Advanced Security (From forum thread)Overkill's Mobile Security Config

[Overkill]

I am using NextDNS alongside AdGuard Premium. After alot of tinkering and with the help of the NextDNS Community, I have found that HaGeZi has the best Blocklists. I'm currently using HaGeZi - Multi PRO which has tons of other Blocklists that NDNS offers like OISD, 1Hosts, hBlock etc.

GitHub - hagezi/dns-blocklists: DNS-Blocklists: For a better internet - keep the internet clean!

DNS-Blocklists: For a better internet - keep the internet clean! - hagezi/dns-blocklists

github.com

 

[Overkill]

I have a serious problem with music apps!

I have a 64GB SD Card that is almost full with mostly Mp3's and some Audio files. Rather than constantly switching music artists/discographies, using only one music app, I use multiple music apps for different genres.

 

[harlan4096]

PIN in SIM card and Authenticator app would be welcome, thanks for sharing

 

[HarborFront]

Have you considered using Kiwi browser in place of Frost Private Browser? The latter has many trackers and the former allows you to add extensions with no trackers

 

[Overkill]

I think I've tried Kiwi before. How can you tell Frost has lots of trackers?

I wasn't sure where to add SD Maid because of no 'Cleaners' category.

 

[HarborFront]

You can use either Exodus, App Manager or ClassyShark3xodus from F-Droid to check for trackers in apps

Exodus | F-Droid - Free and Open Source Android App Repository

Exodus show you trackers and permissions in apps installed on your device.

staging.f-droid.org

ClassyShark3xodus - Scan apps for warnings | F-Droid - Free and Open Source Android App Repository

Checks apk(s) for known trackers (provided by Exodus) +other warnings and specs.

f-droid.org

App Manager | F-Droid - Free and Open Source Android App Repository

A fully-featured package manager for android.

f-droid.org

 

[Overkill]

Which one do you recommend? Do these require root?

 

[HarborFront]

Which one do you recommend? Do these require root?

No root required. Most detailed is App Manager

 

[Overkill]

Added InBrowser and Kiwi Browser

 

[Overkill]

No root required. Most detailed is App Manager

This is what I get when trying to install F-Droid

 

[HarborFront]

This is what I get when trying to install F-Droid

Download from below

F-Droid | F-Droid - Free and Open Source Android App Repository

The app store that respects freedom and privacy

f-droid.org

 

[Overkill]

Download from below

F-Droid | F-Droid - Free and Open Source Android App Repository

The app store that respects freedom and privacy

f-droid.org

Same thing happens.

 

[HarborFront]

Same thing happens.

Just click the OK and install F-Droid

 

[HarborFront]

I see your IP address is exposed since you are not using a VPN

All the apps on your phone when connecting out will have your IP exposed and unencrypted.

I would suggest you get Mullvad VPN and you can set NextDNS as your DNS server to encrypt and protect your DNS queries. With a VPN set to Always-On your IP address will always be encrypted.

However, Adguard Premium will NOT work with a VPN (any VPN for that matter) for Adguard will need to create a VPN itself. So, you either operate without a VPN which exposes your IP address or you work with a VPN and with no Adguard Premium but your IP address is encrypted and the DNS queries encrypted and protected by Mullvad default DNS.

Also, don't use YouTube, unless you are paying for it. Can use apps like LibreTube (if not using a VPN)

LibreTube | F-Droid - Free and Open Source Android App Repository

Alternative frontend for YouTube with focus on privacy

f-droid.org

or NewPipe (if using a VPN)

NewPipe | F-Droid - Free and Open Source Android App Repository

Lightweight YouTube frontend

f-droid.org

These 2 do NOT have trackers

FYI, Sophos Intercept X's Web Filtering don't work with Kiwi Browser. It supports mainstream browsers like Chrome, FF etc. If you use Kiwi Browser then you need extensions to filter the web. Adguard Premium will likely filter Kiwi Browser (you need to confirm on this as it's a device-wide app) but you cannot use a dedicated VPN with it as mentioned above. Sophos Intercept X's Web Filtering also looks like NOT web filtering Samsung Internet Browser. You need to check to confirm.

You need to make decisions on what apps work best for your needs.

 

[Overkill]

I'm honestly not worried about my IP showing. I'm not going to use a VPN either. I prefer AdGuard the way I have it configured along with NDNS. I could do a lot more configuring (paranoid mode) but I'm satisfied with my configuration for now. Sometimes less is more.

My extensions for Kiwi

 

[HarborFront]

I'm honestly not worried about my IP showing. I'm not going to use a VPN either. I prefer AdGuard the way I have it configured along with NDNS. I could do a lot more configuring (paranoid mode) but I'm satisfied with my configuration for now. Sometimes less is more.

My extensions for Kiwi

View attachment 275168

These 2 extensions collect user data.

Can use Emsisoft Browser Security and add phishing filters from filterlists.com to your Adguard Premium for better privacy

 

[Ink]

Same thing happens.

Instead of using the default F-Droid client, consider Droid-ify or Neo Store which are F-Droid client alternatives with wider repos, features and Material You design.

GitHub - Droid-ify/client: Clutterfree F-Droid client, [mirror] https://codeberg.org/droidify/client

Clutterfree F-Droid client, [mirror] https://codeberg.org/droidify/client - Droid-ify/client

github.com

GitHub - NeoApplications/Neo-Store: An F-Droid client with modern UI and an arsenal of extra features.

An F-Droid client with modern UI and an arsenal of extra features. - NeoApplications/Neo-Store

github.com

Temporary Allow your default browser to install Unknown apps.

 

[Overkill]

Updated

 

[harlan4096]

What did You update?

 

[Overkill]

I had Sophos Intercept X and AdGuard, but I wanted to use a VPN, so I had to uninstall AG since it creates a local VPN to be able to Intercept traffic. Sophos Intercept X was crashing a lot, so I went back to the only other free AV I know of. I added some browsers other than Chrome and FF. Those are the most significant changes. I like to try new apps, and tinker around to see if they are keepers.