Security vs. Privacy vs. Anonymity Survival Guide
I get this question all the time, but it’s a good question. Companies muddy the waters with these three and some companies lie about them. You have to determine what your threat model is (ads, hackers, your internet provider, governments, etc).
Let’s get into it.
SECURITY
Security doesn’t mean you have privacy. Security means keeping the threat out of your stuff, but may require you give up some privacy. For example, when you put a Ring door bell on your door, you have security. But you give out information/data to the Ring company (Amazon), which may use that info as they wish (lack of privacy).
There is no such thing as the cloud.
Just other people's computers you put your stuff on.
Side note: Currently I’m only doing Apple and Android, but will add others in the future as I get questions on them.
• If most of your family and friends use iOS devices, then Apple is a good security choice.
• If most of your family and friends don’t use iOS devices, then don’t waste your money on Apple. I would suggest an Android (Pixel).
• Good security choice for a company, as long as all employees are using iOS.
• SMS is end-to-end encrypted (between iOS only)
• Has new bug bounty program to patch security issues.
• Sends out security updates more frequently (finally)
• Security downside, iOS is a closed source OS. Which means any malware made for iOS will effect every iOS device. But so far, Apple is doing better with security updates.
• Safari browser has been improving on security (still recommend Brave or Firefox w/ Ublock Origin).
https://www.amazon.com/PortaPow-3rd-Data-Blocker-Pack/
https://apps.apple.com/us/app/guardian-firewall-vpn/id1363796315
• Get a good antivirus, like Malwatebtyes (not Norton).
• Good security, no matter if others you communicate with use other devices.
• Google Messenger SMS is end-to-end encrypted
• Emails are encrypted while on their server.
• Strong bug bounty program to patch security issues
• Sends out updates frequently (now has less malware available than iOS)
• Android is an open source OS, which means anyone can look at the code to improve it (iOS is closed source). Android malware has to be written to infect a specific Android OS version (Samsung, Pixel, etc). Malware written for Samsung android won't work on a Pixel device.
• A little more secure than iOS. Because of different modifications of Android and open source community.
Also, there's more malware for iOS on the black market than Android.
• Chrome browser is very secure with a new password scanning feature to find if your passwords need to change.
(still recommend Brave or Firefox w/ Ublock Origin)
• using Google’s safebrowsing is highly effective at preventing users from accessing a phishing site.
https://dnspropagation.net/google-dns/
https://play.google.com/store/apps/details?id=eu.faircode.netguard&hl=en_US&gl=US
https://www.amazon.com/PortaPow-3rd-Data-Blocker-Pack/
• Get a good antivirus, like Malwatebtyes (not Norton).
PRIVACY
Privacy has the maximum security to get privacy. During a normal web sessions, there are anywhere from 2,000 to 3,000 trackers following you online.
Using things like a no logging VPN (ProtonVpn) to stop others looking at your connection, only using HTTPS websites (encrypted and has a lock logo at the start of the URL), encrypted DNS to block trackers/ads/loggers (NextDNS), privacy apps, and privacy open source apps will improve your digital privacy.
This can be good if you're torrenting or using a streaming service in another country.
Apple lies about their iOS device privacy.
(DO NOT USE APPLE FOR PRIVACY)
Apple collects a lot about you, regardless of what they say. On top of that apps installed on iOS can still collect your data (Facebook, Tiktok, etc).
They are not your friend!
https://www.apple.com/legal/privacy/en-ww/
This is what they collect:
Account info, device info, contacts, payment info, transactions, usage data, health info, fitness info, health info, government ID, other info you provide, and info about you from other apps you installed.
https://developer.apple.com/app-store/app-privacy-details/
https://www.apple.com/legal/privacy/data/
https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html
https://www.reuters.com/article/us-facebook-apple-exclusive/exclusive-facebook-says-apple-rejected-its-attempt-to-tell-users-about-app-store-fees-idUSKBN25O042?il=0
https://www.mysk.blog/2021/10/24/accelerometer-ios/
This is what they do with your data they collect:
Service improvement (BS), process transactions, personal data for personalization, comply with law. They also comply with the Chinese government’s unlimited access to their servers in China (Which may have YOUR DATA). On top of that, they comply with NSA requests for drag net surveillance.
This is who they share it with:
Service Providers, Partners, Developers, Publishers, Others (meaning they'll do what they want with your data).
The only thing that makes Apple different. Is they lie to they’re customers.
DON’T BE A SHEEP, FOLLOWING WHAT YOU THINK WILL MAKE YOU LOOK COOL, WEALTHY, OR SPECIAL
THINK FOR YOURSELF
DON'T LOOK LIKE OR BE A FOOL TO APPLE
https://www.boredhacker.biz/2020/03/tutorial-privacy-survival-guide.html?m=1
Don’t use anything Google for privacy. They don’t lie about everything like Apple does, because they don’t mention a lot of what they do.
Which is, they are a major data broker that collects everything you have and do. They’ll buy companies to improve on their ability to collect your data (YouTube).
But the Android OS can easily be modified to make it more private (more than Apple).
https://transparencyreport.google.com/user-data/overview?hl=en&user_data_produced=authority:US;series:compliance&lu=user_data_produced
https://mega.nz/file/aWAhEaQD#wORQkGVKQR7LGE9yn8l-1XWQ3pCmx-URsR7-cJ7CMMA
Now, they’ve also went a long ways on improving privacy on android OS.
Removing permissions and Google apps will help you become more private. In fact, now you don’t even need a Google account to setup or keep on an Android device. Which is the most private you can get on a stock Android OS.
Something that stock android that's great for privacy, is it allows to randomize your device's MAC address. MAC address is logged on a router that IDs your device on a network. Apple doesn't have this.
Using privacy apps, encrypted DNS, VPN on WiFi (Android lets you force all data into the VPN. Apple ain’t got that), VPN on mobile (if you're worried about fake cell towers or 5G devices signal repeater), using a permissions manager to auto remove app permissions, etc. Will help you become more private than any Apple device.
The MOST possible privacy you can get is by getting a Google Pixel and flashing GrapheneOS.
https://grapheneos.org/faq#supported-devices
https://www.boredhacker.biz/2020/03/tutorial-privacy-survival-guide.html?m=1
ANONYMITY
Anonymity is the maximum of security and privacy. But being anonymous online isn’t a user friendly task and I actually don’t recommend being anonymous all the time (I recommend being private all the time), mainly because humans are prone to mistakes.
Being anonymous online hides your metadata (device info, browser info, etc), your connection, etc. So when you login to an account like Facebook.com, it'll make all your anonymous session fail.
But being anonymous online isn’t impossible.
• The biggest thing is using the Tor Browser, they are the gold standard for anonymity. If you're in a country that blocks Tor, you can use the bridge option to get to the Tor network.
Some VPNs (ProtonVPN) can route you from their VPN server to Tor, which is the same as the bridge. The additional feature is that the exit node will only see the VPN server IP (not your device IP).
Here's a helpful video from the Tor project.
• They have apps for both Apple and Android. Note: This isn't the most anonymous way to be online.
• Android is able to be more anonymous than Apple by using VMOS and Tor. VMOS is a VM for Android. This will hide your device info and data. The app can be found here: https://www.vmos.com/
• The best anonymity is by using TailsOS on a PC.
https://www.boredhacker.biz/2020/03/tutorial-privacy-survival-guide.html?m=1
