Logo

Goals

  • Avoiding surveillance
    • What tools to use?
  • Circumventing censorship
    • Which tools to use?
  • Infosec goals

Safer browsing

  • Introduction
    • Fail
  • Use a secure browser that protects your privacy
  • Private browsing
  • Take control of your browser
  • Minimise your browser plugins
  • Switch your user agent
  • Cookie monsters
  • Federated Learning of Cohorts (FLoC)
    • How it works
    • Opt out
  • Am I NOT FloCed?

Anonymising traffic

  • Introduction
  • Tunnelling
  • SSH tunnels explained
    • Workstations and PC’s
    • Phones
  • Use a VPN service
    • No logs policy
    • Logs timestamps and bandwidth
    • Papers
  • VPN Fail open
    • Workstations and PC’s
  • DNS leaks
    • Workstations and PC’s
  • Digital mixing
    • Threshold batching
    • Vulnerabilities
  • Using Tor
    • Warnings taken seriously
    • Blocking Tor
    • Pluggable transports
    • Workstations and PC’s
    • Phones
  • Using I2P
    • Garlic routing
    • Tunnels
    • Routers
    • Layered encryption
    • Installation
  • Chaining
    • You -> VPN/SSH -> Tor
    • You -> Tor -> VPN/SSH
  • Creating a VPN with SSH and tun
  • Change MAC address
    • Workstations and PC’s
    • Phones
  • Renew IP lease
    • Workstations and PC’s
  • Change nickname
    • Find SSID
    • Change SSID
  • Edit hosts file
    • Workstations and PC’s
    • Phones

Securing email

  • Introduction
    • Fail
  • Use secure email services
    • Articles
  • Use email securely
  • Detecting fake emails and phishing
    • Fake emails
    • Phishing
    • View header information
  • Using GNU PG
  • ‘;–have i NOT been pwned?

E2EE messaging

  • Introduction
  • Use a secure messaging service

File transfer

  • Introduction
  • Choose file sharing services
    • Articles
  • Torrenting (P2P)
  • Uploading files to a server
  • Checking integrity of downloads (Linux)
    • Workstations and PC’s

Data in rest

  • Introduction
    • Workstations and PC’s
    • Phones

Metadata

  • Introduction
    • Techniques for metadata removal
  • Clean machine with BleachBit
  • Remove metadata with hex editors
    • Usage in general
    • Workstations and PC’s
  • Metadata Anonymisation Toolkit 2 (MAT2)
  • Edit exif metadata in images
    • Workstations and PC’s

Web applications

  • Introduction
  • UnFloC your site
    • website or blog
    • Wordpress
    • nginx webserver
    • OpenLiteSpeed webserver
  • Apache
  • Make the site GDPR compliant
  • Secure file uploads from users
Protecting your PII
  • Ty Myrddin Home
  • Unseen University
  • Improbability Blog
  • About
  • Contact

Cookie monsters

Third party cookies store our data on a server, a major privacy concern.

For not accepting third party cookies:

  • Firefox: Preferences -> Privacy -> Accept third-party cookies -> Never.

  • Chrome (also chromium): Settings -> Show advanced settings… -> Content settings -> Block third-party cookies and site data.

When changing the default cookie “lifetime” from “Keep until: they expire” to “Keep until: I close Firefox”, Firefox changes any persistent cookies that sites set to session cookies. To allow a site to set a persistent cookie, an exception (site permission) must be made.

For clearing cookies on exit:

  • Firefox/Tools -> Options -> Privacy -> “Use custom settings for history” -> Cookies: Keep until: “I close Firefox”.

  • Chrome (also chromium): Settings -> Show advanced settings … -> Content settings -> Keep local data only until you quit your browser.

When turning on the clearing of history at shutdown and include cookies, a completely separate process runs which does not pay any attention to cookie lifetime or exceptions (site permissions). It just nukes them all. Note that some cookies might survive clearing at shutdown if they are encoded into the session history file, the one Firefox uses to restore previous session windows and tabs.

Previous Next
Unseen University, 2024, with a forest garden fostered by /ut7.