learn.equalit.ie - User contributions [en]

DigsecResources

2017-12-12T13:27:42Z

Dmitri:

*[https://hygiene.digitalpublicsquare.com Hygiene Hygiene in The Digital Public Square] - an introduction and index to learning about digital security
*[https://securityplanner.org Security Planner] - Citizen Lab's Security Planner
*[https://prism-break.org Prism Break] - a directory of Internet services and software for protecting oneself from inline surveillance
*[https://www.privacytools.io Privacy Tools] - a huge collection of privacy-oriented tools, services and guides
*[https://emailselfdefense.fsf.org/ Email Self Defence] - Free Software Foundation
*[https://digitaldefenders.org/digitalfirstaid/ Digital First Aid Kit] - Digital Defenders
*[https://securityinabox.org Digital Security Toolkit] - Tactical Technology Collective & Front Line Defenders
*[https://help.riseup.net/en/security Security Guides] - Riseup
*[https://ssd.eff.org Surveillance Self Defense guide] - Electronic Frontier Foundation
*[https://www.accessnow.org/pages/protecting-your-security-online Protecting Your Security Online] - AccessNow
*[https://myshadow.org My Shadow] - Tactical Technology Collective
*[https://gendersec.tacticaltech.org/wiki/index.php/Main_Page Gender and Tech Resources] - Tactical Technology Collective
*[http://equalit.ie//esecman/index.html Digital Security Manual for Human Rights Defenders] - Front Line Defenders
*[https://github.com/OpenInternet/MyWebsiteIsDown/blob/dev/MyWebsiteIsDown.md What to do when your website goes down] - Jon Camfield
*[https://flossmanuals.net/basic-internet-security Basic Internet Security] - FLOSS manuals Greenhost, Free Press Unlimited
*[https://github.com/freedomofpress/encryption-works/blob/master/encryption_works.md Encryption Works] - Freedom of the Press Foundation
*[https://gist.github.com/atcuno/ Privacy and security conscious browsing] - Andrew Case

[[Category: DigsecQAResources]]

DigsecResources

2017-12-12T13:26:31Z

Dmitri:

*[https://hygiene.digitalpublicsquare.com Hygiene Hygiene in The Digital Public Square] - an introduction and index to learning about digital security
*[https://citizenlab.ca/2017/12/citizen-lab-launches-security-planner Security Planner] - Citizen Lab's Security Planner
*[https://prism-break.org Prism Break] - a directory of Internet services and software for protecting oneself from inline surveillance
*[https://www.privacytools.io Privacy Tools] - a huge collection of privacy-oriented tools, services and guides
*[https://emailselfdefense.fsf.org/ Email Self Defence] - Free Software Foundation
*[https://digitaldefenders.org/digitalfirstaid/ Digital First Aid Kit] - Digital Defenders
*[https://securityinabox.org Digital Security Toolkit] - Tactical Technology Collective & Front Line Defenders
*[https://help.riseup.net/en/security Security Guides] - Riseup
*[https://ssd.eff.org Surveillance Self Defense guide] - Electronic Frontier Foundation
*[https://www.accessnow.org/pages/protecting-your-security-online Protecting Your Security Online] - AccessNow
*[https://myshadow.org My Shadow] - Tactical Technology Collective
*[https://gendersec.tacticaltech.org/wiki/index.php/Main_Page Gender and Tech Resources] - Tactical Technology Collective
*[http://equalit.ie//esecman/index.html Digital Security Manual for Human Rights Defenders] - Front Line Defenders
*[https://github.com/OpenInternet/MyWebsiteIsDown/blob/dev/MyWebsiteIsDown.md What to do when your website goes down] - Jon Camfield
*[https://flossmanuals.net/basic-internet-security Basic Internet Security] - FLOSS manuals Greenhost, Free Press Unlimited
*[https://github.com/freedomofpress/encryption-works/blob/master/encryption_works.md Encryption Works] - Freedom of the Press Foundation
*[https://gist.github.com/atcuno/ Privacy and security conscious browsing] - Andrew Case

[[Category: DigsecQAResources]]

DigsecResources

2017-12-12T13:26:07Z

Dmitri:

