the NSA. In fact, you are probably increasing your own inconvenience more than you are theirs.

qb 12y ago

This list of FOSS alternatives to popular proprietary Android apps is longer and more usable than a simple blog post: http://droid-break.info/ http://droid-break.info/.

tempodox 12y ago

Ditch Your Android.

1010011010 12y ago

How does the 'freedom' of Android compare with iOS and Windows Phone?

dublinben 12y ago
It is much better. iOS and Windows Phone are actively antagonistic to user freedom. Android is just potentially threatening.

stayparanoid 12y ago

Well dude, that's exactly what I've done on my phone some months ago, but you know what? after heartbleed i installed back gapps and some other non free (as in freedom) apps. Heartbleed has been a lightening to me. It statistically says a lot about software.

quadrangle 12y ago

Actually, Cyanogenmod is going in a not-so-free direction and the better option now is OmniROM. Also, the best reference for all these issues is http://prism-break.org/ http://prism-break.org/

voidlogic 12y ago

" CyanogenMod is not perfect. It contains scripts that extract proprietary code necessary for some phone components (eg. camera) to work. The good thing is that these parts are firmware, thus non-executable code." I'm either misunderstanding what is being said, or the author has no idea what they are talking about if they think firmware does not execute...