[ home / rules / faq ] [ overboard / sfw / alt ] [ leftypol / siberia / hobby / tech / edu / games / anime / music / draw / AKM ] [ meta / roulette ] [ cytube / git ] [ GET / ref / marx / booru / zine ]

/tech/ - Technology

"Technology reveals the active relation of man to nature" - Karl Marx
Name
Email
Subject
Comment
Flag
File
Embed
Password (For file deletion.)

Join our Matrix Chat <=> IRC: #leftypol on Rizon


File: 1608526010241.jpeg (573.58 KB, 1140x500, cyber_security.jpeg)

 No.2111[Last 50 Posts]

Comrades, we need a thread on privacy. Any decent activist should try ways of staying anonymous on the web and prevent being tracked by governments and corporations.General tips===* Use free software as much as you can.* Use GNU/Linux and keep it up-to-date, to be sure that you don't have unpatched security exploits* Don't use Flash Player, use youtube-dl instead for watching streaming videos online* Do not use Google, use DuckDuckGo or StartPage instead* Use a password manager like Keepass or for GNU/Linux users keepassx. Create new passwords for every site that you visit and use a strong password as a master password. A tip for easy remembering of your master password is to use a sentence. "i fucking love cookies and tits!" with extra capital characters etc. is easier to remember than some random characters and long enough to prevent brute force attacks of any kind.* Use the Tor Browser Bundle if you really want to stay anonymous.Firefox====* Go to Preferences -> History and set History to "Never remember history". * See for additional tweaks: https://github.com/amq/firefox-debloat and https://vikingvpn.com/cybersecurity-wiki/browser-security/guide-hardening-mozilla-firefox-for-privacy-and-securityAdd-ons-----------* Use uBlock Origin for preventing tracking etc. Bonus: use hard-mode to manually whitelist external domains on sites. Don't use uBlock but be sure to use uBlock Origin https://github.com/gorhill/uBlock/wiki/Blocking-mode:-hard-mode* HTTPS Everywhere* DecentralEyes: prevents CDN hosting from tracking you (Google for Jquery etc.)* Self Destructing Cookies: only allow cookies that you choose to allowOS==* Encrypt your hard drive or home partition at least* If you use GNU/Linux, you can try to restrict systemd or syslog from logging. * Use a distribution which takes security seriously. Also, be sure that you don't install a lot of things outside the repository. It will cover most of your needs.Real life tips===* Pay with cash if you canFeel free to provide tips to each other comrades!

 No.2112

Isn't the easiest make to ensure privacy to just not transmit sensitive info over the internet? Not saying this in a "NOTHING TO HIDE NOTHING TO FEAR" way, but just as a matter of simplicity, opsec and practicality. Didn't the FSB recently switch back to using good old typewriters for sensitive documents because of this?

 No.2113

&gt&gt55That's a very good tip indeed. Don't expose too many personal details online.

 No.2114

&gt&gt55> the easiest make*easiest way

 No.2115

>Encrypt your hard drive or home partition at leasttfw to lazy to get luks working.>Do not use Google, use DuckDuckGo or StartPage insteadAlso, duckduckgo has shit results. I use it, when I don't want google to notice what I'm searching for, but for normie stuff I'm back to google. But I had my privacy fundemantally broken when I decided to stay at googlemail (whats a good alternative btw?)>Use a password managerDoing that and still have just a bunch of passwords. Should definitely change that behaviour.>FirefoxDon't use it anymore, but I need a list of tracking services, so I can (ad)block themMy tip:Don't use WhatsApp but XMPP with OTR to comunicate. When fecesbook gives you end-to-end encryption, this can only mean they don't need the contents of your messages anymore. Metadata are already usefull enough to decide which people are gonna be killed by drones, don't give the corporations more than that you can't avoid.

 No.2116

&gt&gt58>tfw to lazy to get luks working.Same. It's so much of a hassle. I wish that there was a single button solution that would encrypt my hard drive while letting all the data remain on it.>Also, duckduckgo has shit results. I use it, when I don't want google to notice what I'm searching forI'd recommend Startpage then. It's just a Google proxy and has almost the same results.>But I had my privacy fundemantally broken when I decided to stay at googlemail (whats a good alternative btw?Same here comr8. Protonmail appears to be good. If you live in Europa, you can also try Posteo. They seem very strong on privacy and you can even pay them with send cash. https://posteo.de/enThere's also this other email startup, I don't know if they are any good tbh fam. But it's free at least (as in, it costs no money).https://tutanota.com/Excellent tip you have on WhatsApp by the way. People forget about the importance of metadata leakage.

 No.2117

&gt&gt59>https://tutanota.com/Looks interesting, but>made by Berndkc-tier tbh

 No.2118

&gt&gt60You can also look at the email providers listed at:https://www.privacytools.io/#email

 No.2119

For securer e-mailing:https://emailselfdefense.fsf.org/en/Note that metadata isn't encrypted with GPG, but your content is however.

 No.2120

DO NOT use FuckFuckNo. It was made and is owned by a person who ran a site called The Names Database (or something similar) which was literally a datamine which he sold for millions.Instead use https://searx.meFor email, Tutanota is great, especially if you use it in combination with GPG. Cock.li is also excellent if you use GPG.

 No.2121

>&gt&gt63Oops, http not https. if paranoid about non-SSL, run your own instance. The code is hosted on github and there are several other community run instances

 No.2122

&gt&gt54HTTPS on searx.me works fine here.

 No.2123

>DO NOT use FuckFuckNo. It was made and is owned by a person who ran a site called The Names Database (or something similar) which was literally a datamine which he sold for millions.One thing though, they have a Tor hidden service. I don't think that it could hurt to use that.

 No.2124

Another tip for my comr8s:You can use FireJail to sandbox applications like your browser.

 No.2125


 No.2126

A stupid question:I want full disk encryption without having to wipe my data. Is this possible? I've looked at: http://www.johannes-bauer.com/linux/luksipc/But I'm too pussy to try. Anyone got advice?

 No.2127

&gt&gt91Looks very interesting. When having the time, I will give it a try.How about backing up your most important data and then go for it?

 No.2128

&gt&gt92Thanks! It would be so nice if someone could try it. I hear lots of good stories about it on the interwebz, but I'm scared that I might forget a step and lose everything.Of course, I can backup important stuff but then I could backup and reinstall Debian but encrypted with the same amount of effort. ;_;To be honest, I really wish there was an easy-step-by-step guide for encrypting partitions.

 No.2129

https://mat.boum.org/This is nice for anonymizing your metadata. Suppose you write a radical text, the file itself contains some bits of identifying information sometimes.This program clears it of any metadata.

 No.2130

File: 1608526011581.jpg (193.64 KB, 900x600, 1407264952099.jpg)

How safe will it be to have a server in my house for my personal email and webpage?

 No.2131

&gt&gt98Depends on how good your admin-skills are. But I think, if you keep it up to date and invest some frequent work in staying informed on current security issues as well as cryptographic knowledge, much safer than having it at gmail or microsoft.

 No.2132

&gt&gt99I have never administrated anything before.Cryptography is a topic I love but getting up to date with cyber security is a mystery to me.

 No.2133

&gt&gt101There is no absolute security, and when someone really wants to get into your server, he will find a way; especially when you're not a pro at defending it.However, I don't think somebody will make the effort to crack reasonably encrypted content.

 No.2134

&gt&gt98>How safe will it be to have a server in my house for my personal email and webpage?

 No.2135

&gt&gt98>How safe will it be to have a server in my house for my personal email and webpage?Install gentoo and run all webserver related services on their own user account so if they get hacked the attacker doesn't have root or other access to anything that would let him easily privilege escalate (e.g. graphics card access).Currently i'm trying to find a secure non-root alternative to courier-imap :/&gt&gt102>However, I don't think somebody will make the effort to crack reasonably encrypted content.encryption has nothing to do with this. if you are worried about the content of your emails then you need to pgp encrypt them, but that is unrelated to running your own mail server and unrelated to the mail server's security.reminder that all emails that aren't pgp encrypted and travel over the internet are read at least the very least by the NSA's AI.

