Hi fellas, I know this is an age-old question but there's seems to be scant information available on this. Let's share our knowledge to figure this out. This is the list I've come across during my short research:
Adblock Plus: Blocks only on Wi-Fi
Adguard: Removed from Play Store, anybody knows how it is?
Adaway: The best, but requires root.
These are the only mentionable ones I found. Do you guys know of anything better? Which is the best way to go for non-rooted device? Thanks ya'll.
i think you need to enable ad-blocking on your browser since you are not rooted cause you cannot apply system-wide blocking. some of the options are:
-AdBlock browser
-any browser that supports extensions like Firefox and then install adblock extension
-also these ones have adblock feature built inside: UCbrowser, Javelin, Dolphin, Maxthon, Naked Browser
good luck
Adguard Premium
I just installed Adguard app and it has a premium option that it claims will filter adds for applications as well.
Has anyone tried Adguard premium?
woomera said:
i think you need to enable ad-blocking on your browser since you are not rooted cause you cannot apply system-wide blocking. some of the options are:
-AdBlock browser
-any browser that supports extensions like Firefox and then install adblock extension
-also these ones have adblock feature built inside: UCbrowser, Javelin, Dolphin, Maxthon, Naked Browser
good luck
Click to expand...
Click to collapse
I am surprised that this is the collective knowledge on this topic. ....?
Id like to know what options are available for non root devices.
.
the pros and chins of these also.
I use adblock plus at the mo but it's stopped working well from about s month ago.
Mmbbmmm/b
Sent from my HTC One using XDA Free mobile app
S10 stock cleanup actions
yet another phone this year V30->Note9->6T->Mi9->S10, time to update guides. Goal is to have a clean phone after each update, and since reboot doesn't happen often, but defly happens during upgrade, i'm putting cleanup commands into a [boot] script.
Boot script
What it does:
* choose 8 categories of app removal, in the beginning of the file
* use more switch to disable some questionable/helpful stuff
* disable up to 100 apps (preferred method, ppl can reenable)
* remove usage access for google (this is the part not tested and disabling device/trust admins can not be scripted)
Tested ok on recent stock. Not much to put in script unlike on MIUI which used shady practices. Samsung not hiding processes, not persisting apps (except Payment triggers some soft brick - interesting), and not sending tcpdumps to china. Also not having privacy policy in every basic app. It's on you to accept Fourthsquare, Google and then Bixby 3rd party stuff. Well I initially sniffed network and saw some 3rd party sleezy connection to social networking IPs (nonstop monitoring by facebook etc), but that is obvious and well known, and is swiftly disabled by the script. Will see later if there's something that could be tweaked further.
Download: file attached
Installation:
- run in su terminal or add to any startup script
Which plugins to use for S10
Similarly to Mi9, collecting what i think is useful to keep on stock rooted firmware.
Magisk plugins:
* Riru - Core, Riru - Ed Exposed -- brings XPosed to Pie. Need also installer. Now i use old version 0.3 as i feel new SandHook/Yahfa bipolar releases make phone sluggish. This case is to be monitored.
* Bixby button remapper -- so in Samsung case, extra key is not released after Bixby debloat, so we first slap this plugin into phone and then customize via Xposed Edge
* libsecure_storage companion -- helps us keep the bluetooth pairings
* (optional) Universal GMS Doze (disappeared from repository?) or Sysconfig patches -- cools down GMS services. Questionable impact but i use it.
* (optional) YouTube Vanced black themed -- brings usable YouTube experience
* (impossible) QuickSwitch -- we can't have Quickstep+Hyperion (the most capable Quickstep launcher) as there's no pill but Samsong custom recents
* (untested) - FDE, LKT - in a short time, i wasn't optimizing battery. It's good out of the box(!).
XPosed plugins:
* Xposed Edge Pro - a must have and best plugin. Here, by the way, we will modify Bixby button once again, including double press and long press. Because why not
* XPrivacy - Screw the big brother. Must have. Disabling analytics, tracking, telephony, network, identification for all visible apps and all Google and Samsung apps with some exceptions.
