this post was submitted on 01 Sep 2023
48 points (88.7% liked)

Privacy

32173 readers
232 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
48
submitted 1 year ago* (last edited 1 year ago) by chaosppe to c/[email protected]
 

I have just received a Samsung galaxy fold5 through the post, however I imagine it's full of bloatware and I'm inexperienced with this type of device. What is the first things that you would do to secure it? Thank you 😊

Edit: I mean to be more privacy focused

all 50 comments
sorted by: hot top controversial new old
[–] [email protected] 48 points 1 year ago (3 children)

I think you confuse security and privacy. Samsung are pretty secure from what I saw. They are not private at all however. You can debloat it with adb and maybe tools such as Universal Android Debloater.

There is a couple of guide such as this one: https://linustechtips.com/topic/1402380-ultimate-samsung-oneui-debloat-privacy-customization-guide/

[–] [email protected] 11 points 1 year ago

Hey that's me!

One thing I noticed is I never updated the app icon customization section. You don't need Asapticons/Icon mixer. Themepark has an option to add custom icons now!

I can also post my De-Bloater config (root only)/list of apps (that can be used to disable them via ADB) I've removed when I update the post in a bit.

I'm still on Fold3/OneUI 5.1 but apps should be similar.

[–] chaosppe 4 points 1 year ago

Thank you very much. You're right there πŸ‘

[–] [email protected] 16 points 1 year ago* (last edited 1 year ago) (3 children)

I use FOSS applications as much as I can and try to avoid all samsung and google apps. In addition to that I'm always on pi-hole network to block background network requests by Samsung/Google

Some apps I use:

  • k9-mail
  • Zulip
  • Nextcloud/Talk/Notes
  • tasks.org
  • Signal
  • F-Droid
  • Magic Earth
  • NewPipe
  • Keepass2Android
  • Brave
  • Collabora Office
[–] [email protected] 30 points 1 year ago (1 children)

Don't think I'd actually recommend Brave to anyone, it's definitely not as privacy focused as they claim.

[–] [email protected] 6 points 1 year ago (2 children)

Google play services constantly send information to google, the only functional and degoogled rom Ive found is Grapheneos.

[–] [email protected] 5 points 1 year ago (1 children)

Samsung locks their bootloader, so flashing is neigh impossible on them as of late.

[–] chaosppe 2 points 1 year ago

Good to know, although I'm unsure how a custom boot would handle the folding display

[–] mypasswordis1234 1 points 1 year ago (1 children)
[–] [email protected] -1 points 1 year ago (1 children)

The real downside of brave is the cryptocrap. It is still optional. However the fact that it support the chromium monopoly is also a bad point.

[–] [email protected] 2 points 1 year ago (1 children)

What about supporting anti-lgbtq causes

[–] [email protected] 0 points 1 year ago

If you don't install software made from people that are not align with your ethics there are probably more than just brave.

[–] chaosppe 2 points 1 year ago

That's quite a list, thank you. I'll try to implement them πŸ‘Œ

[–] [email protected] 10 points 1 year ago

I can't even find a custom or stock rom for it :/ You might not have picked the best phone for privacy my dude.

[–] mahony 6 points 1 year ago

NetGuard is a good app to block internet access to apps you dont want connected to the web.

[–] [email protected] 5 points 1 year ago* (last edited 1 year ago) (1 children)

Use ADB to remove Google and Samsung bloatware and tracking. Ask around for help.

You should be able to use Heimdall to unlock the bootloader, but there isn't currently a build of LineageOS or DivestOS for this phone, so unfortunately you cannot yet flash a custom ROM (AFAIK). However, rooting should work if you need this (although it can hurt your security a bit).

I'd recommend removing Google Play Services and replacing it with microG, although this may be complicated.

The best solution, however, is probably to exchange the phone for a more versatile model, such as a Google Pixel or a Fairphone.

[–] MasterBlaster 2 points 1 year ago

While many devices don't have ROMs built for them, any recent device should work with a GSI.

I just bought a tab s8, as I know Andy yan's LineageOS 20 works on it from other users' reports. I currently use it on my old tab 10.8 2019.

[–] [email protected] 5 points 1 year ago (2 children)
  1. Factory reset
  2. Setup but SKIP GOOGLE & SAMSUNG LOGIN
  3. Install F-Droid/Droid-ify
  4. Install Aurora Store
  5. Uninstall or disable as much default apps as you can
  6. Install Simple Mobile Tools or other opensource alternative from F-Droid
  7. Install everything else you need

Use openaource apps from fdroid, or if you really have to then use Aurora store. For office use collabora office, for youtube newpipe, video vlc, etc. NEVER LOG IN TO GOOGLE/SAMSUNG ACCOUNT ON ANY APP except Aurora store. For any other recommendation/alternative just aak me.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

~~these changes are going to decrease security overall. privacy and security are not one in the same~~. edit: I guess they edited the post🫠

also, logging in to aurora is almost guaranteeing your account getting banned. use a throw away account if the default ones are rate limited

[–] [email protected] 2 points 1 year ago (1 children)

logging in to aurora is almost guaranteeing your account getting banned

Im using my main account on aurora store on 4 profiles for past month and everything is ok (for now).

[–] [email protected] 1 points 1 year ago

welp. good luck

[–] [email protected] 2 points 1 year ago

@chaosppe speaking from my personal setup, I'd do all of these but personally my way to prevent as much data harvesting from Samsung phones I also installed Netguard and set only a handful of apps and exclude the rest (even system one) to stop all these Samsung apps from transmitting all types of data (Yes I know this may be somewhat extreme and I know the limitations of Netguard), but hey it's just my recommendation but maybe you can take this as a possible starting ground