 No.2136

I'm going to buy a new laptop soon. What model should I get if I want privacy? I'm going to install Qubes OS.What do you guys think of Comodo IceDragon? It's a free Firefox-based browser (so it can have the same add-ons), but it comes with some built-in security features IIRC.Also, what's a distribution?

 No.2137

&gt&gt159Hardware shouldn't matter for privacy purposes, but the company 'System76' has good linux compatible hardware

 No.2138

&gt&gt160Except for hardware-level botnet features like uefi and intel mme.&gt&gt159A distro is a compilation of software, which comes mostly as a ready-to-use operating system. The Qubes OS you have chosen is such a distro.

 No.2139

Attempting to post via tor

 No.2140

Testing, testing, 1, 2, 3.

 No.2141

&gt&gt86does not work

 No.2142

&gt&gt58>alternative to GmailI use ProtonMail and it's pretty good. They have a tiered system though, so if you have a high volume of email, it might be worth paying for the standard tier. Plus iirc they bundle in their premium ProtonVPN service for a paid ProtonMail account

 No.2143

&gt&gt236Throwing up your own copy of postfix and running your own mail server isn't particularly difficult. It does attract a load of pests to your connection, though.

 No.2144

Anyone use RiseUp services? Particularly looking for a new email to switch frm google

 No.2145

File: 1608526012687.jpg (460.25 KB, 2240x1440, wan benis.jpg)

you guys stop necroposting :DDD

 No.2146

&gt&gt58&gt&gt236&gt&gt268I suggest just using email service from countries that don't extradite to [insert your country here] or cooperate with your law. Like, half these "suuuper private email" sites turn out to be honeypots anyway (protonmail is). Better to just use a mainstream Russian or like, Vietnamese email service I'd guess.

 No.2147

&gt&gt91>I want full disk encryption without having to wipe my data.Just make a backup.

 No.2148

everyone switch to STARTPAGEhttps://www.startpage.com/its like duckduckgo but better and with a name that isnt stupid like 'duckduckgo'also it has proxy viewing. Very useful to read articles etc at work, if your work monitors web traffic like mines does.

 No.2149

>>272>(protonmail is)Source?

 No.2150

Privacy is mostly not a technical issue, but a social one.What good does it do when you follow all the expert advice in how to use technology while your family, friends, coworkers, and party colleagues are constantly broadcasting to the world what you say and what you do and where you are? Privacy-protecting software has to be used by the people around you; privacy-protecting habits have to be common among the people around you. A software with the best privacy protection is useless if nobody uses it. Software that is not very competently made from a cryptography expert's point of view, but that has an an appealing and easy interface and a good meme propaganda campaign around it, so that the people around you then actually use it (when they didn't use anything protecting them and you before), can do more for your privacy protection in the big picture.People form habits that follow them for the rest of their lives while they are young. How to design privacy-protecting software that appeals to kids?

 No.2151

>>596>What good does it do when you follow all the expert advice in how to use technology while your family, friends, coworkers, and party colleagues are constantly broadcasting to the world what you say and what you do and where you are?That's what compartmentalization is for.

 No.2152

>>597You mean activities like posting on different topics on different sites under different pseudonyms and not presenting a full picture of your various interests all bundled in one place, but the point is that it isn't really up to you how much of you shows up online.Here's the kind of story that happens every day: You are a member of a party. Of course, those members elected to important positions aren't anonymous, but there is no public database of all party members and you like it that way. At a small non-public meeting, a fellow party member takes a photo of you. You politely but firmly ask that person to not publish it. The person promises not to do that. A few minutes later the picture is online (but you don't know that immediately, you only get to know it with a delay, as it makes the rounds. The comrade is an old fart who lives off a pension. You still have most working years ahead of you. This information about you is now online forever. Any neonazi or potential employer can enter your name into a search engine and see that you are in a hard-left party.There needs to be a cultural shift so that the people around you IRL don't fuck up your life.

 No.2153

>>598It's true, we need a professional and disciplined attitude about security in our organizations. I think that's different from saying we can't have security if our family and co-workers aren't all disciplined.

 No.2154

>>62This is what I get on https://searx.me after a few searches.It's a shitty website. https://duckduckgo.com/ is superior to https://searx.me

 No.2155

>>600>I get rate limit exceeded after a few searches on https://searx.meAnyone can host a searx instance, even in your basement, the owners of the main instance put rate limiting to encourage you to host your own (which increases privacy, so long a small community uses it) and to avoid having to pay for it.

 No.2156

>>601I prefer not having to go through the trouble of hosting my own search engine. I want user friendliness, which is exactly what DuckDuckGo gives me. On top of that, DuckDuckGo doesn't censor the results I receive.Google has censored The Daily Stormer and 8chan, which is disgusting. I hate politically motivated search engines. Search engines should be just what they are: a program that searches the Internet for you for the content you requested.

 No.2774

not sure why this thread is on the last page, but these links definitely need to be somewhere on /tech/
https://invidious.snopyta.org/
https://nitter.snopyta.org/
https://snopyta.org/

but also wanted to ask, what's up with archive.is not having SSL encryption? should this be concerning?

 No.2777

Anyone tried https://qwant.com ?
Are they more or less trustworthy than duckduckgo? Results seem comparable.

>>2774
>what's up with archive.is not having SSL encryption
It supports SSL but doesn't automatically redirect to it https://archive.is/

 No.2779

>>2777
if you’re concerned with privacy just go with searx. snopyta.org has a searx instance.

 No.2780

>>2774
archive.is blocks tor via cloudflare anyway

 No.2781

>>2774
>>2779
>this.snopyta.org
>that.snopyta.org
not smart to put all your eggs in the same basket. using everything via snopyta instances means they technically have access to an aggregated collection of your browsing activity. and you should never rely just on trust.

 No.2782

The issue I have with YouTube-dl is searching things up in the first place. You still have to connect to YouTubes servers in order to get your videos. This is really the only rule I have caved in. I just browse YouTube directly at this point

 No.2783

>>2782
You can use Youtube-dl with Tor:
youtube-dl –proxy "socks5://127.0.0.1:9050"

As for browsing for videos, use invidio.us.

 No.2784

>>2783
I can't login to my account with invido.us for some reason; never been able too.

 No.2785

>>2783
If you don't have system Tor running, then you can proxy through Tor Browser, which uses socks port 9150 instead of 9050:
youtube-dl –proxy "socks5://127.0.0.1:9150"

Of course you can still pipe the output to mpv like before. I have something like this in my shell config:
youtube-mpv() {
/usr/bin/youtube-dl –proxy "socks5://127.0.0.1:9050" "[email protected]" -o - | mpv -
}

Then you just use it like this:
youtube-mpv https://invidio.us/watch?v=y5zQTmkY7GI

If Tor is too slow add the -f worst flag.
youtube-mpv -f worst https://invidio.us/watch?v=y5zQTmkY7GI


>>2784
If all you want is to subscribe or follow someone on social media, then you can use RSS feeds instead of creating an account, which is often blocked over Tor anyway. What you need is a RSS feed reader that supports socks5 proxies for use with Tor.

You can replace a lot of your browsing routines this way, which will save you a ton of time, since you'll have everything you're interested in aggregated and automatically updated in a single program.

Keep in mind though that all feed reader's connections will use a single Tor "identity". This is similar to opening everything within a single Tor Browser session, without resetting the circuits. So if you subscribe to a bunch of invidio.us channels, all of the connections to invidio.us will come from the same Tor exit relay (while connections to other sites will use different circuits). This is still way better than using an account, but it doesn't allow for total isolation of different "identities" in the OPSEC sense.

Another issue is that your feed reader will probably use its own User-Agent header. If possible change it to whatever current version of Tor Browser uses. You still won't have control over the rest of HTTP headers though, which could also be used for fingerprinting.

Of course in the end it's safer to just use Tor Browser, copy-paste URLs from some text file, and often reset the browser's session. Unless you write your own scripts there's always some compromise, most devs still have barely any idea how mass surveillance works or just don't care.

 No.2787

>>2125
be careful installing random add-ons, as these can be used to fingerprint you.

Set up a script if you can to randomly assign your user-agent

 No.2788

>>2125
>>2787
Random user agent spoofing has little use if you don't use a proxy or public networks (then you should also spoof your MAC address).
And if you use Tor it will only make you stand out more since Tor Project's design philosophy bets on uniformity rather than randomness.

 No.2789

>>2788
User-Agent is not the only HTTP header that they use to fingerprint you anyway. Each browser has a distinct set of HTTP headers it uses (Accept, Accept-Encoding, Accept-Language, etc.), so if you spoof just your User-Agent header you're just telling the website that you e.g. use Firefox with a user-agent-spoofing add-on.

You're only making it worse!

 No.2792

>>2115
luks is fast and easy, friend

 No.2794

>>2136
>I'm going to buy a new laptop soon. What model should I get if I want privacy?
Something librebooted

>Also, what's a distribution?

A combination of package manager and package configurations. Ubuntu, Debian, Redhat, Suse, etc.

 No.2796

>>2792
>luks is fast and easy, friend
Doesn't work that well with SSDs. Many report 50% drop in performance. There's also the TRIM dilemma: either you TRIM, which leaks some information (space usage, filesystem used), or you don't TRIM and your SSD will have shorter life-span and deteriorating performance.
https://asalor.blogspot.com/2011/08/trim-dm-crypt-problems.html

I guess if you don't do full disk encryption and instead only encrypt your /home then it's not such a big issue.

>>2115
>Also, duckduckgo has shit results.
True. I don't know what happened in the last couple of years but all of these "alternative" search engines have become complete utter shit. You use 5+ very specific keywords, looking for something specific and obscure, and it always spits out the most generic results possible based on only one or two of the terms used. Quoting keywords doesn't have any effect anymore either. It's such a pain trying to find anything, trying to make the search engine finally listen. Most of the time I just give up.
I'm seriously considering just using Google, but it blocks Tor with its stupid infinitely-looping AI-training captchas. Bing is also an improvement, but it seems heavily biased towards regional results, so it's not that useful over Tor.

 No.3289

Let's get into some meatspace privacy stuff. Here is a map with camera locations:
https://sunders.uber.space/
You can add cameras that you see outside on openstreetmap and they will be added here.

 No.3333

I'm finally starting to take my privacy seriously. I've already been doing a lot of the easier/lazier stuff in this thread for a long time, but I've been stuck in the google ecosystem for like 10+ years(email and youtube mostly). I'm gradually cutting all ties with it. I'm sure the profile they've built will still be able to identify me when I pop up on their radar, but not spoon-feeding them my data directly should be an improvement. Between my VPN usage and general browser security I should have a little more privacy.

 No.3337

>>3333
pretty much the best most people can do.
Fact is, if they want your info/data they can and will get it.
Doesn't mean you need to make it easy, nor give them all of it.

 No.3357

i like this blog, was fun to read through. The author tends to emphasize how opsec is more than just the software you use
https://grugq.github.io/blog/2013/12/01/yardbirds-effective-usenet-tradecraft/

 No.3703

https://n-o-d-e.net/nano_server2.html

I'm building one of these next week to finally set up a pihole with and maybe do some other dumb stuff like keep a little local backup of my CV etc., I'm not sure if that's actually that smart though, none of the info I'd be backing up isn't already public but I don't know about keeping it on the same box as a DNS server that's probably going to be constantly hammered by ads

Thoughts?
OR should I just back up the files I want to keep onto another Micro SD card and tape it to the top of the server?

Really interested in the utility of little hobbyist hardware solutions for common privacy issues like corpo tracking, and it will be a fun project even if its only marginally effective

 No.3704

>>2111
>Use a password manager like Keepass
is it alright if i use bitwarden? i like the easy sync across multiple devices

 No.3725

>>3704
If you're talking about their cloud offering then its enough to deal with reducing password reuse but because the database is stored on their server and is encrypted/decrypted via a webpage they control you should not expect any protection whatsoever from anyone with serious resources. If three letter agency wanted access to your passwords on a self controlled keepass database then they would have to either thoroughly compromise your computer (to the point nothing would help) or get the password via other means, for something like bitwarden they could potentially walk into the office with a subpoena and have them change the web page so it sends your password to the server and decrypts your db for them, since there is no warrant canary assume this has already occured.

 No.3726

>>3704
I'm using keepass and tbh I don't see the problem with just transferring the file around, its like 5kb, I've got into the habit of just copy/pasting it across my different machines when I update it on my main machine, it takes like 2 seconds to copy it to my phone and push it over waprinator or ssh to my laptop, if I needed to get it remotely for some reason I could just put the encrypted password file in a cloud repo or github or something and up the masterpass complexity/change the pass after downloading the file (I don't forsee ever needing this so I don't have an online backup of it, doesn't seem like the greatest idea even if a 30 character properly configed masterpassword should be virtually uncrackable)

I think the slight hassle is worth the extra comfiness of knowing its not being passed around in a cloud server by some company somewhere, and the passwords don't need to change often, since they're so strong, and they all get changed at once since force change after a certain time is enabled for them

 No.3736

I really hate that I can't post on fourchins with my vpn. I want to basically fight every right wing post that they shoehorn into any thread.

 No.3746

anyone virtualize whonix on debian: what version of virtualbox do you use?

 No.5617

File: 1608526359657.jpeg (794.57 KB, 1800x1350, faceprint.jpeg)

Hello /tech/,

I will be getting a passport soon to leave the country. I want some advice on how to best obfuscate my face to defeat the facial recognition involved in the biometric photograph I need to take for my passport. What can I safely implement to do so that won't cause me grief now or in the future? I want my passport photograph to be accepted, but I don't want to then get detained in another country on suspicion of having a fraudulent passport as a result of my obfuscation measures.

The following is what I have already considered and may implement:

1. Be clean shaven. Since I cannot grow enough facial hair to cover my jaw line, I will not benefit from having any in my passport. I can begin growing my facial hair once I leave the country, but before then it is better to not provide the AI with any data on my facial hair, which alone can be used to uniquely identify me on the basis of growth pattern and hair phenotype.

2. Wax my eyebrows. Since facial recognition relies heavily on data from the brow, waxing my eyebrows to a length and width slightly different from my natural look can obfuscate this, hopefully without giving me any trouble in the future.

3. Change my hairstyle. Having a hairstyle that obfuscates its length and phenotype, such as by slicking it down with gel or ironing or curling it, can minimize the amount of reliable data on my hair that can be extracted from my photograph. This should not pose any major problem for me in the future as long as it is not obvious.

These I have considered, but rejected as too risky:

4. Wear colored eye contacts. While this can be effective, it is an obvious change that will be very difficult to believably explain in the event that anyone objects to it. Anyone closely inspecting my passport photograph will be able to determine that my eye color is different and may question me on those grounds. How am I to convince border agents in some backwater African or Asian country that those are just colored contacts that I no longer use, and not that the passport is fake, when they may not even know that colored contacts exist? Why would they believe me even if they did?

5. Remove my eyebrows. This is also too obvious a change and will also look ridiculous on my passport photo. There is little more to gain from this than can be accomplish with waxing.

6. Add/remove birth marks. This will be unlikely to help with facial recognition software and will likely just increases the chances of me being interrogated and detained at borders. Like the colored contacts, this is more useful for scenarios that don't involve a mandatory biometric facial photograph.

7. Apply makeup. This can be done to subtly change the tone and shadowing of my face to confuse the AI and cause larger error margins, but it may either be totally ineffective due to the facial recognition algorithm being used (as has happened to CV Dazzle[2]) or effective enough to cause me problems later on.

And finally, this is one I am considering but unsure about how risky it is, which is the main inspiration for this thread:

8. Use cloaking software like Fawkes[1] to subtlely distort my face in photographs to utterly defeat facial recognition while still being easily recognizable to humans. While this is very effective, it is so effective in fact that any attempt at verifying my identity by comparing my face to my passport photo will likely fail because the AI will classify them as two different people. This may not be a problem so long as I am not required to undergo facial biometric verification, such as by opting out of them where possible and avoiding countries that have no opt-out option, but that may just set me up to get completely fucked in the future in the event my only path is through a face scan.

