SECURITY / PRIVACY IS BASIC DIGNITY (ALL PUBLIC)
π‘ CHECK BACK: UPDATED SECURITY / PRIVACY PRIORITY GUIDE
π BOOKMARK THIS: STAY UP TO DATE
If you learn something here, consider supporting this to help it continue in the future. Multiple options listed on frontpage, including coreboot laptop, coffee donation, monthly membership with early access.
Without ability to selectively reveal ourselves to the world, we lose all ability to effectively create positive change in a world of increasing centralization.
π Happy Data π Privacy Day
Things to prioritize. Our right to privacy doesn't have to be complicated.
The right balance to protect personal data / identifiers need not take months of configuration.
All comes down to healthy habits and automating system services / apps (where applicable).
π‘ Each Change Makes A Difference
πΊ VIDEO
Earlier post on Mastodon (Fosstodon) covered a few simple / key points to enhance privacy / data.
Below image, I've organized our most important tutorials thus far.
More tutorials in the works, may make dedicated page on Gitea Onion.
I cover all of these topics (and more) on public posts, right here on the blog. See all posts, select by category, search by title.
β = CHECK OUT: GUIDES / RECOMMENDED TUTORIALS:
Recommended Operating Systems
β Tails USB and / or Whonix (over Qubes): Privacy Benefits
β Tails Encrypted Persistence Installation
β Video: Upgrading Tails USB (required at times)
β Video: Qubes Installation, Follow Along
β Video: Qubes Tablet Touchscreen (making it work)
β Kicksecure: Convert Debian To Kicksecure & Install Whonix
β Prestium: Tails Inspired I2P Operating System
The balance here is choosing the right OS, for any given situation / threat model.
As a Journalist, Lawyer, or Activist, choices make all the difference (when it matters).
What's nice about having the above (Tails Live / Whonix / Prestium): it saves you loads of work. Why spend months if not years refining the perfect "private" system, when most of this work could be done for you (when you need it most)?
Even so, worthwhile to pursue Tutorials below, for education / for your daily driver:
π‘ Radio Privacy (What Are You π°οΈ Sharing πΆ With π ?)
Laptop Speakers Acting As Remote RF Microphone (SDR Demo)
KISMET: find hidden devices (WiFi: Part I)
KISMET: admin from any smartphone / SBC
KISMET: Track Planes / Smart Meters (Part II: Discover Radio Devices Around Us)
π‘ RADIO TIPS
Turn Off [Radio] Based Modules When Not In Use: wipri (for Linux desktop / phone users) solves many problems here & avoids sharing permanent mac address (wipri offers options on all)
Turning Off Bluetooth: rfkill block bluetooth
Use Radio Disinfo Like Wipri For WiFi / BLE / Hostname (extensive custom concept randomization options / protection)
π DOWNLOAD WIPRI (π§ π TOR BROWSER LINK)
WIPRI SCREENSHOT:
β TIP: Wipri (Tor Browser link) has line to disable BLE during wipri start you can uncomment to enable
Many other options in wipri: see this, this (-w turns off wifi radio automatically for you), and this.
β Why You Should Be Spoofing MAC / Using -w On Wipri (mactrack demo)
π§ π Use Tor (Where Possible)
β Do I Need A VPN? Who Can I Trust? (things to consider)
β Tor Clearnet vs VPN vs Tor Hidden Service
β What Is A Tor Bridge? Should I Use A Bridge?
