privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

Pantherina, in Mull vs Fennec

Use Mull. Fennec is just debloated not hardened.

wincing_nucleus073, in Blocking app access to the internet

it seems like you merely need to disable the “Block connections without VPN”.

Then in your android settings there should be a toggle to deny network access to certain apps in the android permission settings. so the apps that are split tunneled you can just deny or allow network

starlord,

I haven’t been able to find this setting. I’ve heard about it on other devices but mine doesn’t seem to have it.

wincing_nucleus073,

Which setting exactly are you referring to?

Vexz,

On my device: Settings > Internet & Connectivity > VPN > Cogweel next to the VPN settings > There's the option

_s10e,

Do all versions of Android have this? I’m on Samsung Android 14 and I can’t find this.

Vexz,

I don't have a Samsung but on my device:
Settings > Internet & Connectivity > VPN > Cogweel next to the VPN settings > There's the option

_s10e, in Blocking app access to the internet

Just a note: The app ‘Rethink DNS and Firewall’ can do this with any Wireguard VPN.

lemmydripzdotz123, in Blocking app access to the internet

It can’t be used with ProtonVPN (I assume) but I use NoRoot Firewall for exactly this purpose. It works by setting up a VPN and letting you enable / disable network access for each app, including system apps. It can also block on just WiFi or just cell data or both or neither. It blocks all apps by default until you configure their access. You can also setup more advanced rules for all apps or just some apps. For instance, you can set it where an app can contact AppCompany.com but not Google.com

backhdlp,
@backhdlp@lemmy.blahaj.zone avatar

That’s what NetGuard does

leds,

Yes +1 for Netguard , works like a charm

Decentralizr, in Blocking app access to the internet

You can do this. But you need to use rethinkdns and download the configuration of the proton vpn wireguard server(s) you wanna reach. You can have internet blocked for individual apps, have some tunnel without VPN but DNS and firewall protection and some go through servers of proton (even per app to different servers). It’s a powerful tool. You won’t get the same protection as you would get with let’s say GrapheneOS but you are getting damn close to it if done right

ShellMonkey,
@ShellMonkey@lemmy.socdojo.com avatar

Interesting idea, a DNS filter won’t do much for traffic pointed at a specific IP though. Curious how that would set the system wide DNS without being a root level app.

deepdive,

Rethinkdns is probably your best bet! Right now they are missing an important feature where It takes wireguard’s DNS configuration into account, making it obsolete for those who have private dns in a local environnement with an upstream dns !

Can’t wait for version 0.5.6 😄

ashtrix,

Was going to say this. Rethinkdns is awesome

MajorHavoc, (edited ) in Blocking app access to the internet

If you’re interested in that level of control, it’s time to look hard at GrapheneOS. “Internet” is a permission you can grant or deny for each app, under GrapheneOS.

But I’m not aware of a way to selectively direct phone traffic through Proton VPN, at the phone. Even on GrapheneOS.

Enough skill with an expensive router could do it, but only on your home network, or only while routing all of your phone traffic back to your home network via yet another VPN.

Edit: TIL, Proton VPN supports split tunneling. Sweet! Look under Settings - Advanced - Split Tunneling - then pick your apps to include/exclude.

Edit 2: TIL DivestOS also supports “Internet” as a per app Permission. Very cool.

starlord,

I’ve been suspecting I’d need GrapheneOS for a while now. Might finally be time to jump.

federalreverse,
@federalreverse@feddit.de avatar

CalyxOS runs on a similar set of devices, is free, and does include a firewall app too. I still run Netguard, but that’s mostly for ad-blocking.

miss_brainfart,
@miss_brainfart@lemmy.ml avatar

DivestOS can also deny internet access, for the people who don’t have a Pixel

BearOfaTime,

DivestOS seems to give a nice balance between vanilla Android and Graphene. I really like it.

theDutchBrother,

You can route traffic through VPN on the phone, then just use split tunneling to exclude apps that should have regular network access without VPN. But you have to switch off “Block connections without VPN” in settings.

MajorHavoc,

Oh hey, thanks! I never particularly wanted any of my apps to route around the VPN, but there the option it is under Advanced, when split tunneling is enabled. Could be handy. Thanks!

theDutchBrother, (edited )

NP. Yeah I only routed Tor browser around the VPN in the past to not slow it down too much but I hardly use Tor anymore so VPN routes everything now.

MigratingtoLemmy, in Blocking app access to the internet

You need root for that. This is trivial with root.

If you don’t want to patch with Magisk, look at KernelSU

itsaj26744, in Mull vs Fennec
@itsaj26744@programming.dev avatar

Mull is better as it have all telementry collection removed and arkenfox by default.

For broken pages u can open issue on github someone might give option u need to tweak

VolunTerry, in Apple will require court order to give push notification data to law enforcement

Fuck Apple.

Titou, in Are there any good privacy friendly keyboards for android?
@Titou@feddit.de avatar

I use SimpleKeyboard with updates disabled

Templa, in Mull vs Fennec

I’ve tried using Mull on GrapheneOS but it just crashes constantly so I went back to Firefox.

Zerush, in Without a Trace: How to Keep Your Phone Off the Grid
@Zerush@lemmy.ml avatar

The only way that a Phone don’t spy on you is turning it off

Zerush, in Review of The Search Engine Kagi
@Zerush@lemmy.ml avatar

For reliable results today it is essential to use several search engines. The one who crawls the web the longest is Google, it is therefore advisable to use search engines that use this engine, such as Whoogle or Startpage.

Even so, it is also necessary to use search engines with alternative engines, such as DDG (Bing), or search engines with several engines, such as Mojeek or MetaGer, which use their own crawlers, such as Groot or AstianGo.

Search engines that use AI are also now proliferating, but, although practical, so far none are truly privacy oriented, with one exception, the one that was the first to use this technique with AI, Andisearch, which uses its own language model, not logs, no ads, no tracking, anonymous.

You search, although more private than others, requires activating privacy in the settings, also questionable due to its other AI functionalities that it incorporates, apart from the registration requirement to use them.

Mojeek,
@Mojeek@lemmy.ml avatar

or search engines with several engines, such as Mojeek or MetaGer

Just a flag, we don’t use several engines, all Mojeek is Mojeek, you might be conflating this with Search Choices. AstianGO seems to be inaccessible now, but it wasn’t an own-index search engine,

Cyberjin, in Are there any good privacy friendly keyboards for android?

I tried most of them, it’s just not the same as Gboard.

Anyone know if you can block Gboard with DNS?

xarexyouxmadx,

Idk but you could always just install gboard & not give network permissions. You’ll lose a little functionality like the ability to add gifs from the keyboard which obviously need internet to search/load.

possiblylinux127, in Mull vs Fennec

Mull is very good.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #