Friday, July 1, 2022

Security of the "other than physical" sort

 So current events seem to have a whole new batch of people out there worrying about information/operation/electronic security. Here's a good start from the EFF.

So, if you're curious or serious or somewhere in between, welcome to the fold. I'll give you some easy methods to secure your information and communication, and I'll give you some more difficult ones, and you can figure out what you're willing to do.

Firstly, if you want to completely remove the ability of people to snoop in on your communications and behaviors, you're going to have to do something that you don't want to do. You already know it, but I'm going to tell you anyway. You'll need to take your smartphone, turn it off, and dump it in a drawer away from wherever you are. If you have any voice operated devices or apps, those need to go. Alexa or any similar device is just an eavesdropping device that you've brought into your house. Any other device such as a TV with that sort of functionality built in, same issue. Make 'em go away. On top of that, you're going to have to switch to cash transactions. Any time you're in public, wear a hoodie and your covid mask. If you drive any toll roads and use a fast pass or similar, you'll want to avoid that. Any conversations that you want to be actually private need to be held in an open space with no electronic items on your person or the person you are talking to.

Now those steps that I just outlined are pretty hard in the modern world, but not impossible. That said, if you don't want to do all of that, there are steps you can take that are easier.

Pull out that smartphone. Turn off all the tracking. All of it. Delete any app that you aren't using. Any app that you're using that can be accessed through a browser, delete that app and only use the browser. While you're at it, use a browser like Duck Duck Go, it'll be better than the default browser on your smartphone. If you want to do anything even remotely close to private messaging on this phone, use Burner and Signal apps. Use Burner to generate a disposable number and then use that number for Signal. No other messaging app on that phone is to be even remotely trusted. Do any browsing through a VPN like Mullvad. You need a VPN that doesn't log your activity and are based in another country. Mullvad checks that box.

If you want another layer of separation, get a true burner phone, one you paid cash for, or use a gift card to purchase it that you paid cash for. Use that burner for any messaging that you want to be private. 

Also, any time you don't need to use your phone, don't. Turn that bitch off and throw it in a Faraday bag, like this one.

Anything you purchase needs to be in person, and use cash. Wear your hoodie and mask when you're in public, but especially when buying things. Anytime you are even remotely near civilization, you're being recorded on video, and quite possibly, audio. So whenever you're out and about, wear your facial recognition obscuring stuff, ala hoodie and mask. Nobody is going to look at you funny by doing those things now. Three years ago you might've created a stir, but no longer. And I suspect that your ability to wear your "hazmat gear" will probably continue for years before anybody really notices or cares.

Your number one enemy is you when it comes to infosec/opssec/comssec. Remember that you have the right to remain silent, fucking do it. The more people that know a secret, the less likely that said secret will remain secret. If you honestly are worried about a piece of info, then keep that info tight and keep your mouth shut.

No comments:

Post a Comment

Langdon Tactical HK P30

One of my good friends let me borrow his LTT tuned HK P30. I have never been the biggest fan of the P30, but it is certainly a decent gun. M...