this post was submitted on 02 Aug 2025
37 points (97.4% liked)

Privacy

41300 readers
422 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
top 33 comments
sorted by: hot top controversial new old
[–] JumpyWombat@lemmy.ml 17 points 3 weeks ago (2 children)

FYI Sentry is for failure reports. It’s not a spyware.

https://sentry.io/

[–] MrSoup@lemmy.zip 3 points 3 weeks ago

I don't want them to report failures in my life

[–] jjlinux@lemmy.zip 2 points 3 weeks ago

I'm married. That's my wife's job, pointing out my failures.

[–] zarlin@lemmy.dbzer0.com 13 points 3 weeks ago (2 children)

If you're ok with doing some selfhosting, a DNS filter like PiHole or Adguard Home should take care of those. A nice bonus is that these can also block most in-app ads :)

If you setup a VPN like Tailscale you can even make your phone traffic go through a DNS filter you serve at home, so your privacy is always protected.

[–] hankthetankie@hexbear.net 3 points 3 weeks ago

Yeah thinking of some self hosting later , but need to fix my main PC first. Managed to botch a dual setup and lost a ton of stuff...

[–] umbrella@lemmy.ml 2 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

alternatively, you can use adaway to get the same blocklists directly on your phone.

its better with root but it works rootless.

[–] hankthetankie@hexbear.net 2 points 3 weeks ago

I do have dns filter on the vpn server but no controll over the lists. DNS solutions that use the VPN won't do it. I can of course change DNS server (and I'm gonna setup Adguard on my extra glinet router once they fix their botched firmware update) question is if trackers use more than publich IPS and doesn't change. An updated list would work I guess.

[–] MrSoup@lemmy.zip 11 points 3 weeks ago (1 children)

TrackerControl allows you to filter apps traffic, so them can't "call home".

[–] Sxan@piefed.zip 7 points 3 weeks ago (3 children)

Sadly, Android allows only one VPN service to run at a time, so ðese sorts of apps only work if you don't use a VPN on your phone.

[–] ExcessShiv@lemmy.dbzer0.com 10 points 3 weeks ago

Use rethink DNS, it will do both filtering and VPN. I use the wireguard config from my proton in rethink DNS.

[–] MrSoup@lemmy.zip 4 points 3 weeks ago* (last edited 3 weeks ago) (2 children)

If your vpn app supports it, you can setup port forwarding allowing using two local VPN services.

[–] Sxan@piefed.zip 3 points 3 weeks ago (1 children)

VPN over VPN? I suppose. It's not obvious how you'd set ðat up.

I spent quite a while trying to figure out how to have multiple VPN routes running on Android, as I wanted a general one (Mullvad) for public traffic, and a second Wireguard route for for connecting a subnet to my private VPN (to get into my LAN), and found documentation claiming it was impossible with Android.

[–] MrSoup@lemmy.zip 4 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

With TrackerControl I've setup port forwarding to inviZible Pro. But this is up to the app to support it.

Another way is to use Android work profile which enables to use two VPN, one on each account.

[–] swelter_spark@reddthat.com 1 points 3 weeks ago

I use TrackerControl with invizible Pro, too. Works great.

[–] RheumatoidArthritis@mander.xyz 3 points 3 weeks ago (1 children)

Can you give me an example vpn app so I can play with it myself?

[–] MrSoup@lemmy.zip 1 points 3 weeks ago (1 children)

My setup is TrackerControl + inviZible Pro.

Try givin a look on the web for some foss vpn client for android which supports port forwarding. Maybe you should find some guides on how to setup multiple of them too with work profile or just port mapping.

[–] RheumatoidArthritis@mander.xyz 2 points 3 weeks ago (1 children)
[–] RheumatoidArthritis@mander.xyz 1 points 3 weeks ago

Explained: How to run 2 VPNs on Android simultaneously I had been looking on the internet a method that would enable me to run 2 VPN apps on the same device simultaneously, but just got to solve this.

