Episode 089 - How to set up your GrapheneOS and how to compartmentalize your profiles

1. I am not recommending it over. Orbot is not impractical when using identifiable accounts and streaming HD video 2. Aurora does pull directly from the Play Store, but there is no way of verifying Aurora's own apk and its an additional layer of trust that is not necesssary. 3. Apps can request certain information that's identifiable - list of installed apps, shared storage, accounts, some usage data. Some apps are more intrusive than others. 4. I wouldn't recommend to use the burner profile on a device where you intend to use cell services. Unless you take precautions of never taking that phone to compromising locations.

The Hated One

A few quick questions whenever you can get around to it: 1. Why do you recommend mullvad over something like orbot? 2. Why the recommendation of google play store over aurora store? I thought aurora store pulls directly from google play store? 3. Why do you recommend splitting up into multiple profiles? My understanding is that the sandbox model prevents apps from talking to each other unless explicitly allowed by both apps. What is the benefit of multiple profiles? 4. You commented about a "burner profile" towards the end, but wouldn't your hardware IMEI and IMSI be caught up if there were stingrays being used?

Thank you for this feedback! If there is anything you need me to clear up in future episodes, please let me know!

The Hated One

This was extremely helpful, thanks for such a comprehensive guide on creating a setup with good practices. Well researched practical content like this is exactly what I was hoping for when I signed up for your patreon. I tried setting up GrapheneOS a couple weeks ago before I found this post and felt completely lost on how I should set things up in a secure and practical way and din't even really know where to start figuring it out on my own, but this guide answered all my questions and more and I feel I was finally able to get a good setup going that I will be able to build on over time. Feels very freeing to make things that much harder for FAANG and the rest to steal, exploit, and monetize my data. Also appreciating the info as I'm going through the LINDDUN series now. Anyway, thanks for what you do.

ArdentSolarDust

Great beginners guide! Thank you

Rob

Folder scoping is a good way to give only granular access to your directory.

The Hated One

Yes, which is why you want to use multiple as a backup

The Hated One

Also, I didn't really hear you talk about folder scoping inside of an account. Is this unreliable?

Eight-Legged Dj

Could using hardware security tokens result in loss of access to accounts, when let's a phone is lost or stolen?

Eight-Legged Dj

I would download them using NeoStore if you have to: https://github.com/NeoApplications/Neo-Store Or perhaps Jay Dohe's suggestion

The Hated One

I was using it.

inferno_potato

I was thinking about downloading apk, then verifying their keys then trasfer to phone and installing. But this is burdensome.

inferno_potato

Also check out Droid-ify, as recommended by Side of Burritos: https://f-droid.org/en/packages/com.looker.droidify/

I just download fdroid apk and install it. Then I use the fdroid app to install other apps. I don't know where transferring from computer to phone comes from. (also allow unknown sources)

hope

Some apps are not available in playstore like libretube, newpipe, florisboard, vimusic etc. They are available in fdroid only. Do u have suggestions about how to download and use them? Because everytime downloading apk then verify the authenticity of those apps in computer then transfer to phone, is toilsome.

inferno_potato

The timing on this one couldn't have been any more perfect!!

Eight-Legged Dj

No problem brother!

The Hated One

This is fantastic, THO. Love it, it is highly relevant and helpful and I really appreciate it.

Richard G.