*[https://hygiene.digitalpublicsquare.com Hygiene Hygiene in The Digital Public Square] - an introduction and index to learning about digital security
*[https://citizenlab.ca/2017/12/citizen-lab-launches-security-planner] - Citizen Lab's Security Planner
*[https://prism-break.org Prism Break] - a directory of Internet services and software for protecting oneself from inline surveillance
*[https://www.privacytools.io Privacy Tools] - a huge collection of privacy-oriented tools, services and guides
*[https://emailselfdefense.fsf.org/ Email Self Defence] - Free Software Foundation
*[https://digitaldefenders.org/digitalfirstaid/ Digital First Aid Kit] - Digital Defenders
*[https://securityinabox.org Digital Security Toolkit] - Tactical Technology Collective & Front Line Defenders
*[https://help.riseup.net/en/security Security Guides] - Riseup
*[https://ssd.eff.org Surveillance Self Defense guide] - Electronic Frontier Foundation
*[https://www.accessnow.org/pages/protecting-your-security-online Protecting Your Security Online] - AccessNow
*[https://myshadow.org My Shadow] - Tactical Technology Collective
*[https://gendersec.tacticaltech.org/wiki/index.php/Main_Page Gender and Tech Resources] - Tactical Technology Collective
*[http://equalit.ie//esecman/index.html Digital Security Manual for Human Rights Defenders] - Front Line Defenders
*[https://github.com/OpenInternet/MyWebsiteIsDown/blob/dev/MyWebsiteIsDown.md What to do when your website goes down] - Jon Camfield
*[https://flossmanuals.net/basic-internet-security Basic Internet Security] - FLOSS manuals Greenhost, Free Press Unlimited
*[https://github.com/freedomofpress/encryption-works/blob/master/encryption_works.md Encryption Works] - Freedom of the Press Foundation
*[https://gist.github.com/atcuno/ Privacy and security conscious browsing] - Andrew Case

[[Category: DigsecQAResources]]

Main Page

2017-12-12T13:23:06Z

Dmitri:

'''eQualit.ie's whitepapers, documentation and training guides. Free to use and share'''

* [[DigsecResources|Learning guides and resources]]
* [[Curricula|a Digital Security Trainer's Curricula]]
* Online manual on [http://equalit.ie/esecman/ Digital Security for Human Rights Defenders]
* [[Secure hosting guide]]
* [[Online Learning|Digital Security lessons]]
* [[np1sec|(n+1)sec: a secure multi-party communication protocol]]
* [[Digital_Security_QA|Digital Security Q & A]]
* [[Workshop slides]]

Consult the [//meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

User talk:Carol

2017-11-09T21:42:08Z

Dmitri: Welcome!

'''Welcome to ''learn.equalit.ie''!'''
We hope you will contribute much and well.
You will probably want to read the [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents help pages].
Again, welcome and have fun! [[User:Dmitri|Dmitri]] ([[User talk:Dmitri|talk]]) 21:42, 9 November 2017 (UTC)

User:Carol

2017-11-09T21:42:07Z

Dmitri: Creating user page for new user.

Carol does things and stuff

Main Page

2017-10-25T20:10:01Z

Dmitri:

'''eQualit.ie's whitepapers, documentation and training guides. Free to use and share'''

* [[Curricula|a Digital Security Trainer's Curricula]]
* Online manual on [http://equalit.ie/esecman/ Digital Security for Human Rights Defenders]
* [[Secure hosting guide]]
* [[Online Learning|Digital Security lessons]]
* [[np1sec|(n+1)sec: a secure multi-party communication protocol]]
* [[Digital_Security_QA|Digital Security Q & A]]
* [[Workshop slides]]

Consult the [//meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

Workshop slides

2017-07-17T14:59:36Z

Dmitri: Created page with "* July 17"

* [[File:July17.pdf|thumbnail|July 17]]

Main Page

2017-07-17T14:58:42Z

Dmitri:

'''eQualit.ie's whitepapers, documentation and training guides. Free to use and share'''

* [[Curricula|a Digital Security Trainer's Curricula]]
* Online manual on [http://equalit.ie/esecman/index.html Digital Security for Human Rights Defenders]
* [[Secure hosting guide]]
* [[Online Learning|Digital Security lessons]]
* [[np1sec|(n+1)sec: a secure multi-party communication protocol]]
* [[Digital_Security_QA|Digital Security Q & A]]
* [[Workshop slides]]

Consult the [//meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

File:July17.pdf

2017-07-17T14:52:15Z

Dmitri:

Digital Security QA

2016-09-28T04:18:33Z

Dmitri:

__NOEDITSECTION__

* [[%D0%9F%D0%B5%D1%80%D0%B5%D0%B2%D0%BE%D0%B4/ru|русский]]
*[[Traductions/fr|française]]
*[[فارسی/fa|فارسی]]
*[[اترجمة/ar|لعربية]]
 

This is an interactive guide for those looking for an answer to their digital security questions. It assumes there is a problem you're trying to solve and asks a series of iterative questions to try and direct you to a solution.

