Related
These are my favorite free and lite apps , veterans might have them all, just feel like sharing with some newer comer ,
My aim is Free, Lite(under 1MB) and Handy
Anyone are welcome to add more to the list , let's share
1. Home Smack
HomeSmack allows you to easily manage your default apps, in the following categories:
Home: Launcher that runs when you hit the Home button
Long-Press Search: Normally Voice Search
Browser: When clicking web links in other apps
https://market.android.com/details?id=com.teslacoilsw.homesmack&feature=search_result
2. Adfree (need root)
AdFree removes most ads in the browser and other apps. It does this by nullifying requests to known host names in the system hosts file.
https://market.android.com/details?id=com.bigtincan.android.adfree&feature=search_result
3. Cache mate (need root)
CacheMate for Root Users allows you to clear cache from your device in one click
★ ROOT ACCESS, BUSYBOX REQUIRED ★
https://market.android.com/details?id=com.aac.cachemate.demo&feature=search_result
3. My data Manager
Take control of your mobile data - save money & use your plans more effectively.
Take control of your mobile data. Monitor app data usage for your home and roaming plans. Set usage alarms to manage your bill. Track historical consumption to ensure you are buying the ideal plan and maximize how you use your data. Monitor per app data consumption to understand what apps are consuming the most data, and what apps are almost free. Save money by using your data plans more effectively.
https://market.android.com/details?id=com.mobidia.android.mdm&feature=search_result
4. Quickpic (lightning fast gallery app)
Quick Your Pictures! The best picture viewer/browser/gallery!
The best photo gallery and picture browser&viewer in Android, more quick and clear then the lazy stock Gallery, just as millions of users said!
https://market.android.com/details?id=com.alensw.PicFolder&feature=search_result&hl=en
5. ExDialer (fast and support T9, fully support custom DPI setting)
May be the best smart dialer in android market. ExDialer is a MiUI style smart dialer. If you like it, visit http://www.miui.com to experience excellent MiUI rom. Also you could donate to support my work.
When exDialer installed, two icons will be found in launch panel, exDialer and exContacts. exDialer is the entry of dialer interface with call log view initiated. exContacts give you a view to browse /filter/manage all known contacts.
https://market.android.com/details?id=com.modoohut.dialer&feature=search_result
6. Wifi Analyzer
Turns your android phone into a Wi-Fi analyzer!!
Shows the Wi-Fi channels around you. Helps you to find a less crowded channel for your wireless router.
https://market.android.com/details?id=com.farproc.wifi.analyzer&feature=search_result
7.gStrings
gStrings - a chromatic tuner for the guitar, violin, or any other instrument.
This is the ad supported version of gStrings (www.cohortor.org/gstrings), a chromatic tuner application measuring sound pitch and intensity.
It will let you tune any musical instrument (violin, viola, violoncello, bass, guitar, piano, wind instruments).
https://market.android.com/details?id=org.cohortor.gstrings&feature=search_result
8. AppZorter Lite for TouchWiz
AppZorter provides you the easiest way to rearrange icons in TouchWiz application drawer.
https://market.android.com/details?id=net.demidoes.appzorter.lite&feature=search_result
last but not least special
Airdroid
AirDroid is a fast, free app that lets you wirelessly manage & control your Android device from a web browser Over-The-Air.
https://market.android.com/details?...=W251bGwsMSwxLDEsImNvbS5zYW5kLmFpcmRyb2lkIl0.
This is not a lite app (2.7MB) but it's just too good to ignore, I totally can't live without it now.
Autostarts
Though it is not free, but sure it is lite.
It removes autostarting of many application that you are hardly using. it also prevents to start application with any triger. It just keeps your ROM free, as well save battery too.
DGT & GTD & To-do List
The best To-do App I have found. Its Beta but its great. I've used Astrid, Any.Do & many others To-do Apps but I found GTD to be the best!
Unlock With Wifi FREE
A very useful program. If you have a phone lock, It keeps your phone secure but disables the lock if connected to a friendly Wifi router. Saves the headache for entering your password everytime ! There is also a paid app with more options (which I have bought).
Nice apps, except for this one:
darkinners said:
2. Adfree (need root)
AdFree removes most ads in the browser and other apps. It does this by nullifying requests to known host names in the system hosts file.
https://market.android.com/details?id=com.bigtincan.android.adfree&feature=search_result
Click to expand...
Click to collapse
I don't feel comfortable shutting down ads on free apps. I mean, putting up with a little ad at the top/bottom of the screen is the least I can do if it means supporting a developer's efforts, even if I can't/won't buy their paid app.
And doing stuff like that is especially hard on developers from countries that can't sell apps in the market...
Therotically, morally i completely agree with you.
But i can't deny it is annoying too.
And consumes reasonable amount of data too.
Sent from my GT-N7000 using xda premium
Oneiricl said:
Nice apps, except for this one:
I don't feel comfortable shutting down ads on free apps. I mean, putting up with a little ad at the top/bottom of the screen is the least I can do if it means supporting a developer's efforts, even if I can't/won't buy their paid app.
And doing stuff like that is especially hard on developers from countries that can't sell apps in the market...
Click to expand...
Click to collapse
totally agree with you on this one, I myself don't use privacy since I graduated from school . I also working in creative industry, I do know the value of intellectual properties and how important to protect them.
for the app that are up for selling and I liked the free version I will purchase the full version but just sometimes. some apps doesn't have paid or ad removed version and I really want the ads go away.
