202050110

- Happy New Year - Changed mobile app recommendations and auditing advice since Divest is no longer maintained. - Added Google's "Results About You" as a possible source to monitor your data online. - Removed advice against enhanced notifications since they're all done on-device - Added notes about the risks of notifications in general to the iOS recommendations. - Removed Uptime Monitor as that server expired. I never really planned to keep it, I just didn't want a server sitting around serving no purpose and wasn't sure what else to do with it.
tnonate · Jan 10, 2025 · 9c2727d · 9c2727d
1 parent 3cc38ca
commit 9c2727d
Show file tree

Hide file tree

Showing 6 changed files with 13 additions and 8 deletions.
diff --git a/README.md b/README.md
@@ -24,10 +24,10 @@ Readers who speak foreign languages can help us translate the site on [Crowdin](
 -   [News Feed](https://mastodon.thenewoil.org/@thenewoil)
 -   [Videos](https://apertatube.net/c/thenewoil/videos)
 -   [Analytics](https://stats.thenewoil.org/share/jnR7d6tGklwToSOJ/thenewoil.org)
--   [Uptime Monitor](https://uptime.thenewoil.org/status/thenewoil)
 
 ## Transparency
 
+-   [**2024 Transparency Report**](https://blog.thenewoil.org/transparency-report-2024)
 -   [**2023 Transparency Report**](https://blog.thenewoil.org/transparency-report-2023)
 -   [**2022 Transparency Report**](https://blog.thenewoil.org/transparency-report-2022-and-goals-for-2023)
 -   [**2021 Transparency Report**](https://blog.thenewoil.org/transparency-report-2021-and-goals-for-2022)

diff --git a/src/assets/data/BlogPages.json b/src/assets/data/BlogPages.json
@@ -1,4 +1,9 @@
 [
+  {
+    "slug": "transparency-report-2024",
+    "created": "2025-01-05T00:26:46Z",
+    "title": "Transparency Report: 2024"
+  },
   {
     "slug": "what-does-it-take-to-truly-opt-out-of-invasive-online-tracking-creepy-or",
     "created": "2024-12-08T18:00:32Z",

diff --git a/src/assets/data/pages/en/guides/most-important/MobileApps.json b/src/assets/data/pages/en/guides/most-important/MobileApps.json
@@ -109,8 +109,8 @@
       "name": "Web Browser",
       "values": {
         "Alternatives": [
-          "Android: [Brave](https://play.google.com/store/apps/details?id=com.brave.browser&hl=en&gl=US) or [Mull](https://f-droid.org/packages/us.spotco.fennec_dos/)",
-          "iOS: [Brave](https://apps.apple.com/us/app/brave-private-browser/id1052879175), [SnowHaze](https://snowhaze.com/download), or [hardened Safari](https://www.privacyguides.org/en/mobile-browsers/#safari)"
+          "Android: [Brave](https://play.google.com/store/apps/details?id=com.brave.browser&hl=en&gl=US), [Firefox Focus](https://www.mozilla.org/en-US/firefox/browsers/mobile/focus/), or [Firefox](https://www.mozilla.org/en-US/firefox/) with [uBlock Origin](https://ublockorigin.com/)",
+          "iOS: [Brave](https://apps.apple.com/us/app/brave-private-browser/id1052879175), [Firefox Focus](https://www.mozilla.org/en-US/firefox/browsers/mobile/focus/), [hardened Safari](https://www.privacyguides.org/en/mobile-browsers/#safari), or [SnowHaze](https://snowhaze.com/download)."
         ],
         "Reason": [
           "While apps have mostly replaced the browser on mobile, some things are still done through the browser. While less revealing compared to other phone apps, your browser usage still reveals a lot of data about you and should be minimized."
@@ -122,7 +122,6 @@
       "values": {
         "Alternatives": [
           "Android & iOS: [iVerify Basic](https://iverify.io/products/basic) (malware detection, settings suggestions)",
-          "Android: [Hypatia](https://divestos.org/pages/our_apps#hypatia) (antivirus)"
         ],
         "Reason": [
           "These are apps that can help improve your privacy and security in various ways. As always, be sure to evaluate your threat model and consider if you need them or not."

diff --git a/src/pages/en/guides/moderately-important/people-search.mdx b/src/pages/en/guides/moderately-important/people-search.mdx
@@ -40,6 +40,8 @@ For manual removal, there are a number of resources. Michael Bazzell offers a [f
 
 In addition to targeting people search sites, I also recommend using Google (or another effective search engine) to search for your name, phone number, email address, and/or phyiscal address in quotes. The more data you remove, the more the old, forgotten, and niche stuff will rise to the surface. This may include forgotten social media posts, accounts, or new, smaller public data sites.
 
+Another potential strategy is to combine several services. Optery offers a free tier that will scan for your data and tell you where they found it and how to remove it, but you'll have to take the steps to do so yourself. Google also offers a similar service for free via their "[Results About You](https://blog.google/products/search/a-new-search-tool-to-help-control-your-online-presence/)" tool. These can be combined with a paid service to provide multiple layers of defense, or can simply be used to help you manually stay on top of new data as it pops up. You could also try creating a Google Alert for your personal information, however I've never had much success with Google Alerts for anything, personally.
+
 Another tool that may be useful to readers is [Permission Slip](https://www.permissionslipcr.com/) from Consumer Reports. This tool purports to help users see what companies are collecting data on them, request removal, and delete various online accounts from within a single app.
 
