News for hackers. Stuff that matters.

A comment on CalyxOS – De-Googled Android Alternative. Parent comment

Re:CalyxOS – De-Googled Android Alternative by GekkePrutser on Friday August 06, 2021 @03:19PM (#28091664)
I agree, this is my stance as well,. Though I don't think Calyx tries to limit tracking on installed apps. I would recommend using something like TrackerControl to limit those.
[ Parent | on HN ]
Re:CalyxOS – De-Googled Android Alternative by ignoramous on Friday August 06, 2021 @03:36PM (#28091816)
TrackerControl doesn't encrypt your DNS queries, though. You'd need to proxy DNS requests to another app like http://github.com/ch4t4r/Nebulo which supports DoT / DoH3 / DoH for that.

(disclosure: I co-develop a FOSS TrackerControl alternative)

[ Parent | on HN ]
Re:CalyxOS – De-Googled Android Alternative by privacyking on Friday August 06, 2021 @11:42PM (#28095489)
What is your trackercontrol alternative called? What makes it better or worse?
[ Parent | on HN ]
Re:CalyxOS – De-Googled Android Alternative by ignoramous on Saturday August 07, 2021 @01:06AM (#28095875)
RethinkDNS + Firewall: https://github.com/celzero/rethink-app

TrackerControl has a tad better UX; is built on top of the super-stable NetGuard and hence inherits its flaws and merits.

For instance, it does not support DoH/DoT/DNSCrypt.

It also leaks DNS connections over TCP (this happens when a DNS question or answer payload is too big to fit in a single UDP packet). In fact, all userspace DNS clients on Android I have taken a look at, leak DNS queries over TCP.

TrackerControl does not trap all packets over port 53, which RethinkDNS does by default.

TrackerControl isn't geared towards bypassing censorship. RethinkDNS can bypass stateless firewalls employing a similar trick to GreenTunnel, and we plan to implement a couple more such mitigations.

Unimplemented but soon, RethinkDNS would let users block connections if apps don't resolve DNS with a resolver of their choosing.

RethinkDNS has open-sourced both its client app and a pi-hole like stub resolver: https://github.com/serverless-dns/serverless-dns

There's three of us working on RethinkDNS full-time, so it is likely to see feature development at a faster clip than TrackerControl and NetGuard (the latter's been put under maintanence mode by its original developer).

[ Parent | on HN ]
Re:CalyxOS – De-Googled Android Alternative by themsay on Saturday August 07, 2021 @08:52AM (#28098232)
Super solid firewall, since I found it never look back.
[ Parent | on HN ]