[Blink]

Paranoia 2: Internet Privacy and Security

Welcome back, today we are discussing network security.  
Today, the NSA moniters everything that goes through the net, so I will be showing you ways to make tracking harder [not impossible, if they are after you, they will find a way].

All in one Packages:

• Tails OS
  
• Whonix
  
• Subgraph OS
  

Tails:
Tails is a Debian-based operating system.  It's main feature is that it routes everything through TOR.
There's not really much to say for it, it's best used as a livecd flash drive.

Conclusion: Good, but not perfect.

Whonix:
Whonix is designed to be a crazy web browser.  It is a full OS, but it is designed to be run in a VM and used for web-browsing.  This is an interesting concept, but your computer can still leak information from whatever isn't in the VM.

Conclusion: Interesting, but Tails is preferred.

Subgraph OS:
Subgraph is an OS that works similarily to Qubes, it runs everything in seperate VM containers.  It's edge over Qubes is that it also routes everything through TOR.  In the end it gives you an extremely secure environment; but like Tails, it is best as a livecd.

Conclusion: Interesting concept, seems like the best option available, but don't forget to only use livecd.


Software:

• PeerBlock [Windows Only]:
  PeerBlock has a list of untrusted IP addresses and blocks them.  It is a good peice of software, but should not be used just alone.  Think of it as an add-on to your existing privacy suite.
  Conclusion: Best as an add-on.
  
• TOR:
  TOR routes your packets through a bunch of nodes before reaching their destination, it's like running 5 VPNs all through each other.  Still, there is a lot of speculation saying that TOR has been cracked by the NSA.
  Conclusion:  Best option available, but not perfect.
  
• Psiphon:
  Psiphon uses multiple ways to connect you to their VPN-style service, but they warn that it will not stop you from government tracking. [Available for Android and Windows only]
  Conclusion: Good for getting away from your ISP, but not for getting away from the gevernment.
  
• Free Proxies:
  Proxies route your traffic through another server to mask your IP.  However, they are not encrypted, they log data, and have terrible connection speeds.
  Conclusion: NO!
  
• Free VPNs:
  Free VPNs have issues, you get what you pay for.  Many free VPNs keep logs and if they are asked by the government to turn them over, they will happily comply.  You have to trust your VPN provider.
  Conclusion: Be weary...
  
• Paid VPNs:
  Paid VPNs are better than free VPNs, but you still have to check if they keep logs.
  Conclusion:  Better than free VPNs, and they can be better than TOR if you have a trusted VPN provider.
  
  
  Comment more ideas below
  

Remember, none of the above will help you if you have bad browsing habits.  There is a price for privacy, and that price is the inability to use common services.  See below for a list of services that track you and their alternatives.

Replacements for Services that Track you:

• Google/Bing/Yahoo - DuckDuckGo, Startpage, Disconnect
  
• Gmail/Outlook/Yahoo Mail - Protonmail, Tutanota, Scryptmail...
  
• Youtube - Youtube through DuckDuckGo or something similar
  
• Google Hangouts/Facebook Messenger/Skype/Discord - XMPP, Ricochet, Cryptochat
  
• Google Docs - Onlyoffice (Self-Hosted), WPS Office (Offline), LibreOffice (Offline)
  
• Paypal - Bitcoin (BTC)
  
• Amazon - Buy stuff from random people using BTC
  
• Google Maps - OpenStreetMap
  
  Comment more ideas below
  

Web browsers can also track you, see below for more secure alternatives to the common browsers.

Browsers:

• Chromium
  
• Comodo Dragon
  
• Firefox
  
• TOR Browser
  

Chromium:
Chromium is the open source base of Google Chrome, it seems like a likely candidate.  However, it also comes with all of the vulnerablities in Chrome and seems to be less secure than Firefox (seems to be the general opinion).
Conclusion: OK, but there is better.

Comodo Dragon:
Comodo Dragon is a customized version of Chromium, created for security and privacy.  However, you can achive the same effect by installing a bunch of extensions in Chromium.  Don't trust another company to do it for you.
Conclusion: Do it yourself, don't use Comodo.

Firefox:
Firefox is an open-source browser made by Mozilla.  Firefox is generally trusted by the security community and can be custimized with add-ons to further enhance privacy.  Just be sure to change the default search engine to DuckDuckGo.
Conclusion:  Great, but there is a better option if you want to use TOR.

Tor Browser:
Tor Browser is a custimized version of Firefox that is bundled with TOR.  It is probably the best option on this list.  Remember to update the browser as much as possible to prevent vulnerabilities from being present.
Conclusion: Best option here.

Below are some add-ons for your browser to improve security and privacy.

Browser Add-Ons*

• Disable WebRTC - Disables WebRTC to improve privacy.
  
