I am in the process of getting TOR browser installed & setup on an LG Android phone. Here is what I've done so far...
I was first using Orbot & Inbrowser, but for various reasons I have decided to go with the full fledged TOR setup.
After reading ~6 articles and ~3 videos, to see what my options are currently, I have come to the following conclusions. Please correct me if I'm wrong...
A video titled 'How to use TOR browser Part1 (by the HatedOne / 11:45) seems to be the current way to setup & install TOR on an Android. I say this because the video content agrees so far with what little I have seen & done. The notes that I have taken on the video are below:
The 'brush' icon (top-right screen) saves Js settings VS closing the browser entirely, which does not save previous settings.
(~5:30+) Set HTTPS EVERYWHERE to 'block all unencrypted connections. Then later, trusted connections can be unblocked manually.
(~6:15+) The TOR circuit button. Click on the 'lock' icon in the URL bar, to display the relays in your circuit. Sometimes your circuit may be too slow, or you may want to change your exit node. This can sometimes solve the problem of your page being in a foreign language of the exit node that you're using.
TOR is just a tool. It can be very secure, but if good OpSec rules are not heeded, your anonymity can become very easily conspicuous. Here're some things to keep in mind (~7:15)...
Do NOT use personal accounts that are associated with your real identity. The more general rule is not to use accounts on TOR at all, because accounts are data points that can create links over a long enough period of time. However, you can have anonymous accounts that do NOT link to anything in your real life. Overall, this means no real: phone numbers, names or initials, or links to your real IP address. And if you use a pseudonym on TOR, and then mention it outside of the TOR network, you ARE compromised (7:45).
Do NOT change TOR settings. No addons or plugins (They can track you). No full screen resolution (this can ID your device).Any customizations are sketchy (They make you stand out from the crowd & ID you). Only advanced security settings can be changed, IF you know your shit. (8:00).
Do NOT dicuss personal info. Hobbies, location, profession, pet names, photos, screenshots, opinions & activities, career, qualifications, background, aquaintances, configuration logs, hardware, software, devices (ie- routers, IoT) (8:35)...
Use end to end encryption. TOR is good, but not magic. TOR only encrypts data between relays. Exit nodes can collect unencrypted data, just like anyone else. If the URL lock (address bar) is green, you're good. If it's red, you're screwed. Also make sure you can trust or verify that the encryption on the server itself has not been compromised (9:20).
Know your shit about surveillance capabilities. IE- a script on your phone can continuously emit inaudible sounds that can be picked up by a computer's mic. If a website runs a script like that, it can link your browser session to your phone's ID. If you run 2 such scripts, 1 over TOR & the other over clear net, then your anonymous session can be linked to your real identity.
If you watch an iPhone review video on TOR via the youtube app, and then turnaround & use Google (via clearnet) to search that specific product, those 2 activities can almost certainly be linked to your identity. Google-like trackers can do all sorts of nasty tricks to find your true identity. So, comparmentalize what you do, & whos services you use. If you make 2 connections (1 anon & 1 non-anon) to a server at the same time, you're screwed. To avoid these pitfalls, it's best not to do anything else when using TOR.
- Mitigate system vulnerabilities. TOR is only as strong as its weakest link. TOR cannot protect you on a compromised hardware or OS (10:45). If there is malware with root privilages on your phone or laptop, then no tool can save you (11:00).
There are my notes from the video. As of now, I have downloaded TOR from the Google Play Store. But I have not used it yet, because I want to find a more definitive answer before I take the plunge. There are still ~ 6-12 videos that I want to watch, but I halted any more research & decided to start asking after my findings started becoming inconsistent & a bit confusing. See, I started watching videos first. That's when I seen the one mentioned above (TheHatedOne). But after reading the last several articles about setting up TOR, I started to wonder if I might be heading in the wrong direction. I was of the impression that I just need to install the browser from the Play Store & then run & configure it a little. But some writings say that I should get an Orbot & Orfox combo & install TOR that way. It wasn't until after about the 3rd artical mentioned the Orbot & Orfox combo that I started to notice that those articles seemed dated & maybe obsolete. Another article even mentioned Orwall. So, I am just wanting to narrow down my choices before I continue. Which method should I opt for?