My setting: I was trying to route all my firewalled traffic (ReThink Firewall) through a proxy to another vpn app. Psiphon Pro (FOSS) can accept traffic from inbound proxy but itself establishes a VPN profile and thus the firewall can't connect (which too requires to function as a VPN).

VPN app in main profile: Rethink Firewall (FOSS, Fdroid)

VPN app in work profile: Psiphon Pro (Free VPN, Playstore)

Shelter app lets you clone apps using the work profile feature and takes only a few MBs

I used this setup on Android 13 and it works.

Solution:

Using the open source app, Shelter (Fdroid) create a work profile. A work profile can have its own VPN app running along with main (personal) profile's VPN.

Install and configure the Rethink Firewall on Main profile.

In Shelter, set the Psiphon app to "Allow Cross-Profile Interaction"

Run the Psiphon VPN (app that would accept inbound traffic). In its logs section, see the SOCKS proxy port.

Set the proxy port to the same in Rethink Firewall in the correct way. As, 127.0.0.1:{port}

Now Rethink Firewall is able to tunnel all its traffic into Psiphon Pro (running in work profile)

[–] root@aussie.zone 1 points 3 weeks ago

I use TrackerControl with pribate dns via NextDNS. Seems to work well.

[–] aurelar@lemmy.ml 3 points 3 weeks ago (1 children)

What app did you use to get info on what trackers your apps have?

[–] foremanguy92_@lemmy.ml 3 points 3 weeks ago

If you have the possibility to self host -> PiHole (or adguard)

If not -> TrackerControl (a.k.a. TC)

[–] monovergent@lemmy.ml 3 points 3 weeks ago (1 children)

Unsustainable if the app needs to be updated and not guaranteed to work, but I have ripped out the network and other unnecessary permissions of APKs before using APK Editor Studio.

[–] bloubz@lemmygrad.ml 3 points 3 weeks ago

BTW you don't neee an external app to remove network permission on GrapheneOS

[–] bloubz@lemmygrad.ml 1 points 3 weeks ago

People have mentioned NextDNS (just a DNS setting) and TrackerControl (connects as a VPN on android/grapheneos)

I can mention also DNSNet (which actually also uses a VPN) and PCAPdroid

There are other options, with more features. Lists exist online

[–] Luffy879@lemmy.ml 0 points 3 weeks ago (1 children)
[–] hankthetankie@hexbear.net 3 points 3 weeks ago (2 children)

Sure , got a Foss Whatsapp client laying around?

[–] bloubz@lemmygrad.ml 2 points 3 weeks ago (1 children)

In addition to my answer to your original request, I can inform about stuff related to WhatsApp.

You can use WhatsApp on a Matrix server with a bridge. You can either selfhost or find a server which has the WhatsApp bridge.

There is also Beeper - now acquired by Automattic (WordPress, ...) - which is a company matrix server with many bridges (they employed the person developing most of them). You can use a FOSS matrix client like Element X or their own client which is not FOSS but requires far fewer permissions than the WhatsApp app

[–] hankthetankie@hexbear.net 2 points 3 weeks ago (1 children)

Yeah that a good idea! Will look into it . Must get some self hosting going :)

[–] bloubz@lemmygrad.ml 2 points 3 weeks ago

I think you can deploy Matrix with Yunohost, which is very convenient as a first self hosted server

[–] Luffy879@lemmy.ml 2 points 3 weeks ago* (last edited 3 weeks ago) (2 children)

Its called signal

Or just get a second phone / use a seperate profile

[–] bloubz@lemmygrad.ml 2 points 3 weeks ago* (last edited 3 weeks ago)

Molly would be the independent and FOSS Android client

But that's not a replacement for WhatsApp + Signal was funded by Radio Free Asia (under CIA control), which is something to consider

[–] hankthetankie@hexbear.net 1 points 3 weeks ago

Oh why didn't I think of that... thanks for the great help!