去年在四月一日推出 1.1.1.1 服務的 Cloudflare 打算更進一步保護連線內容，提供 Wrap 服務 (就是 VPN)：「Introducing Warp: Fixing Mobile Internet Performance and Security」。
不過這樣在 privacy 上的保護就變弱了，因為 Cloudflare 手上就拿到更多流量資訊可以交叉比對... 大概會申請起來放著在外面用，而不會平常就開著。
申請是透過 app 申請，Android 的在「1.1.1.1: Faster & Safer Internet」這邊，而 iOS 的在「1.1.1.1: Faster Internet」這邊。
目前申請後需看到排隊的編號，像是這樣：
在「Android Gets FIDO2 Certification—Now Supports Secure Passwordless Logins」這邊看到 Android 7.0 支援 FIDO2 了：
If you have already installed the latest update of Google Play Services released earlier today, and your Android device is running Android version 7.0 Nougat or above—Congratulations! Your device is now FIDO2 Certified.
所以在 browser 有配合的情況下，可以用手機當作 MFA，而且 anti-phishing...
這則從 Nuzzel 上看到的，國外討論得很凶：「Facebook pays teens to install VPN that spies on them」。
Facebook 付錢給使用者，要他們安裝 VPN (以及 Root CA，看起來是為了聽 HTTPS 內容)，然後從上面蒐集資料，這本身就不是什麼好聽的行為了，但更嚴重的問題在於包括了未成年人：
Since 2016, Facebook has been paying users ages 13 to 35 up to $20 per month plus referral fees to sell their privacy by installing the iOS or Android “Facebook Research” app. Facebook even asked users to screenshot their Amazon order history page. The program is administered through beta testing services Applause, BetaBound and uTest to cloak Facebook’s involvement, and is referred to in some documentation as “Project Atlas” — a fitting name for Facebook’s effort to map new trends and rivals around the globe.
這個計畫在 iOS 平台下架了，但 Android 平台看起來還是會繼續：
[Update 11:20pm PT: Facebook now tells TechCrunch it will shut down the iOS version of its Research app in the wake of our report. The rest of this article has been updated to reflect this development.]
Facebook’s Research program will continue to run on Android. We’re still awaiting comment from Apple on whether Facebook officially violated its policy and if it asked Facebook to stop the program. As was the case with Facebook removing Onavo Protect from the App Store last year, Facebook may have been privately told by Apple to voluntarily remove it.
未成年人部份應該會是重點，拉板凳出來看...
Intra 是 Alphabet (Google 母公司) 旗下 Jigsaw 所開發的 app (目前只有 Android 的，依照說明需要 4.0+)，透過 VPN 的架構換掉 DNS 設定，透過本機的 DNS Proxy 改走到外部的 DNS over HTTPS 服務上。
走 DNS over HTTPS 可以降低 DNS 被干擾 (security issue) 或是被監控 (privacy issue) 的風險。
在軟體內已經先內建了兩個 DNS over HTTPS 清單，一個是 Google 的 Google Public DNS，另外一個是 Cloudflare 的 1.1.1.1，除此之外也可以自己輸入。
由於是 Alphabet 家的軟體，預設是用 Google 的服務。
軟體本身是 open source 專案 (Apache-2.0)，程式碼在 Jigsaw-Code/intra 這邊可以取得。
在「Chrome for Android may start disabling JavaScript on 2G connections」這邊看到的，引用的文章是 XDA 的「Google Chrome on Android to disable JavaScript automatically on 2G connections」。
在「Disable scripts for Data Saver users on slow connections」這邊可以看到 Android 的計畫，在打開 Data Saver 的情況下，Chrome 會停用 JavaScript，並且提示使用者：
If a Data Saver user is on a 2G-speed or slower network according to the NetInfo API, Chrome disables scripts and sends an intervention header on every resource request. Users are shown a UI at the bottom of the screen indicating the page has been modified to save data. Users can enable scripts on the page by tapping “Show original” in the UI.
在「Enabled NoScript Preview feature by default on Android」這邊可以看到對應的程式修改。
這樣反而可以少收到很多廣告耶，反倒希望是全域打開 XDDD
剛剛在「How to Android without Google」這邊的文章裡看到「How to Android without Google [easy way]」這篇指南，說明如何弄出一個沒有 Google 專屬套件的 Android 環境。
主要是 LineageOS 當作底層基礎 (作業系統)，然後用 microG 提供 API 相容層，並且用 F-Droid 安裝 Open Source 軟體。
裡面有兩個方案以前沒看過，一個是 XPosedFramework，提供框架讓使用者有更強的控制力，更完整的說明可以參考「Xposed Framework + App Settings 為每個 App 設定不同的運行模式」這篇。
另外一個是 Yalp Store，當軟體只在 Google Play 平台上提供安裝的時候，就需要透過這個套件了 XD
主要是記錄下來，完全不靠 Google 目前還是有點難度：「De-Googling my phone」。
主要是刷機成 LineageOS (還是 Android)，然後上面不裝 OpenGApps，而是靠其他軟體來補足... 在英文版維基百科的「List of free and open-source Android applications」也有不少資訊可以看。
另外一個蠻重要的應該是 microG Project，不過在文章裡沒提到...
Telegram 推出新的 client，叫做 Telegram X：「Telegram X: Progress through Competition」。
全新打造：
The Telegram X project features apps written from scratch, with an entirely new code base and without all the legacy components that our older apps have accumulated through the years.
然後包括 iOS 版本與 Android 版本都有對應的版本：
The goal of Telegram X is to reinvent Telegram and explore new frontiers in speed, ease of use, quality of animations and all other aspects. Today we are glad to present two new official apps – Telegram X for Android and iOS.
就裝起來玩看看，不知道實際的感覺會有什麼差異...
忘記在哪邊看到的，分析 Android APK 檔的軟體：「Droidefense: Advance Android Malware Analysis Framework」。
Droidefense (originally named atom: analysis through observation machine)* is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and tricks that malware researcher have on they every day work. For those situations on where the malware has anti-analysis routines, Droidefense attemps to bypass them in order to get to the code and 'bad boy' routine. Sometimes those techniques can be virtual machine detection, emulator detection, self certificate checking, pipes detection. tracer pid check, and so on.
Droidefense uses an innovative idea in where the code is not decompiled rather than viewed. This allow us to get the global view of the execution workflow of the code with a 100% accuracy on gathered information. With this situation, Droidefense generates a fancy html report with the results for an easy understanding.
看起來是輔助用的工具... 先記錄下來 XD
在「就算關掉 Google 的定位服務也還是會蒐集位置資訊...」這邊提到的蒐集問題，南韓出手調查了：「Regulators question Google over location data」。
Regulators in South Korea summoned Google (GOOGL, Tech30) representatives this week to question them about a report that claimed the company was collecting data from Android devices even when location services were disabled.
英國也在看情況：
U.K. data protection officials are also looking into the matter.
美國與歐盟其他國家反而還沒看到消息... (不過美國有可能是以訴訟的方式進行)