I never care the data as I am on unlimited plan but just hate those ads floating around
Another awesome App is Diskusage.
https://market.android.com/details?id=com.google.android.diskusage
It shows exactly what app is using how much disk. Very useful if you have limited disk space.
Sent from my Galaxy Note using Tapatalk
and bogramm
Great thread and looking for some more cool apps.. keep them coming people...
Button saviour for people having problems reaching across screen.
Ice streams for movie watching. This is a non market app. Better than July/Netflix plus its free.
Sent from my GT-N7000 using xda premium
Total Commander, a two-panel view file explorer with root capabilities.
http://www.ghisler.com/android.htm
Sent from my GT-N7000 using Tapatalk
Thanks for mentioning Appzorter - it's just what I needed.
Sent from my GT-N7000 using xda premium
Zeam Launcher
absolutely tiny and beautiful launcher/home replacement.
best I've used, without all the usless bloat.
https://market.android.com/details?...rch_result#?t=W251bGwsMSwxLDEsIm9yZy56ZWFtIl0.
Fx file manager has the best UI. Its free and has root. It organizes all you media files.
Sent from my GT-N7000 using xda premium
intruda119 said:
Fx file manager has the best UI. Its free and has root. It organizes all you media files.
Sent from my GT-N7000 using xda premium
Click to expand...
Click to collapse
Nice! thanks man, I was looking for a better file explorer to replace the Astro, This seems do the job
intruda119 said:
Fx file manager has the best UI. Its free and has root. It organizes all you media files.
Sent from my GT-N7000 using xda premium
Click to expand...
Click to collapse
Try ES File Explorer. Its the best I have used. You can stream files from your PC, NAS to your phone through it also it lists your Cloud service files (for example on Dropbox)
JulyDerek said:
Try ES File Explorer. Its the best I have used. You can stream files from your PC, NAS to your phone through it also it lists your Cloud service files (for example on Dropbox)
Click to expand...
Click to collapse
Check fx, its 10x better with all type of server configuration for streaming.
Sent from my GT-N7000 using xda premium
WARNING: NEW UPDATE (14/13.3.2.3) ROLLING OUT, I ADVISE NOT USING THESE METHODS FOR NOW IN RISK OF ACCIDENTALLY UPDATING. STICK TO AIRPLANE MODE AND WIFI OFF FOR NOW. USE THESE METHODS AT YOUR OWN RISK. Thanks to Faznx92 for the update notice.
Alright guys, I believe I have found a decent way on how to prevent Amazon updates while using the device. Some may have done this but maybe haven't mentioned these methods because I have never found a thread on this. If you have other ways to block Amazon's updates, please don't hesitate to post! This is to help you and me, all ideas are welcome
1. Blocking WiFi
I found a neat app on the Google Play store that allows you to block inbound and outbound WiFi transmissions, (or you could just turn off the WiFi yourself, but hey, are you fast enough?). It is called "Net Blocker". Upon starting the application, select every Amazon application (including settings, which is the gear icon) and check the mobile and wifi boxes. You should see the wifi and mobile icons disappear next to the application names. One more important application to disable is your current LAUNCHER. This way the WiFi/Mobile Data is disabled when using the launcher. The WiFi/Mobile Data will be re-enabled if you go on an application that isn't blocked. EX: If you are using Silk Browser (with WiFi/Mobile Data enabled), and hit the home screen (with launcher WiFi/Mobile Data disabled), the WiFi/Mobile Data will disable on its own, since you blocked the launcher.
2. WiFi Timer
Amazon likes to be a butthole and likes to update while you sleep. This app is called "Wifi Timer", which is on Google Play, that allows you to set a schedule when you want your WiFi on or off (or you could just turn off your kindle and not use it). Just add a schedule, select all the days of the week, and where it says "stop wifi" set the time whatever time you go to sleep. It should disable the WiFi at that time if not already disabled by Net Blocker. (Just to be really safe, set a bunch of schedules during the night to disable WiFi) (Also I don't know much about what happens in the background during the update process, but if the application is still running in the background, I'm sure that the WiFi would turn off during the downloading process if your schedule turns the WiFi off. But Amazon probably closes all the running applications before starting the update process so that nothing interferes with it.
I must state that these methods are a tad bit risky (for now). A big flaw in these WiFi methods is the Kindle's feature on remembering the WiFi's password, EX: When the Kindle Update starts, it will search for your saved WiFi and automatically connect with the password it remembered. So if we can find a WiFi manager application that will purposely forget the WiFi's password so that you have to always put in the password every time you want to log in, then that will fix the flaw. Again, Amazon will probably prevent that type of application from running in danger of stopping the updates.
These applications work on the kindle. For those who want to directly download the applications from Google Play use Evozi's Apk Downloader (search for it on Google). When you get to the website copy and paste the Google Play address of the application and click download.
3. DIY Zip Dummy
There has been some debate on this method, I don't recommend this because I'm pretty sure that the kindle has it's own partition for system updates. Basically in this method you fill up you kindle's memory with a zip file full of memory to take up space "preventing" the kindle from installing anything else because of insufficient space. But I wouldn't do this, unless you do it for testing and you want to risk yourself into getting an update.
Wouldn't it be better block amazon in the router setting?
Sent from my LG-D800 using Tapatalk
Sj12345 said:
Wouldn't it be better block amazon in the router setting?