β Contribute: Become A Tor Snowflake Bridge (Automated Installer)
β UPDATE: Automated Installer Now With "upgrade" Snowflake
β HOWTO: Use Tor Browser More Safely
π§ π Use I2P
β΄οΈ RECOMMENDED: I2P-desktop β¬ οΈ use Tor Browser (installer creates shortcut on desktop / button on Linux phones + custom I2P browser profile: starts i2prouter for you on browser open, closes it on browser exit)
β Get Started With I2P+ Today
β Anonymous Clearnet On I2P+ (http outproxy)
β Pinephone / Pinetab I2P Talk / Tips (goes for all devices)
β Create I2P Desktop Browser Button (Video: all in one automated shortcut)
β Tutorial: Setup Automated I2P Browser Button (shown on Pinephone - for all Linux devices)
β I2P Tour: Sites You Need (anonymous Google / Youtube / Twitter / search engines)
β I2PD Remote Browsing: setup i2pd-remote desktop shortcut to browse with remote SBC i2pd
(click the desktop shortcut & use remote i2pd anytime)
β I2Psnark: Anonymous BitTorrent
β I2P Amnesiac Operating System: Prestium
β I2P On Android (covers an idk recommendation in 1min)
β I2P: AVOID LEAKS (DNS example: important)
β΄οΈ RECOMMENDED: Thunderbird + PGP Tutorial & I2Pmail ([email protected] & [email protected])
π Use Frontends Where Possible (especially "Big Tech")
β Search Google Anonymously
β Customize Tor Browser With Privacy-Redirect (Automates frontend redirection) Tutorial
β Tor Hidden Service Frontend Proxy Lists
β Search Twitter / Youtube / Streetmaps Anonymously
π Use π Encryption Where Possible
β Communicate: Learn PGP (quickly) + Encrypting TXT / Check Signed img
β PGP / GPG: Written Guide On Checking Signed Linux .img / .iso (screenshots included)
β PGP / GPG: Transfer Keys Securely / Encrypt Files
β Communicate: End to end encryption with torification / sandboxing
β Communicate: Thunderbird Onionmail + PGP Encryption Part I
β Communicate: Thunderbird Onionmail + PGP Encryption Part II
β Communicate: Thunderbird Onionmail + PGP Encryption Part III
β Communicate: Thunderbird Settings For Optimal Privacy / Security
β PART II VIDEO: Thunderbird + PGP Tutorial & I2Pmail ([email protected] & [email protected])
β Make Encrypted Volumes Hidden Inside Video File With Zulu-Crypt
β crypto_homes (automated hardware key + removable encrypted $HOME disk creation project)
β Privatebin: "Zero Knowledge" AES 256bit Encrypted Pastebin
β Checksums: Maintain System Integrity
β Checksums: Filesystem / App Integrity (find malicious file changes On Debian Based)
β Checksums: Find Malicious File Changes (Arch Based Commands / Tips)
β Checksums: Using Multiple Sources To Verify
β iPhone Users: Enable End-To-End iCloud
β Malicious HTTPS (Cert Auth Abuse / Mind Fingerprints)
β Modified Elephant Story: Encryption Is Important (Journalists / Activists Framed Story)
π Metadata (added Jan 31, 2023)
β Introduction To Metadata (unique identification outside content)
β Inject Disinfo Metadata Inside Files / Spoof Location In Pictures
π π SSH
β SSH Part I: Weak Passwords Demo / Restricting Brute Force Attacks
β SSH Part II: Don't Become Victim Of MiTM (Checking Fingerprints / Setting Key Authentication)
Watch Out For Backdoors / Malicious Hardware / Files
β Backdoors Discovered In Hardware (important lessons from history)
β Intel MGMT Engine / AMT Intro
β Learn rkhunter: Detect Backdoors On Linux / BSD
β UEFI / BIOS Can Come Backdoored (careful where you source hardware)
(malicious files are #1 way attackers compromise major networks)
π Compartmentalize / π₯𧱠Firewall
β Firejail: Get Started With Sandboxing On Linux
β Firejail Privacy Specific Tips / Demo
β Opensnitch: Detect Processes Connecting / Block / Firewall
β Opensnitch: Applications "Calling Home" + Faraday Bag
β Isolate / Thwart Malicious App Activity Collection
β Simple Compartmentalization Tips (Linux)
π Harden / Security Enhancements
β Sysctl: Changing Kernel Parameters (Systemd)
β Audit / Harden Your System With Lynis
"Privacy / anonymity (when desired), the only Human Right capable of protecting all other rights. Without privacy, no Human Right is safe." -RTP
β THANKS FOR FOLLOWING THIS BLOG
THANK YOU.
Thanks to those have (ever) showed any form of support for projects here. Whether you shared a link, left a comment, like. It always makes a difference.
Or recommended blog to friends. All gestures greatly appreciated.
If something here ever helped you, consider sharing a video / post with others / social media. And / or, if you feel up to it, you can always offer a β coffee.
β SUPPORT THIS
CASHAPP: $HumanRightsTech
BLOG MEMBERSHIP (extra posts / tips / early access / discounts & more)
XMR:48qtspi5En44mJZLeiMoHYFEmuJfQYb5DLQxLDr7d1NXc53XaAvoT8PS3wBrhEc3VY1wxu5Rgw6oKBYgahpSAYnpHntbQNM
π» coreboot laptop: supports public interest work here, refurbished intel mgmt engine neutered laptop (security / privacy related options available)
FOLLOW ON SOCIAL MEDIA
π₯ VIDEO CHANNELS / MIRRORS:
Youtube Odysee Bitchute Peertube
FEEDBACK / CONTACT
If you have feedback, comments, or suggestions... love to hear from you.
EMAIL: righttoprivacy[at]tutanota.com / righttoprivacy[at]i2pmail.org
Let me know if you have any thoughts / questions.