Unlike the eyebrow waxing and other changes I mentioned above, which will likely lower the confidence of the match or even confuse it while not defeating facial recognition altogether, the morphing that will be applied to my face will be in areas considered permanent and stable without major plastic surgery (like the nose bridge, mouth corners, and jawline). It is reasonable for a person's hair style, facial hair, and even eyebrows to change over time… not so much with eye color, nose bridge, and jawline.

What do you think? Do you think any of the ideas above might work? Or do you think they are all too risky to try and that I should just bite the bullet by letting the government have an accurate copy of my face? What about morphing using Fawkes? Is that too risky?

If you have any other ideas or recommendations, I'd love to hear them.



[1] - https://cvdazzle.com/
[2] - https://sandlab.cs.uchicago.edu/fawkes/

 No.5773

>>5617
Does no one have any input on this? I need to get my passport ASAP and I'm still unsure about whether to use Fawkes to break facial recognition on my passport photo.

 No.5774

>>5617
As someone who's never traveled outside I had no idea it was THIS fucked.

 No.5775

>>5617
>>5774
Every day I feel like giving up and just hope that eventually things are going to get better. I applaud you for trying so hard to fool algorithms.

 No.5776

>>5773
I would just go for it honestly
christ your post was depressing though

 No.5777

>>5773
I would advise against changes that might look suspicious. Getting your eyebrows done is as much as I'd go with. Maybe having long hair.

 No.5779

File: 1608526377150.gif (650.11 KB, 647x363, 1436241318147.gif)

>>5775
tfw data harvesting won't stop until we either reach the communist utopia or the global system collapses for whatever reason

 No.5882

Lads how the fuck do I make it so I don't look like I'm showing as a tor poster? I'm tired of the endless captchas

 No.5885

>>5882
Keep switching circuits until you get one that isn't blacklisted by the pozzed admin.

 No.5905


 No.5906

Is there any point in caring about privacy when using a smartphone? I barely use it so perhaps I'm just wasting my time (and possibly money) by wondering if I should get an iphone (probably more private than stock android but expensive, not so much if bought used), a google pixel (expensive as fuck but the most secure) or just give up and keep using my android smartphone. Or downgrade my phone and get some older android device.

There's also whoever being at the other end not using a secure/privacy-concerned device, rendering this issue even more moot.

 No.5919

>>5906
You'll still have some kind of footprint, shoe size will be smaller though.

 No.5931

>>5906
Get a Pinephone if you really must have a shitty touchscreen device to do things you can do better on a computer anyway.

 No.5932

>>5906
>>5919
>>5931
https://madaidans-insecurities.github.io/linux-phones.html
https://madaidans-insecurities.github.io/android.html

>The best option for privacy/security on Android is to get a Pixel >=3 and flash GrapheneOS. GrapheneOS does not contain any tracking unlike the stock OS on most devices and includes many hardening enhancements such as a hardened memory allocator, hardened C library, hardened kernel, stricter SELinux policies and more.

Save up some money and get a used Pixel if you actually care.

 No.5954

File: 1608526398681.png (447.36 KB, 834x646, NSAiphone2.png)

>>5906
>iphone
Old but still relevant.
https://privacysos.org/blog/nsa-calls-the-iphone-using-public-zombies-who-pay-for-their-own-surveillance/

They collect BSSIDs and GPS data for their network location service.
https://consumerist.com/2010/06/21/privacy-change-apple-knows-your-phone-is-and-is-telling-people/

They neglected fixing a security vulnerability for three years so law enforcement could use it as a backdoor. Who says they don't the same with iOS?
https://www.telegraph.co.uk/technology/apple/8912714/Apple-iTunes-flaw-allowed-government-spying-for-3-years.html

They also have a backdoor to remotely wipe phones.
https://www.telegraph.co.uk/technology/3358134/Apples-Jobs-confirms-iPhone-kill-switch.html

Apple proposed integrating the fingerprint scanner into the screen so you can't use the phone without giving away your fingerprint.
https://www.theguardian.com/technology/2017/feb/15/apple-removing-iphone-home-button-fingerprint-scanning-screen

Apple collects all your call history.
https://theintercept.com/2016/11/17/iphones-secretly-send-call-history-to-apple-security-firm-says/

We had the fappening happen because it uploads all your images to iCloud. It even sends the files to the cloud without asking for permission.
https://www.theguardian.com/technology/2014/nov/04/apple-data-privacy-icloud

Most iCloud data and some data from passcode-locked devices can be provided.
https://arstechnica.com/gadgets/2014/05/new-guidelines-outline-what-iphone-data-apple-can-give-to-police/

https://www.hongkongfp.com/2017/06/08/china-uncovers-massive-underground-network-apple-employees-selling-customers-personal-data/

 No.5970

Search engines are all data mining, and even the privacy focused engines have backendes built on other search engines and sketchy glowey companies operate them.

 No.5971

Uninstall the games.

 No.5974

>>5970
yeahhhh ddg uses a tracking pixel, although they do provide a .onion service which is what i use

 No.6066

>>5974
How about using DDG without JS?

 No.6067

Did someone read the age of surveillance capitalism by Shoshana Zuboff here? I heard good things about it, plan to read it asap.

 No.6120

Is the focus on privacy overrated? It's fundamentally an individual thing which shifts the responsibility onto the consumers, risking distraction from the fixing of problems that were caused by capitalism's normal operation. What's the purpose of willfully self isolating from the majority of people who cannot afford pricy boutique devices or must use proprietary software and online platforms? Shouldn't directly attacking the capitalist corporations by labour organization be better than doing basically bunker tactics? That is far greater protection provided than trying to dodge the glows by technical methods.

 No.6121

>>6120
obviously privacy itself should not function as praxis but ignoring privacy as countermeasure to advanced police state would be a mistake for any leftism movement organizers.

 No.6122

>>2130
I was wanting to do this with a corebooted hardrockpro from pine for a FOSS (no proprietary blobs!) email and media server. Should be versatile enough to end my youtube and gmail use outright.

 No.6123

>>6120
People who take the privacy bullet are usually FSF enthusiasts and are slowly trying to move towards a fully FOSS setup for themselves. For most people using Google and Twitter or whatever is fine however there are best practices of privacy that should be followed when you expect to be tracked (like at a protest). Ignoring those not only puts yourself in danger but everyone you may be associating with at said protest/riot. Further reason to ditch your smartphone for a Linux or De-Googled Android phone is that apple/google surreptitiously rolled out 'contact tracing' to all devices which also tracks you in doors.

Also convincing your friends to switch from facebook to a signal group is really easy, I forced my friends over and it's a lot comfier and more personal (cuz its just 4 people).

 No.6124

>>6123
oh i forgot to mention the best practice (turn off your phone or remove the SIM card) for protests

 No.6146

>>6124
Or use a pocket faraday cage.

 No.6147

>>2111
What does it mean by “don’t install lots of things outside of the repository”? I though on Linux you could only download stuff from the repository.

 No.6149

>>6147
you can download shit from wherever you can get it

 No.6229

Does Whatsapp's E2EE actually mean Facebook can't see your messages/audio/video? I've heard they only get your metadata.

 No.6232

>>6229
they advertise that their protocol is based on signal's p2p encryption and they cannot observe or store exchanged keys but it's not open source and we don't know how to capture and analyze their protocol yet so nobody can verify it.

 No.6256

>>6229
Even if it was true Google still sees everything you do, unless you're using whatsapp on a custom ROM.

 No.6275

>>6067
Haven't read it, but I'm kind of skeptical of these kinds of books. They all seem like technoliberal bullshit to me, trying too hard to define this 'surveillance capitalism' without actually understanding capitalism in the first place. I had the same problem with those Netflix documentaries, "Social Dillema" and whatnot. Still, that doesn't make the book irrelevant, I'm sure it contains useful information about these matters. Have you started reading the book by now, anon? I'd like to hear thoughts.