Sent from my LG-D800 using Tapatalk
Click to expand...
Click to collapse
That was a huge error on my part, I meant to say droidwall, which is the application that requires root to block addresses and applications from wifi.
Block wifi completely when idle
I would just like to add that there are several "battery saver" apps in the kindle store that will immediately disable wifi when the devices screen is off. This way you don't have to worry about schedules at all. When the device is not in use, WIFI is off.
Despite the fact that I blocked all the Amazon stock apps- settings, kindle,etc. I can still download things. This is quite worrying, if I can download it, maybe the kindle can by itself? Maybe I am missing something, lets hope its something obvious.
ferrouskid said:
Despite the fact that I blocked all the Amazon stock apps- settings, kindle,etc. I can still download things. This is quite worrying, if I can download it, maybe the kindle can by itself? Maybe I am missing something, lets hope its something obvious.
Click to expand...
Click to collapse
Could it be silk browser? It is default when it comes to downloading files. Depends what application is downloading. I had no problems preventing downloads, whenever a download is launched by any application (that had the WiFi disabled) the WiFi shuts off, like the Amazon Appstore, and my browsers. Make sure to have the launcher shutdown also so nothing will connect to the internet while using the launcher.
I would just like to add that there are several "battery saver" apps in the kindle store that will immediately disable wifi when the devices screen is off. This way you don't have to worry about schedules at all. When the device is not in use, WIFI is off.
Click to expand...
Click to collapse
This brings up a good point, I just like having layers of protection just in case one fails
oOBubbleBoyOo said:
Could it be silk browser? It is default when it comes to downloading files. Depends what application is downloading. I had no problems preventing downloads, whenever a download is launched by any application (that had the WiFi disabled) the WiFi shuts off, like the Amazon Appstore, and my browsers. Make sure to have the launcher shutdown also so nothing will connect to the internet while using the launcher.
This brings up a good point, I just like having layers of protection just in case one fails
Click to expand...
Click to collapse
Try bolcking Download manager. Nothing can be downloaded without this feature.
Sent from my KFTHWI using XDA Premium HD app
I don't like seeing the same mistake happen twice. There are some good ideas here but there is only a hand full of ways to block the ota update and the most effective ones need root.
1. Roms that removed the ota apps and functions. -root
2. Airplane mode or turning off wifi
3. Apps that block wifi or try to filter it (extremely risky)
4. Tools that disable ota. (My kfhdx utility is one example.) -root
Until we crack the thing I wouldn't joke around with firewall blocking or trying to do so (<-- the mistake I first made).
At least we have ways to block ota effectively. Requires a little patience.
btw
Notice: 14/13.3.2.3 rolling out
Faznx92 said:
I don't like seeing the same mistake happen twice. There are some good ideas here but there is only a hand full of ways to block the ota update and the most effective ones need root.
1. Roms that removed the ota apps and functions. -root
2. Airplane mode or turning off wifi
3. Apps that block wifi or try to filter it (extremely risky)
4. Tools that disable ota. (My kfhdx utility is one example.) -root
Until we crack the thing I wouldn't joke around with firewall blocking or trying to do so (<-- the mistake I first made).
At least we have ways to block ota effectively. Requires a little patience.
btw
Notice: 14/13.3.2.3 rolling out
Click to expand...
Click to collapse
Thanks for the notice, ill update the thread with that warning before attempting these.
Also as a precaution I would recommend going to the WiFi settings and go to your nearest connections and "forget" them, that way if out of nowhere an update starts (which will never probably happen) it won't have anything automatically to connect to.
A little intro:I spent a lot of time with malware on windows and which apps/settings can actually protect you. By working with malware you also get a lot of background info on how people / companies / governments can steal your privacy from you and how to protect yourself against it. When I decided to care about all that, I noticed that a lot of "security forum experts for PCs" have no clue about Android and its risks although probably the same if not more data is stored on our phones than on our PCs. So I decided to do some background research, worked with Android malware and played around with the different ways and options that can protect your security & privacy.
When I am looking for a security setup then I want one that is reliable & easy-to-work-with but also lightweight on the system. I don't want my security setup to cripple down my system.
I have done similar guides for Windows and as I haven't seen anything likewise for Android I thought I would give it a go.
What can you do to protect your security & privacy:Security - Firewall: To block incoming / outcoming traffic per app or per IP/DNS/Port. Can drain the battery and be a pain to configure on Android.
Security - Antivirus: To scan files after they have been downloaded or to scan files after they have been installed. Due to the way how Android is coded it is not possible to scan in real-time (while downloading, while installing) which means you can't detect malware based on their behavior. AV's on Android can only detect malware by their signature which is easy to bypass. However is still better than nothing and a one-time scan of downloaded files or an on-demand scan while your phone is charging won't hurt your battery or slow down the device. A lot of AV-Products come with multiple features built in. Some of them are often useless (e.g. maybe anti-theft), others are worth the usage (e.g. security audits for non-fixed exploit vulnerabilities or bad system settings e.g. USB-Debugging enabled).
Security - SuperSU: To actively manage which apps will get "unlimited" root access.
Security - Password manager: Use a password manager for all your passwords. Built in password managers (e.g. browser, ftp, mail ,etc) aren't really a save solution (even with the so called "master password"). Apps like KeePass offer a lot more than just having all your passwords stored safely. It lets me open apps + automatic login with just 2 clicks (e.g. FTP, SSH, Mail, Browser,...). It let's me create unique password so that I won't be using the same password on all websites. And there is still a lot more.
