Your Computer Isn't Yours

Re:Your Computer Isn't Yours by andysch on Friday November 13, 2020 @03:26AM (#25080267)

Speaking of Little Snitch, I suggest you look at 'iodé', an android phone with similar features built-in the OS.As far as I know this is the only true firewall on android

[ Parent | on HN ]

Re:Your Computer Isn't Yours by SubzeroCarnage on Friday November 13, 2020 @09:20AM (#25082383)

iodéOS [0] does not appear to be open source at all [1]. And only supports a handful of devices.

Shamless plug, my ROM DivestOS [2] is available and takes source seriously with most scripts being GPLv3 [3].

Furthermore it appears that they are mixing incompatible license HOSTS sources for their blocker. And according to their FAQ the are shipping devices with the bootloader left unlocked, just like /e/.

How awful.

And to your last point, NetGuard is available [4].

[0] https://iode.tech/en/iode-solution/ [1] https://gitlab.com/iode/ota [2] https://divestos.org/ [3] https://gitlab.com/divested-mobile [4] https://github.com/M66B/NetGuard

[ Parent | on HN ]

Re:Your Computer Isn't Yours by andysch on Friday November 13, 2020 @11:53AM (#25084207)

Does DivestOS come with bootloader relocked? If it is the case what devices are supported?

[ Parent | on HN ]

Re:Your Computer Isn't Yours by SubzeroCarnage on Friday November 13, 2020 @12:50PM (#25085129)

DivestOS does not come with anything as DivestOS doesn't sell devices. Selling devices with outdated vendor firmware with known security issues would be immoral.

However on select devices you can successfully relock the bootloader with DivestOS installed, as it is properly signed [0] and enables verity on supported devices.

Other alternatives that support relocking are GrapheneOS [1], CalyxOS [2], #!OS [3], and RattlesnakeOS [4]. They too do not sell devices.

[0] https://github.com/Divested-Mobile/DivestOS-Build/blob/maste... [1] https://grapheneos.org/ [2] https://calyxos.org/ [3] https://github.com/hashbang/os [4] https://github.com/dan-v/rattlesnakeos-stack

[ Parent | on HN ]

Re:Your Computer Isn't Yours by aembleton on Friday November 13, 2020 @05:41AM (#25080986)

Another option is to set the DNS of your Android phone to use one provided by https://nextdns.io/

Then you can allow or deny domains or apply blocklists.

[ Parent | on HN ]