>>6229
I heard that the automatic Google Drive backups Whatsapp enforces are unencrypted, meaning both Google and Whatsapp get to see your messages. I also heard they store all the names to files you send, but can't see the actual contents of the files. Just to be clear, I have no confirmation of whether any of this is true, it might all be be FUD. In any case, Whatsapp is not to be trusted whatsoever. Remember:

>When Facebook gives you encryption, that only means they no longer need to see your messages to track you.

Meaning, your metadata still allows them to know a lot about you. Think about the fact that they have all your contacts, and your contacts' contacts, and so on. They also have a log of who you talk to, as well as frequency, time, etc. Even if they don't know what you're saying, they still know who, when, etc.

 No.6287

>>2136
The best thing will be something with open firmware. Coreboot is the best one. System76 and Librem sell laptops that use coreboot. The other high security option is to buy an old Thinkpad that can run libreboot or coreboot and install that over the stock BIOS.

For browsers I would just use Firefox with add ons. As the code base is extremely well audited.

A Linux distribution is a ready to use GNU/Linux operating system. It usually comprises a kernel (Linux) basic utilities, a graphical user interface, application software, and an online software repository that is used to keep the system updated. Popular Linux distribution examples are Ubuntu, Fedora, Solus, elementary OS, Debian, POP! OS, and Linux Mint.

 No.6289

>>6287
>System76 and Librem sell laptops that use coreboot.
Just buy a thinkpad and flash the mobo yourself. You'll save at least $100 by doing that.

 No.6290

>>2136
>What do you guys think of Comodo IceDragon? It's a free Firefox-based browser (so it can have the same add-ons), but it comes with some built-in security features IIRC.
https://spyware.neocities.org/articles/browsers.html

 No.6566

>>5617
Dragnet makes me sick to my stomach, saved.caCanadien

 No.6567

>>6289
System76 laptops turn off system management mode in the processor, or, ring level -2. That's part of their appeal.

 No.6606

there is a simple privacy manual? that can be translated to the masses?

 No.6619


 No.6660

Hello comrades, I have a quick question and I hope this is the proper place to ask.
plebbit spacing in honor of the ongoing gamestop short squeeze
Are there any good, privacy-respecting (but also free) www whiteboard services? Ease of use is a high prio since I need to get normies in on it.

 No.6921

Some days ago both DDG and Startpage.com stopped allowing search requests (at least) on Tor Browser with JS off, sooo…
https://searx.xyz/
Just leaving this here if anyone else were looking for an alternative, I hope this is a temporary bug of some sort because Startpage images is very reliable, and I had just gotten into the groove of using "" around terms and words on DDG onion to get quite good search results…

I'm not fucking enabling JS or using Google. Only forward.
https://searx.xyz/
https://searx.xyz/
https://searx.xyz/

 No.6929

>>>>6921
DDG disallowing searches from tor w/o JS is alarming if true.

I have to disagree with everyone else in this thread, my experience has been that DDG has provided superior search results for almost five years now, and Google’s results have been in steady decline since 2007, becoming particularly shitty in 2003. My personal stance is that if Google provides you better results than DDG, you are the cancer that’s killing /b/, the algorithms were designed around you.gentooGentoo

 No.6939

>>6921
>Use Searx more than twice
>Rate limit exceeded
Wat do?

Also, I tested both my default Tor install with only the security preset set to "Safest" (no js) and my IceCat install with JavaScript disabled and a custom user.js from reddit via EFF's Coveryourtracks tool (FKA Panopticlick).

Can anyone explain why my IceCat install is marked as fingerprint-protected (1 in 4000 browsers have same fingerprint) and my Tor install isn't (unique fingerprint)?
I'm trying to wrap my head around why this is possible given Tor's whole point, so maybe I misunderstood what it does and doesn't do in the first place.

 No.6940

>>6921
html.duckduckgo.com works without JS
>>6939
The TBB approach to browser fingerprinting is to blend in https://blog.torproject.org/browser-fingerprinting-introduction-and-challenges-ahead

>Rate limit exceeded

Change Tor circuit, or use another searx instance https://searx.space

 No.6978

>>6921
You know there is a tor instance, too, right, anon?

http://upzhip7hatfbsi5xcwyw6n2bpappt3j4gkvwjmyb7qo6urcyhmlekpad.onion/

 No.6994

File: 1615027317921-0.jpg (193.49 KB, 719x1351, WhatsApp Privacy.jpg)

File: 1615027317921-1.jpg (295.3 KB, 713x1351, WhatsApp Privacy 2.jpg)

>>2111
What must I do, comrade?

 No.6995

>>6994
Get telegram

 No.6996

>>6994
>>6995
use signal

 No.6997

File: 1615043552743.png (573.12 KB, 3462x1884, anti-signal.png)

>>6996
Use Matrix/Element, or GNU Jami

 No.7869

>>2774
>not sure why this thread is on the last page
Looks to have been importantly from Bunkerchan, probably why the original posts are a bit scuffed.

>>2781
Here's a non-Snopyta Invidious instance:
https://vid.puffyan.us/

It's accessible through Tor:
http://grwp24hodrefzvjjuccrkw3mjq4tzhaaq32amf33dzpmuxe7ilepcmad.onion/

And here's a list of more instances:
https://instances.invidio.us/?sort_by=healthpiratePirate

 No.7870

>>7869
>importantly
imported*piratePirate

 No.7871

>>2779
>>2781
And if you want to use Searx on an instance other than Snopyta's, a /leftypol/ anon in another thread posted one he hosts through Tor:
http://z34zvdnudiq5om7v547g42nr36l4ut7pek6bx7prn4emi5ncdgo6jhad.onion/

You can find plenty of others which are available through the clearnet.piratePirate

 No.7957

File: 1618901364189-0.jpg (337.8 KB, 720x1682, Truecaller.jpg)

File: 1618901364189-1.jpg (394.97 KB, 720x1612, Truecaller 2.jpg)

What do you think about this app?

 No.9225

File: 1623712279029.jpg (3.35 MB, 4032x3024, IMG_20210614_130913.jpg)

Privacy 'woke' people are always saying "VPNs are a scam and do nothing :3 uwu" and I'm over here with no more ISP letters despite torrenting shit all the time

 No.9227

>>9225
Literally the only thing they're useful for. They will still sell your data.

 No.9228

>>7957
It reminds me that no matter how secure you might make your phone it is all useless if the people you're contacting are retarded and have their shit filled with spyware.

 No.9236

File: 1623720867276.png (5.41 KB, 257x196, lunge.png)

>>9227
wouldn't an ISP be as likely to sell your data as a VPN?

 No.9238

File: 1623721937707.jpg (80.86 KB, 720x720, 1623717280902.jpg)

>>9236
Yeah, so unless you live in a country that regulates torrenting you're paying extra to just get datamined.

 No.10952

Bump

 No.11553

https://nitter.eu/tenacioustek/status/1434604102676271106
Apparently Protonmail handed out the IP address of a French activist on demand of the Swiss Government. Should I stop using their services completely, even their VPN?

I've read this article, but I'm still doubtful: https://beebom.com/protonmail-logged-ip-address-should-you-worry-privacy/

 No.11554

Also a lot of the .onion Invidious instances such as IncogTube are down, the timing seems fishy, only the ones that connect to googlevideo services remain.

 No.11556

>>11553
>not assuming every email provider is pozzed or will become pozzed in the future
>not taking precautions based on that assumption
>not compartmentalizing by default
>not using Tor by default
c'mon anon, it's not that hard

 No.11558

>>11556
Well it's not like I use protonmail for anything particularly sensitive and I do use Tor+VPN for browsing, just not for email since I barely use it.

 No.12353

Best VPN that can be used on at least two devices and has a shitton of IPs to choose from?

 No.12355

>>12353
Tor, nothing beats it.

