Privacy

48042 readers

663 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago

MODERATORS

Connections made by an idle, rooted Samsung smartphone within the first five minutes after reboot (programming.dev)

submitted 1 day ago by emotional_soup_88@programming.dev to c/privacy@lemmy.ml

6 comments fedilink hide all child comments

I'm using HaGeZi's Ultimate DNS Blocklist with AdAway as a base and am now trying to add my own "tweaks", according to what connections my phone makes.

I set PCAPdroid to automatically start capturing after reboot. Before reboot, I kill-ed as many apps and processes as possible without crashing Android and then cleared system memory. I then rebooted and left the phone untouched for five minutes. The following is a heavily edited excerpt of the resulting pcap file. I removed the source IPs, ports, package sizes and protocols, so that the excerpt only contains the destination hosts and the "issuing" apps/packages.

**Google Play Services**
playatoms-pa.googleapis.com
digitalassetlinks.googleapis.com
www.googleapis.com
mtalk.google.com
android.googleapis.com

**Google Play Store**
play-fe.googleapis.com
play.googleapis.com

**IronFox**
firefox.settings.services.mozilla.com
firefox-settings-attachments.cdn.mozilla.net
content-signature-2.cdn.mozilla.net

**Android**
es11.samsung-sm-ds.com

Here are four screenshots of the PCAPdroid capture, in which you additionally can see the protocols, destination ports, captured times, packet sizes and connection states. Let me know if the Buzzheavier link is broken.

Do you have any insights regarding these hosts? What they do, whether they are necessary for an Android system that still runs on the proprietary Google libraries and Google Play Services or whether they can be blocked? I am already blocking the Play Store with a firewall, so the hosts associated with it might not even be getting through. Unfortunately, my firewall doesn't come with granular enough control to allow blocking of individual hosts, which I guess I could do with AdAway instead and see what happens. Anyway, lend me your wisdom! :)

you are viewing a single comment's thread
view the rest of the comments

[–] emotional_soup_88@programming.dev 5 points 1 day ago (2 children)

Thank you very much for all the detailed advice! :D

I didn't mention it in the OP, but I am not logged in to either a Google or a Samsung account. The only apps I use the Play Store for is USB Audio Player and an electronic ID app that a lot of government related everyday chores require... If and when my threat model requires me to silo it off, I'll get Pixel and bump up my privacy. 😊

I know this isn't a degoogle community, but just for reference, these are my apps, which I manage with Obtainium:

[–] voxel@feddit.uk 4 points 1 day ago* (last edited 1 day ago) (1 children)

I would recommend replacing Openboard with Heliboard, since Openboard isn't actively maintained, while Heliboard is a fork of it and in active development.

https://github.com/HeliBorg/HeliBoard

[–] emotional_soup_88@programming.dev 2 points 1 day ago

Sweet! I'll check it out tonight! :D <3

[–] dreamy@quokk.au 2 points 1 day ago* (last edited 1 hour ago)

You can install Aurora Store and use that instead of Play Store. Though be aware that disabling/removing Play Store may cause issues with some apps that require Google Play Services for some reason and those apps don't have to be completely proprietary for this requirement (Stoat's mobile app doesn't launch at all without Play Store for example).

I would also recommend disabling background connections and running in the background for proprietary apps you install. I'm not sure how you can do this on Samsung but this is how I do it on Xiaomi:
Running in the background: App info -> Power -> Select "Restrict background apps"
Background connections: App info -> Network access -> Disable "Background data"