* Firefds kit - so this is our main customization app, and enables the very important call recording, which is beutifully integrated into call history. Bye bye external apps. Also we will remove Restart action and replace with Recovery action and rename it to Restart
* afWall - Problems with this firewall and some VPN clients. Should by disabled in Xposed but we want to have this tool
* (optional) Exi for Swiftkey - you can make Swiftkey great again, GBoard is still the best, Samsung keyboard is very good, but too tall and leaves gap in fullscreen mode
Other stuff
- booting to non-root ok, impact could be lost pairings. So let's have it as a useful safe mode.
- after setup, never used Power+Bixby+VolUp. After shutdown, not needed. Rebooting with modified Restart command. Easy
- using TWRP to flash blank Samsung boot logos, to see files etc
- not using multidisabler as i'm on stock and i do want encryption, ROMs/MODs push it thou
- next monthly upgrade will be interesting, as it'll be time to verify what unwanted stuff is being reenabled
Battery saving:
- unknown effect of {LSpeed, Naptime, Servicely, FDE, LKT, Universal GMS Doze, Sysconfig patcher} in such a short time.
- not big impact by dozes (AOD, fp icon, dt2wake, raise2wake) - that's cool.
- having 1.0-1.2%/hr in home wifi standby, VPN, locationtracking, perma BT watch, and tons of widgets and apps
- not liking memory filling up by thrashware even after debloat. From 4GB free to 2GB free quickly.
someone try on this ?
Hi dogg,
seems to work on multiple apps, and has some exceptions thrown, but how can i enable apps again if i need?
thanks and regards.
pep086 said:
Hi dogg,
seems to work on multiple apps, and has some exceptions thrown, but how can i enable apps again if i need?
thanks and regards.
Click to expand...
Click to collapse
do you know which process has thrown fc or exception?
many ways to reenable individually, or to roll back the script, use the undo script attached
i thought i'd debloat Device Security (which i think is the Mcaffe antivirus noone uses), but it's hooking up to app installations. So when disabled, gplay installations will freeze forever. So another memory hog has to stay in memory.
Hi dog,
I will try again I think, there were apps that I don't have already on the phone maybe.
I sure had to enable Samsung experience and contacts sync only cause I needed them.
Thank you very much.
Like the way you inspect packages and traffic.
Keep sharing your knowledge with us.
Thanks.
Thank you very much! Really helpful script, pretty much what I was looking for.
doggydog2 said:
S10 stock cleanup actions
yet another phone this year V30->Note9->6T->Mi9->S10, time to update guides. Goal is to have a clean phone after each update, and since reboot doesn't happen often, but defly happens during upgrade, i'm putting cleanup commands into a [boot] script.
Boot script
What it does:
* choose 8 categories of app removal, in the beginning of the file
* use more switch to disable some questionable/helpful stuff
* disable up to 100 apps (preferred method, ppl can reenable)
* remove usage access for google (this is the part not tested and disabling device/trust admins can not be scripted)
Tested ok on recent stock. Not much to put in script unlike on MIUI which used shady practices. Samsung not hiding processes, not persisting apps (except Payment triggers some soft brick - interesting), and not sending tcpdumps to china. Also not having privacy policy in every basic app. It's on you to accept Fourthsquare, Google and then Bixby 3rd party stuff. Well I initially sniffed network and saw some 3rd party sleezy connection to social networking IPs (nonstop monitoring by facebook etc), but that is obvious and well known, and is swiftly disabled by the script. Will see later if there's something that could be tweaked further.
Download: file attached
Installation:
- run in su terminal or add to any startup script
Which plugins to use for S10
Similarly to Mi9, collecting what i think is useful to keep on stock rooted firmware.
Magisk plugins:
* Riru - Core, Riru - Ed Exposed -- brings XPosed to Pie. Need also installer. Now i use old version 0.3 as i feel new SandHook/Yahfa bipolar releases make phone sluggish. This case is to be monitored.
