Your Cell Phone Security

Designed to give you as much information as possible when it comes to how to secure your own personal communications. If you need and extensive class I highly recommend taking a Combat Studies Group Groundrod Course. Start at GR1 and work your way up.

Starting

First you need to acknowledge two things: No solution is perfect. There is no such thing as complete security, or anonimity online.

You’re about to obfuscate your online precense and begin to secure your digital life. Our primary footprint device, or our cell phone, is used more than any other device, so this needs to go first.

You have at the current moment, two options. Neither of which are Apple.
LineageOS and GrapheneOS. Your first step is to see if your current device is compatible with either of those options. If it’s not, time to upgrade! Something really cool is that LineageOS supports Nintendo Switch and Nvidia devices. If you want to get a little tinkery then this is the OS for you!

Device Selection

Using Ebay, Amazon, or any other market place acquire an Unlocked Phone. There are two types of unlocked and they can be confusing. The only type you’re concerned with is: Bootloader or Manufacturer Unlocked. Carrier unlocked is not the same and may require additional steps.

Oddly enough, you can usually find these dealers by looking for 1 and 2 star reviews by people who have no idea what they are talking about. Reviews like “This phone was unsecure, the bootloader came unlocked!” are helpful for us, because we’re going to unlock it ourselves!

I use Amazon and a reputable dealer from Ebay who’s primary business is selling phones like this for this purpose. The reason is easy returns. Amazon just gets swapped out until I find one that’s unlocked. I’ve had great luck so far with both Ebay and Amazon.

Ready for more good news? It’ll cost less than that brand new iPhone from your current carrier, and you own it outright. Most phones from carriers you’re leasing. They own the phone and your data stored on their apps. Oh, they randomize it and meta it. It can still be used to trace it back to you.

This is one of the hardest steps.

Back dat data up!

Seriously. I copy every folder over individually and store it in 3 locations. Pretty nuts until you’re the one that lost your oldest daughter’s first year of pictures. Gone. Never coming back. Just gone. Now, everything gets triplicated and backed up.

This can usually be accomplished by plugging your phone into a computer and transfering the files to a removeable harddrive. That’s the least technical way. You can use Google Drive or whatever your familiar with, but the least invasive, and most reliable way is to just copy and paste a folder at a time in my experience. I don’t lose anything that way.

If you have GrapeneOS there is a way to go about this and it’s kinda helpful. Swipe down on your home screen and look for the cog icon for settings. Search for “backup” and it will give you instructions. Just know that when it asks for you to attach a USB drive, you can use your computer.

Export your contacts! This is really important! Show of hands, who memorizes phone numbers anymore? I didn’t see a single hand. That’s why exporting your contacts and saving them on your backup device is HUGE!

The big leap!

Lets go over our check list!

• Current phone all backed up!
• Double Checked that the phone is all backed up.
• Made sure that we varified the data is safe and secure on our backup device.
• Had a third party varify that our data is all backed up.
• Researched and purchased a ROM (See the two links above) compatible phone from a reputable dealer with free exchanges or returns.
• Backed up our phone a third time just out of paranoia.

I think you get the idea that backing up your data is important, and that’s before we’ve even started on the project phone. The reason being: Some of us have to sell our old phone to afford the new one. So, we need the scratch to make the catch.

Once we have our project phone in hand we’re going to follow the directions in this simple video to get started with GrapheneOS. His video is by far my favorite. For LineageOS we go here.

Recommendations

The reason why I recommend GrapheneOS is because of the level of protection it offers, using hardware protection to become antifragile when subjected to brute force attacks, and the ease of installation. Go have a look at which one would work better for you. The security for an everyday citizen isn’t going to make a huge difference. If you have a state level actor looking at you, you’re going to need GrapheneOS.

