How to set up Google’s Advanced Protection Program | Secure YouTube Channel

[@sideofburritos]

Another option (if your phone supports it) is to use your phones built-in security key, instead of purchasing two hardware keys - support.google.com/accounts/answer/9289445.

[@ourladyofcordialcivility6882]

Off Beat Comment I am subscribed to you channel I don't ever see current notifications anymore. My Compliment: You must be on the right track LOL

[@sideofburritos]

@@ourladyofcordialcivility6882 Haha, you may need to click the "bell" option on my channel page. Otherwise, YT only notifies you sometimes.

[@akc3n.grapheneos]

Another great video that'a on point and easy to understand! Excellent coverage and overview of your progress, it's inspirational and shows how to move forward in personal development growth to success on topics of interest. Thanks for explaining your test results on GrapheneOS for your viewers and subscribers.

[@sideofburritos]

Thank you for the kind words! I think it's helpful to share the journey instead of pretending that I have it all together, haha.

[@catboyneedspets2090]

I'm interested if the blocking 3rd party apps from getting your google data works on GrapheneOS as it has no real power over the system so that attack service could still work if you can make a video on if that works or not please do

[@phun309]

Regarding the yubikey NFC issue, have you tried enabling storage scopes for Google Play Services?

[@sideofburritos]

I didn't in the video, I just tested now enabling it for Google Play Services and I received the same error.

[@barryallen1100]

Thanks for this video Josh. It is still mess and not thinking good enough. What if hardware gets corrupted? Could you create a guide for installing graphene OS on Xiaomi,Redmi and Poco phones. Alternatively suggest a custom OS such as Sailfish or Bada. These are/were not as safe as Android but they are still a good option. What do you think? Pls reply

[@sideofburritos]

Hi there, I've had a YubiKey on my key ring for 8+ years without issue. As far as computer related hardware goes, it's very solid. You could also purchase more than 2 and keep them in different locations. The more you have registered, the less change one breaking would cause you to get locked out. GrapheneOS only supports Pixels because they're the only ones that meet the projects hardware security standards - grapheneos.org/faq#future-devices As far as an alternate goes that supports other devices, I've seen DivestOS recommend (I've personally never used it) - privsec.dev/posts/android/choosing-your-android-based-operating-system/#divestos

[@barryallen1100]

@@sideofburritos Thanks a lot!

[@MidianNiles]

Hey Josh, great video; I got my 2 YubiKeys setup and got my GrapheneOS/Pixel6 setup. One major problem though, is trying to access my email on my 'non-googled' profile; my email app (FairEmail) doesn't have a way to authenticate via security keys. At the time of composing this, I can't check email on my 'non-googled' profile on GrapheneOS. Have you been able to get your emails using your owner "non-google" profile to work?

[@sideofburritos]

Hi there, very nice! Hmm, so the mobile app they have doesn't support it? Play services are required to use FIDO authentication with vanadium on GrapheneOS. This thread has some more details on it - github.com/GrapheneOS/Vanadium/issues/192

[@MidianNiles]

@@sideofburritos I possibly wasn't specific enough; I did get my keys setup with Gmail using my standard PC, everything worked as expected on my desktop system. After getting the keys done on my desktop, I then fired up my Pixel6. Once I was logged into my owner/de-googled profile, I attempted to check my gmail in FairEmail and within FairEmail, I'm getting Gmail authentication errors. So my issue is within FairEmail; Gmail on my Google Services profile works normally.

[@GouriSaha-b6w]

I have a question... That I have one yubikey and I want to purchase another so my question is that can I set this two yubikey with other Gmail account and active Google advance protection program all my account with same Two yubikey.... Next I see a video where a guy told me that yubikey can protected you from log in sessions cookie hacked...

[@sideofburritos]

I don't know the specifics, but that's not completely accurate. If someone steals your session cookie and injects it into their browser, they should be able to log in. It really depends on the site handles session. With some sites, if the IP changes for a session in the middle of it or the User-Agent suddenly changes, it will invalidate the session. Others will just allow you to continue. It really depends on the site and how things are configured. I'm not aware how a YubiKey could help with that. Regardless, YubiKeys are a great idea that will increase your security.

[@kmq1996]

i've enrolled to this program but i have problem with authorize galaxy watch with google account. Any help?

[@ScriptureFirst]

Back to your last vid. Do you think gboard w network access denied in grapheneOS is private?

[@sideofburritos]

I commented this reply on your previous comment: "Depends on your threat model. I think it's OK to use if you remove networking permissions. Some people don't like to regardless. Florisboard is open source and supports swype typing."

[@ScriptureFirst]

@@sideofburritos it works!! thank you! exactly what I was looking for

[@TheHikingGeek]

Hello. Signal has stopped SMS. What do you recommend for a secure SMS app? Thank you

[@sideofburritos]

Hi there, I switched back to using the default Messaging app on GrapheneOS.

[@lisoliveira]

Maybe you need to whitelist the security key on your VPN otherwise NFC won't work

[@jhelie4732]

what email would you recommend ?

[@sideofburritos]

I personally like ProtonMail, that's what I've been using for years.

[@jhelie4732]

@@sideofburritos thanks for the reply! same here, i’ve used it for a couple of years. can i connect my phone to my carrier (verizon) before i install GOS on it or do i need to do that after?

[@ComplexAlpaca]

What pdf app are you using

[@sideofburritos]

I use the stock GrapheneOS PDF app.

[@ComplexAlpaca]

@@sideofburritos is there a place where i can download it, my phone runs normal android?

[@sideofburritos]

@@ComplexAlpaca Yes, it's on the Google Play Store. Here's the link - play.google.com/store/apps/details?id=app.grapheneos.pdfviewer.play If you would prefer downloading it directly from GitHub, here's that link - github.com/GrapheneOS/PdfViewer/releases

[@markcuello5]

HELP

[@sideofburritos]

?

[@JamaaLS]

LOL bro said "HAAAAAAAAAALP!"

[@ArtOfHealth]

This is really just a mess. I read what you recommended in Graphene. Not even Android development is caught up on all the problems. But Daniel is being very diligent about solving these issues to protect Graphene users. The temptation to live in lockdown mode for more privacy and security is becoming more of a common sense decision for me. Saying goodbye to all things this G company has to offer might just be what we need.

[@sideofburritos]

I did my best to explain the audience this video was targeting, but it's not for those with the advice of "just don't use Google". I know everyone likes to say that or something along those lines, but that's not great advice especially to people new to privacy/security. A lot of people don't have another option. The only reason I'm able to share information to a wide audience is because of KZbin. Yes there are other video platforms, but those new to privacy/security don't use those platforms. Other individuals such as business owners, marketers, employees at a company, may also need to use Google services. It's easy to say "just don't use Google", it takes time and effort to give actual suggestions on how to improve ones current privacy/security posture without exiling a service. This is my own opinion, but GrapheneOS offers Sandboxed play service because they understand the need for the compatibility layer. It would have been easy to say there is no option and nothing you can do because Google is bad, but instead they improved upon it and created a better option based off of it for their user base.

[@ArtOfHealth]

@@sideofburritos Very good. And yes, I understand the mess. I do think Google is aware of the mess as well. They know about those of us that are concerned about privacy first. They have billions of our money ivested into their system and need to keep it going. It is like a drug addiction. Stop the addiction plus the drug manufacturers is the only answer.

[@bananajoe9951]

Yeah, you can't secure your account from google. That's the real problem. Since google isn't exactly protective of your data, anyone can get to it.