* Bixby button remapper -- so in Samsung case, extra key is not released after Bixby debloat, so we first slap this plugin into phone and then customize via Xposed Edge
* libsecure_storage companion -- helps us keep the bluetooth pairings
* (optional) Universal GMS Doze (disappeared from repository?) or Sysconfig patches -- cools down GMS services. Questionable impact but i use it.
* (optional) YouTube Vanced black themed -- brings usable YouTube experience
* (impossible) QuickSwitch -- we can't have Quickstep+Hyperion (the most capable Quickstep launcher) as there's no pill but Samsong custom recents
* (untested) - FDE, LKT - in a short time, i wasn't optimizing battery. It's good out of the box(!).
XPosed plugins:
* Xposed Edge Pro - a must have and best plugin. Here, by the way, we will modify Bixby button once again, including double press and long press. Because why not
* XPrivacy - Screw the big brother. Must have. Disabling analytics, tracking, telephony, network, identification for all visible apps and all Google and Samsung apps with some exceptions.
* Firefds kit - so this is our main customization app, and enables the very important call recording, which is beutifully integrated into call history. Bye bye external apps. Also we will remove Restart action and replace with Recovery action and rename it to Restart
* afWall - Problems with this firewall and some VPN clients. Should by disabled in Xposed but we want to have this tool
* (optional) Exi for Swiftkey - you can make Swiftkey great again, GBoard is still the best, Samsung keyboard is very good, but too tall and leaves gap in fullscreen mode
Other stuff
- booting to non-root ok, impact could be lost pairings. So let's have it as a useful safe mode.
- after setup, never used Power+Bixby+VolUp. After shutdown, not needed. Rebooting with modified Restart command. Easy
- using TWRP to flash blank Samsung boot logos, to see files etc
- not using multidisabler as i'm on stock and i do want encryption, ROMs/MODs push it thou
- next monthly upgrade will be interesting, as it'll be time to verify what unwanted stuff is being reenabled
Battery saving:
- unknown effect of {LSpeed, Naptime, Servicely, FDE, LKT, Universal GMS Doze, Sysconfig patcher} in such a short time.
- not big impact by dozes (AOD, fp icon, dt2wake, raise2wake) - that's cool.
- having 1.0-1.2%/hr in home wifi standby, VPN, locationtracking, perma BT watch, and tons of widgets and apps
- not liking memory filling up by thrashware even after debloat. From 4GB free to 2GB free quickly.
Click to expand...
Click to collapse
Hello sir! I'm new to all of this, but i have learned a lot by myself already, and I have researched a lot about privacy on android and how to make the phone more secure! I need some help and guidance please. I have debloated and played around with my s10 for a long time, and had to flash and root 4 times now. The first two times the AOD didn't work anymore(probably bixby related -_-), the next two times I had a soft brick because I removed payment services! I'm really annoyed as I just want to use regular phone functions and I want be as untrackable and unhackable as possible. I mostly use apps from F-DROID, almost all! I also removed google services, basically everything google is gone.
As I understand your Guide, I have to:
1. Flash/root my phone again
2. Run script in su terminal <- here I have no idea what where and how to do this.
or
1. Flash/Root my phone again
2. Install all magisk plugins
3. Install Xposed and all plugins
4. Now Run script in su terminal <- again no idea what where and how to do this.
Could you explain in which order I should proceed and how to do the scripting part? And, when I use Xprivacy, can I leave google play services on the phone for youtube vanced?(or even other nongoogle apps and feed them false data?)Right now I use NewPipe for youtube. does XMPP work?
My biggest concern is privacy, I dont want any f***ers to spy on me. Another thing, how good is LineageOS, I could buy a SDcard and I try it or sell my stupid phone!
Thank you if you could help me, I'm really annoyed by all of this, I used a normal 30 € phone for 2 years because I don't want be spied on and not forget how nice the world is without phone that knows everything, for and about me!
---------- Post added at 11:39 PM ---------- Previous post was at 11:34 PM ----------
.TanTien said:
Thank you very much! Really helpful script, pretty much what I was looking for.
Click to expand...
