PSA: Proton VPN OpenVPN Changes

This week, Proton announced that they were deprecating all OpenVPN configurations created before 2024. This is due to enhanced security within their newer protocols. Since the pfSense configuration files on our site were created prior to this change, they will likely stop working on March 1, 2026! We highly recommend that you create new configurations for your firewalls before then. You can either follow the steps within Extreme Privacy: 5th Edition to create a new OpenVPN configuration or the steps within Issue 009 of UNREDACTED Magazine to create a Wireguard configuration. We are currently using Wireguard on all of our devices due to speed.

GrapheneOS 2026 Settings

The previous two articles deviated substantially from the content within Extreme Privacy, 5th Edition. This is because Apple added many new invasions to your privacy with their latest offering. While Apple devices are extremely secure, even more so than most Android devices in my opinion, this comes at a privacy risk. The settings presented in the previous articles eliminate much of the concern for Apple users, but we have to always be watching for the next embedded data collection utility.

With GrapheneOS, there is not as much to discuss, as it has always been a bare-bones mobile operating system allowing you to add what you want instead of being force-fed new features. However, much like Apple, many things have changed over the past two years. Let's revisit the entire content for GrapheneOS customization to match their latest release.

I suspect that most of these settings will already be applied to your device. However, new features are now available and it is always good practice to confirm your desired settings annually. While GrapheneOS does not typically revert any modified system settings after an update like iOS does, individual apps may have encouraged you to disable some of the overall protection.

The following represents how I set up my own device. Some of these settings may be too restrictive for your needs. As I stated in the previous articles, do your own research and understand what these modifications change. Only then can you make the most informed choice for your needs.

Again, the following is simply a supplement to the content within the book.

  • Settings > Network & internet > Private DNS > (Enter your preferred DNS)
  • Settings > Network & internet > Internet connectivity checks > GrapheneOS server
  • Settings > Network & internet > Attestation key provisioning > GrapheneOS proxy
  • Settings > Network & internet > Widevine provisioning > GrapheneOS proxy
  • Settings > Apps > Contacts storage > Device only
  • Settings > Notifications > App notifications > All apps > Disable undesired
  • Settings > Notifications > Notification history > Disabled
  • Settings > Notifications > Bubbles > Disabled
  • Settings > Notifications > Notifications on lock screen > Don't show any notifications
  • Settings > Notifications > Notification cooldown > Disabled
  • Settings > Notifications > Flash notifications > Camera Flash > Disabled
  • Settings > Notifications > Flash notifications > Screen Flash > Disabled
  • Settings > Notifications > Wireless emergency alerts > Disabled
  • Settings > Notifications > Enhanced notifications > Disabled
  • Settings > Sound & vibration > Media volume > Lowest
  • Settings > Sound & vibration > Notification volume > Lowest
  • Settings > Sound & vibration > Media > Pin media player > Disabled
  • Settings > Sound & vibration > Media > Show media on lock screen > Disabled
  • Settings > Sound & vibration > Default notification sound > None
  • Settings > Sound & vibration > Dial pad tones > Disabled
  • Settings > Sound & vibration > Screen locking sound > Disabled
  • Settings > Sound & vibration > Charging sounds and vibration > Disabled
  • Settings > Display > Screen timeout > Low
  • Settings > Security & privacy > Device unlock > Screen lock > Pin
  • Settings > Security & privacy > Device unlock > Screen lock > Settings > Scramble PIN > Enabled
  • Settings > Security & privacy > Device unlock > Screen lock > Settings > Enhanced PIN privacy > Enabled
  • Settings > Security & privacy > Device unlock > Screen lock > Settings > Lock screen timeout > 5 seconds
  • Settings > Security & privacy > Device unlock > Screen lock > Settings > Power button locks > Enabled
  • Settings > Security & privacy > Device unlock > Screen lock > Settings > Allow camera access > Disabled
  • Settings > Security & privacy > Privacy controls > Show passwords > Disabled
  • Settings > Security & privacy > Privacy controls > Location access > Disabled (until needed)
  • Settings > Security & privacy > Exploit protection > Auto reboot > 18-24 hours
  • Settings > Security & privacy > Exploit protection > USB-C port > Charging-only
  • Settings > Security & privacy > Exploit protection > Turn off Wi-Fi automatically > 1 minute
  • Settings > Security & privacy > Exploit protection > Turn off Bluetooth automatically > 1 minute
  • Settings > Security & privacy > Exploit protection > Secure app spawning > Enabled

These settings provide a more hardened Android system while taking advantage of GrapheneOS's robust security features. Modify your device as needed and never let our fascination with privacy completely break the functionality of technology.

iOS 26 Settings

Much like the previous article, Extreme Privacy, 5th Edition also offered many privacy and security considerations for previous versions of iOS. That content is also pushing two years old now, so I am again overdue for an update.  This article revisits that entire section for the recent changes within iOS 26.

