👨🏻‍💻Opsec Part of my config android

[Anti-Google]

I dont have a google pixel so no graphene os a bad point for me i cant afford it.
So im gonna give a part of my config in android in a list so lets go

-Multiple user in my phone

1: Owner, no google, basic config for pentest with nethunter kex sometimes( CTF etc..)

2:Sensitive session very anonyme

3:Wallet, XMR, LTC etc (all go trought tor btw)


-No google, (google framework, google play services, and all the app google pre-installed ex: gmail, chrome,youtube

-I never use bluetooth, localisation thing etc

-random mac adress, mac editor

-Every password stock in an encrypted database in KeepassDX

-Password minimum 30 character generate by password generator, average password that i use :
$\%_8GWw>6Amf&xEPapJsVR'X|Ku;4[#+h7 (not a real password of mine)

-Private focused keyboard, HeliBoard

-Crypted DNS, I2p, Tor with bridge 24/7

-0 acces camera, microphone, localisation

-No 4G,5G data mobile

-Tor Browser with configured bridge for research, darkweb forum, etc Duckduckgo just to look at some image etc
Javascript disabled in torbrowser noscript

-Tuta mail, or protonmail but not mine

-personalDNSfilter

-Hypatia anti-virus

-OnionShare to share file trought tor network

-SimpleX, Briar to communicate Briar for android more feature than in PC

-PGP key to sign message, for darkweb etc

-SeekPrivacy to encrypt file

-Scrambled Exif to delete metadata

-if im not actif in my phone i active plane mode

-very long pin code

-only go to https website

-talk to nobody what im doing
Where im from,
Nothing about me


This is the most important, focusing etc

This is the end for this thread

If you have question ask it Thank you

Tag :
@Brian @St.greypiller

 

[Brian]

Based.

 

[Anti-Google]

Based.

What does it mean

 

[Brian]

I dont have a google pixel so no graphene os a bad point for me i cant afford it.
So im gonna give a part of my config in android in a list so lets go

-Multiple user in my phone

1: Owner, no google, basic config for pentest with nethunter kex sometimes( CTF etc..)

2:Sensitive session very anonyme

3:Wallet, XMR, LTC etc (all go trought tor btw)


-No google, (google framework, google play services, and all the app google pre-installed ex: gmail, chrome,youtube

-I never use bluetooth, localisation thing etc

-random mac adress, mac editor

-Every password stock in an encrypted database in KeepassDX

-Password minimum 30 character generate by password generator, average password that i use :
$\%_8GWw>6Amf&xEPapJsVR'X|Ku;4[#+h7 (not a real password of mine)

-Private focused keyboard, HeliBoard

-Crypted DNS, I2p, Tor with bridge 24/7

-0 acces camera, microphone, localisation

-No 4G,5G data mobile

-Tor Browser with configured bridge for research, darkweb forum, etc Duckduckgo just to look at some image etc
Javascript disabled in torbrowser noscript

-Tuta mail, or protonmail but not mine

-personalDNSfilter

-Hypatia anti-virus

-OnionShare to share file trought tor network

-SimpleX, Briar to communicate Briar for android more feature than in PC

-PGP key to sign message, for darkweb etc

-SeekPrivacy to encrypt file

-Scrambled Exif to delete metadata

-if im not actif in my phone i active plane mode

-very long pin code

-only go to https website

-talk to nobody what im doing
Where im from,
Nothing about me


This is the most important, focusing etc

This is the end for this thread

If you have question ask it Thank you

Tag :
@Brian @St.greypiller

You can buy a second hand google pixel

 

[Anti-Google]

You can buy a second hand google pixel

I cant afford a google pixel

 

[Brian]

u didn't mention if u update the os, without google play services, OTA updates may be delayed. If Ur device is supported by Lineageos or Calyxos u should flash that and update manually via signed ZIPs.

If someone gets physical access, they might attempt to brute force the PIN tho its long but yuh so yes enable auto wipe after 10 failed attempts but thats risky. The better option is to use androis "lockdown" mode which disables biometrics and requires PIN on next unlock but ye thats only on some ROMs.

Heliboard is fine, but it still may have network permissions so ensure u disable internet access for the keyboard via netGuard or a firewall (since u use PersonalDNSFilter but uh thats DNS, not firewall so just Install netguard (open source firewall btw) to block internet for all non essential apps like keyboard, file manager, etc