Click to collapse
Hi! Can you tell me how to do the scripting??? greetings
kejsix said:
Hello sir! I'm new to all of this, but i have learned a lot by myself already, and I have researched a lot about privacy on android and how to make the phone more secure! I need some help and guidance please. I have debloated and played around with my s10 for a long time, and had to flash and root 4 times now. The first two times the AOD didn't work anymore(probably bixby related -_-), the next two times I had a soft brick because I removed payment services! I'm really annoyed as I just want to use regular phone functions and I want be as untrackable and unhackable as possible. I mostly use apps from F-DROID, almost all! I also removed google services, basically everything google is gone.
As I understand your Guide, I have to:
1. Flash/root my phone again
2. Run script in su terminal <- here I have no idea what where and how to do this.
or
1. Flash/Root my phone again
2. Install all magisk plugins
3. Install Xposed and all plugins
4. Now Run script in su terminal <- again no idea what where and how to do this.
Could you explain in which order I should proceed and how to do the scripting part? And, when I use Xprivacy, can I leave google play services on the phone for youtube vanced?(or even other nongoogle apps and feed them false data?)Right now I use NewPipe for youtube. does XMPP work?
My biggest concern is privacy, I dont want any f***ers to spy on me. Another thing, how good is LineageOS, I could buy a SDcard and I try it or sell my stupid phone!
Thank you if you could help me, I'm really annoyed by all of this, I used a normal 30 € phone for 2 years because I don't want be spied on and not forget how nice the world is without phone that knows everything, for and about me!
---------- Post added at 11:39 PM ---------- Previous post was at 11:34 PM ----------
Hi! Can you tell me how to do the scripting??? greetings
Click to expand...
Click to collapse
i keep running the script without problems for months now.
to run a script, you need a terminal - use any terminal app, like 3C Toolbox or via adb. this is too generic question.
to run it, you need root, so at least magisk must be present. you normally flash your favorite image, then magisk, in magisk you load riru & exposed plugins, then in edxposed installer you load xposed plugins like xprivacy. i run strict privacy settings on every device and this requires some work. first thing i do, is press RESTRICT button on all visible apps for these permissions: identification, network, telephony, tracking, analytics, then calendars, call log, contacts, location and messages. Then i go throught individual apps and deselect neccessary permisions for some apps. on the left menu, i set 'restrict new apps'. this way i can control non-geeky users phone who install any app without thinking and accept all default choices without any hesitation. It's very hard for them to fight XPrivacy thou - they don't understand it luckily. unlike personal computers, phones are great source of snitching, as you have so much data available to the aggressive companies like SIM details (=directly identify your person via Telco), IP (=directly identify you via ISP), web services where you provided real name and phone number (to "recover account" blabla, real meaning is to identify you), tracking and analytics (to study your behaviour and share your internet presence via a token between companies). All this needs to be cloaked and more: browser should be full of privacy plugins, ad killers, fingerprinting killers, webrtc killers etc etc. VPN set, and firewall set. I also use Changer xposed plugin to cloak extra items not covered by XPrivacy.
I have zero ads in any apps. Zero suggestions by ecommerces. Getting dummy search hits without relevance. Always a blank user to each web or app. Email on the best privacy provider, with zero knowledge encryption, this and any web services paid via bishuffled bitcoin bought in person (Coinbase? really? send ID? seriously people do this?). IP is cloaked via trustful service, in case of need to express opinion on the internet (which i've given up to) in todays politically correct era, use also Tor and Psiphon. No phone numbers, IMEIs, IMSIs etc etc provided. No real names ever entered anywhere. I can have great privacy with commercial tools, and don't need to use Snowden type of blank OS. But it's difficult to set up, it takes hours and some tweaking later. I just find mobile encryption too weak, on PC an intruder (govt) needs to: enter BIOS password, enter TCG-OPAL password, enter bitlocker password, enter Windows password, enter fingerprint to USB flash drive with keys to data drive, unlock bitlocker of the same USB, then unlock data drive -- it's just 20 seconds of extra work once per day. Mobile phone: password and FBE and sensitive app locking. Don't use fingerprints (they belong to govt) or facelock (too lame). Or use fingerprints with lockdown feature (use AI button to map this action with XPosed Edge plugin), and lock it deeply when going to customs or similar checkpoint. Your data and thougts are yours and noone elses.