• Privacy Badger - Blocks Ads and Trackers
  
• HTTPS Everywhere - Uses HTTPS when possible
  
• Random Agent Spoofer - Spoofs a diferent user agent everytime you go to a website
  
• Self-Destructing Cookies - Auto deletes cookies after you close your browser
  
• NoScript - Disables JavaScript, Java and flash
  
• uBlock Origin**
  

Notes:

• You should use a DNS that respects your privacy such as OpenNIC*
  
• If you need to use social networks, check your privacy settings and watch what you share.*
  

Thanks for reading, don't forget to watch for more Paranoia
*Credit to @Pikami for this idea
**Credit to @Kyzer

[Blink]

Updated with web browsers!

[Pikami]

Some suggestions from me:
Change your DNS server:
A lot of people use Microsoft's or Google's DNS servers because they are often the set to be default on routers and computers.
Google's Public DNS permanently logs your ISP and location information for analysis. Your ip-address is also stored for 24 hours.
If you use their DNS, they can know witch sites you are visiting.
You should use a DNS server that respects your privacy, I would recommend OpenNIC, it can be found at opennicproject.org
Must-have browser plugins:
Privacy Badger - blocks spying ads and invisible trackers. It's developed by the folks at the EFF
HTTPS Everywhere - encrypts your communications to websites by enforcing HTTPS where it's possible.
Awesome/Fun browser plugins:
Random Agent Spoofer - Spoofs a random user agent every time you connect to a website (Helps prevent browser fingerprinting)
Self-Destructing Cookies - Automatically delete cookies and local storage when they are no longer used by open browser tabs. (Helps prevent browser fingerprinting, but isn't practical for everyday use)
NoScript - Disables JavaScript, Java, and Flash (Not practical because lots of pages depend on JavaScript)
Request Policy - Disallows cross-site requests (Not practical because lots of pages use cross-site CDN resources)
Notes:
Check your privacy settings on social networks and watch what you post.

[Blink]

Some suggestions from me:
Change your DNS server:
A lot of people use Microsoft's or Google's DNS servers because they are often the set to be default on routers and computers.
Google's Public DNS permanently logs your ISP and location information for analysis. Your ip-address is also stored for 24 hours.
If you use their DNS, they can know witch sites you are visiting.
You should use a DNS server that respects your privacy, I would recommend OpenNIC, it can be found at opennicproject.org
Must-have browser plugins:
Privacy Badger - blocks spying ads and invisible trackers. It's developed by the folks at the EFF
HTTPS Everywhere - encrypts your communications to websites by enforcing HTTPS where it's possible.
Awesome/Fun browser plugins:
Random Agent Spoofer - Spoofs a random user agent every time you connect to a website (Helps prevent browser fingerprinting)
Self-Destructing Cookies - Automatically delete cookies and local storage when they are no longer used by open browser tabs. (Helps prevent browser fingerprinting, but isn't practical for everyday use)
NoScript - Disables JavaScript, Java, and Flash (Not practical because lots of pages depend on JavaScript)
Request Policy - Disallows cross-site requests (Not practical because lots of pages use cross-site CDN resources)
Notes:
Check your privacy settings on social networks and watch what you post.

Thanks! Updated!

[Pikami]

[*]Ghostery - Similar to Privacy Badger

Don't use Ghostery, it collects and sells your data.

[Blink]

[*]Ghostery - Similar to Privacy Badger

[*]

Don't use Ghostery, it collects and sells your data.

Thanks, I don't use it myself, but I've heard about it. Removed from list.

[Kyzer]

Good write-up dude, I would suggest adding UBlock origin as the best browser security plugin.

Also you should use a referrer blocker plugin, to hide the referring page URL when you click a link ... it is sent to the web server.

So if you click a link from Sinisterly to site X, that site can see your referrer.... which is not cool.

For DNS I would recommend OpenDNS or Comodo, they may be logged I am not sure, but anything is better then using Google.

[voiden]

Nice one

Just as a clarification, Whonix VM connects thru Whonix-gateway VM which Isolates the Whonix-VM from you PC entirely. The "Browser" VM doesnt even know about your PC.

Cheers man

[silur]

Search engines - SearX - DuckDuckGo had some shady stuff lately because the company is registered in the US and they remained silent about an NSA Warrant. SearX is less efficient but can be self-hosted and already have nodes within countries that have strict internet privacy laws

Money - Monero over BTC
To keep thing short bitcoin is heavily analyzed in the US already and the European union published their plans on the analysis and regulation on Dec 24, and will be actual by Jun 17. I'll write a detailed post about best cryptocurrency for crime today

Messaging - check my thread https://sinister.ly/Thread-My-experience...-messaging

[D@rk TruTH]

I use whonix....i think it is good but yeah not perfect...