Security & Privacy - DNS: Change the DNS-Server you use to something like NortonDNS which will protect you from malware/phishing sites as well as semi-bypass the tracking of browsing behavior by your phone/internet provider. The DNS provider/resolver that you use (usually your phone/internet provider) will transform the domain you want to access into the IP adress of the desired server (the one which hosts the website you want to visit). This means that what ever domain you are going to browse will be transmitted to your DNS provider... so choose one carefully ! Also the better the connection to your DNS provider is (and the better the providers connection to the world-wide-web is) the faster your domain requests will be processed.
Security & Privacy - VPN: An easy way for attackers in your network (especially open & free wifi's) to steal data from you are MITM (Man In The Middle) attacks. They can modify SSL certificates which means even using HTTPS might not always be safe or simply read your network activity (such as logins which includes accounts + password). By using a VPN all the traffic that leaves your device will be encrypted and routed directly to a safe receiver which means no one can interrupt your traffic and sniffs (read) it.
Security & Privacy - SSH-Tunnel: Using an SSH-Tunnel has pretty much the same effect as using a VPN but the difference is you have to configure each app that you want to use the SSH-Tunnel. I prefer this method on Windows as I can encrypt only the traffic of my browser/mail/communicator while playing games or other apps will use the non-encrypted (and often faster) internet connection. Sadly there is no app on Android that in my opinion works flawlessly as SSH-Tunnel client.
Security & Privacy - Adblockers: We all know adblockers. They block ads and trackers to protect your privacy and some of them (e.g. mdl-malwaredomainlist) also protect you from malware & phishing websites.
Privacy - App Ops: App Ops or similar apps let you block permissions per app which means whatever app is installed / running can be forced to not use specific permissions. E.g. you can block Facebook from using your GPS and tracking your location.
Privacy - Android 5.x disable allowed certificates: Every website and every (good) app will have a certificate that Android and also AV's check online to see if the website/app is trustworthy. Out-of-the-box Android allows many questionable certificates from governments and companies that might sell their certificates to websites/app that are not so trustworthy. Since Android 5.x you can remove/add certificates to disallow governments or companies that sell their certificates to questionable websites/apps.
Privacy - Encrypt your phone: By encrypting your phone you ensure that no one who finds your phone will be easily able to read anything saved on your phone. Not even by entering the recovery mode. It may slow down the performance a bit and increase battery drain slightly, but for me (Nexus 6) I had no troubles so far.
You can make that list longer by using only secure apps for communication (e.g. encrypted chats with Telegram or using Firefox and add-ons such as HTTPS-Everywhere) but I think that is more advanced and takes away the freedom and choice of readers/users. So I will stop here as I think I have covered the basics and most important things.
Which setup should you choose?Well first of all I recommend using only apps/services of companies that you can trust. E.g. companies that exist for a long time but haven’t done any questionable actions in the past. I have been a long-time-user of Comodo but looking at what Comodo has allowed itself in the past made me choose something different. On Android a good example are sms/call blockers. There are many options to choose from for example one is produced by a company named "NQ Security". Now do your google work and you will find some details that either makes you think of this company as trustworthy or not. Or maybe there are other companies with the same product which you would rather trust?
One thing to notice is that in the end your setup should cover most if not all aspects that I have mentioned above. Now you can either choose to use many different products (e.g. if they are free) or use on paid solution that covers everything at once. In any case, don't forget about stuff that might get installed but be useless to you. E.g. at some point I found my setup to have 3 different call blockers and 4 different sms blocker installed.
I have made a list of a few picks that I would recommend:
Must-HaveSuperSU / Rooted device (Click for Google play): 99% of all apps & configurations listed here will need your device to be rooted. Also SuperSU gives you a good overview about which apps have root access and is a good tool to configure those apps.
Override DNS (Click for Google play): It automatically changes the used DNS Server for 2G/3G/4G/WIFI to whatever you want (e.g. NortonDNS which has malware & phishing protection but also is one of the fastest DNS providers available world wide). Currently it is the only app that works with Android 5.x.
AdAway (Click for download link): Lets you block ads, tracking, malware and phishing sites. I recommend the standard sources + www.malwaredomainlist.com/hostslist/hosts.txt
App Ops (Click for Google play): App Ops lets you block permissions per app which means whatever app is installed / running can be forced to not use specific permissions. E.g. you can block Facebook from using your GPS and tracking your location.
KeePass2Android online/offline (Click for Google play): KeePass2Android comes as two different apps that you can choose from in the GooglePlayStore. One supports online syncing via various services so that you can sync your password database on all your devices (Android, Windows, OSX, Linux, iOS,... ). The other option is called "KeePass2Android offline" which completely removes all features that would require an internet connection. The App doesn't even have permissions for internet connections ! If you don't know KeePass, it is one of the oldest password managers around. It is opensource, has a lot of plugins and the leightweight but feature rich app supports nearly every device & operating system. On Android you can even log into websites from the browser via KeePass2Android by clicking -> Share -> KeePass2Android -> Log into your database -> it will automatically get the right login data for the website you are currently browsing and pastes it into the login fields. My personal setup: KeePass2Android offline with another syncing/backup app that will sync my passwords via my own server. On my laptop I use KeePass with a plugin which replaces my browsers built-in password manager with KeePass.
GSP - Good Security Practice (Recommendations)Disable untrusted certificates (Android 5.x) (Mozilla Firefox list of allowed certificates): Use a source you trust and check what certificates they usually allow in their software (e.g. Mozilla Firefox). Then check that with what is enabled in your Android's security settings and disable whatever Android has enabled but e.g. Mozilla Firefox doesn't.
A very recommended app is "Trust Manager (Click for Google play)" by Bluebox. It lists all certificates on the phone and sorts them by categories which makes it easy to disable all untrusted certificates within two clicks.
Encrypt your phone: Enable encryption of your Android device.
Antivirus: You can check AV-Test.org for monthly security reviews on mobile security products and choose from there. But I recommend either "Bitdefender Free" for a simple file-scanner of downloaded files and installed apps as well as on-demand scanner or "ESET Free/Premium" which includes file-scanner, security audit, sms & call blocker as well as phishing protection and even anti-theft if needed. Both companies are in my option very trustworthy and provided good results over the past month/years (not only on the mobile market but also the PC market). Avast is a free option with lots of features from another trustworthy company but I found it to be heavier on my system than Bitdefender or ESET.
VPN if you use public WIFI: I also recommend the use of a VPN from a trustworthy VPN provider. They don't cost too much and improve your security & privacy on public wifi a lot. Avast offers a great VPN service. Actually their app makes their services superior to me comlared to other VPN providers and apps. You might want to try the Avast VPN 14-day-trial.
Firefox (HTTPS-Everywhere + Adblock Edge) > Chrome: Firefox seems to be the winner in terms of privacy and security. But on my system Chrome is a lot faster than Firefox.
TextSecure > Telegram > WhatsApp > Facebook: Telegram was my favorite choice until @muppetmania and @bmstrong informed me about flaws and trust issues with Telegram. Instead it is highly recommended to use TextSecure. It is available on iOS and Android. Feature wise it might not be as good as Telegram (e.g. missing desktop client for windows/osx/linux) but I believe that this is a fair trade for privacy.
The bottom line
I tried to give a little overview of what kind of protection is available and what it does. I also added my choice of tools which will provide you with protection. It is up to you to decide whether it is useful in your case (based on your phone-behavior) and if you are willing to pay money for it or rather use free services. I will gladly help you with any questions or configuration/setup related things. Please let me know if you have any suggestion or corrections so that I can improve this thread !
Useful resources / links
http://droid-break.info/
https://prism-break.org/en/categories/android/
https://guardianproject.info/apps/
https://people.torproject.org/~ioerror/skunkworks/moto_e/
https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy
https://medium.com/backchannel/why-i-m-saying-goodbye-to-apple-google-and-microsoft-78af12071bd
http://crashoverridenetwork.tumblr.com/post/109948061867/account-security-101-passwords-multifactor
http://dimitritholen.nl/how-to-reclaim-your-privacy-on-the-internet/
http://www.alternet.org/print/news-...ng-encryption-isnt-enough-protect-our-privacy
https://youtu.be/seNHe5oMquw
https://pack.resetthenet.org/
https://jrruethe.github.io/blog/2015/03/29/protect-yourself-online/
http://www.privacytools.io/
https://tacticaltech.org/projects/security-box
https://bluebox.com/technical/quest...into-the-root-certificates-on-mobile-devices/
https://securityinabox.org/en
http://www.infoworld.com/article/29...managers-for-pcs-macs-and-mobile-devices.html
https://www.reddit.com/r/trackers/comments/30xtk9/trackers_security_and_you/
AV tests & comparisons:
http://www.av-test.org/en/antivirus/mobile-devices/
http://www.av-comparatives.org/mobile-security/
Thanks to:
Yuki2718 @wilderssecurity.com for teaching me a few things
@bmstrong for useful links and suggestions
@muppetmania for pointing out flaws and trust issues with Telegram !
Changelog:
01.08.2015 - Removed Telegram and replaced it with TextSecure
28.06.2015 - Updated useful resources & links
08.06.2015 - Updated useful resources & links
06.06.15 - Added "Trust Manager" by Bluebox to quickly and easily disable a punch of root certificates. Also added Avast VPN app
22.05.15 - Added a good link/explenation on non-trustworthy certificates that are installed on mobile devices out of the box ( https://bluebox.com/technical/quest...into-the-root-certificates-on-mobile-devices/ )
18.04.15 - Added ressources for AV tests and comparisons
07.04.15 - Added more useful resources & links
21.03.15 - Added more useful resources & links; fixed a typo in the changelog
14.03.15 - Added more useful resources & links; also changed the thread title to give an easier view for new updates
10.03.15 - Added useful resources & links
06.03.15 - Added "password managers" and "KeePass2Android online/offline" as recommended password manager
01.03.15 - Added a more detailed description of DNS and why you should care about it
28.01.15 - Fixed typos and grammar
zakazak said:
Changelog:
28.01.15 - Fixed typos and grammar
Click to expand...
Click to collapse
Interesting. Would like to see sections on GPG, U2F, 2FA applications, Android with Yubikey, etc.
bmstrong said:
Interesting. Would like to see sections on GPG, U2F, 2FA applications, Android with Yubikey, etc.
Click to expand...
Click to collapse
Thanks, I might add those later but I wanted to keep this guide as "easy" as possible so that every "normal" android user could increase his security and privacy with simple tools in a short time. E.g. yubikey is awesome and a very interesting topic but not very handy for the average guy?
