Protecting your PII

The Internet is rife with adversaries that are after our identity and information, and readily provides vulnerabilities that can be exploited for that. Some of the most common threats are software attacks, identity theft, theft of information, sabotage, information extortion, surveillance, censorship and data abuse for ever more profits and control. Many journalists, activists and researchers work have been exploited due to its vulnerable structure, sometimes with severe (life threatening) consequences.

Goals

• Avoiding surveillance
• Circumventing censorship
• Infosec goals

Safer browsing

• Introduction
• Use a secure browser that protects your privacy
• Private browsing
• Take control of your browser
• Minimise your browser plugins
• Switch your user agent
• Cookie monsters
• Federated Learning of Cohorts (FLoC)
• Am I NOT FloCed?

Anonymising traffic

• Introduction
• Tunnelling
• SSH tunnels explained
• Use a VPN service
• VPN Fail open
• DNS leaks
• Digital mixing
• Using Tor
• Using I2P
• Chaining
• Creating a VPN with SSH and tun
• Change MAC address
• Renew IP lease
• Change nickname
• Edit hosts file

Securing email

• Introduction
• Use secure email services
• Use email securely
• Detecting fake emails and phishing
• Using GNU PG
• ‘;–have i NOT been pwned?

E2EE messaging

• Introduction
• Use a secure messaging service

File transfer

• Introduction
• Choose file sharing services
• Torrenting (P2P)
• Uploading files to a server
• Checking integrity of downloads (Linux)

Data in rest

• Introduction

Metadata

• Introduction
• Clean machine with BleachBit
• Remove metadata with hex editors
• Metadata Anonymisation Toolkit 2 (MAT2)
• Edit exif metadata in images

Web applications

• Introduction
• UnFloC your site
• Apache
• Make the site GDPR compliant
• Secure file uploads from users