 No.12358

I live at an institution whos main specialization is computer science and cybersecurity. I have to use their internet 24/7. They have their own ISP, I'm on their ethernet that I had to log in with my own ID to access. I don't want them to see my traffic, or associate that traffic with me. Is there any hope for me? I already use have a VPN that I trust, and I also use Tor too. I also use custom DNS server.

 No.12360

>>11558
>I do use Tor+VPN
that's like putting a wooden door in front of a steel one

 No.12361

>>12360
NTA but So? Who cares if they go through the wood door if they can't get through the steel one?
The VPN would serve it's purpose of not getting permafucked by cloudflare if browsing.

 No.12362

>>12360
>>12361
It's much worse than that, it's like using a single steel door instead of multiple disconnected ones. Tor+VPN means your streams are not isolated: for every request you're using the same circuit to the VPN, and all the targets can profile you as a single origin as well.
In short, Tor+VPN is making things much worse.

This was written by a Tor project dev:
>People usually consider doing this because they want to appear to have an IP address that doesn't change and isn't associated with Tor. Doing this throws away the vast majority of the security gains that Tor gets you. It ruins Tor so much, and you have to trust the VPN company so much, that you might as well not even use Tor at all.
https://matt.traudt.xyz/posts/vpn-tor-not-mRikAa4h/

 No.12366

>>12358
>I don't want them to see my traffic, or associate that traffic with me.
If using Tor they won't see where your requests are going or their content. But they will see that they're coming from you and can therefore perform a traffic analysis (size, timing).

Hypothetically speaking if they control a large number of Tor exit nodes (really doubt it) they could connect you to the requests you're making. If your requests go over TLS (e.g. HTTPS) after exiting the Tor network then they would learn only about the domains/servers you're visiting, but not the rest of the requests (URL, headers, payload) or responses.

I would worry more about the fact that you're using Tor at all - it could raise some alarms. You can mask that by using a Tor bridge. It's easy to configure in Tor browser, just look at the network settings. You can also request a publicly unknown bridge from Tor project via email.

This would still make your traffic unusual, but unless their detection system is really aggressive it shouldn't flag you.

 No.12368

>>12358
Do what I did, befriend someone and steal their credentials.

 No.12372

>>12360
>>12361
>>12362
"Well, at least I'm doing something"bros, we can't stop losing.

 No.12376

>>12362
So restart tor and switch up your VPN. It aint that hard mate.

 No.12381

File: 1637358316115.png (92.62 KB, 250x250, ClipboardImage.png)

>>12376
That doesn't solve the problem, your concurrent streams are still not isolated. It's an idiotic compensation for the problem that you caused yourself for no good reason. The only benefit is that you can now feel really smart about yourself.
Just use Tor, it's both simpler and better.

>>12372
>"Well, at least I'm doing something"bros, we can't stop losing.
You're losing only because you're blindly following conflicting advice, usually given by people who themselves have barely any idea what they're doing. If you don't know how any of this works then follow the official documentation.

This whole thing reminds of the way consumers make their choices. More features, bigger numbers, it must be better. Just pile it all on, we don't know how it works, but it must be doing something.

 No.13501

Surprised barely anyone in here has mentioned PGP
https://theprivacyguide.org/tutorials/pgp.html
GnuPG (GPG) is a recommended implementation, it's even pre-installed in some distros.
keybase.io seems like a nice place to publicly share your keys
Claws Mail is a good graphical email client that supports GPG

 No.13536

>>2111
Bunch of security/privacy-related links here:
https://sizeof.cat/links/
The blog looks pretty good too

 No.13539

are there any lefty privacy blogs? all of the ones i come across are booj as hell for some reason

 No.13556

>>13539
The one linked by an anon above (sizeof.cat) looks comfy.

 No.13568

>>13556
no, it doesn't

 No.13570

>>13536
I appreciate this guy dumping leaks he got off onion services.
https://sizeofcat.ru/post/airspan-networks-leak/

 No.14321

>find an interesting blog/site/project about FOSS/hacktivism/techshit
>"yeah I'm really opposed to proprietary and corporate control of the web, here's what we should do instead"
>ok, cool, cool, i'm listening
>"also if you want to talk make sure to join my fbi.gov community, it's the only way to contact me!!!"
Every fucking time, it's all so tiresome

 No.14323

File: 1649241959997.jpg (12.46 KB, 372x372, torp.jpg)

Where are the good tor bridges? Is there a way to choose which ones to connect to at startup?

Tried the default obsf4 bridges, then tried several obsf4 bridges from the web interface. Speeds are sometimes fast, sometimes slow.

 No.14330

>>14323
Snowflake proxies should be replacing bridges in the future. Start using them.

 No.14331

>>14330

yeah tried selecting snowflake on launch one time and left it when it didn't work and obsf4 worked first time.

Tried it again just now, errors result, searched the errors, snowflake needs more configuration. Detailed instructions available.

Thanks anon, just needed a point in the right direction.

 No.14354

>>14321
many leftists unfortunately have to integrate themselves into communities that are fbi honeypot platforms (discord), real shame that digital decentralization isn't a priority in the sphere of organization. the decentralized platforms are also of course overrun with web 3.0 crypto dudes

 No.14356

>>14354
>leftists are free to use any platform they want
>still thinks leftists are a threat to the status quo and not just part of it
Cope more.

 No.14385

>>14356
Call me when capital has been abolished, then you can talk about leftism being status quo tyvm.

 No.14394

>>14385
>Call me when capital has been abolished, then you can talk about leftism being status quo tyvm.
It was abolished 50 years ago. The government now centrally plans the economy by manipulating interest rates on imaginary money through the central banks. It's not the leftism you want but it is leftism and it is the status quo.

 No.14401

>>14394
those interest rates are set by porkies who own the bureaucrats in those central banks
also i dont think you know what capital is

 No.14403

>>14394
>>Call me when capital has been abolished, then you can talk about leftism being status quo tyvm.
>It was abolished 50 years ago.
I wish I lived in the world inside your head.

 No.14502

What VPN should I use? And if I can´t use VPN´s, what do I do to remain anonymous in my web browsing?

 No.14505

>>14502

If you are willing to use tor, probably the most idiot proof one step thing to do is to boot to tails on a usb.

Like anything, spend a few hours understanding it first.

 No.14536

>>11553
ProtonVPN is endorsed by the EU, and it does not support Linux distros that do not use systemd. It reeks of a honey pot.

 No.14537

>>14502
Along those lines, I am trying to put together a VPN on Void, and I was wondering if more knowledgable folks could tell me if it would be possible–or advisable for that matter–to layer the SoftEther protocol over L2tp/IPSec.

 No.14540

>>14502
cryptostorm.is
mullvad.net
njal.la
use openvpn to connect
for tor, always use the pre-packaged browser
if you're gonna set up your own VPN, look into public key encryption first and find a host in western europe or some other place that has high bandwidth and a minimum of firewalls. you can also do cool stuff like set up your own private bridge relay into the tor network

 No.14541

>>14539
How are we as /tech/no-communists supposed to deal with the fact that NATO is so clearly remilitarizing now and previously safe bets like Mullvad for example now probably will get compromised after the Nordics get fully enveloped by the US state?
Will it be sensible to shift focus from EU and into for example LatAm VPNs, VPSes, proxy servers, etc.? So far I have been counting on EU privacy laws since it wasn't as obvious as it is now that the shit would get this worse this much quicker in terms of the imperial core freaking the fuck out about multipolarity and countering by revving fullon into fascism. I need dialog on to orient myself better in this tumultuous time, I can't be the only one having these thoughts at this moment.

 No.14542


 No.14543

File: 1651045693520.png (16.7 KB, 512x512, 1f610.png)

>>14541
>>14542
this is my reaction

 No.14544

>>14541

You're not the only one having these thoughts anon. I'm assuming any free or popular VPN not controlled by and in the west would have….difficulties. Strange how there's no globally free service, like windscribe, that is based in latam, or china, or russia.

 No.14545

>>14544
Is the VPN situation really that bleak? At least the extended Invidious/Nitter/Libreddit network seems to be getting more and more international, I've seen some few LatAm and Asian instances pop up lately, hopefully that trend will increase.

