Live data from Hacker News

How to stay private when using Android

protonmail.com

31–40 of 177 posts

Re: How to stay private when using Android

#31

> 7. Review your cloud sync I used an Android device for a short while a few years ago. I disabled all sync functionality and would back up to my own storage device. After an OS update, all of the sync functionality was automatically enabled and everything on the device was uploaded to Google’s services anyway. So I deleted everything that was uploaded, then deleted my google account, and bought an iPhone and swore t…

I wonder if this kind of behaviour is illegal under GDPR. At least it should be in my opinion.

Re: How to stay private when using Android

#32
I've been saying this for a long time, but there's no technical solution to staying private. It's not scalable and no one has time to janitor every product and service they use in their lives.

The only solution to it is regulation. Fortunately one rich guy in California is putting his personal money up to move the ball forward [1]:

>Mr. Mactaggart said his 2020 state ballot initiative, among other things, would create a state enforcement agency, limit targeted advertisements based on geolocation and add items covered by the “negligent data breach” section, which would allow consumers to pursue legal action in more instances of a hack.

>Most significantly, Mr. Mactaggart said, his new effort would make it harder to adjust the current law any further. The initiative includes a “purpose and intent” section that requires any amendment to the law to be in the service of protecting consumers’ rights to privacy, a legally binding clause that Mr. Mactaggart said would prevent industry from chipping away at the measure.

CCPA is a mediocre version of GDPR, but it's certainly better than the status quo.

>The lobbying against Mr. Mactaggart’s earlier initiative kept it from the ballot in 2018, and legislators instead passed the privacy law. “It was the right thing to do because there was no guarantee at the ballot box,” Mr. Mactaggart said of his agreement to drop his measure. “Now, it’s different because we have the law.”

>Mr. Mactaggart said he would do whatever it takes to pass his initiative next year, including spending millions of his own money. He bankrolled his last campaign almost entirely himself, spending more than $3 million. Mr. Mactaggart will have to collect more than 623,000 signatures for his new initiative to qualify for the ballot. A survey in October by Goodwin Simon Strategic Research of 777 registered voters in California found that most supported Mr. Mactaggart’s initiative.

If you care about privacy, help this guy get his ballot initiative over the finish line. California can serve as inspiration for other state privacy laws (and may just become the default, as it often does). Tech people love scale, and you know who has scale? Governments. You can't fix a systemic problem like lack of privacy with individual action.

[1] https://www.wsj.com/articles/activist-behind-californias-new...

Re: How to stay private when using Android

#34
post #2

Unfortunately all of these things are bandages on a sinking ship. They're technically better than nothing, but in reality they simply do not fix the problem. Even worse, it's possible (even probably) that some privacy controls simply do not do the think they say they do. You are essentially trusting a company with a rubbish track record in privacy violations to pinky swear they stop tracking you when you toggle a swi…

Exactly. Scottiestech's YouTube has some good info on how your smartphone is tracking you more than you think. Sometimes I think about building my own phone with a Raspberry Pi or use LineageOS.

Certainly if you want to build your own Pi phone don't let anyone stop you, but if you want something very much like that but prefabricated, the pinephone is a good option.

Re: How to stay private when using Android

#35
post #13

I hate iOS but good god android is awful! I bought a cheap one on new years to use as a balloon tracker (GPS boards are expensive so it seemed like a good idea.) There are absolutely no diagnostics, every setting (including critical ones) seems to move around between OS updates. They’re constantly breaking things you actually need (termux API is missing half of what’s useful and silently fails on most things now) whi…

> "android is awful!" ... "I bought a cheap one"

Nothing like condemning the entirety of a thing based on a single limited intentionally-bottom-of-the-barrel experience!

Re: How to stay private when using Android

#36
post #6

Another tactic not mentioned: I disable automatic app updates, and never update most Google apps, at all. Eventually, they fall so out of date that they break or at least suffer from reduced functionality eg. Google exchange services.

That sounds like disabling apps, but with more vulnerabilities along the way.

Re: How to stay private when using Android

#37
post #11

Starting with Android Pie, backups are encrypted with a key not known to Google[1]. Doesn't cover all of sync, but that is encouraging. [1] https://security.googleblog.com/2018/10/google-and-android-h...

This has been the case for chrome sync 10+ years now.

You need to enter a second password thought.

Re: How to stay private when using Android

#38

If you want to stay private, give up the idea of a smartphone altogether. If you (quite understandably) do not want to do that, you're pretty much just kidding yourself.

Privacy is a continuum, and you most certainly can improve over the default state while still using a smartphone.

Re: How to stay private when using Android

#39

If you want to stay private, give up the idea of a smartphone altogether. If you (quite understandably) do not want to do that, you're pretty much just kidding yourself.

It's not all or nothing privacy. If you give up Android/Google Play (and Facebook etc.) you have a much smaller exposure.

Buy an iPhone or a Jolla (or, maybe in future, PinePhone or Librem). Then use Firefox with uBO, DuckDuckGo and Fastmail. And you have a much better privacy in 2020.

Re: How to stay private when using Android

#40
post #28

Android is a nightmare (both for privacy and for the artificial limitations imposed by Google)... the only solution appears to be a pure Linux phone like this: https://store.pine64.org/?product=pinephone-braveheart-limit... I don't sign-in to my google account on my phone but I'm pretty sure that they do shadow profiles like Facebook does

Do you use a web browser?

Then 200+ companies already have shadow profiles on you.

Post reply on HN