This video gives you some additional tools for degoogeling LineageOS. And this is why I recommend using Graphene. There are additional steps to lock things down. You could look at LineageOS as more work for less security, but that’s not quite true. It’s more work for slightly more convenience. If you are tied into Google at a core level, meaning your whole life is wrapped up in their infrastructure, you may want to consider Lineage as it allows your be more flexible in this regard.

My recommendation continues to be Graphene for both security and convenience. After having done this many times, I can usually convert a phone over in about 10 minutes.

Privacy vs. Security and how to have both

Here’s the distinction:
Lets say we built a vault with 16″ thick walls, hermetically sealed, and completely impenetrable. It’s secure. No one is getting in. Now, all the walls are fully transparent. It’s secure, but it’s not private in any sense of the word.

So, when Google and Apple say: “Your data is secure!” they aren’t kidding. They have a super robust system in place that makes sure it’s all locked down nice and tight! No joke, it’s hardcore! But, is it private. Well, to the public, yeah. It’s unlikely that you’ll be able to run into anyone who is capable of breaking into your phone, let alone stealing all your data. But, Google and Apple have a set of keys to your vault. And they can make the wall transparent any time they want. And put cameras anywhere. Anywhere. They want. “Why aren’t you taking a shower in your secure vault? You trust us don’t you?”

From my perspective with the knowledge I have right now, GrapheneOS is the best option of the two. Yes, it does run on Google hardware, and that freaks me out too, but it’s the best we got for right now, so that’s what I go with. The people I trust in this space: CSG, and The Ask Noah Show, and others. Agree this is the best way to go. You can have both, don’t let the big tech companies watch you shower in your vault.

What goes in it?

This is where a caution is in order:
Make sure you pay close attention to any apps asking for permissions. I trust and use these apps or I wouldn’t recommend them. These are my default apps and some that you can use for daily use.

You can make yourself more vulnerable by adding some software to this device. You are going to be the defining factor on how much of your information you give up.

You’re going to see FOSS (Free Open Source Software) a lot below. This is different from Free Software. FOSS is designed so you can see the code, and see what it does with your data. The entire idea is transparancy of information. There is some FOSS out there that will exploit you more than Google software if you can even believe that. But, it tells you what it’s doing and how.

Not all software is created equal. FOSS is our friend because it can be independantly varified. Closed source software and Operating systems are not because they are keeping key information from you, the user. Windows, Apple, and Google, all run closed source software.

The Apps

Fdroid is an app store that predominantely uses FOSS apps. I use this to download: Aurora and Aurora Droid which is a redundency of Fdroid. With Aurora you can download things that will make your phone less secure. I never recommend downloading the native apps for social media, and if you have a moment of weakness, just don’t download TikTok, or you’ll have to rewipe your phone and start completely over. It’s the herpes of apps.

Proton VPN using your Protonmail account, you have free access to a VPN service. Once you’ve downloaded the Aurora store you should be able to get Proton VPN and activate it. Pull down your top bar on your phone and click the gear icon in the bottom right corner. Go to “Network and Internet” then tap VPN and tap the plus icon in the top right and add Proton VPN. Tap on the settings icon to the right of Proton VPN and turn both “Always on VPN” and “Block Connections without VPN.” This is known as a Killswitch. You will not be able to go online without a secure connection.

Orbot this app uses the TOR network as a VPN for your traffic. It will allow you to use it as a killswitch as well. Just do some research before you use it so you know what it is, and why you’d want to use it. This app comes in handy if you don’t have a Protonmail account, or you live in a country that doesn’t allow VPN’s. This VPN can be much slower than Proton, or other VPN’s at times. So keep that in mind while using it.

Obsidian this is an all encompassing future proofed notes app, and much more. I use it a ton, and I love it. I searched for many years for an app like this and I am so happy someone recommended it to me. I’m sorry I can’t remember your name or I would immortalize you here, you changed my life. This is just a suggestion. It just makes life easier for me. Hopefully it helps you too. The desktop version is amazing as well and I use it for Intellegence and keeping track of how things are connected. Watch this video for additional context.