The following assumes you are on iOS 26.1, which was the latest version at the time of writing. Now that we have let Apple offer the first major update to that OS, the menu settings should be fairly locked in. I always prefer to wait for a ".1" update before documenting specific menu settings. This guide also assumes you have already purchased and booted the mobile device, created your Apple ID, and configuring any personal customizations as explained in the book.

The purpose of this article is to revisit all of the System Settings for optimal iOS privacy and security. While everything here will work if you logged in to an iCloud account, which is different than an Apple account, some menus may appear differently. Consider it a supplement to the content within the book.

Once you can access the system on the device, the following configurations should be considered through the Settings menu. Note that some of these settings may disable features which you find desirable, and some options here might not be present within your device. Research any modifications and apply settings which are most appropriate for your usage. Never blindly accept my opinions, understand why you want the change.

  • Settings > Apple Account > Personal Information > Name and Photo Sharing > Disabled
  • Settings > Apple Account > Personal Information > Communication Preferences > Disable all
  • Settings > Apple Account > Media & Purchases > View Account > Personalized... > Disabled
  • Settings > Bluetooth > Off (If not used)
  • Settings > Cellular > Disable as desired
  • Settings > General > Software Update > Automatic Updates > Off
  • Settings > General > AirDrop > Receiving Off
  • Settings > General > AirDrop > Bringing Devices Together > Disabled
  • Settings > General > AirDrop > Use Cellular Data > Disabled
  • Settings > General > AirPlay & Continuity > Disable all
  • Settings > General > Picture in Picture > Disabled
  • Settings > General > AutoFill & Passwords > Disable all
  • Settings > General > Background App Refresh > Apple Store > Disabled
  • Settings > General > Background App Refresh > Shortcuts > Disabled
  • Settings > General > Background App Refresh > Voice Memos > Disabled
  • Settings > General > Keyboard > Auto-Correction > Disabled
  • Settings > General > Keyboard > Enable Dictation > Disabled
  • Settings > General > Keyboard > Stickers > Disabled
  • Settings > Battery > Battery Percentage > Enabled
  • Settings > Passwords > Password Options > Autofill Passwords > Disabled
  • Settings > Camera > Scan QR Codes > Disabled
  • Settings > Search > Show Recent Searches > Disabled
  • Settings > Search > Show Recent Searches > Show Related Content > Disabled
  • Settings > Search > Show Recent Searches > Help Improve Search > Disabled
  • Settings > Search > Each App > Disable all
  • Settings > Siri > Disable all
  • Settings > Standby > Standby > Disabled
  • Settings > Notifications > Scheduled Summary > Off
  • Settings > Notifications > Show previews > Never
  • Settings > Notifications > Screen Sharing > Notifications Off
  • Settings > Notifications > Siri Suggestions > Disable all
  • Settings > Notifications > Disable notifications on sensitive apps
  • Settings > Notifications > If desired, disable all Government Alerts
  • Settings > Sounds & Haptics > Keyboard Feedback > Sound > Disabled
  • Settings > Sounds & Haptics > Keyboard Feedback > Haptic > Enabled
  • Settings > Sounds & Haptics > Lock Sound > Disabled
  • Settings > Face ID & Passcode > Password AutoFill > Disabled
  • Settings > Face ID & Passcode > Allow Access When Locked > Disable undesired
  • Settings > Privacy & Security > Location services > Disable all
  • Settings > Privacy & Security > Tracking > Disable all
  • Settings > Privacy & Security > Motion & Fitness > Disable all
  • Settings > Privacy & Security > Nearby Interactions > Disable all
  • Settings > Privacy & Security > Paired Devices > Disable all
  • Settings > Privacy & Security > Research Sensor & Usage Data > Disable all
  • Settings > Privacy & Security > Journaling Suggestions > Disable all
  • Settings > Privacy & Security > Sensitive Content Warning > Disabled
  • Settings > Privacy & Security > Analytics & Improvements > Disable all
  • Settings > Privacy & Security > Apple Advertising > Personalized Ads > Disabled
  • Settings > Privacy & Security > App Privacy Report > Off
  • Settings > Privacy & Security > Wired Accessories > Automatically Allow When Unlocked
  • Settings > Game Center > Disabled
  • Settings > Apps > App Store > Automatic Downloads > Disable all
  • Settings > Apps > App Store > Video Autoplay > Off
  • Settings > Apps > App Store > In-App Ratings & Reviews > Disabled
  • Settings > Apps > App Store > Offload Unused Apps > Disabled
  • Settings > Apps > Apple Store > Video Autoplay > Off
  • Settings > Apps > Maps > Share ETA > Disabled
  • Settings > Apps > Maps > Air Quality Index > Disabled
  • Settings > Apps > Maps > Weather Conditions > Disabled
  • Settings > Apps > Maps > Ratings and Photos > Disabled (If Present)
  • Settings > Apps > Maps > Show Ratings and Photos Suggestion > Disabled (If present)
  • Settings > Apps > Maps > Follow Up by Email > Disabled (If Present)
  • Settings > Apps > Photos > Shared Albums > Disabled
  • Settings > Apps > Photos > Show Hidden Album > Disabled
  • Settings > Apps > Photos > Show Recently Viewed & Shared > Disabled
  • Settings > Apps > Photos > Show Featured Content > Disabled
  • Settings > Apps > Photos > Enhanced Visual Search > Disabled
  • Settings > Apps > Safari > Siri & Search > Disable All
  • Settings > Apps > Safari > Search Engine > DuckDuckGo
  • Settings > Apps > Safari > Search Engine Suggestions > Disabled
  • Settings > Apps > Safari > Safari Suggestions > Disabled
  • Settings > Apps > Safari > Show Recent Searches > Disabled
  • Settings > Apps > Safari > Quick Website Search > Disabled
  • Settings > Apps > Safari > Preload Top Hit > Disabled
  • Settings > Apps > Safari > AutoFill > Disable All
  • Settings > Apps > Safari > Prevent Cross-Site Tracking > Enabled
  • Settings > Apps > Safari > Fraudulent Website Warning > Disabled
  • Settings > Apps > Safari > Highlights > Disabled
  • Settings > Apps > Safari > Camera > Deny
  • Settings > Apps > Safari > Microphone > Deny
  • Settings > Apps > Safari > Location > Deny
  • Settings > Apps > Safari > Advanced > Privacy Preserving Ad... > Disabled
  • Settings > Apps > Safari > Advanced > Check for Apple Pay > Disabled
  • Settings > Apps > Shortcuts > iCloud Sync > Disabled
  • Settings > Apps > Shortcuts > Private Sharing > Disabled