==I want to protect my...==

{{#ask: [[Category:Top Level Scenario Task]]|format=ul }}

==Q&A Meta Data==

* [[DigsecInsecurity|Threat Categories]]
* [[digsecResources|Digital Security Resources]]
* [[Scenario Tools|Tools]]
* [[Scenario Services|Services]]

Digital Security QA

2016-09-28T04:15:26Z

Dmitri:

__NOEDITSECTION__

* [[%D0%9F%D0%B5%D1%80%D0%B5%D0%B2%D0%BE%D0%B4/ru|русский]]
*[[Traductions/fr|française]]
*[[فارسی/fa|فارسی]]
*[[اترجمة/ar|لعربية]]
*[[Translations/dv|dimi talk]]
 

This is an interactive guide for those looking for an answer to their digital security questions. It assumes there is a problem you're trying to solve and asks a series of iterative questions to try and direct you to a solution.

==I want to protect my...==

{{#ask: [[Category:Top Level Scenario Task]]|format=ul }}

==Q&A Meta Data==

* [[DigsecInsecurity|Threat Categories]]
* [[digsecResources|Digital Security Resources]]
* [[Scenario Tools|Tools]]
* [[Scenario Services|Services]]

User talk:Ruud

2016-07-21T12:58:57Z

Dmitri: Welcome!

User:Ruud

2016-07-21T12:58:56Z

Dmitri: Creating user page for new user.

Nothing here for now.

User talk:Munk sean

2016-03-14T18:51:05Z

Dmitri: Welcome!

User:Munk sean

2016-03-14T18:51:04Z

Dmitri: Creating user page for new user.

I really like digital hygiene.

Digital Security QA

2016-03-14T18:37:54Z

Dmitri:

ترجمهٔ فارسی/fa

2016-03-14T18:36:40Z

Dmitri: Dmitri moved page ترجمهٔ فارسی/fa to فارسی/fa

#REDIRECT [[فارسی/fa]]

فارسی/fa

2016-03-14T18:36:37Z

Dmitri: Dmitri moved page ترجمهٔ فارسی/fa to فارسی/fa

اترجمة/ar

2016-03-14T18:34:43Z

Dmitri: Created page with "{{Scenario Translations|ar}}"

Digital Security QA

2016-03-14T18:33:59Z

Dmitri:

__NOEDITSECTION__

* [[%D0%9F%D0%B5%D1%80%D0%B5%D0%B2%D0%BE%D0%B4/ru|русский]]
*[[Traductions/fr|française]]
*[[ترجمهٔ فارسی/fa|ترجمهٔ فارسی]]
*[[اترجمة/ar|لعربية]]
 

This is an interactive guide for those looking for an answer to their digital security questions. It assumes there is a problem you're trying to solve and asks a series of iterative questions to try and direct you to a solution.

==I want to protect my...==

{{#ask: [[Category:Top Level Scenario Task]]|format=ul }}

==Q&A Meta Data==

* [[DigsecInsecurity|Threat Categories]]
* [[digsecResources|Digital Security Resources]]
* [[Scenario Tools|Tools]]
* [[Scenario Services|Services]]

فارسی/fa

2016-02-25T14:02:54Z

Dmitri: Created page with "{{Scenario Translations|fa}}"

Digital Security QA

2016-02-25T14:02:05Z

Dmitri:

__NOEDITSECTION__

[[%D0%9F%D0%B5%D1%80%D0%B5%D0%B2%D0%BE%D0%B4/ru|русский перевод]]; [[Traductions/fr|traductions française]]; [[ترجمهٔ فارسی/fa|ترجمهٔ فارسی]]
 

This is an interactive guide for those looking for an answer to their digital security questions. It assumes there is a problem you're trying to solve and asks a series of iterative questions to try and direct you to a solution.

==I want to protect my...==

{{#ask: [[Category:Top Level Scenario Task]]|format=ul }}

==Q&A Meta Data==

* [[DigsecInsecurity|Threat Categories]]
* [[digsecResources|Digital Security Resources]]
* [[Scenario Tools|Tools]]
* [[Scenario Services|Services]]

To send an email that no one but me and the recipient can read

2015-11-25T03:41:45Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Scenario
|Scenario Task Parent=Email
|Scenario Task Type=Surveillance
|Scenario Task Description=There are several options for sending a confidential email that no one but the sender and recipient/s can read. Unlike traditional letters, email isn't protected by an envelope and isn't just one copy of a message travelling from the sender to the receiver. Rather, it is plainly visible to anyone who has access to its several copies, which are stored in several computers along the way. So you have to trust that those copies won't be read by your email provider, the Internet service provider and anyone else responsible for sending and delivering your message. If you want to be sure that no one but you and the recipient can read your messages, the solution relies on using encryption. The Electronic Frontier Foundation has a good introductory guide to [https://ssd.eff.org/en/playlist/want-security-starter-pack#communicating-others communicating with others] in a secure way.
 
