My First De-googling - Next Steps
I have de-googled my Pixel Pro 7 (refurbished) with GraphenOS. 🥳
One question before I declare this my first victory in the police-state-data wars. Is there anything else I should disable on the hardware side to make sure Google can't spy anymore? Microphone, drivers, etc. ?
If so, what's the best way?
Dont use (only) fingerprint to unlock, AS they can force you to put your finger, they can't force you to remember a password.
If possible have only Foss apps on your main profile (fdroid, neo store etc.) And one/multiple separate profile for closed source apps if you need them.
Check the tools under "security and privacy" in your pull down menu (like hardened memory allocation)
Inform yourself on what a secure system helps you with, and what not. (For example they can still hijack cellphone towers (stingray attack) and act accordingly
Also, GrapheneOS comes with a duress pin that will wipe your phone when entered leaving a clean install.
F-Droid is great for FOSS apps
Congratulations! :D
Not de-Google advice perse, but I recommend using a hardware key for two factor authentication: https://www.yubico.com/
One time passwords that are received through SMS and email are interceptable. Not so much with hardware keys. Yubico also makes an authenticator app whose source code is open: https://github.com/Yubico/yubioath-flutter
One idea, though I don't know the tools for that, is to configure at system level blocks against Google's domains and DNS's.
old joke, might be related... the space agency sends three pigs and a bro to space. they travel along their route and after a while control radios in:
control: pig 1, enable telemetry
pig 1: oink
control: pig 2, check perimeter
pig 2: oink
control: pig 3, reverse thrusters 10%
pig 3: oink
control: bro!
bro: sup
control: feed the pigs, don't touch nothin'
😂
Did you flash gapps / Google services? If so Google will still have full control over your phone.
I don't think so. I followed the instructions at GraphenOS using the web installer. I bought the phone refurbished with OEM unlocked.
Ok perfect. You can still download+update apps from Play store using the Aurora app. Some apps won't work without google services - just replace them with another app :) Btw. Waze works without google services and has the same live traffic data as Maps - it's also by Google but requires no google services and no login
No, just enable/disable permissions on a per app basis. Unless the app truly needs mic, camera, contacts, network, etc to function: don't allow them. Ideally, skip Play Store and Google Play Services altogether and only get open source apps from F-Droid. Otherwise, keep Google segregated to its own profile and only install apps that need Google Play Services there. Good luck and way to go De-Googling!