These settings provide more privacy from Apple while taking advantage of their secure mobile operating system. Modify your device as needed and never let our fascination with privacy completely break the functionality of technology.

macOS 26 Settings

In Extreme Privacy, 5th Edition, I offered many privacy and security considerations for macOS. That content is pushing two years old now, so I am probably overdue for an update.  This article revisits that entire section for the recent changes within macOS 26.

The following assumes you are on macOS 26.1, which was the latest version at the time of writing. Now that we have let Apple offer the first major update to that OS, the menu settings should be fairly locked in. I always prefer to wait for a ".1" update before documenting specific menu settings. This guide also assumes you have already purchased and booted the device, skipping the request for an Apple ID, and configuring things such as Wi-Fi, application firewall, Spotlight, Gatekeeper, FileVault, and any personal customizations as explained in the book. Consider this a supplement to that information.

The purpose of this article is to revisit all of the System Settings for optimal macOS privacy and security. Major updates are known to re-enable undesired settings, so this is a good time to check everything. While everything here will work if you logged in to an Apple account, some menus may appear differently. The following was conducted within System Settings from the Applications menu.

  • Settings > Wi-Fi > Ask to join networks > Off
  • Settings > Wi-Fi > Ask to join hotspots > Never
  • Settings > Bluetooth > Disabled (if not used)
  • Settings > Network > Firewall > Enabled
  • Settings > Network > Firewall > Options > Automatically allow built-in... > Disabled
  • Settings > Network > Firewall > Options > Automatically allow downloaded... > Disabled
  • Settings > Network > Firewall > Options > Stealth mode > Enabled
  • Settings > Battery > Options > Wake for network access > Never
  • Settings > General > Automatic Updates > i > Disable All
  • Settings > General > AirDrop & Handoff > Allow Handoff > Disabled
  • Settings > General > AirDrop & Handoff > AirDrop > No One
  • Settings > General > AirDrop & Handoff > AirPlay Receiver > Disabled
  • Settings > General > AirDrop & Handoff > Allow Airplay for > Current User
  • Settings > General > AirDrop & Handoff > Require password > Enabled
  • Settings > General > AutoFill & Passwords > All Your Password... > (Close "x")
  • Settings > General > AutoFill & Passwords > AutoFill Passwords and Passkeys > Disabled
  • Settings > General > Date & Time > Source > Set > pool.ntp.org > Set
  • Settings > General > Date & Time > Set time zone automatically... > Disabled
  • Settings > General > Date & Time > Time zone > Desired location
  • Settings > General > Date & Time > Closest City > Desired location
  • Settings > General > Login Items & Extensions > Remove or disable those desired
  • Settings > General > Sharing > Disable all
  • Settings > Accessibility > Siri > Type to Siri > Disabled
  • Settings > Accessibility > Siri > Listen for atypical speech > Disabled
  • Settings > Apple Intelligence & Siri > Apple Intelligence > Disabled
  • Settings > Apple Intelligence & Siri > Siri > Disabled
  • Settings > Apple Intelligence & Siri > Siri History > Delete Siri & Dictation History > Delete
  • Settings > Apple Intelligence & Siri > Siri Suggestions & Privacy > Disable all
  • Settings > Desktop & Dock > Show suggested and recent apps in Dock > Disabled
  • Settings > Desktop & Dock > Show recent apps in Stage Manager > Disabled