}}

I want to destroy data

2015-11-25T03:38:04Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Scenario
|Scenario Task Parent=Data
|Scenario Task Type=Unauthorised Access, Data Loss
|Scenario Tools and Services=Bleachbit, CCleaner, Eraser
|Scenario Task Description=Those rumours were true - computers [https://learn.equalit.ie/wiki/Destroying_data cannot delete data]. Information previously deleted on your computer, USB or SD card by using the standard delete > empty bin method, can be recovered. In order to destroy data you need to overwrite its physical location on the disk with new information. Specific tools exist for this purpose including [https://ssd.eff.org/en/module/how-delete-your-data-securely-windows Bleachbit for Windows] and [https://ssd.eff.org/en/module/how-delete-your-data-securely-linux Linux], as well as [https://securityinabox.org/en/guide/ccleaner/windows Ccleaner] and [http://sourceforge.net/projects/eraser/ Eraser] for Windows. MacOS users can follow the techniques mentioned in [https://ssd.eff.org/en/module/how-delete-your-data-securely-mac-os-x this guide] or recommendations regarding SecureTrash on the [https://support.apple.com/kb/PH18638?locale=en_US&viewlocale=en_US Apple website].
 
}}

I want to share a document securely

2015-11-25T03:37:08Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Data
|Scenario Task Type=Surveillance
|Scenario Tools and Services=GPG4USB
|Scenario Task Description=If you want to share a document with a friend or two, without anyone else being able to access this document, several options are available. You can send your document as an encrypted email attachment, as described in [[I want to learn about encrypting email]] or use a stand-alone [https://securityinabox.org/en/guide/gpg4usb/windows GPG4USB] to encrypt one or more individual files. In either case, both parties need to have [[I want to learn about encrypting email | set up and exchanged their keys]] in advance - to decrypt the message they have received.

You can also use an [[I want to investigate other options | encrypted messaging service]] or do a file transfer if both parties have set up a [[I want to know about secure chat | secure chat session]].
 
}}

I want to recover data

2015-11-25T03:36:43Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Data
|Scenario Task Type=Data Loss
|Scenario Tools and Services=Ubuntu
|Scenario Task Description=Information previously deleted from your computer or removable memory card can [https://securityinabox.org/en/guide/recuva/windows sometimes be recovered].

If your computer is broken and the operating system refuses to load, it may still be possible to recover data from the hard drive by booting it from a [http://www.ubuntu.com/download/desktop/create-a-usb-stick-on-windows live operating system]
}}

I want to prevent unauthorised access to my data

2015-11-25T03:36:12Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Data
|Scenario Task Type=Unauthorised Access
|Scenario Tools and Services=Veracrypt, LibreCrypt, DiskCryptor, BitLocker, GPG4UAB, Symantec Endpoint
|Scenario Task Description=If you want to avoid that your documents are accessed by someone without your permission, you need to either encrypt them one by one (file encryption) or to store them in a secure space, which may be your computer, a storage device or just a part of them (disk encryption).

In order to create a secure space on your hard disk or storage device or encrypt the entire computer, you can use several tools:

* [https://securityinabox.org/en/guide/truecrypt/windows Truecrypt] can encrypt your entire hard disk or just a part of it, but is no longer actively maintained.
* Truecrypt is being replaced by [https://www.idrix.fr/Root/content/category/7/32/46/ Veracrypt], which has been developed starting from Truecrypt's code, but this project is very recent and doesn't have a very large user base.
* [https://ssd.eff.org/en/module/how-encrypt-your-windows-device DiskCryptor] and [https://github.com/t-d-k/LibreCrypt LibreCrypt] are two other free and open source tools for disk encryption that are gaining prominence as replacements of Truecrypt.
* [https://en.wikipedia.org/wiki/BitLocker BitLocker] is a Windows solution (Vista and 7 Ultimate+ editions and Windows 8+) with several options for full disk or folder encryption.
* Another popular commercial disk encryption tool is [https://www.symantec.com/endpoint-encryption/ Symantec Endpoint Encryption].
* Mac users can encrypt their disk using the built-in [https://support.apple.com/en-ca/HT204837 FileVault] feature.

You can also use an encrypted file storage service like [https://peerio.com Peerio] or [https://mega.nz Mega] as explained in the [[I want to ensure that my data is never lost]] section. Individual files can be protected with [https://securityinabox.org/en/guide/gpg4usb/windows GPG4USB].
}}

I want to hide my traces

2015-11-25T03:33:17Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Data
|Scenario Task Type=Profiling your identity and actions
|Scenario Tools and Services=Bleachbit, Tails OS,
|Scenario Task Description=Your computer [[Destroying temporary files | keeps trace]] of most of your activities. This includes the websites you visit, documents you've worked on, email attachments opened, etc. This information is constantly collected and stored as 'temporary files' on the computer. Since these files document your actions, they could give away a lot of information about you to anyone who might have access to your machine, so it may be prudent to delete such traces.

[https://ssd.eff.org/en/module/how-delete-your-data-securely-windows Bleachbit for Windows] and [https://ssd.eff.org/en/module/how-delete-your-data-securely-linux Linux], as well as [https://securityinabox.org/en/guide/ccleaner/windows Ccleaner] can destroy temporary files.
 