Yeah install instructions man.. su in terminal and then what ???
kejsix said:
Hi! Can you tell me how to do the scripting??? greetings
Click to expand...
Click to collapse
I opened the script file and picked the features i wanted to disable by manually typing the commands. Standard procedure should be starting terminal as su
Code:
chmod 777 filename.sh
and after that
Code:
./filename.sh
You should be in your file directory of course. You can get there by typing
Code:
cd /your/file/path
Will that work on Snapdragon s10?
i'm running this for 8 months now after each boot. And i didn't update firmware as the rooting process was so exhausting. Now i'm going through the horror again, hoping to keep the encryption, therefore strictly without a custom ROM.
Script should work on Snapdragon, it's not related to the root process.
easier way to run the .sh file:
1. su
2. cd /storage/emulated/0
3. sh S10_cleanup.sh
I decided to root ky Pixel 6 and found out that i couldn't get around the security from germans banking apps.
simple soloution. have magisk/zygisk installed and set the root mode to "user" in the settings of magisk manager.
then go to your settings and setup a second user (wont have root) install your banking apps and enjoy the ability to use them with an rooted device
edit: this method was tested for Sparkasse app's
• S-Push Tan
• Mobiles Bezahlen
IndubidablyStoned said:
I decided to root ky Pixel 6 and found out that i couldn't get around the security from germans banking apps.
simple soloution. have magisk/zygisk installed and set the root mode to "user" in the settings of magisk manager.
then go to your settings and setup a second user (wont have root) install your banking apps and enjoy the ability to use them with an rooted device
Click to expand...
Click to collapse
I'm not being critical of your choices but why would anyone chance having a banking institution or any financial app including
GPay on a rooted device? Isn't there a much greater chance of being compromised by an app or inadvertent web link? And if the banking institution sees that a bogus user was created what are the chances of recovering funds obtained through fraudulent activity? I understand why people want to root don't get me wrong, but money transfers and transactions on that device seem a little reckless to me. But I could be wrong, just curious of the thinking here.
i Understand, but if you want to have an custom DAC like Viper4Android you kinda need root. my intention isnt to do fraudulent activity, as i mentioned in the Post you dont have Root access on that second user
IndubidablyStoned said:
i Understand, but if you want to have an custom DAC like Viper4Android you kinda need root. my intention isnt to do fraudulent activity, as i mentioned in the Post you dont have Root access on that second user
Click to expand...
Click to collapse
You misunderstood my concern wrt banking activity. I didn't suggest that you were doing anything fraudulent but if you were the victim of fraudulent activity would the bank still cover you with a bogus account you created? I don't know if what you did was entirely proper or not but that was not the issue I thought you might be concerned about.
As I said, I completely understand your desire to root be it V4A or DAC or even ad blocking. I just wonder the benefit vs the exposure if you are using banking apps. Without financial transactions occurring on the phone I doubt there is much to worry about other than what we are all concerned about root or not.
bobby janow said:
I'm not being critical of your choices but why would anyone chance having a banking institution or any financial app including
GPay on a rooted device? Isn't there a much greater chance of being compromised by an app or inadvertent web link? And if the banking institution sees that a bogus user was created what are the chances of recovering funds obtained through fraudulent activity? I understand why people want to root don't get me wrong, but money transfers and transactions on that device seem a little reckless to me. But I could be wrong, just curious of the thinking here.
Click to expand...
Click to collapse
Considering DirtyPipe exists and has not been patched yet (plus how long it already took to even acknowledge the problem in the first place), rooting is the least of our worries when it comes to monetary transactions/banking and android.
Bear in mind that DirtyPipe is only one elevation exploit that we've heard about. And for every disclosed vulnerability there are dozens of others that nobody's aware of. The market for rooted android users is very small compared to the overall android phone-user market. Creating exploits specifically targeting rooted phones would be a waste of time and effort compared to working on privilege escalation on non-rooted devices; from a hacker's perspective you want to hit the largest volume of targets in cases like these.