 

diff --git a/src/pages/en/guides/most-important/auditing.mdx b/src/pages/en/guides/most-important/auditing.mdx
@@ -30,9 +30,9 @@ In the event that you cannot simply buy a new device or factory reset it, there
 
 **Start with a basic reboot of your phone.** Most mobile malware is not persistent, so unless your device is rooted or jailbroken (which I strongly discourage) then this will clear most basic threats. In the case of persistent malware, this is often accomplished through an app. Many apps masquerade as innocent tools - such as PDF viewers, flashlights, VPNs, or games - but are secretly collecting data. Take this time to go through your phone and **remove as many apps as possible.** Even if you trust them - such as your bank's app - I would recommend removing them unless you really need them or use them frequently.
 
-Next, **consider running a virus scan.** I recommend services like [Malwarebytes](https://www.malwarebytes.com/) or [Bitdefender](https://www.bitdefender.com/), both of whom offer a scanner for Android and iOS. [iVerify Basic](https://iverify.io/products/basic) is another powerful tool I recommend to find potential malware on your device. The app costs $1 one-timne and you can submit your data for a powerful, comprehensive scan once a month for free after that. This tool has proven [highly effective](https://arstechnica.com/security/2024/12/1-phone-scanner-finds-seven-pegasus-spyware-infections/) in some cases. For Android only, you can also consider using the [Hypatia](https://f-droid.org/packages/us.spotco.malwarescanner/) app.
+Next, **consider running a virus scan.** I recommend services like [Malwarebytes](https://www.malwarebytes.com/) or [Bitdefender](https://www.bitdefender.com/), both of whom offer a scanner for Android and iOS. [iVerify Basic](https://iverify.io/products/basic) is another powerful tool I recommend to find potential malware on your device. The app costs $1 one-timne and you can submit your data for a powerful, comprehensive scan once a month for free after that. This tool has proven [highly effective](https://arstechnica.com/security/2024/12/1-phone-scanner-finds-seven-pegasus-spyware-infections/) in some cases. For iPhones only, you can also consider using [iMazing](https://imazing.com/spyware-analyzer) to scan for any known infections.
 
-Once you're sure you have a clean device, you can remove this if it fits your threat model. I am of the belief that by practicing good digital hygiene and keeping your devices up-to-date, the stock antivirus features are sufficient for most users. If you have an elevated threat model, you may elect to keep these apps on your device to help keep yourself safe.
+Once you're reasonably sure you have a clean device, you can remove this if it fits your threat model. I am of the belief that by practicing good digital hygiene and keeping your devices up-to-date, the stock antivirus features are sufficient for most users. If you have an elevated threat model, you may elect to keep these apps on your device to help keep yourself safe.
 
 Finally, take this time to **check the device settings** for any additional indicators of compromise.
 

diff --git a/src/pages/en/guides/most-important/mobile-settings.mdx b/src/pages/en/guides/most-important/mobile-settings.mdx
@@ -27,7 +27,6 @@ draft: false
 - Notifications > App notifications > Disable entirely on any apps you don't need realtime notifications from (notifications can be used to [invade your privacy](https://www.wired.com/story/apple-google-push-notification-surveillance/))
 - Notifications > Notification history: Disabled
 - Notifications > Notifications on lock screen: "Don't show any notifications"
-- Notifications > Enhanced notifications: Disabled
 - Display & touch > Lock screen > Privacy: Don't show notifications at all
 - Display & touch > Lock screen > Now Playing: Disabled
 - Display & touch > Screen timeout: Shortest duration you are comfortable with
@@ -99,7 +98,7 @@ draft: false
 - Notifications > Show Previews: Never
 - Notifications > Screen Sharing: Notifications Off
 - Notifications > Siri Suggestions > Allow Notifications: Off
-- Notifications > Notification Style: Disable notifications for apps that you don't need instant notifications from
+- Notifications > Notification Style: Disable notifications for apps that you don't need instant notifications from (notifications can be used to [invade your privacy](https://www.wired.com/story/apple-google-push-notification-surveillance/))
 - Touch/Face ID & Passcode > Stolen Device Protection: Enable
 - Touch/Face ID & Passcode > Turn Passcode On: Try to set an [alpha-numeric password](/guides/most-important/passwords) if possible, otherwise use a six-digit PIN. A fingerprint is also acceptable if your device allows it (coupled with a strong password or PIN). Face ID should be avoided.
 - Touch/Face ID & Passcode > Require Passcode: Immediately
Original file line number	Diff line number	Diff line change
Expand Up		@@ -40,6 +40,8 @@ For manual removal, there are a number of resources. Michael Bazzell offers a [f

		In addition to targeting people search sites, I also recommend using Google (or another effective search engine) to search for your name, phone number, email address, and/or phyiscal address in quotes. The more data you remove, the more the old, forgotten, and niche stuff will rise to the surface. This may include forgotten social media posts, accounts, or new, smaller public data sites.

		Another potential strategy is to combine several services. Optery offers a free tier that will scan for your data and tell you where they found it and how to remove it, but you'll have to take the steps to do so yourself. Google also offers a similar service for free via their "[Results About You](https://blog.google/products/search/a-new-search-tool-to-help-control-your-online-presence/)" tool. These can be combined with a paid service to provide multiple layers of defense, or can simply be used to help you manually stay on top of new data as it pops up. You could also try creating a Google Alert for your personal information, however I've never had much success with Google Alerts for anything, personally.

		Another tool that may be useful to readers is [Permission Slip](https://www.permissionslipcr.com/) from Consumer Reports. This tool purports to help users see what companies are collecting data on them, request removal, and delete various online accounts from within a single app.


Expand Down