Programs

Desktop

/pix/tech/tmux.png
ncmpcpp, lf, & newsboat in tmux.

See my extended programs list for more.

Check out Luke Smith’s dotfiles. See my fork of it for Termux.

tmux & fzf can be used as replacements of dwm & dmenu on tty.

ArchWiki has always been a reliable resource, as well as InstallGentoo Wiki (mirror).

Phone

Apps

/pix/tech/homescreen.png
My homescreen; mpv, MuPDF, &c. hidden.

Fossify has other apps for phone calling, texting, contacts, alarm clock, &c. I use Lawnchair for a launcher, but its purely decorative.

If you must install a proprietary app, quarantine it with Shelter.

I use old Google Pixel models, flashing LineageOS with Magisk. They’re easy to flash ROMs on & list for cheap on eBay—around $50. Pixel 1 was the last model to have an audio jack, but they seem rare. Personally, I use a Pixel 2. Use a good case & screen protector. Wrapping the phone in tinfoil—at least three layers—blocks most radio signals.

New laptops have the Intel’s Management Engine backdoor. On mobile phones, the SIM card seems to be an analogous backdoor, so avoid using one. Use a burner instead. But Pixels isolate the baseband by which the SIM accesses the rest of the hardware, though I’m unsure what model began to do so. Keep it set on airplane mode.

General advice: Block mic & camera when not being used. Do the same for mobile data, WiFi, blue-tooth, GPS &c. Disable internet GPS, USB debugging, &c. Set a lock-screen password of 8-12 letters/numbers. Don’t use a pattern lock. Disable all non-4G/LGE connections (2G, 3G, & 5G): dial *#*#4636#*#*, then select 4G/LGE only for network.

To disable the rotation pop-up, run via ADB or as root:

settings put secure show_rotation_suggestions 0

Arch Linux’s pacman is installable in Termux. Install Termux:API so programs can use the clipboard & open files in apps. Follow this guide to stop Android from killing Termux.

Although, if you can’t—or plain won’t—use the command line, then these may be useful:

To make backups, in Termux run:

tar -cp /path/to/files | gpg -o output.tar.gpg -r your@email -e

How to make a GPG key.

Use Magisk to de-bloat system apps by making a module to overlay a blank file or directory over the system app’s APK. See my script for creating one. If the device boot-loops, go into safe mode by pressing volume-down while booting (Pixels only it seems), disables all modules. Universal Android Debloater has information on what the different system apps are.

To see where an app is located, run:

cmd package path app

De-Bloater may be useful if you insist on using an app rather than the command line.

Network

Disable captive portal pings to Google by running via ADB or as root:

settings put global captive_portal_mode 0
settings put global captive_portal_use_https 0
settings put global captive_portal_http_url about:blank
settings put global captive_portal_https_url about:blank
settings put global captive_portal_fallback_url about:blank
settings put global captive_portal_other_fallback_urls about:blank

For NTP:

settings put global ntp_server pool.ntp.org # or `about:blank` to disable

Remember to configure apps to use Tor as proxy: socks5://localhost:9050

F-Droid has Tor mirrors, make sure to use them: Settings → Proxy → ☑ Use Tor

Termux by default uses Google DNS in its /etc/resolv.conf. Make sure to change it to blank if using Tor, or to Mullvad.

If all your internet traffic is going through Tor, then the DNS should be resolved at the exit node. This includes apps connecting through Orbot as a VPN. So don’t set a system private DNS unless you’re not using Tor. That said, if you do, use Mullvad (🧅 Tor).

For per-process network monitoring, use nethogs on the terminal (requires root). PCAPdroid is an app which does the same as a VPN without root.

Related
Linux · Android · Technology