I've been rooting my phones for 10 years now, and my usage of banking/fintech apps on my devices has increased consistently. Applying common sense opsec/infosec practices can negate a large percentage of the perceived risk that root access exposes you to.
On the other hand, if someone wants to target you specifically, as an individual, you're screwed, root or no root, unless you're aware of the risks that come with technology and the pitfalls of android (iOS can be perceived as more secure but when it comes to individual targeting/attacks, there are expensive tools made by some of the world's top intelligence organizations that can wreck havoc on iOS as well)
TL;DR you're never truly safe, root or no root.
Unfortunately that doesn't worked for me
I tested the following apps:
SecureGo
VR SecureGo
Mobiles bezahlen
Every App doesn't launch. Sparkasse is quitting instantly and SecureGo Apps are stuck with their logo.
On the rootet user I get the Browser-warning (of SecureGo) that my device doesn't meet the security requierements. So far so good, but on the non-rooted uses i would have expect that they're working.
Any Idea? I'm on April Build.
i dont know currently, i dont have root anymore since i had to update to the April Update. i'll update if there is something that can be done
Maybe you could confirm that these Apps launch on April build without root? That could help to research the problem a bit. Thanks!
hanni2301 said:
...but on the non-rooted uses i would have expect that they're working.
Any Idea? I'm on April Build.
Click to expand...
Click to collapse
Maybe these apps are not supporting fully Android 12?
I have an app which, until recently, was freezing when the location was enabled. To be exact, when "Use precise location" was enabled. Only location access the app was not freezing, but couldn't get the coordinates.
Maye this is a similar situation here.
Cheers
Tom
hanni2301 said:
Unfortunately that doesn't worked for me
I tested the following apps:
SecureGo
VR SecureGo
Mobiles bezahlen
Every App doesn't launch. Sparkasse is quitting instantly and SecureGo Apps are stuck with their logo.
On the rootet user I get the Browser-warning (of SecureGo) that my device doesn't meet the security requierements. So far so good, but on the non-rooted uses i would have expect that they're working.
Any Idea? I'm on April Build.
Click to expand...
Click to collapse
I managed to get the VR Secure Go app working by doing the steps in the op plus using ice box and freezing magisk and the bank apps. I'm on April, too and I'm using radioactive kernel. Rooted stock kernel works as well on my device, but I had issues with the bank apps on some other kernels.
So to confirm, you need to freeze magisk on the rooted user and you're able to use the bank apps on the second (non rooted) user?
On which user you would freeze the bank apps? I doesn't have them installed on the rooted user.
Thanks in advance that you can definitely confirm its not the fault of April built.
hanni2301 said:
So to confirm, you need to freeze magisk on the rooted user and you're able to use the bank apps on the second (non rooted) user?
On which user you would freeze the bank apps? I doesn't have them installed on the rooted user.
Thanks in advance that you can definitely confirm its not the fault of April built.
Click to expand...
Click to collapse
I only have one user (the rooted user). I've done the following steps:
1. Configure magisk: activate Zygisk and setup deny list for the banking apps
2. Hide magisk app
3. Freeze magisk and banking apps with Ice Box
ok, that is the normal way which is different to the approach the thread starter has chosen.
I use deny list plus hide my applist and works fine with Sparkasse, s-push and mobil bezahlen no need to freeze or use a second user profile
How do you do that, hide applist?
You can bypass it by
Download App Named Shelter from Play store.
The App will create work profile and you can bypass any bank or app you facing issue with it.
When completed create work profile you can clone Bank App and use if.
As Information, It works out of the Box with Magisk denylist,
You only need to Install Ice Box and hide Magisk Manager, even if it is using a random name, "Mobiles Bezahlen" would detect it.
Magisk + Ice Box is sufficient on latest Miui 13 as well!
Regards!
Not sure but I think island could help not sure though as I'm not rooted the app is made by greenify
Only as info, these 2 Apps, Postbank Finanzassistent and Postbank BestSign working by default on a rooted device.
I like Postbank