Listen to this Post

Introduction
The Volla Phone 22 is a unique smartphone designed for privacy-conscious users and cybersecurity professionals. With its Google-free Volla OS (based on Android Open Source Project) and support for alternative Linux-based operating systems like Ubuntu Touch, it offers a secure and customizable mobile experience. This article explores the device’s security features, technical specifications, and practical applications for IT professionals.
Learning Objectives
- Understand the security and privacy benefits of a Google-free Android OS.
- Learn how to dual-boot alternative Linux distributions on the Volla Phone 22.
- Explore built-in privacy tools and hardening techniques for mobile security.
You Should Know
1. Enabling the Built-in Firewall
The Volla Phone 22 includes a native firewall for controlling network access.
Command/Configuration:
Check active firewall rules (ADB shell or terminal) iptables -L -n
Step-by-Step Guide:
- Open Settings > Privacy & Security > Firewall.
- Toggle network access for individual apps (Wi-Fi, mobile data, or both).
- Use `iptables` via ADB for advanced rule customization.
- Switching to Ubuntu Touch via Dual Boot
The device supports seamless OS switching.
Command/Configuration:
Backup current OS before installation dd if=/dev/block/mmcblk0p1 of=/sdcard/volla_backup.img
Step-by-Step Guide:
- Download the Ubuntu Touch image from the official repository.
- Go to Settings > System > Dual Boot Manager.
3. Select the downloaded image and confirm installation.
3. Disabling Google Services (For AOSP-Based Security)
Volla OS excludes Play Services by default, but additional hardening is possible.
Command/Configuration:
Remove residual tracking packages (requires root) pm uninstall --user 0 com.google.android.gms
Step-by-Step Guide:
- Enable Developer Options (tap Build Number 7 times).
2. Use `adb shell` to deactivate unnecessary services.
4. Enforcing App Permissions with Security Mode
The device includes a security mode to restrict app privileges.
Command/Configuration:
List app permissions (ADB) dumpsys package <package_name> | grep permission
Step-by-Step Guide:
1. Activate Security Mode in settings.
2. Manually review permissions for installed apps.
5. Expanding Storage Securely
The microSD slot supports encrypted storage for sensitive data.
Command/Configuration:
Encrypt SD card (Linux terminal) cryptsetup luksFormat /dev/mmcblk1p1
Step-by-Step Guide:
- Insert a microSD card and format it as internal storage.
- Enable encryption via Settings > Storage > Encrypt SD Card.
6. Auditing Network Traffic
Use the built-in VPN and firewall to monitor data leaks.
Command/Configuration:
Log network connections (ADB) tcpdump -i any -s 0 -w /sdcard/traffic.pcap
Step-by-Step Guide:
1. Install a VPN (e.g., OpenVPN).
2. Use `tcpdump` or Wireshark for traffic analysis.
7. Hardening the Kernel
Custom kernel tweaks can improve security.
Command/Configuration:
Check kernel hardening settings sysctl -a | grep kernel.randomize_va_space
Step-by-Step Guide:
1. Root the device (caution: voids warranty).
- Modify `/etc/sysctl.conf` to enable ASLR and other mitigations.
What Undercode Say
- Key Takeaway 1: The Volla Phone 22 is a rare device offering both hardware repairability (removable battery) and software freedom (multi-OS support), making it ideal for security researchers.
- Key Takeaway 2: The absence of Google Play Services reduces attack surfaces but requires reliance on F-Droid/Aurora Store, which may limit app availability.
Analysis:
The Volla Phone 22 bridges the gap between consumer smartphones and privacy-focused tools. Its support for Linux distributions like Ubuntu Touch opens doors for penetration testers to run security tools natively. However, the MediaTek processor’s proprietary firmware remains a potential weak point. Future iterations could benefit from Coreboot/Libreboot integration for full-stack transparency.
Prediction
As demand for de-Googled devices grows, expect more manufacturers to adopt modular designs and open-source OS options. The Volla Phone 22’s approach could inspire a new wave of enterprise-grade, privacy-first smartphones tailored for cybersecurity workflows.
IT/Security Reporter URL:
Reported By: Razvan Alexandru – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅


