Advanced Privacy - know all about it

Wow very interesting and confusing…what were your Manage My Location settings in these tests?

When using AP I decided not to mess with that and leave it at the use my real location setting.
Right now the Teracube is back to normal, VPN with InviZible Pro. What seems weird is that the little mapbox in the manage my location section is showing Santa Fe, New Mexico despite me being in California and my current VPN IP being in Idaho. :question::question:
Not sure if that little map is current or not. I assume it is.

EDIT: Did a quick test on the Essential PH1 and /e/OS 1.2-q.
Advanced Privacy Hide IP and Twitter PWA.
IP location in Germany. Twitter email also says location was Germany.
The little mapbox shows my real location.

Awhile back the InviZible Pro dev chimed in with a couple of comments. Can’t say it really clears anything up but appreciated nonetheless.

Regarding my original query about the PWA returning real location:

Alexander Ged_sh:
InviZible, Orbot and other VPNs can’t do anything with GPS location. If you give the app location permission, it can send your exact location to remote servers.
On the other hand, if you logged into your account with your real IP address and then re-logged in with Tor, your real location is still stored on the server. The application will use it instead of the new Tor IP address.

Regarding getting WiFi data (from Brahman’s comment):

Apps can’t get this data without location permissions in modern versions of Android.

2 Likes

Btw @marcdw the /e/ team found my Twitter PWA problem. I had the “System” app unselected in Hide my IP. Still unclear to me because I thought PWAs were basically shortcuts from the browser, but not entirely apparently.

2 Likes

Oh, interesting. Confirmed. I had System checked already. A few tests with it unchecked did indeed result in my real location in the Twitter emails. Didn’t have to deal with captchas either which confused me at first

/e/OS has PWA Player which handles those. It’s a system app. I noticed it can use the location permission. I granted it just to see if it would make a difference during testing.

Also noticed that clearing data of PWA Player will remove installed PWAs.

2 Likes

I’ve noticed a couple of interesting things when mixing AP with the Work profile.

I use Shelter to have a second (Work) profile (mostly so that I can run two instances of Signal simultaneously on the one dual-SIM phone, one for each number).

I noticed that even though my IP address was masked in the Main profile by ProtonVPN, it was not similarly masked in the Work profile, and was revealed there when I checked what the Work profile instance of AP was doing. Setting the Work profile instance of AP to Hide my real IP address and asking that My internet activity must appear from: Australia did not in fact work. Instead, it appeared to be from wherever the Tor exit node was (since the masking uses Tor).

I got around this by cloning the ProtonVPN app from Main into the Work profile and having that cloned instance also running. It too now chooses Australia, so I have two instances of the ProtonVPN notification dot in the Status Bar under normal operations. This now reassures me that both Main and Work profiles have masked IP addresses (even though AP says otherwise since it does not yet recognise that a suitable VPN will automatically mask the IP – probably a future addition).

One amusing thing: when I set the Hide my real IP address setting, and then turned on ProtonVPN, since it was looking for the Fastest connection (default setting), it connected to Nigeria! For a brief moment, I was a Nigerian Prince … :wink:

There may be some implications here for what is going on above. There are two separate instances of AP in operation, one for each of the two profiles, Main and Work, which latter includes the usual suspects of Contacts, Files, and any other apps cloned to Work from Main, not to mention the System apps that are not shown by default unless you choose to Show All Apps in the Shelter settings.

So, there is a bit of complexity to navigate in order to set up both profiles to be comparably hardened for privacy. I was caught out by assuming that the VPN on Main would also be routing traffic from Work. Nope. That was fully exposed, which I didn’t realise until I checked the Work AP instance (by doing an https://whatismyip.com test from within the browser in the Work profile). So, a tip for new players at this.

Now, I’d like to figure out how to use one SIM for data in Main/Personal, and the other SIM’s data in the Work profile, since that second number is a work number…

Any ideas?

3 Likes

Does Advanced Privacy impact cell phone reception and/or call quality?

Advanced Privacy gets you through Tor while browsing, does location spoofing and blocks apps trackers. Nothing there to impact call reception quality in my opinion. As far as I’m concerned, no problem regarding that aspect!

2 Likes

(if you have the ip-hide feature enabled) I wonder if a Dialer Vo(LTE/Wifi) call does bypass Androids VPN. I guess it surely does but haven’t checked - 2g calls wouldn’t be affected anyway. So if I’m right, then no, it should not influence those calls.

But any App with voice-calls (whatsapp/signal etc) will - and depending on the length and number of network hops there will be higher latency and reduced bandwidth affecting call quality.

If we exclude a voip app from the ip-hide feature, will we still experience the reduced bandwidth and increased latency? Thank You.

the feature works as advertised (I checked) - if you remove the checkmark of voip App in the app-list offered by the Tor function, it will not get routed via Tor → no increased network-hops or latency for a voip App. (A small “but”: if the App is using firebase-cloud-messaging to notify of incoming calls, there can be a delay in notification / initiation as those messages are routed on Tor - but not influence the actual call itself)

3 Likes

Thank you for clearing this up! Much appreciated.

@tcecyk @MaMaTT88 So I was struggling to make a phone call this morning, but then once I checked off Advanced Privacy, the call DID go though. I then tried a call with just the “Hide my real IP address” option checked off for the “Phone” app and the call went through again. So it seems pretty important for users to check off the Phone app in order to have basic phone call functionality. Are others having a similar experience?

1 Like

Was it a VoLTE or VoWifi phone call, or a regular one?

@MaMaTT88 @tcecyk The network said H+. When that comes up I know the call is very likely to go through and sound good. But I’ve been having mixed results. Later a phone call with the phone app removed from hide-my-ip behaved poorly. Then I made another call with the same setting and I wouldn’t even here the phone dialing. It couldn’t even get connected. So I then had to turn off all of Advanced Privacy to be able to make the call, which then went smoothly through the H+ network.

So what’s the deal? Am I just not going to be able to use the Advanced Privacy feature? I want to be able to use as much of the feature as possible without it negatively impacting my phone calls. I need to better understand how Advanced Privacy works in order to be able to set it up appropriately. I’ve read through this whole thread, but I’m still not clear enough on how everything works.

Okay, so my guess is that the hide-my-ip function is responsible for my phone call issues, since that’s the part of Advanced Privacy that goes through the /e/OS’ version or orbot. Apparently excluding the phone app from hide-my-ip isn’t enough to have good phone call functionality, so I’m wondering if I will also need to exclude “System” from hide-my-ip. Would that then be enough to bring back normal phone functionality?

3 Likes

I’d disable hide-my-ip at the slightest networking problem, it’s an expert feature imo.

leaving hide-my-ip disabled for a few days could troubleshoot a potential influence on carrier calls by isolation. I think it’s unlikely, especially <4g. I’ll ask more questions in your opened thread

2 Likes

H+ is what my phone started saying a few weeks before the carrier turned off the 3g network (at which point calls didn’t work at all), i.e. likely 3g workaround or sth, i imagine…

1 Like

How about advanced privacy during tethering; do the same features apply to tethered devices (as to the device running AP) whenever AP is turned on?

1 Like

If I use proton vpn do I need AP? Can both run together?

1 Like

Both can run together. But you’d better don’t use the “Hide my IP” feature from Advanced Privacy as ProtonVPN does it better.

1 Like