How far you want to go depends on your threat model. The higher the threat model, the more you will have to sacrifice convenience. It may be a situation where radio communication with frewuency hopping and encryption is better than using a cell at all.

Keep your phone's location services off. Either way, your SIM can track you, your phone is constantly pinging cell towers. The only way to use a cellphone anonymously is to have airplane mode activated 24/7 with no SIM card, plugged directly into a modem, no WiFi. Then use Tor, or at the very least an always on VPN with killswitch engaged. GrapheneOS will spoof your phone's MAC address.

The travel phone should be kept in a faraday bag when it's in your car and at frequented locations that could doxx you. This is not always possible for many people, but the more convenience, the less privacy.

The idea is to understand the more often you use it outside and where you use it, the easier it will be to fingerprint and track you and act accordingly.

New scanning tech allows your device to be "fingerprinted" to your tag number and registration, and all the other signals coming from your car (car cell modem, animal chip, mobile, even library books) with a scanner WHILE YOUR CAR IS MOVING.

Definitely put the phone in airplane mode or turn it off and keep it in the faraday bag whenever possible before turning into a parking lot. Scanners are often used in parking lots.

If you have to travel, silent.link has some pretty awesome pay as you go, super fast data only esims. Because they are anonymous international esims, the cell providers can see that they are on the network, but because they are roaming on the network, the network provider cannot attach that sim to your identity.

This does not however prevent device scanning or triangulation, hence the faraday bag.

You have to know your threat model. Some people with more extreme threat models may choose to use no phone or use multiple throwaway phones and multiple esims.

When travelling, carry an open source travel WiFi router like the Beryl AX with OpenWrt, OpenVPN, and Wireguard pre-installed and connect to that LINE-IN instead of the hotel WiFi.

Reply to this note

Please Login to reply.

Discussion

i am waiting for your step by step class

Ty. It's coming. I'm giving my hidden private client site an entire overhaul, rewriting the client guide and creating materials to accommodate more threat models and opening it to the public... soon-ishβ„’ :)

awesome. :D

Interested

Interested in this

Is it explained at a 7yo level because that's being generous to my understanding and tech ability

But muh podcasts! Take a clean phone with no SIM card and download your media to it. Create an old school iPod for music, podcasts, and movies. Leave it in airplane mode and use headphones or direct wired connection to your car when driving around. Leave your phone in a bag for communication only.

thank you for communicating all this

& constantly testing it

all like r&d style

appreciate it

important work

Thx gil :)

better yet no phone at all. WiFi tablets are better running a Linux privacy build. Disable all radios except for WiFi and scramble its mac

We’re currently still selling gli-net travel routers with wireguard. Do you believe Beryl AX is better?

We sell the small travel router. What is better about this one? https://bitcoinbrabant.com/product/wifi-and-vpn-ethernet-mini-smart-router/

What firmware does it come with?

The Beryl AX is a newer and more advanced router compared to the Shadow (GL-AR300M).

Some key differences:

The Beryl AX supports the latest Wi-Fi 6 (802.11ax) standard, the Shadow is limited to older Wi-Fi 5 (802.11ac), so the Beryl AX can provide faster wireless speeds and better performance, especially in congested environments.

The Beryl AX also has a more powerful processor, with a dual-core 1.3 GHz CPU, compared to the older single-channel 2.4 GHz Wi-Fi N connection in the Shadow, so the Beryl AX can handle VPN and network traffic better.

The Beryl AX has more Ethernet ports, with 1 WAN and 1 LAN, compared to the single Ethernet port on the Shadow.

The Beryl is a little more expensive, but IMO well worth it.

The shadow also has two Ethernet ports. Luckily we in general don’t need the better performance or mine / run nodes in congested areas. Can imagine you’ll need more performance when traveling to these kind of areas. For us and our clients I believe the shadow is still sufficient for its purpose.

Oof. Typo. Fair enough. Beryl AX comes with a 2.5G Multi-gigabit WAN port and a 1G gigabit LAN port. Not sure about the speed of the shadow. The better performance of the Beryl AX also doubles as a great home router behind a Protectli firewall.

nostr:npub1jqs0u7zhh53e94gyhm4eu458wm6sw7z0kk66jjhhkhh346tcq2ysfgr247 Found the comparison chart I was looking for with port and VPN speeds.

**Differences**

**Wireguard max:**

Shadow: 50 Mbps

Beryl AX: 300 Mbps

**OpenVPN max:**

Shadow: 15 Mbps

Beryl AX: 150 Mbps

**Gigabit port**

Shadow: No

Beryl AX: Yes

**External Antenna**

Shadow: No

Beryl AX: Yes

**MO-MIMO**

Shadow: No

Beryl AX: Yes

**Toggle Button**

Shadow: No

Beryl AX: Yes

**EAP**

Shadow: Yes

Beryl AX: No

Slate AX is really good too. I recommend both, but I personally prefer the Beryl AX.

It's a great travel router, and a great home router-- don't want my signal going to the road to be scanned.

Check comments :)

nostr:nevent1qqsq99sdehtmahmlmn0n863y2tdh78szkhhjrp27ypslwzhjs3rjkecppamhxue69uhkummnw3ezumt0d5pzqn4csvgddd8djhrdv63etv7nea2ehp06aj8hdyw6l4q94yhq2htdqvzqqqqqqylckrcs

Is there a way to turn off our cars modem/tracking devices? Where do we start here?

Toyota 2019 model allow to disable all comms

awesome insight and tips πŸ€™πŸ»πŸ«‘πŸ€—πŸ™ŒπŸΌ

I thought GL's products and firmware were closed.