iPhone Privacy & Security

Of all mobile phone software, iOS is the worst in terms of privacy and security. If you have to use an iPhone there are things that can be done to improve it.

One thing added in the more recent iOS releases is the "Journaling Suggestions" which, as the setting page tells you, is to "Allow others to detect you are nearby to help prioritize their suggestions." Go to Settings > Privacy & Security > Journaling Suggestions, and turn it off.

And now for a few other privacy fixes:

• Go to Settings > Privacy & Security > Tracking, and turn it off.
• Go to Settings > Privacy & Security > Research Sensors & Usage Data, and turn it off.
• Go to Settings > Privacy & Security > Location Services. Turn off any that don't require access to you location.
• Go to Settings > Privacy & Security > Apple Advertising, and turn it off.
• Go to Settings > Privacy & Security > Location Services > System Services > Significant Locations, and turn it off.
• Go to Settings > Privacy & Security > Analytics & Improvements, and turn off the top switch.
• Go to Settings > Privacy & Security > Microphone. Turn off any you don't need. Keep on for apps like Zoom that do need access to your microphone.
• Go to Settings > Privacy & Security > Photos. Turn off any you don't need. Keep on for apps that do need access to your photos.
• Go to Settings > Privacy & Security > Contacts. Turn off any you don't need access to your contacts.

Check this video for a rundown on privacy settings. 

Naomi Brockwell has a good video on How to Stop Phone Searches - so that you can keep important information private whenever you are forced to open your phone.

 

Secure Browsing

Browsing online or even just connecting to a website can infect your computer. To check a URL to see if it is potentially dangerous go to https://www.virustotal.com and past the URL.

Another approach is to use https://urlvoid.com which allows you to view a website without actually visiting it with your browser.

To add an additional layer of protection to your home network system, a hardware solution adds substantial security. Browsing online and even just connecting to a website with its domain name opens you up to DNS snooping. The use of Unbound DNS resolver and Quad9 DNS recursive service can help maintain anonymity. Naomi Brockwell has a video explaining the process. And a video of a general discussion on securing your home network.

The overall process is to use the existing modem from your ISP and connect an external modem and WiFi unit. The existing modem is then set to bridge mode so that all data passes through to the external modem. (Bridge mode turns off that modem's WiFi.). The new modem will allow full control over DNS resolving, and an additional WiFi unit will provide separate and secure wireless connectivity.

Add an external modem like Protectli Vault FW4B (with Coreboot pre-installed. Default address is 192.168.1.1) connected via an ethernet cable. Install and run pfSense software on the Protectli Vault (Use BelenaEtcher to install pfSense onto a USB stick then use to install pfSense onto the Protectli Vault). Connect a separate WiFi unit to the Protectli Vault via an ethernet cable. Change your ISP's modem to bridge mode. 

pfSense download parameters

 

Protectli Vault FW4B

---

Bridging your existing modem allows you to use a third-party router and disable the modem’s Wi-Fi capability. Follow these steps to bridge the Hitron modem:

1. Open a web browser and visit 192.168.0.1
2. Sign in using the following credentials:
   • Username: Cusadmin
   • Password: (your password)
3. Select Basic.
4. Select the Gateway Function tab.
5. Select Residential Gateway Function.
6. Select Disable.
7. To finish, select OK when prompted.

 

 

 

Click to enlarge

---

WiFi

You will use a separate wifi unit. If it is a WiFi only unit then nothing needs to be done other than connecting to the Protectli vault (either directly or through a network switch). If it is a combination modem and wifi, it needs to be set to "AP mode." This means it is now only a wifi unit.

A Private Phone

Both Android and iPhones collect a lot of data from the user and send it to companies like Google who sell this data around the world.

One solution is to remove Google apps and others that compromise your phone.

The best way to achieve this is to get a new phone and install the GrapheneOS operating system which is very private and secure. With it you can use alternative apps that can help keep your information private. (Recommended by Edward Snowden via Naomi Brockwell.) Currently GrapheneOS only works on Google's Pixel phones. Watch Naomi Brockwell's video on a complete setup of a Pixel phone with Graphene.

In another video by Naomi Brockwell she discusses another OS for privacy and that is CalyxOS which runs on Pixel and some Motorola and Fairphone phones. You download the OS and install it. You can also buy a Pixel phone with CalyxOS pre-installed from the Calyx Institute.

Other steps can be taken to increase the privacy of your existing phone:

Faraday Cases

A way to secure your phone from tracking is with a Faraday cage. SLNT make them in multiple sizes, from small ones for phones, tablets and laptops up to entire backpacks.

Privacy Screen

Naomi Brockwell recommends a "privacy screen" on your phone, and on a tablet or laptop if it is likely to be used in a public location. These prevent viewing the display from other than a direct view angle. This is achieved by incorporating either a polarized filter or a micro-screen feature. They are overlays like screen protectors placed on the display. They are made of either plastic or glass and are readily available. For phones that have a fingerprint reader on the screen will have problems reading the fingerprint. For these it is best to get the plastic version and cut a small hole in it at the location of the fingerprint sensor.