01.03.15 - Added a more detailed description of DNS and why you should care about it.
http://crashoverridenetwork.tumblr.com/post/109948061867/account-security-101-passwords-multifactor
Really decent overview of general security.
bmstrong said:
http://crashoverridenetwork.tumblr.com/post/109948061867/account-security-101-passwords-multifactor
Really decent overview of general security.
Click to expand...
Click to collapse
Good suggestion, I have a few more and will add both (your link) and my stuff to the thread
KeePass2Android offline + KeePass on desktop + syncing via own server = win !
bmstrong said:
http://crashoverridenetwork.tumblr.com/post/109948061867/account-security-101-passwords-multifactor
Really decent overview of general security.
Click to expand...
Click to collapse
Aaaaand it's done ! Added password managers to the OP.
zakazak said:
Aaaaand it's done ! Added password managers to the OP.
Click to expand...
Click to collapse
Cool. You might want to touch on the open source vs. proprietary philosophy. Just being open source isn't necessarily better but I feel transparency is important part of security.
http://droid-break.info/
https://prism-break.org/en/categories/android/
https://guardianproject.info/apps/
https://people.torproject.org/~ioerror/skunkworks/moto_e/
https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy
https://medium.com/backchannel/why-i-m-saying-goodbye-to-apple-google-and-microsoft-78af12071bd
http://dimitritholen.nl/how-to-reclaim-your-privacy-on-the-internet/
Another very good privacy and security article.
bmstrong said:
http://crashoverridenetwork.tumblr.com/post/109948061867/account-security-101-passwords-multifactor
Really decent overview of general security.
Click to expand...
Click to collapse
bmstrong said:
http://dimitritholen.nl/how-to-reclaim-your-privacy-on-the-internet/
Another very good privacy and security article.
Click to expand...
Click to collapse
bmstrong said:
Cool. You might want to touch on the open source vs. proprietary philosophy. Just being open source isn't necessarily better but I feel transparency is important part of security.
http://droid-break.info/
https://prism-break.org/en/categories/android/
https://guardianproject.info/apps/
https://people.torproject.org/~ioerror/skunkworks/moto_e/
https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy
https://medium.com/backchannel/why-i-m-saying-goodbye-to-apple-google-and-microsoft-78af12071bd
Click to expand...
Click to collapse
Thanks ! I added all the links to the OP and mentioned you for giving such great feedback and suggestions
http://www.alternet.org/print/news-...ng-encryption-isnt-enough-protect-our-privacy
Interesting take on security in general.
bmstrong said:
http://www.alternet.org/print/news-...ng-encryption-isnt-enough-protect-our-privacy
Interesting take on security in general.
Click to expand...
Click to collapse
14.03.15 - Added more useful resources & links; also changed the thread title to give an easier view for new updates
Added your link... I will soon add a few of my links that I saved in my bookmarks. I will then split the "link category" in something like "good to know and what to do" and "privacy theory articles"... if you know what I mean
zakazak said:
10.03.15 - Added more useful resources & links; also changed the thread title to give an easier view for new updates
Added your link... I will soon add a few of my links that I saved in my bookmarks. I will then split the "link category" in something like "good to know and what to do" and "privacy theory articles"... if you know what I mean
Click to expand...
Click to collapse
Cool. Schneier has another book out now. Data and Goliath. This talk is worth the listen.
https://youtu.be/seNHe5oMquw
bmstrong said:
Cool. Schneier has another book out now. Data and Goliath. This talk is worth the listen.
https://youtu.be/seNHe5oMquw
Click to expand...
Click to collapse
21.03.15 - Added more useful resources & links; fixed a typo in the changelog
Thanks, took me some time to add the link, at the moment I don't have much time to improve the guide.
Utini said:
21.03.15 - Added more useful resources & links; fixed a typo in the changelog
Thanks, took me some time to add the link, at the moment I don't have much time to improve the guide.
Click to expand...
Click to collapse
As I'm concerned about privacy and security thanks for your thread but you forgot XPrivacy the best privacy manager I know it's not completely ready for Lollipop but works perfectly on Kitkat it's not about that fault it's Xposed it has a bug which I hope will be resolved soon.
Good luck! Regards.
Cyclu said:
As I'm concerned about privacy and security thanks for your thread but you forgot XPrivacy the best privacy manager I know it's not completely ready for Lollipop but works perfectly on Kitkat it's not about that fault it's Xposed it has a bug which I hope will be resolved soon.
Good luck! Regards.
Click to expand...
Click to collapse
You are right, XPrivacy seems to be a really nice tool but I haven't been able to try it myself (as it is not compatible with Android 5.x) which is the reason why I haven't added it to the list yet
I might give it a try on my Nexus 4 with Android KitKat !
https://pack.resetthenet.org/
https://jrruethe.github.io/blog/2015/03/29/protect-yourself-online/
http://www.privacytools.io/
https://tacticaltech.org/projects/security-box
bmstrong said:
https://pack.resetthenet.org/
https://jrruethe.github.io/blog/2015/03/29/protect-yourself-online/
http://www.privacytools.io/
https://tacticaltech.org/projects/security-box
Click to expand...
Click to collapse
Once again thanks for your input. I added them to the OP but I am still really busy with my job/reallife. I hope I can improve the OP soon.