Using your browser in [https://support.google.com/chrome/answer/95464?hl=en Incognito mode on Chrome] or [https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history Firefox] will prevent the recording of your browsing history and the download of [https://en.wikipedia.org/wiki/Cache_%28computing%29 cache] to the computer. It will also disable [https://en.wikipedia.org/wiki/HTTP_cookie cookie] collection for that session and help [https://myshadow.org/visualisations/animation prevent profiling]. Additional browser settings on [https://myshadow.org/how-to-increase-your-privacy-on-firefox Firefox] and [https://myshadow.org/how-to-increase-your-privacy-on-chrome Chrome] will help you better control your data.

If you want to be fairly sure that anyone getting hold of your machine will not be able to learn about what you've been up to, it is always advisable to [[I want to prevent unauthorised access to my data | encrypt your hard disk]], and you can also consider using [https://tails.boum.org/ Tails], a live operating system that leaves no traces on the computer you are using (unless you ask it to do so).
 
}}

I want to ensure that my data is never lost

2015-11-25T03:32:28Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Data
|Scenario Task Type=Data Loss, Unauthorised Access
|Scenario Tools and Services=Peerio, Mega
|Scenario Task Description=Whether through a malicious action or by sheer bad luck, data can be lost in many different ways. And if that data had been stored just in one device or location, it may be very difficult or even impossible to [[I_want_to_recover_data | recover]] it.

The only way to not actually lose any information is to have an up-to-date and secure backup.
The best solution, especially if your archive is sizeable and your Internet connection speed is basic, is to make several [[I want to prevent unauthorised access to my data | encrypted copies]] of your data on various portable memory devices

If you want to keep an online archive of your files, there are many commercial and some free services offering encrypted storage. In choosing between them, look out for terms such as 'client-side' or 'end-to-end' encryption - that is where the provider cannot decrypt your data because it was encrypted locally, by your client.

[https://peerio.com Peerio] is an encrypted file storage and sharing tool with 1GB of free space. [https://mega.nz Mega] also offers encrypted online storage and sharing with 50GB for free. There is a syncing feature to keep all your devices up to date.
 
}}

Minimising damage from a lost or stolen computer

2015-11-25T03:29:06Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Computer
|Scenario Task Type=Unauthorised Access
|Scenario Task Description=Security measures must be done in advance of the loss. They include:
* A good backup, either on removable media or [[I want to ensure that my data is never lost|online]]
* An [[I want to prevent unauthorised access to my data|encrypted disk]] or [[I would like to prevent others from accessing my computer|secure chip]] in your computer
}}

I would like to prevent others from accessing my computer

2015-11-25T03:28:42Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Computer
|Scenario Task Type=Unauthorised Access
|Scenario Tools and Services=DM Crypt
|Scenario Task Description=Barring physical access to your computer may be a logistical challenge: in most cases there will be moments when it is left unattended. Nevertheless, you can prevent others from getting any of your personal data out of it by using [https://learn.equalit.ie/wiki/Better_Passwords strong passwords] and [[I_want_to_prevent_unauthorised_access_to_my_data|disk encryption]].

A laptop with a [https://en.wikipedia.org/wiki/Trusted_Platform_Module TPM chip] can encrypt the entire drive and secure the computer from booting to unauthorised parties, using [http://windows.microsoft.com/en-ca/windows-vista/bitlocker-drive-encryption-overview BitLocker] for Windows (Ultimate and Enterprise editions of Windows Vista and Windows 7, the Pro and Enterprise editions of Windows 8) and [https://en.wikipedia.org/wiki/Dm-crypt dm-crypt] for Linux. Mac users can encrypt the disk using the built-in [https://support.apple.com/en-ca/HT204837 FileVault] feature.
}}

I want to protect my computer from virus infection

2015-11-25T03:27:35Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Computer
|Scenario Task Type=Unauthorised Access
|Scenario Tools and Services=Tails OS, Qubec OS, NoScript, ScriptBlock
|Scenario Task Description=Like its biological predecessor, a computer virus can be caught in a lot of different circumstances. It may be impossible to prevent your computer from exposure but a series of defensive mechanisms should be able to stop the infection. They include:

* Automatic updates installation for the operating system (Windows, Mac, etc) and all software
* A registered and functioning [https://securityinabox.org/en/guide/avast/windows anti-virus]
* Use either the native [https://support.apple.com/en-us/HT201642 Mac] or [http://windows.microsoft.com/en-us/windows-8/windows-firewall-from-start-to-finish Windows] firewall or a third-party [https://securityinabox.org/en/guide/comodo/windows firewall] on your computer
* Use the [https://securityinabox.org/en/guide/firefox/windows NoScript] and [https://addons.mozilla.org/en-us/firefox/addon/flashblock/ FlashBlock] extensions for Firefox or [https://chrome.google.com/webstore/detail/flashcontrol/mfidmkgnfgnkihnjeklbekckimkipmoe?hl=en FlashControl] and [https://chrome.google.com/webstore/detail/scriptblock/hcdjknjpbnhdoabbngpmfekaecnpajba?hl=en ScriptBlock] for Chrome
* Switch to [https://en.wikipedia.org/wiki/Linux_distribution#Popular_distributions Linux] or use the security-oriented [https://tails.boum.org/ Tails] or [https://www.qubes-os.org/ QubesOS] operating systems

Furthermore, detailed guides are available in the [https://ssd.eff.org/en/module/how-do-i-protect-myself-against-malware Surveillance Self Defense] project and the [https://securityinabox.org/en/guide/malware Security in-a-box] toolkit.
}}

I would like to connect to a website securely

2015-11-25T03:20:54Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Access to the Web
|Scenario Task Type=Surveillance, Profiling your identity and actions
|Scenario Tools and Services=HTTPS Everywhere,
|Scenario Task Description=Connecting to a website securely means several things, all of which contribute to secure your access to the websites you visit:

* the connection between your computer and the website's server is [https://learn.equalit.ie/wiki/Encrypted_connections '''encrypted'''];
* there are '''no [https://trackography.org/ leaks of information]''' about the current session to third parties;
* you do not expose yourself to '''[https://support.google.com/websearch/answer/8091?hl=en malware infection]''' by visiting a compromised website.

Read the [https://help.riseup.net/en/better-web-browsing Better Browsing] guide by RiseUp for details on how to browse with greater security in Firefox or Chrome (in general, these are the recommended browsers when discussing security).
 

The [https://www.eff.org/HTTPS-EVERYWHERE HTTPS Everywhere] browser add-on by the Electronic Frontier Foundation ensures that you connect securely and with trusted credentials to thousands of websites.
 

In all cases, make sure that your computer's operating system is up-to-date, that you are using the latest version of your browser and that you are running [https://securityinabox.org/en/guide/avast/windows anti-malware] protection. Install the recommended extensions from the RiseUp guide and review the [https://ssd.eff.org/en/module/how-do-i-protect-myself-against-malware How Do I Protect Myself Against Malware?] guide from the EFF.
 

You may also wish to use an anonymity network or a VPN to reach the desired website as explained in the [[I want to be anonymous when browsing the web]] section.
 
}}

A website I am trying to access is unreachable

2015-11-25T03:18:47Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Scenario
|Scenario Task Parent=Access to the Web
|Scenario Task Type=Censorship
|Scenario Tools and Services=Herdict
|Scenario Task Description=Many countries that practice [https://opennet.net/ Internet censorship] are 'kind' enough to display a warning or a reason to the user when a banned website is being requested. In other circumstances your request may simply result in a 'Page Not Found' error, or the browser will keep spinning and eventually time out with another error message. There could be several reasons for this situation to consider, before claiming with certainty that the site is indeed censored.
# You made a mistake in the site's name (perhaps omitted or added 'www' when it's not necessary)
# Your computer's network configuration is not working. Try opening other websites or http://74.125.224.72 (Google's search page by IP). If nothing works - check your computer's settings.
# Try to open the site from http://downforeveryoneorjustme.com This service will attempt to open your website from a different physical location. If that works, then the site is functioning and is likely censored (not accessible) from your location/country.

If you think that the website has been blocked in your country, take a look at [http://www.herdict.org/ Herdict] project from the Berkman Center for Internet. Here you can test the site's accessibility from different countries and whether other users have reported similar blockages. If that site is blocked, please see [[I want to learn about circumventing Internet censorship]]
}}

A website I am trying to access is unreachable

2015-11-25T03:18:21Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Scenario
|Scenario Task Parent=Access to the Web
|Scenario Task Type=Censorship
|Scenario Task Description=Many countries that practice [https://opennet.net/ Internet censorship] are 'kind' enough to display a warning or a reason to the user when a banned website is being requested. In other circumstances your request may simply result in a 'Page Not Found' error, or the browser will keep spinning and eventually time out with another error message. There could be several reasons for this situation to consider, before claiming with certainty that the site is indeed censored.
# You made a mistake in the site's name (perhaps omitted or added 'www' when it's not necessary)
# Your computer's network configuration is not working. Try opening other websites or http://74.125.224.72 (Google's search page by IP). If nothing works - check your computer's settings.
# Try to open the site from http://downforeveryoneorjustme.com This service will attempt to open your website from a different physical location. If that works, then the site is functioning and is likely censored (not accessible) from your location/country.

