Its up to lawmakers and regulatory bodies to force mobile carriers to secure their networks; to enable "signaling firewalls" as the article points out.
Not connecting to mobile networks by enabling airplane mode, relying on public Wi-Fi and using encrypted communications is the best option available to avoid being tracked.
The best you can achieve with a sim card is turning on airplane mode before you arrive home/sensitive location. You will end up toggling airplane mode on and off throughout the day.
Have you put tape over selfie cam and inadvertantly blocked proximity sensor? Or faulty proximity sensor perhaps.
If media is on samsung phone copy to a USB drive
imessage. everyone who has an iPhone has encrypted messaging by default, reducing dragnet surveillance.
VPN is per profile: you must configure VPN for each profile.
Pass. Better to follow the recommendations of GOS Devs and Mods.
nrt
Ignore the previous link.
Follow this guide and watch the video.
https://keepassxc.org/docs/#faq-yubikey-no-extra-file
https://www.youtube.com/watch?v=r6Qe9Z-kOH0
I successfully set up challenge-response on my yubikey 5C NFC. NFC and UsbC both work.
On my phone I opened a kdbx file using keepassdx. Keepassdx needs to download a driver from the play store.
You followed the guide?
https://support.yubico.com/hc/en-us/articles/360013779759-Using-Your-YubiKey-with-KeePass
L8437 the official google esim app is included with grapheneos and disabled by default. It is a privileged app, has access to hardware identifiers, such as phones imei.
In the future the project wants to release their own esim app.
Discussions of esim.
https://discuss.grapheneos.org/d/421-privileged-esim-management-concerns
https://discuss.grapheneos.org/d/5303-esim-privacy-questions
On stock android your imei is sent to google when you connect to the internet (before you sign in to a google account).
On grapheneos sandboxed google play does not have access to your imei. If you use e-sim a privileged app google has access to your imei.
If you use google fi, google has access to your imei.
https://grapheneos.org/faq#hardware-identifiers
Delete