Question about choices
Utini said:
Security - Antivirus: To scan files after they have been downloaded or to scan files after they have been installed. Due to the way how Android is coded it is not possible to scan in real-time (while downloading, while installing) which means you can't detect malware based on their behavior. AV's on Android can only detect malware by their signature which is easy to bypass. However is still better than nothing and a one-time scan of downloaded files or an on-demand scan while your phone is charging won't hurt your battery or slow down the device. A lot of AV-Products come with multiple features built in. Some of them are often useless (e.g. maybe anti-theft), others are worth the usage (e.g. security audits for non-fixed exploit vulnerabilities or bad system settings e.g. USB-Debugging enabled).
Antivirus: You can check AV-Test.org for monthly security reviews on mobile security products and choose from there. But I recommend either "Bitdefender Free" for a simple file-scanner of downloaded files and installed apps as well as on-demand scanner or "ESET Free/Premium" which includes file-scanner, security audit, sms & call blocker as well as phishing protection and even anti-theft if needed. Both companies are in my option very trustworthy and provided good results over the past month/years (not only on the mobile market but also the PC market). Avast is a free option with lots of features from another trustworthy company but I found it to be heavier on my system than Bitdefender or ESET.
Click to expand...
Click to collapse
Hi, I've been juggling this question for a few days now and I'm hoping you will have an answer to assist me. First, I have read your post and this is absolutely what I have been looking for for the past few weeks. Thanks has been given and I hope you keep this up. Second, I read the wildersecurity link but still do not have an answer to this question.
Why choose ESET Premium over BitDefender. Can you tell me what one offers that the other doesn't? I've been leaning to BitDefender only because I have and use an Android Wear device. Again, thank you for any assistance or time.
Is there a way to make Dns66 properly/usefully work on MIUI?
I've set all kinds of settings I could imagine - as on screenshots, but cannot make it to work:
- Dns66 does not autostart on (re)boot, I must manually start the app and start its VPN
- When screen isblocked and later unlocked, I must again manually reopen Dns66 and manually restart its VPN
Etc.
Huawei' EMUI is e.g. also very picky but yet, Dns66 can be easily (with the same/similar settings) made to work there, and without root:
- Dns66 autostarts on (re)boot and establishes its VPN for DNS
- Dns66 is not running (as an app in the background), only its service runs
- If Dns66 app is started and killed, its service still continues to run
- When screen locks, its VPN closes, but once screen is unlocked, Dns66 automatically re-stablishes its VPN
- When connection breaks and later re-establishes, Dns66 reopens its VPN
The whole point of Dns66 is that it does not require root (on 'normal' phones) - unlike e.g. AdAway (which needs root), so is it possible to make Dns66 to work also on this Xiaomi's EMUI?
Btw, the advantage of Dns66 is not only that it does not require root - it can be also easily stopped/restarted, while stopping AdAway requires to restart the phone; and restarting it requires to update all hosts sources and again to restart the phone
Moreover, with Dns66 you can whitelist URLs (allowing a particular URL blocked by proceeding hosts sources, but for all apps) and also apps (allowing all the otherwise blocked URLs, but for a particular app), whereas with AdAway you can only whitelist URLs
I always used DNS66 on Samsung phones but when I switched to Xiaomi it stopped working, always got Google ads.
I decided to switch to Adguard.
In case of, I suggest to use only stable or beta builds because the nightly ones are often battery eaters.
I had the same problem with dns66. You can use blokada and it works very good. Completely free and no "premium" features
rms112 said:
I had the same problem with dns66. You can use blokada and it works very good. Completely free and no "premium" features
Click to expand...
Click to collapse
Blokada 'works' - showing green, but it doesn't really block me from ads.
With Dns66 I can define several host sources, with Blokada only one DNS server can be enabled - so which one should I use to get me free of ads and analytics?
Tried AdGiard and AdGuard Family - I see the ads
I want with Blokada (if possible) something to be of the same/similar level of protection like when using Blu or Basic EnergizedPtitection hosts sources with Dns66 (or with AdAway - currently cannot use AdAway since I didn't root my Xiaomi yet):
https://block.energized.pro/blu/formats/hosts.txt
https://block.energized.pro/basic/formats/hosts.txt
rms112 said:
I had the same problem with dns66. You can use blokada and it works very good. Completely free and no "premium" features
Click to expand...
Click to collapse
I tried Blokada Slim (as available on Playstore), but it's not the real ad blocker
Edit: Checking now Blokada Open source edition
zgfg said:
Blokada 'works' - showing green, but it doesn't really block me from ads.
With Dns66 I can define several host sources, with Blokada only one DNS server can be enabled - so which one should I use to get me free of ads and analytics?
Tried AdGiard and AdGuard Family - I see the ads
I want with Blokada (if possible) something to be of the same/similar level of protection like when using Blu or Basic EnergizedPtitection hosts sources with Dns66 (or with AdAway - currently cannot use AdAway since I didn't root my Xiaomi yet):
https://block.energized.pro/blu/formats/hosts.txt
https://block.energized.pro/basic/formats/hosts.txt
Click to expand...
Click to collapse
Never seen ads with Adguard.
It works like a charm.
giodeluigi said:
Never seen ads with Adguard.
It works like a charm.
Click to expand...