If you think that the website has been blocked in your country, take a look at [http://www.herdict.org/ Herdict] project from the Berkman Center for Internet. Here you can test the site's accessibility from different countries and whether other users have reported similar blockages. If that site is blocked, please see [[I want to learn about circumventing Internet censorship]]
}}

FAQ

2015-11-25T02:40:42Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Description=This is an introductory guide for those looking for an answer to their digital security concerns. It assumes common threat scenarios and asks a series of iterative questions to direct you to a solution, whether that's a tool, a technique or a link to one of the excellent resources listed herein. Treat every recommendation as one piece of the security puzzle you need to solve.

__TOC__

===Guides and reference manuals===
*[https://prism-break.org Prism Break] - a directory of Internet services and software for protecting oneself from online surveillance
*[https://www.privacytools.io Privacy Tools] - a huge collection of privacy-oriented tools, services and guides
*[https://emailselfdefense.fsf.org/ Email Self Defense] - Free Software Foundation
*[https://digitaldefenders.org/digitalfirstaid/ Digital First Aid Kit] - Digital Defenders
*[https://securityinabox.org Digital Security Toolkit] - Tactical Technology Collective & Front Line Defenders
*[https://help.riseup.net/en/security Security Guides] - Riseup
*[https://ssd.eff.org Surveillance Self Defense guide] - Electronic Frontier Foundation
*[https://www.accessnow.org/pages/protecting-your-security-online Protecting Your Security Online] - AccessNow
*[https://myshadow.org My Shadow] - Tactical Technology Collective
*[https://gendersec.tacticaltech.org/wiki/index.php/Main_Page Gender and Tech Resources] - Tactical Technology Collective
*[http://equalit.ie//esecman/index.html Digital Security Manual for Human Rights Defenders] - Front Line Defenders
*[https://github.com/OpenInternet/MyWebsiteIsDown/blob/dev/MyWebsiteIsDown.md What to do when your website goes down] - Jon Camfield
*[https://flossmanuals.net/basic-internet-security Basic Internet Security] - FLOSS manuals Greenhost, Free Press Unlimited
*[https://github.com/freedomofpress/encryption-works/blob/master/encryption_works.md Encryption Works] - Freedom of the Press Foundation
*[https://gist.github.com/atcuno/ Privacy and security conscious browsing] - Andrew Case

===Software and services index===
{{#ask: [[Category:Scenario Tool]]|format=ul }}

===Contacts===
If you have a suggestion for a threat scenario or new resource to link to, a recommendation or simply want to help or find something out, please write https://encrypt.to/info@equalit.ie
}}

FAQ

2015-11-25T02:33:17Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Description=This is an introductory guide for those looking for an answer to their digital security concerns. It assumes common threat scenarios and asks a series of iterative questions to direct you to a solution, whether that's a tool, a technique or a link to one of the excellent resources listed herein. Treat every recommendation as one piece of the security puzzle you need to solve.

__TOC__

===Guides and reference manuals===
*[https://prism-break.org Prism Break] - a directory of Internet services and software for protecting oneself from online surveillance
*[https://www.privacytools.io Privacy Tools] - a huge collection of privacy-oriented tools, services and guides
*[https://emailselfdefense.fsf.org/ Email Self Defense] - Free Software Foundation
*[https://digitaldefenders.org/digitalfirstaid/ Digital First Aid Kit] - Digital Defenders
*[https://securityinabox.org Digital Security Toolkit] - Tactical Technology Collective & Front Line Defenders
*[https://help.riseup.net/en/security Security Guides] - Riseup
*[https://ssd.eff.org Surveillance Self Defense guide] - Electronic Frontier Foundation
*[https://www.accessnow.org/pages/protecting-your-security-online Protecting Your Security Online] - AccessNow
*[https://myshadow.org My Shadow] - Tactical Technology Collective
*[https://gendersec.tacticaltech.org/wiki/index.php/Main_Page Gender and Tech Resources] - Tactical Technology Collective
*[http://equalit.ie//esecman/index.html Digital Security Manual for Human Rights Defenders] - Front Line Defenders
*[https://github.com/OpenInternet/MyWebsiteIsDown/blob/dev/MyWebsiteIsDown.md What to do when your website goes down] - Jon Camfield
*[https://flossmanuals.net/basic-internet-security Basic Internet Security] - FLOSS manuals Greenhost, Free Press Unlimited
*[https://github.com/freedomofpress/encryption-works/blob/master/encryption_works.md Encryption Works] - Freedom of the Press Foundation
*[https://gist.github.com/atcuno/ Privacy and security conscious browsing] - Andrew Case

===Software and services index===
{{#ask: [[Category:Scenario Tool]]|format=ul }}

===Contacts===
If you have a new suggestion for a threat scenario, a recommendation or simply want to help or find something out, please write to us with a bit of privacy via https://encrypt.to/info@equalit.ie
}}

FAQ

2015-11-25T01:57:09Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Description=This is an introductory guide for those looking for an answer to their digital security concerns. It assumes common threat scenarios and asks a series of iterative questions to direct you to a solution, whether that's a tool, a technique or a link to one of the excellent resources listed herein. Treat every recommendation as one piece of the security puzzle you need to solve.