  • Settings > Desktop & Dock > Automatically rearrange Spaces... > Disabled
  • Settings > Spotlight > Show Related Content > Disabled
  • Settings > Spotlight > Spotlight Search History > Delete Search History
  • Settings > Spotlight > Help Apple Improve Search > Disabled
  • Settings > Spotlight > Results from Apps > Disable all
  • Settings > Spotlight > Results from System > Disable all
  • Settings > Spotlight > Results from Clipboard > Disabled
  • Settings > Notifications > Show previews > Never
  • Settings > Notifications > Allow notifications when the device is sleeping > Disabled
  • Settings > Notifications > Allow notifications when the screen is locked > Disabled
  • Settings > Notifications > Allow notifications when mirroring or sharing the display > Disabled
  • Settings > Notifications > Application Notifications > Disable undesired
  • Settings > Sound > Alert volume > Minimum
  • Settings > Sound > Play sound on startup > Disabled
  • Settings > Sound > Play user interface sound effects > Disabled
  • Settings > Sound > Play feedback when volume is changed > Disabled
  • Settings > Focus > Share across devices > Disabled
  • Settings > Focus > Focus status > Off
  • Settings > Lock Screen > Turn display off on battery when inactive > For 1 hour
  • Settings > Lock Screen > Turn display off on power adapter when inactive > For 1 hour
  • Settings > Lock Screen > Require password after... > Immediately
  • Settings > Lock Screen > Show password hints > Disabled
  • Settings > Lock Screen > Show message when locked > Disabled
  • Settings > Privacy & Security > Location Services > Off
  • Settings > Privacy & Security > Confirm app access
  • Settings > Privacy & Security > Sensitive Content Warning > Off
  • Settings > Privacy & Security > Analytics & Improvements > Disable all
  • Settings > Privacy & Security > Apple Advertising > Personalized Ads > Disabled
  • Settings > Privacy & Security > Apple Intelligence Report > Off
  • Settings > Privacy & Security > FileVault > Enabled
  • Settings > Privacy & Security > Accessories > Always ask
  • Settings > Privacy & Security > Background Security Improvements > Enabled (if desired)
  • Settings > Touch ID & Password > Use Touch ID for Apple Pay > Disabled
  • Settings > Touch ID & Password > Use Touch ID for purchases... > Disabled
  • Settings > Touch ID & Password > Use Touch ID for autofilling passwords > Disabled
  • Settings > Internet Accounts > None
  • Settings > Game Center > Disabled
  • Settings > iCloud > None
  • Settings > Wallet & Apple Pay > Autofill Cards > 0
  • Settings > Wallet & Apple Pay > Shipping Address > None
  • Settings > Wallet & Apple Pay > Email > None
  • Settings > Wallet & Apple Pay > Phone > None
  • Settings > Wallet & Apple Pay > Add Orders to Wallet > Disabled

These basic privacy and security settings plus a properly-configured software firewall such as Little Snitch or Lulu will provide the optimal macOS setup. Most telemetry and overall Apple invasions will be eliminated and you can simply enjoy a secure operating system.

 

Book Store Updates

We have revamped our online book store, which now includes our current books, archived books, magazines, and bundled discounts. You can also choose the "Gift" option to send them to someone else with a custom message.

Internal page: https://inteltechniques.com/books.html

Current Books: https://payhip.com/IntelTechniquesBooks

Archived Books: https://payhip.com/IntelTechniquesBooks/collection/archived-books

Magazines: https://payhip.com/IntelTechniquesBooks/collection/magazines

Bundled Discounts: https://payhip.com/IntelTechniquesBooks/collection/bundles