Mission Impossible: Hardening Android for Security and Privacy

[phatfinger]

Great article found on the TOR blog

Mission Impossible: Hardening Android for Security and Privacy

https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy

This blog post describes the installation and configuration of a prototype of a secure, full-featured, Android telecommunications device with full Tor support, individual application firewalling, true cell network baseband isolation, and optional ZRTP encrypted voice and video support

 

[Davdi]

Great start, but there's a ton of work to do before it becomes usable on a daily driver device. Another approach could be a Linux build for the tablet incorporating SELinux. For a secure tablet, I'd happily use that.

 

[brandennj]

I am about ready to start this... any tips before starting? is it ok to use one that is used vs. new?

 

[mikedt]

Great start, but there's a ton of work to do before it becomes usable on a daily driver device. Another approach could be a Linux build for the tablet incorporating SELinux. For a secure tablet, I'd happily use that.

I believe Samsung have already done it, they call it KNOX. A hardened, secure version of Android. Sure most of their current mid to high-end devices have it.

 

[Rxpert83]

Android incorporated SElinux starting with 4.3

With 4.4 the default is enforcing mode