Typical viewing angle reduction

Malicious emails and files

If you are suspicious of an email or download link there are a few ways to check it out (from Liron Segev).

A file can be checked by copying the link to the file (or a URL) and pasting it at VirusTotal.com. You will get an analysis of the file or URL and report of any malicious content. This is particularly useful to check a program before installing it on your computer. Just upload the EXE file.

If you think your personal information has been widely spread on the internet try DeleteMe which is a service that can help remove some of this information.

Secure Access

Logging into websites and apps and using credit cards online can cause issues in accessing these sites and programs.

For travellers 2FA can be an issue especially with sites and apps that use SMS to authenticate a device, because you may no longer have access to SMS messages. One solution is the 2FA key such as Yubico. It is particularly set up to use with social media sites and Google.

Yubikeys in various formats

I have had problems using credit cards overseas that require 2FA. Sometimes it is the popup that comes when making a payment by credit card. The popup asks for additional information like birth date, but I've had this fail when the popup does not return to the homepage of the service or product you are purchasing.

Coding

Some coding, especially for HTML as used in this blog.

Increase line spacing in bullet or number series:
<ul style="margin-bottom: 10px;">   or   <ol style="margin-bottom: 10px;">

Align text left, etc.:  style="text-align: left;"

Clear italics when forced by CSS:  style="font-style: normal;"

HTML Codes for Foreign Languages - see page here.

---

Code for adding a currency widget to a blogger page

In Layout go to Add a Gadget and select "HTML/Javascript". Label it "Currency" and past the following in Content:

<!-- EXCHANGERATES.ORG.UK EXCHANGE RATE CONVERTER START -->
<script type="text/javascript">   
var dcf = 'EUR';
var dct = 'CAD';
var mc = '2D6AB4';
var mbg = 'FFFFFF';
var f = 'arial';
var fs = '11';
var fc = '000000';
var tf = 'arial';
var ts = '14';
var tc = 'FFFFFF';
var tz = 'userset';

</script>
<script type="text/javascript" src="https://www.currency.me.uk/remote/ER-ERC-1.php"></script><br />
<small>Source: <a rel="nofollow" href="//www.exchangerates.org.uk" target="_new">ExchangeRates.org.uk</a></small>
<!-- EXCHANGERATES.ORG.UK  EXCHANGE RATE CONVERTER END -->

At "var dcf" and "var dct" change to the desired currency: CAD, CHF, GBP, EUR, MAD, JPY, TRY. See IBAN website for a list of all currency codes.

---

Code for adding a weather widget to a blogger page

To add a weather widget to a blogger page, get it from Meteored. Available in various sizes from a postage stamp sized daily high and low temp to a detailed 4-day forecast.

 

Small version

 

Complete version

---

Code for adding a clock widget, either analog or digital, to a blogger page

With code from 24timezones.com you can add a clock to a blog to show the current time for cities around the world. For example the code below is for a small digital clock for the time in Vienna.

<div class="cleanslate w24tz-current-time w24tz-small" style="display: inline-block !important; visibility: hidden !important; min-width:200px !important; min-height:100px !important;"><p><a href="//24timezones.com/Vienna/time" style="text-decoration: none" class="clock24" id="tz24-1715348248-c1259-eyJob3VydHlwZSI6MTIsInNob3dkYXRlIjoiMCIsInNob3dzZWNvbmRzIjoiMCIsImNvbnRhaW5lcl9pZCI6ImNsb2NrX2Jsb2NrX2NiNjYzZTIzMTg5NDg4MSIsInR5cGUiOiJkYiIsImxhbmciOiJlbiJ9" title="Vienna local time" target="_blank" rel="nofollow">Vienna</a></p><div id="clock_block_cb663e231894881"></div></div>
<script type="text/javascript" src="//w.24timezones.com/l.js" async></script>

The text in the weblink (a href) can be changed. For example, here "Vienna" could be changed to "Time in Vienna."

Emergency Items

From Liron Segev's Youtube video, practical emergency items:

• Rechargeable Light bulbs: Rechargeable Light Bulb
• Water Purifier: Water Purifier
• Portable Stove: Portable Stove
• Solar Powered Camping Lights: Camp Light
• Solar Power Station: Bluetti Power Unit
• Solar Panel: Bluettis Solar Panel
• Solar Power Station: EcoFlow Power Unit
• Solar Power Station: Anker SOLIX C500 DC Power Unit

Bluetti Power Unit

Bluetti Solar Panel

EcoFlow Power Unit

Anker SOLIX C500 DC

Rechargeable
Light Bulb

Gas Stove

Water Filter

Camp Light

Downloading media

Facebook video download

Youtube or Youtube video download

Twitter video download

Rumble video download

Tubi video download

How to download videos using VLC media player.

1. Copy the download link in the browser window.
2. Open VLC and select "Open Network Stream..."
3. Paste copied address into the window and press play.
4. Click on Tools > Codec Information and copy the address that appears in the bottom window.
5. Paste that address into a new browser page and the video should play.
6. Right-click on the video and click "Save video as..."