Help with a simple and private phone

Hi everyone, I’m looking to possibly simply my smartphone setup. I would really love to keep it as a utility: phone, text, camera, GPS, web browser, notes, email, music player. Im think of switching to local NextCloud backup system as well. I currently have an iPhone but used to flash ROMs on Android phones, so I would be willing to do that again for more privacy options and less unnecessary changes to the OS.

I have looked a little into it, and I’m wondering about getting a couple year old Pixel and putting GrapheneOS on it. I also searched a little and came across the Purism Librem 5 that has physical kill switches and sounds neat; a little pricy but I’d be willing to pay if it lasts a while and has good privacy options.

What are your thoughts? Are there other hardware suggestions or setups that you like? The idea of FOSS is appealing because it seems like the money aspect seems to skew the priority of smartphones.

You're viewing a single thread.

53 comments

Nextcloud doesn't have e2ee. Use something better.
- It doesn't matter if you host it yourself. You should still have full disk encryption (LUKS on Linux) enabled on your server though.
  
  It does matter if someone can break into your House
  
  If someone breaks into my house they have a lot more to worry about than me hosting pirated content to myself. Hope they can dodge supersonic rocks!
  
  If physical security concern you, you should encrypt your disk, but e2e isn't really useful if you host your instance and use a VPN to connect (it's not necessary even if you trust the 3rd party that host your data, actually)
  
  By e2e I mean client side. Someone who gets physical access to the server should not be able to view your files.
  
  Mmm... I still think you mean server side: if someone seize your server shouldn't be able to read your file. If someone have physical access to your server while it is still turn on and not rebooted, it will have access to your files even with e2e turned on. E2e encrypt data while it is transfered from client to server (in case of nextcloud)
  
  If someone have physical access to your server while it is still turn on and not rebooted, it will have access to your files even with e2e turned on
  Thats not true. For it to be e2e the encryption must be done client side, by definition. The keys are stored on the client. The server cannot decrypt the data.
  Nextcloud does not offer e2ee.
  
  You're right, I'm dumb. Nextcloud has a e2e plugin, but you have to lose a lot of functionality, and I still think it isn't worth it if you host your own instance
  
  That's why I recommend full disk encryption. If someone steals your hard drives, the data is inaccessible without your password.
  
  That doesn't apply to servers. Unless you turn off the server every time you leave the room.

53 comments