Apple iPhone / iPad¶
Android Phones / Tablets¶
- Google Pixel
- Google Pixel Slate
- Android One Phones
- Purism Librem (scheduled for an initial release in April 2019)
- Google Chromebook
- Apple macOS with T2 Security Chip using FileVault
- Windows 10 PCs with TPM and BitLocker
- Purism Librem
- Linux Computers with LUKS and/or NBDE
Internet of Things¶
a.k.a. Internet of Shit
We generally recommend against the use of these devices and services as much as possible unless you fully understand and accept the risks.
You should create a Security Plan (a.k.a Thread Modeling / Risk Assessment) before use.
- Assistants: Alexa, Bixby, Cortana, Google, Siri
- Amazon Echo, Amazon Dash Buttons, Apple HomePod, Blink, Google Home, Microsoft Cortana, Nest, Ring, etc.
- Appliances, Adult Toys, Baby Monitors, Cameras, Clothing, Doorbells, Furniture, Headphones, Health & Beauty Devices, Home Theater, Light-bulbs, Locks, Medical Devices, Microphones, Outlets, Speakers, Toys, Thermostats, Scales, TVs, Watches, Webcams, etc.
Modem / Gateway¶
Get a Modem ONLY from your Internet Service Provider (ISP) if at all possible.
If you must use a provided Router/Gateway with built-in Wireless, see if you can disable it and instead use your own Router (this can be referred to as “Bridge”, “NAT”, “Pass-through” or “DMZ” modes.)
Automatically updating mesh wireless routers:
- Synology (Allows specific date/time configuration of automatic updates)
- Most other Mesh Routers such as Google Wifi, eero, Orbi, Deco, Luma, Velop, etc. will perform automatic updates randomly without control.
In most cases the automatic update is more important than the potential disruption it may cause, but if you need to be able to schedule the automatic updates, choose Synology unless you can confirm it is configurable or adaptive enough for your use case (do NOT disable or choose manual updates).