 No.14549

>>14545
>Is the VPN situation really that bleak?

Ever heard of a popular VPN available to westerners that's not based and controlled in the west?

Also has anyone else noticed disruptions in the popular free western-based VPNs over recent weeks?

 No.14550

>LEFTYPOL.VPN.ORG

>FREE AND PAID VPN ACCOUNTS AVAILABLE WITH SERVER LOCATIONS IN CARACAS, HAVANA, ST PETERSBURG, NICARAGUA, SOLOMON ISLANDS AND A VERY FEW OTHERS.


>FYI WE ARE A CAPITALIST BUSINESS MODEL IDENTICAL TO THE WESTERN FREE VPNS.


1. Why doesn't this exist?
2. What would happen if it did?

 No.14553

>>14550
lets make it exist anon….

 No.14554

>>14553 (me)
though what is their business model? is it limited bandwidth free, to get you to subscribe to paid? Or advertizing? or glow money/grants?

 No.14556

>>14550
>>FYI WE ARE A CAPITALIST BUSINESS MODEL IDENTICAL TO THE WESTERN FREE VPNS.
Why bother trying to make money? A VPS with unlimited bandwidth is not that expensive, but I haven't looked into hosting in those countries. It could be like RiseupVPN.

 No.14557

>>14553
>lets make it exist anon….

I'm available, let's do it. Got any experience in the field, if I can ask?

>Why bother trying to make money? A VPS with unlimited bandwidth is not that expensive, but I haven't looked into hosting in those countries. It could be like RiseupVPN.


The thinking behind using a capitalist business model was that it would provide less of an excuse for the west to ban it, maybe. They would be more likely to ban an overtly communal entity based in those countries, idk. Ebil communism etc

Ofc it could and should be run as some kind of co-operative or whatever.

 No.14558

>>14554

The exact same business model as any of the other popular well known VPNs.

With the unique selling point of locations outside the ~17 eyes countries. That's a pretty big selling point globally, folks.

 No.14559

Does the DPRK offer vps for hire?

 No.14563

We need dedicated servers, not VPS if we're serious about security.

China and Russia have their own glowies and IPs from those countries are quickly put on Western ban lists. LatAm, middle east and Africa are less likely to be spied on or get banned. IMHO the countries for LeftyVPN would be:
Cuba
Nicaragua
Venezuela
Bolivia
Syria
Angola
Bhutan
DPRK
Ghana
Solomon Islands

 No.14567

>>14563
As if Cuba and especially the DPRK wouldn't have be in the same category as China for a VPN. Of all ML, the one on the radar the least I would assume would be Vietnam, yet you didn't even mention them. Bolivia may be a good bet too, but less so than Bolivia I'd say since they're more internally divided and the ones that would host a server rooms in that country would probably be liberals (of the more wealthier strata). Meanwhile I'd expect most of Vietnamese to be generally more patriotic.

 No.14571

>>14563
LeftyVPN, Your Packets are Safe With Us, Comrades :) (tm)

 No.14572

>>14571
also the jurisdiction itself matters less than the concrete fact of how much the host can hold its weight under any kind of institutional pressure. it's why generally ideological service providers like riseup are so trusted even if they're hosted within the US

 No.14573

>>14567

Servers located in every one of the countries mentioned, that are outside the n+1 eyes countries, would be totally owned anyway, no matter what. Same as all the well known western vpns.

So what? There's a massive market of people outside the west who'd like access to some kind of VPN based outside the west.

It would be a great project, surprised it hasn't been done already. There's a lot more value in it than just giving people the illusion of privacy.

 No.14574

>>14572

tbh, I would have no problem allowing a VPN run by Venezuelan government ninjas access to my data. Everyone else has it anyway.

 No.14575

>>14572
>it's why generally ideological service providers like riseup are so trusted
They're not at all "trusted" by anyone other than anarcho-radlibs.
They had their warrant canary not updated for half a year at one point and basically came back like "everything's fine don't worry :)"
You'd have to be seriously stupid to rely on an "anarcho-communist" email service from the US that has existed "without problems" for that amount of time (decades). Their entire team are compromised is the likely possibility.
Actually now that I just quickly Wiki-searched it; the warrant canary event in 2016 actually was a gag order, and they fully cooperated with the FBI. They have since removed any pretense of securing people's data from their updated canary.
https://en.wikipedia.org/wiki/Riseup#Warrant_canary

 No.14577

>>14575
i couldn't care less about your knee-jerk response to anarchists, honestly. they've been much more practically diligent against the US government for decades than your shitty "i'll let 'actually existing socialist' spooks spy on us" service could ever be

 No.14578

>>14577
>I'll enthusiastically rely on the FBI-approved ancom servers, tyvm!!!!
Be my guest LMAO

 No.14579

>>14567
Vietnam cooperates with America on a lot things these days and is Anticommunist like China

 No.14582

>>14579
Clearly the real winner here is Venezuela:
https://en.wikipedia.org/wiki/Copyright_infringement#Existing_and_proposed_laws
https://e.vnexpress.net/news/news/vietnam-boosts-intellectual-property-index-score-4255824.html
>The bottom five economies are Kuwait (49th), followed by Nigeria, Algeria, Pakistan and Venezuela (53rd).

 No.14588

>>14557
idk why i said that in a way implying i could help currently, sorry
i have experience setting up a personal vpn using openvpn and basic general server management shit, but i'm not in a good place to be starting projects right now, i dont have the money for a standalone server, and i have next to 0 web experience which would be needed

i'd be down to try setting shit up since it's been a goal of mine for some time to create some leftist run but not necessarily activisty/hackery web resources like vpn, storage, email, foss social media, etc. Anyways i can't right now, but if you're still interested in a couple months then this could happen. Though finding servers could be hard, and paying for them might be even more difficult.

 No.14589

So is there some obvious reason why there isn't already a venezuelan mullavad?

 No.14590

Why would you use a VPN instead of Tor, except torrenting? For torrenting, why would you use a VPN instead of I2P?
>>14563
There's also a need to host Tor nodes in those countries. Too many Tor nodes are in Germany.

 No.14591

>>14590
Are you talking individual users or leftypol as a whole?
Making leftypol an onion based site would be less feasible for 3 reasons:
1.tor is slower
2.tor only sites are more vulnerable to CP spam
3.most users don't connect via tor

 No.14592

>>14589
Well one obv reason is that the target demographic is usually liberals/proprietarians and so they would definitely not touch anything to do with heckin authoritarian socialist dictatorship Vuvuzuela
>>14590
>Why would you use a VPN instead of Tor, except torrenting?
That's a major reason. Also for a lot of regular stuff that needs login.
>For torrenting, why would you use a VPN instead of I2P?
Because by comparison to "regular" trackers I2P is virtually unknown and barren. But I wish this would change.
>>14591
leftypol.org already has an onion server btw, I'm using it right now:
http://76i2c3hn55fcj5nut3tqlboqqbbh23zvphv7lefk3vftpx6wketlanyd.onion/tech/res/2111.html

 No.14593

>>14590
hey Nym is a project which seeks to solve this problem. It's a paid mixnet that uses a blockchain to pay server providers to incentivize thirdies hosting servers instead of CIA hosting them. It's entering the final stages of deployment to mainnet now, i'd expect it to be ready for mass use in like 6 months but idk they keep promising to release more papers and shit and delay, so who knows. There's not like a browser for it rn…. but yeah anyways it exists and has potential

 No.14594

>>14593
also the threat model they developed it with is with the understanding that an adversary could theoretically see the whole of all internet connections, rather than tor basically hoping this doesnt exist… which works for now but has holes. nymtech dot net for their site

 No.14595

>>14592
>Well one obv reason is that the target demographic is usually liberals/proprietarians and so they would definitely not touch anything to do with heckin authoritarian socialist dictatorship Vuvuzuela

There should be a viable global market for this though, you're maybe looking at this from a western-centric point of view.

Mullavad is a service based in the west, available globally.

