Just installed GOS on my phone, really like it. I want to know how GOS users setup their profiles to learn from them. So far, i found out the followings:

  1. everything in Owner

  2. leave Owner blank. Put everything in another profile names User.

  3. leave Owner blank. Put all Google stuff in user Google. Put all FOSS app in FOSS user. Put all bank stuff under Sensitive user.

  4. use Owner as an app repo. So install Google Play, Acrescent, Fdroid. Install apps from there, but dont use them. Instead, when create new user, push those apps from Owner. This is similar to Side of Burritos on Youtube.

anything different?

  • RodgeGrabTheCat 🇨🇦🏴‍☠️@sh.itjust.works
    2·
    9 hours ago

    One profile on a 6a. If I had a Google account, I would likely have a second profile.

    Most apps come from Github through Obtainium, I also use F-Droid, and a few get updated from Aurora Store.

    I noticed a month ago that some apps aren’t being updated in Accrescent - Fdroid had a more up-to-date version for a few apps. I heard they have a funding issue which is probably why. Just something to be aware of.

    The apps I have on board, that aren’t privacy respecting, either have their network access blocked or are disabled until I need them. These are Amazon Shopping, Roamless (data esim), and Sound Connect (Sony BT headphones).

    No Google account but I do run Sandboxed Google Play for the notifications. Only two apps use the notifications through SGP - Signal and Protonmail but of which have taken steps to conceal the contents of the message from Google.

    I have a Duress pin set. If being brute forced, the pin I set will likely be entered before my real pin and wipe the phone.

    I mostly use a fingerprint for unlock so no one can see my pin while in public spaces. I also avoid unlocking if anyone is too close to me.

    Phone stays in airplane mode most of the time to avoid cell tower triangulation. Using a voip phone service makes it possible to make and receive phone calls without cell towers being involved. My voip provider is very kyc but I do plan on switching to JMPChat soon.

    Reboot is set for 8 hours.

    If I disable the microphone I can never enable it quick enough to answer an incoming call so don’t turn it off system-wide but do deny for apps that don’t need it.

    Disabling the camera permission system-wide has forced me to wait a very long time, after enabling the permission, before I can take a photo. I leave this permission on and just deny for apps that don’t need it.

    I typically connect to public and home wifi so I leave this on.

    My headphones are bluetooth (I can’t stand using a cable) so BT stays on.

    Global PS is an incoming signal so I leave this on. GOS is transmitting a ton of data to Google so I don’t see the risk. Doesn’t seem to drain much power. Only really needed for my map app.