Black phone method By Padrino Oraèmorto ________________________________________ “The Blackphone is a smartphone built to ensure privacy,” Black phone necessities: > Google Pixel (4a, 4a 5G or 5) + GrapheneOS + F-Droid + BRIAR + Kuroba + Bromite (with MetaGer, Gibiru, YaCy or Searx). Black phone setup: The basic needs: afwall and appops x. Firewall is a must ◦ do a factory reset first ◦ remove sim ◦ turn off wifi ◦ put bromite/afwall/appopsx/busybox into a usb ◦ use usb otg and sideload them all ◦ enable afwall, create rules that only allow bromite/etc. ◦ enable afwall "prevent startup leak" and set all other options to use busybox. ◦ the only busybox available options are meefik or busybox-ndk/magisk Now appops x ◦ doesn't need root, if you have PC use adb ◦ this prevents apps from clipboardlogging ◦ this is required for android 4.0 up to 11.0. clipboardlogging is still on the run for any app ◦ although you'd need to trigger it first as it is sometimes hidden by sneaky app developers ◦ open malicious app, trigger clipboard by copying from their text box ◦ open appops x again ◦ look for the malicious app again ◦ tick off "read clipboard" permission And you can use along with it appops rikka + shizuku (no root required), turn on clipboard notification, device usage so you'll know which apps were trying to abuse camera, recorder, clipboardlogging. (appops rikka had a bug though and won't show "read clipboard" option that's why i prefer appops x) Next will be debloating and others [!] caution needed. use debloater adb or disabler, this is optional ◦ get other keyboard that's available on f-droid ◦ disable your native keyboard dictionary, spell checker, anything you can find ◦ disable tts, face unlock, dictionaries, email, native browser, native music player ◦ install open source tts, email, via browser, retro player (github) ◦ disable "sync" in settings>accounts or in the gallery app if you're lucky ◦ remove or disable gms and all of google apps, perform a dalvik cache wipe afterwards ◦ >settings > location > turn off wifi/bluetooth scanning, turn off gps, turn off private dns ◦ go to the "Phone dialer app" > threedots/settings > phone number lookup > turn off forward lookup (defaults to google even in aosp lineage builds) > turm off reverse lookup and people lookup. That one's a surprise right? ◦ install opencontacts/qksms ◦ disable messaging and phone dialer and test if opencontacts/qksms works fine by calling and msging yourself That's as far as I can remember. Feel free to add anything I've missed. A different guy, but its for debloating and what not. Another thing, about apps: The protocol I mentioned, xmpp with OMEMO and OTR, is really good for securely talking to people. Leaving the botnet is a pain in the ass to a lot of people so they don't bother. Finally if you GENUINELY want to call people, download something like textnow, there’s better options I just can’t be bothered. -𝓅