So is there some other obvious reason why there isn't already an equivalent to mullavad, except based outside the west? Venezuela was used an example, there are other suitable countries mentioned in the thread.

>>14590
>Why would you use a VPN instead of Tor, except torrenting? For torrenting, why would you use a VPN instead of I2P?

The discussion isn't about Tor, it's about the lack of vpn services that are based outside the west. We don't seem to be able to answer why this is, so far.

>>14588
>>>14557
>idk why i said that in a way implying i could help currently, sorry

hey no need to apologise, we're just kinda shittalking tbh. I think there's something there though, unless I'm missing something.

Again, is there some obvious reason why there isn't already a venezuelan (or similar country) mullavad?

 No.14596

>>14595
>the lack of vpn services that are based outside the west. We don't seem to be able to answer why this is, so far.
Because internet and hosting in these countries >>14563
is unreliable, slow and expensive.

 No.14597

>>14563
>no balkan country

 No.14602

They wanna make Signal illegal in Belgium now. Don't know if Matrix clients stand a chance if this shit really gets implemented https://www.standaard.be/cnt/dmf20220429_94515802

 No.14605

>>14596

Seriously, is that the main obstacle preventing something like a mullavad in those countries?

Isn't every country basically connected to the same internet these days? Like, this operation would be based in the capital city connected to the national backbone or whatever, so why would it be prohibitively unreliable, slow, or expensive? Everything should be cheaper in these countries, I thought.

 No.14608

>>14605
backbone/upstream networks are only as strong as the volume of traffic in downstream networks
Europe has a whole bunch of intra-regional IP routing providers like say Portlane with massive amounts of traffic, so they have higher connectivity on the internet as a whole as a result, as opposed to a country with a smaller amount of traffic coming from its backbone routers

 No.14620

>>14608

appreciate the reply. So it's a lack of connectivity or infrastructure that's the main reason something like mullavad doesn't exist outside the control of the west, in a country mentioned above?

Wouldn't almost anything resembling it, run and controlled outside the west, be an attractive service for many global citizens? Hosting, vpns, vps, whatever.

So it wouldn't have the same connectivity as something based in the west would have, but wouldn't some service be operable on a smaller scale?

 No.14682

>>14620

I want leftypolavad.ve please.

 No.14691

File: 1651955091413.jpg (304.88 KB, 672x936, 1563825542120.jpg)

I want to coreboot my trusty thinkpad but it seems I chose a bad time to do it.
https://www.techradar.com/news/good-luck-getting-a-raspberry-pi-anytime-soon-unless-you-want-to-buy-thousands
Is there anything else I can use to securely flash a motherboard?

 No.14697

>>14691

As someone who tried and failed to coreboot, did you even read the most basic guides you total…comrade :)

The other option to the Pi is a chip flasher. I got the recommended one from alibaba for a few dollars. When it arrived, detailed reading (500 tabs open) revealed that some of these flashers have a manufacturing defect or something that causes them to output the wrong voltage or something.

I took a chance and went ahead. Failure happened when I couldn't actually get the pomona clip to securely attach to the bios chip so that a data connection was made.

It's probably because my sight, just could not see wtf was going on, shits too small. Spent a couple of hours but only got the connection operating one time. Planning on trying again with a magnifying glass.

Can't remember the type of pomona clip chip flasher, now but it's mentioned a couple of times in the most popular guides.

 No.14699

>>14697
Wait I thought you needed a device (like a raspberrypi) and a CH341A Pro with a SOIC-8 clip? Now that I read a bit it seems the CH341A Pro is an alternative to using a raspberrypi.
Lmao I feel retarded now, I do need to RTFM…

 No.14719

>>14699

like I said if you're getting the CH341A make sure it's the exact model that gives the exactly correct voltage for coreboot, there are versions…I got a clip + CH341A kit on ali

 No.14809

>>14595

Nobody else see the value in a mullavad-style service based outside the n+1 eyes countries?

Can't understand why nothing similar exists already, even if only for PR purposes.

 No.14815

>>14809
>government-sponsored VPN service
yeah not sure that'll go over well

 No.14846

>>14815

Can't understand the negativity and discouragement tbh.

Why would it have to be government-sponsored? The popular western vpn + hosting services aren't technically government-sponsored but very government accessible. The service would be as ostensibly distant from local government as any western vpn service.

Are there not many people outside the west, as well as many western leftist types like me, that would pay something for a service based outside the n+1 eyes countries?

 No.14851

What's up with the Tor guard system? Is it trustful?

 No.14928

>>14851
yeah you need to trust the guards somewhat. It relies on statistics or smth to assure you that its a better system than the alternative, which is just random circuits, but if you run anything you want to be secure (like a service accessible over Tor i mean) you have to host your own tor nodes and specify them as guard nodes or you're taking chances

 No.15517

Firefox is pretty much the way to go. Based off of Netscape, probably the most used browser out there so generic against potential fingerprinters, modern and sleek, etc. You probably already have it installed, or have yet to fetch it from your distro's repo, who knows.
There are countless hardening guides out there for Firefox. Generally you want to disable Pocket, WebRTC, telemetry (sending data to Firefox's servers as a sort of feedback) blah blah blah. Take a gander:
https://web.archive.org/web/20181031171622/https://www.privacytools.io/#about_config
https://chrisx.xyz/blog/yet-another-firefox-hardening-guide

Javascript
This will probably be your biggest worry after fucking around in your settings and about:config, as it concerns privacy, unobstructed use, CPU usage, important stuff. There are several add-ons that deal with this. Definitely get LocalCDN. LibreJS deals similarly with essential Javascript code that has restrictive licenses, which might be a worry to varying degrees. Apart from that, uMatrix is fine-grain as hell. uBlock Origin also works alongside all of these as a convenient blacklist for ad-fuckers.
https://www.localcdn.org/
https://www.gnu.org/software/librejs/
https://addons.mozilla.org/en-US/firefox/addon/umatrix/
https://ublockorigin.com/

Proxying
Scroll down to the bottom of General Settings. Click on the button for Network Settings. Check Manual Proxy Configuration and put 127.0.0.1 in SOCKS host and the port whatever your OpenVPN or Wireguard or TOR is running on. For TOR I think it's 9050, look it up idk. Check "Proxy DNS when using SOCKS v5", DNS is easily the biggest weakness and most common cause for slip-ups when proxying.

Search engine
You want something that doesn't collapse because you can't run their precious Javascript and to not instantaneously ping a 3- or 4-letter agency's server farm. Duckduckgo.com is alright, also poke around the instances on searx.space.

 No.15518

>>15517
>Check Manual Proxy Configuration and put 127.0.0.1 in SOCKS host and the port whatever your OpenVPN or Wireguard or TOR is running on.
You can be fingerprinted if you use a custom thing like that. Just use Tor Browser Bundle like most people.

 No.15525

>>15518
But tor explicitly allows for SOCKS5 proxying. In many cases its better than vs not doing it, also TB is extremely limited in functionality for "heavier" web applications, like even Element/matrix with a lot of people / rooms chatting (SOCKS5 proxied Element Desktop is then preferable).
Another similar area is also RSS. Most browsers, including Firefox (and TB) removed support and you're thus forced to use a standalone application. Here again its better to torify the traffic via SOCKS5 proxy than vs not doing it.
Wouldn't you agree?

 No.15526

Firefox keeps on winning (or rather, Chromium keeps on losing).
https://news.itsfoss.com/chrome-extension-tracking/

 No.15529

File: 1655872119655.png (66.35 KB, 1083x410, browser-user-share.png)

>>15526
Sure thing.

 No.15531

>>15525
torsocks doesn't work for all uses and isn't guaranteed to route everything
shell out some time and use whooonix instead

 No.15540

>>15529
Fucking chromebooks


Unique IPs: 22

[Return][Go to top] [Catalog] | [Home][Post a Reply]
Delete Post [ ]
[ home / rules / faq ] [ overboard / sfw / alt ] [ leftypol / siberia / hobby / tech / edu / games / anime / music / draw / AKM ] [ meta / roulette ] [ cytube / git ] [ GET / ref / marx / booru / zine ]