applesbana so does MySudo also freak out if I were to use a VPN that exits outside of the USA? Seems odd to me, too. Makes me wonder if they really are privacy focused if they’re so careful to not let anyone use their service outside a surveillance state.
Threat Profile and plan of action
Either way, if MySudo depends on Google, that’s another mark against it. Is jmp.chat and their choreogram app trusted in the privacy and infosec community?
Also, does installing Graphene void any warrantee or Preferred Care or whatever?
I might get the pixel straight from google, still trying to figure out the best option
Is jmp.chat and their choreogram app trusted in the privacy and infosec community?
Yes, unlike VOIP it is all open source when you combine JMP/Jabber-XMPP/Cheo. Calls are clear and don't drop. My go to. More secure and harder to trace than VOIP (though still not truly secure like e2e Signal). How to:
https://www.makeuseof.com/replace-your-carrier-on-android-with-cheogram-and-xmpp/
[deleted]
applesbana I don’t understand why a privacy focused voip company would limit you to using their service in a handful of countries.
Why don't you email them and ask?
[deleted]
GlytchMeister cash from best buy
[deleted]
- Edited
GlytchMeister you only need google services if you want push notifications the same is true with things like protonmail. MySudo is also recommended by privacy experts (it's endorsed by Michael Bazzell). They also purge data (such as your messages) from their servers 24 hours after being deleted by the user, it is also stored encrypted.
Why don’t you? I am not a customer of theirs and the stories I’ve read of them deleting user accounts for “violations” of their policies without recourse is enough for me to avoid for something as important as a phone number.
To be clear, notifications include incoming call notifications. So if you want your phone work like a phone with mysudo (to ring upon a phone call or ding upon an sms), you need google play services.
[deleted]
applesbana Correct.
[deleted]
applesbana I didn't post that to be rude, you are curious about a policy of theirs so my point was why not contact them and ask them instead of basing your opinion of them purely on "stories"?
- Edited
Sorry for mis interpreting the tone! The experiences others had are enough to keep me away, but I also encourage anyone curious to inquire. They do clearly state on their site that they only support a few countries and oddly it varies if you use iOS vs android:
MySudo for iOS:
MySudo for iOS is currently only available in:
🇦🇺Australia
🇨🇦Canada
🇳🇿New Zealand
🇸🇬Singapore
🇰🇷South Korea
🇬🇧United Kingdom
🇺🇸United States
MySudo for Android:
MySudo for Android is currently only available in:
🇦🇺Australia
🇨🇦Canada
🇳🇿New Zealand
🇸🇬Singapore
🇬🇧United Kingdom
🇺🇸United States
https://support.mysudo.com/hc/en-us/articles/360020177133-Why-isn-t-MySudo-working-in-my-country-
https://support.mysudo.com/hc/en-us/articles/15939400275739-My-account-was-locked
[deleted]
applesbana No worries. Yea i'm not sure what the issue as far as using it in countries that they are not listed, I don't think it is anything spooky, but probably more so an issue with support in those countries, but that's completely anecdotal.
GlytchMeister I’m not a criminal/secret agent trying to be completely untraceable, I’m just trying to be reasonably responsible.
Well, I do not believe in a simple black-n-white-google-is-evil world. The device and OS GrapheneOS is running on is both developed by Google. Chrome-based browsers are pretty secure with strong sandboxing techniques. Sure, you as a user are the customer and product at the same time, which is the dark side of Google (among others maybe).
For me beeing reasonably responsible means first and foremost to develop a clear idea of what you are trying to accomplish and to avoid. Google maps is a pretty good service so it's totally reasonable to use it if helps you to accomplish every-day tasks. Since you are aware of google trying to collect as much data about you as they possibly can you can act accordingly - use a VPN or avoid the service and use alternatives if feasible.
In my opinion you should define for yourself what privacy means to you. If your live does not depend on it, it's usually a good idea to start your journey to more privacy slowly and with well planned small steps and, even more importantly, consciously - think about what you do and try to achieve and do not just follow some guides on the internet (not saying you do, but just in case). Reduce the data that's freely available about you in the internet (Facebook, insta, reddit, you name it) and go from there. Using a VPN and strongly encrypted communication services is a good start. Again, start slowly and consciously and develop a clear idea of what you want to achieve - as stated above, privacy and convenience are on opposite sites, so make sure you find your own sweet spot.
GlytchMeister
I dont know about the warranty but I had a physically broken Pixel Pro 6, that still could boot and use the cracked screen, and it got treated as any by Google's official repair here in Europe. I even got a replacement unit for the repair price.
They seem to care about non-tampered hardware, not software.
Yeah that’s why I went through the whole threat profile exercise:
Define my assets (money, passwords, identity, reputation, time, independent thought, freedom)
Define where my assets are stored (bank, password vault, gov records/corporate databases, online profiles, and N/A, respectively)
Define what I’m trying to protect them from (criminals, doxxers, overzealous Internet vigilantes, spammers, scammers, targeted ads and algorithmic manipulation, overly-wide search warrants)
Define “risk likelihood” multiplied by “consequence severity” (mostly low to moderate, but corporate manipulation is certain and I really don’t like it, and overly-wide search warrants are random but the consequences are really really bad)
And unfortunately a lot of those horses are already outta the barn but yknow better late than never, so I can at least cut down on the amount of new data the data brokers can collect and sell, and stop giving big companies that are too chummy with poorly managed law enforcement my moment to moment location… and just generally being more secure against random opportunistic attacks.
So to me that sounds like de-googling, de-Verizoning, getting a no-log vpn, using silent link, and using jmp.chat/Jabber-XMPP/Cheogram (because no one I know is on any E2EE comms service).