[Privacy Discussion] DeGoogle & Debloat - Root & adb uninstall

[parkaymang]

Originally Posted by mergen3107

AFWall+ Settings: Experimental
1) Startup delay (unchecked)
2) Startup directory path for script: /data/adb/post-fs-data.d/
3) Fix startup leak (checked)

This setup makes sure AFWall+ kicks in first, then lets any Wi-Fi connection actually happen after reboot. So you can leave Wi-Fi on before rebooting.

Ok the /data/adb/post-fs-data.d part did it! Thank you very much.

Two questions for you:
1. Do you know any apps to montor/log connections and block based on IP AND DNS that is not VPN based?

2. I noticed some browsers (like fulguris) seem to lose their ability to download when AFWall is on, even with that browser whitelisted. Seems only the ones that rely solely android system download manager (1dm browser, has it's own, and has no problem downloading when whiltelisted). But even whitelisting UID 10044 (download manager etc) doesn't help. Any thoughts on how to solve this?

Thanks again!

[mergen3107]

AFWall+ has the logging capability. Enable logs, then go try your downloads. It will tell which IPs/hosts are trying to connect. Then you decide whether to trust them and enable them.

UID 1000 is tricky, it encapsulates EVERYTHING android-system-related, including those apps that Onyx probably modified.

Download manager has a different UID.
I was using Yandex Browser with download manager on.

I mean, without Download Manager even KOReader cannot update itself.

[nomoi]

Originally Posted by denisuu

Since I rooted the device I have AFwall+ running and blocked almost all traffic. I might enable some of the Onyx apps again and just have them blocked to bring back some functionality.

I tried to autostart it, but each time the device is powered on (i.e. not from sleep mode) it seems AFwall has to be started again. Does autostart work in your setup and if so how did you accomplish it?

[nomoi]

Originally Posted by Renate

I've posted this a zillion times already. It's a magnetic reed switch I put in so that I can always get to EDL without opening the case.

Wow, that's a pretty neat idea!

[Renate]

Originally Posted by nomoi

Wow, that's a pretty neat idea!

The Poke5 (unlike the Poke3) does respond to an EDL cable.
It's pretty much hit or miss whether a device has the USB D+ checking built in to xbl.
Still, EDL cables will not work if you trashed xbl, although test points will.

[sunkashi]

For those, who prefer to not root their device I recommend combination of Rething DNS app for firewall and NextDNS as private DNS. Rething DNS app supports even Wireguard.

You have control over traffic and block whatever you want without rooting device.

[Anghirrim]

Interesting topic, thanks!

I just received a Boox Page to play a bit with.... and I was horrified on how much it calls home.

Coming from de-Googled and privacy friendly Android versions (CalyxOS)....it's astonishing.

So far, I'll only go with Blokada first, block little by little the addresses Boox calls home.

"pm disable" did not seem to work that much for example, the voice recorder could still be launched after a pm disable (which went successfully). Only the pm uninstall allowed me to really get rid of it.