Click to collapse
As you cited above, I was talking about using AdGuard DNS server in Blokada Slim (not about using AdGuard apk) - and that didn't block ads
And with Blokada Open Source edition, nothing better than with DNs66 - although I enabled Autostart, I must still manually start Blokada on each reboot and leave it working in the background to get it blocking ads
Seems the real problem is in Xiaomi/MIUI (on Huawei, also Android 9, Dns66 can automatically start its invisible service on reboot, restart after every Airplane, without the need to manually start the app)
zgfg said:
As you cited above, I was talking about using AdGuard DNS server in Blokada Slim (not about using AdGuard apk) - and that didn't block ads
And with Blokada Open Source edition, nothing better than with DNs66 - although I enabled Autostart, I must still manually start Blokada on each reboot and leave it working in the background to get it blocking ads
Seems the real problem is in Xiaomi/MIUI (on Huawei, also Android 9, Dns66 can automatically start its invisible service on reboot, restart after every Airplane, without the need to manually start the app)
Click to expand...
Click to collapse
You can also use private Adguard DNS without the need of any third part adblocking app.
giodeluigi said:
You can also use private Adguard DNS without the need of any third part adblocking app.
Click to expand...
Click to collapse
Of course
But anyway, thanks for all the tips, unfortunately none of them provides complete solution for what I was asking for.
I will install the good old AdAway.
I would already root, but it takes a week first to unlock Bootloader
In the meantime, @mods please close the thread
Thread closed at op's request.
strongst
Forum Moderator
The Pixel 4 XL has enough performance for me and is very stable without upgrading, I have been keeping the official last version of Android 10 - 10.0.0 (QQ3A.200805.001, Aug 2020)
I chose to stay with Android 10 because I often download files that are easier to read in /mnt/sdcard/Android/data/, although I have patched the boot.img file with Magisk.
The software versions I use are based on the above-mentioned 10.0.0 (QQ3A.200805.001, Aug 2020) system version number;
Tasker Add a task, name is Boot/Select Action Category/Code/Run Shell/
Code:
SU
setenforce 0
select Use Root,
This is helpful for Viper4Android and rooted file managers to enter the system path.
I learned that the gamma value of the Pixel 4 XL screen has some problems at low brightness, I used the CleanSlate kernel to fix it,
tbalden's CleanSlate kernel for Google Pixel 4/4 XL
Click to expand...
Click to collapse
After testing some versions, I found that the [Pixel4Xl (coral) boot image CS 1.5.0] version of the kernel works best with the [Companion App 2.12.17] program on my phone.
My requirements for gaming or watching movies on a handheld device are not strict. In order to reduce the graphics calculation and power consumption of the device, I use the command to change the display resolution of the device to 720P, which can make the content pixel by pixel. displayed on the screen.
Code:
adb shell wm size 720x1520
adb shell wm density 280
At this time, the rounded corners around the screen will be enlarged, and use the command to restore the normal ratio.
Code:
adb shell settings put secure sysui_rounded_size 1
adb shell settings put secure sysui_rounded_content_padding 5
At home and at work I use the Pixel 4 XL as a portable router to filter the network, so it's plugged in for long periods of time to charge, but I've had battery bulges with the Pixel 3 XL before, and that's why I use the Pixel 4 A big reason for the XL Root, I use the Magisk module [Advanced_Charging_Controller] to limit the charge to 80%, start using the battery to discharge to 70% and start charging, cycle, and charge it to 100% once every one or two months.
Advanced Charging Controller (ACC)
Click to expand...
Click to collapse
I use [Clash for Android] and [AdGuard for Android] for the system network proxy, and I use [VPN Hotspot] to share the outbound network to computers, mobile phones, and devices such as Google TV or Nest Audio.
Clash for Android
Click to expand...
Click to collapse
AdGuard for Android
Click to expand...
Click to collapse
VPN Hotspot
Click to expand...
Click to collapse
First configure Clash for Android,
Settings/Override/General/
HTTP Port fill in 7890,
Socks Port fill in 7891;
DNS/
Listen fill in 127.0.0.1:5450
Append System DNS, select Enabled
Name Server, Fallback Name Server, Default Name Server both fill in 1.1.1.1, 8.8.8.8.
Configure AdGuard for Android, open
DNS Filtering/Select DNS server/My DNS servers/Add custom DNS server,
DNS server name fill in Clash for Android,
DNS upstreams one per line fill in 127.0.0.1:5450, SAVE AND SELECT;
Open Network/Proxy/ADD PROXY SERVER in the upper left menu,
Proxy name fill in Clash for Android,
Proxy type select SOCKS5,
Proxy host fill in 127.0.0.1,
Proxy port fill in 7891,
return to the previous layer,
Filtering method select Local VPN;
The basic settings of AdGuard for Android are configured, and the firewall and filtering rules of the user program can be customized according to their preferences.
After giving VPN Hotspot root permission, it is just like sharing hotspots normally, but after the above settings, WiFi enters the mobile phone, and Clash for Android forwards network traffic, filters it through AdGuard for Android, and then transmits it by VPN Hotspot. Generally, my hotspot will be Mount 5-6 personal devices, but I saw a blog saying there will be a device cap.
Then configure other user programs, log in to the account, set the save folder, etc., and use TWRP to back up the whole machine before the user program produces more caches:
Code:
adb reboot bootloader
fastboot boot *.img
Just a one-time entry into TWRP, the version I'm using is TWRP-3.5.2_10-0-coral, After the backup is complete, copy the /mnt/sdcard/TWRP folder to a USB flash drive to save and mark the backup date, Done.