Mozilla Firefox Not a fox at all, but a Red Panda. This browser is my all time favorite. There are few browsers that are as good as this one when it comes to respecting your privacy. Once you know how to set one up it’s a great way to surf the net. In general this is a good one to have. Vandium comes with GrapheneOS and is their deGoogled Chrome browser, it’s great as well. Just preferences.

Firefox Focus is a companion browser I use for quick searches. It wipes everything after the search and keeps your data secure and doesn’t build up a ton of browser storage. I do not recommend storing passwords in your browser. If you do so, please make sure and use a Master Passphrase. Something you will remember, and something that contains comas. Here’s an example: “Ya’ll ackt like you, never, seent a white person before!”

Bit Warden and password managers. I recommend locally (on device) hosted password managers, and you can migrate to them once you’ve gotten everything dialed in. Until then, use a password manager that is FOSS. Do not pay to store or sync your passwords. Once you stop paying, it’s over. They can lock your stuff down and lock you out. You’re also keeping your passwords on someone elses computer if you use cloud syncing. Do so at your own risk. Bit Warden does use the cloud to sync. This is not a permanent solution, it is an alternative to storing passwords in your browser.

Waze is a wonderful navigation app that uses a ton of fun voices to get you where you’re going. It’s a privacy respecting navigation app. They often have fun voices like Master Chief from Halo, which is still my favorite. Unfortunately, no longer available. Lots of fond memories of that one with the girls on road trips.

Exodus is a crypto wallet. You’ll need your seed phrase to start using it. If you’ve never created a crypto wallet before, then use this one to create a portfolio of Crypto currencies. There are ATM’s that will convert cash into Crypto all over the US. Blacksheep Mall has one in the food court. I’ve used it, and it happened to be exactly the same company I bought my first Crypto from in 2015. The reason for having crypto on hand is having money accessible in ANY circumstance. By using

Telegram This is currently where our community resides and we’d love for you to join us! Use FOSS Telegram and download the proper version in FDroid. I’d also like to invite you to Mr. White’s house, our Telegram chat group: https://t.me/+SdeSaSkiwJlkNTkx

Signal This app is one of the best known encrypted apps out there. Every character is individually encrypted, including the spaces. It has not been breached or hacked, do not believe the lies. It’s solid.

AlternativeTo This immensely helpful website will allow you to search for FOSS alternatives to the apps you use everyday. The crowdsourced information gives you the opportunity to select and use things similar to what you’re used to. To search for FOSS, just use the filters in the search bar options. They make it really easy and I’ve found a lot of useful apps here.

All in

I recommend making this your daily driver and jumping off of your big tech overlord’s phone. That includes your carrier. Personally have a few more adjustments to make, then I’m jetosining my big name carrier.

I am not fully sold on some of the smaller carriers like Patriot Mobile, and Mint. I have used Ting in the past and they’re pretty decent, and decentralized. This is not a full endorsement, just a freindly “Hey, this is an option.” I am still researching things out and seeing who to trust. If you have recommendations I’d love to hear them and so would all of my friends. Just use this link, and let us know on Telegram: https://t.me/+SdeSaSkiwJlkNTkx

Once this new contraption is your daily driver it may take some getting used to. Good news, there’s a ton of info on the web and on YouTube for how to do anything you did on your old phone and ecosystem. If you have questions, message me on Telegram! Or email me at gravemrwhite @ protonmail.com

Conclusion

Google is about to launch, yet again, another privacy violating effort. I’ve said for over a decade: Google was created by the CIA, the NSA, and DARPA to get you to report on yourself volountarily. If the service is free, you’re the product. FOSS gives you the opportunity to know what, and how that’s being done, and allows you to consent to it. Instead of just over reaching and gathering ALL of your data.

Be smart. Do research, and ask questions.

God Bless You and Keep You!