__TOC__

===Guides and reference manuals===
*[https://prism-break.org Prism Break] - a directory of Internet services and software for protecting oneself from online surveillance
*[https://www.privacytools.io Privacy Tools] - a huge collection of privacy-oriented tools, services and guides
*[https://emailselfdefense.fsf.org/ Email Self Defense] - Free Software Foundation
*[https://digitaldefenders.org/digitalfirstaid/ Digital First Aid Kit] - Digital Defenders
*[https://securityinabox.org Digital Security Toolkit] - Tactical Technology Collective & Front Line Defenders
*[https://help.riseup.net/en/security Security Guides] - Riseup
*[https://ssd.eff.org Surveillance Self Defense guide] - Electronic Frontier Foundation
*[https://www.accessnow.org/pages/protecting-your-security-online Protecting Your Security Online] - AccessNow
*[https://myshadow.org My Shadow] - Tactical Technology Collective
*[https://gendersec.tacticaltech.org/wiki/index.php/Main_Page Gender and Tech Resources] - Tactical Technology Collective
*[http://equalit.ie//esecman/index.html Digital Security Manual for Human Rights Defenders] - Front Line Defenders
*[https://github.com/OpenInternet/MyWebsiteIsDown/blob/dev/MyWebsiteIsDown.md What to do when your website goes down] - Jon Camfield
*[https://flossmanuals.net/basic-internet-security Basic Internet Security] - FLOSS manuals Greenhost, Free Press Unlimited
*[https://github.com/freedomofpress/encryption-works/blob/master/encryption_works.md Encryption Works] - Freedom of the Press Foundation
*[https://gist.github.com/atcuno/ Privacy and security conscious browsing] - Andrew Case

===Software and services index===
{{#ask: [[Category:Scenario Tool]]|format=ul }}

===Contacts===
Contact us securely https://encrypt.to/0x6FF1895D
}}

Test my site for vulnerabilities

2015-11-24T22:05:31Z

Dmitri: removed hacking threat category

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=My Website
|Scenario Task Type=Unauthorised Access
|Scenario Task Description=The rule of thumb for not getting your site hacked or infected with malware is:
* Run up-to-date software, including all themes and plugins (if there are no recent updates to either - do not use them anymore)
* Do not install or run any services you are not currently using
* Make sure your web hosting service continually updates their own systems and services

Testing a site for vulnerabilities is not an easy task. You need to look not only at the various systems your website is comprised of and depends on, but to be able to interpret the results as well. A vulnerability could be found and exploited on a systems level (e.g. hosting set-up), in the web server configuration, inside Wordpress or in some third-party plug-in you have installed within it.

An [https://pentest-tools.com online penetration test] is available with several testing options, including a passive reconnaissance [https://pentest-tools.com/information-gathering/google-hacking# 'Google hacking'] test. In principle it is recommended to run your own vulnerability testing systems, including the popular [https://nmap.org/download.html Nmap] tool and the surprisingly easy to set up but very well respected [http://www.tenable.com/products/nessus/nessus-professional Nessus vulnerability scanner].

Many vulnerabilities occur at the user level - with you. For an in-depth look into auditing internal organisational processes and systems, refer to the [http://www.safetag.org Safetag] project and make sure you have read the section on how to [[I would like to prevent others from accessing my computer|protect your computer]].
}}

Reset passwords and security questions

2015-11-24T22:05:01Z

Dmitri: removed hacking threat category

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=I want to protect my email account from unauthorised access
|Scenario Task Type=Unauthorised Access
|Scenario Task Description=Password are easily forgotten (unless you are using a [https://securityinabox.org/en/guide/keepass/windows password program]). This is why most service providers offer several opportunities for you to reset your password by sending you an email or by asking you a personal question of your choice to prove your identity. Whilst often necessary, both options may result in a security risk and need to be thought through carefully in advance. For an excellent description of the problem, you can read this [http://www.wired.com/2012/08/apple-amazon-mat-honan-hacking/ Wired article by Matt Honan]. To make a long story short:

# Resetting a password by sending the code to another email account opens up another attack vector for the hacker. If they can break into one account and then request the reset password to another account to be sent there, you are worse off than before.
# Setting a security question based on personal information (e.g. your mother's maiden name) means the attacker only needs to find out this information in order to reset your password and gain access to your account.

If at all possible, it is best to not set any reset options. If you want this option or are required to do so, put yourself in the hacker's shoes and make sure their task won't be easy.

 
}}

My Website

2015-11-24T22:04:34Z

Dmitri: removed hacking threat category

{{Scenario Task
|Scenario Task Format=Scenario
|Scenario Task Type=Unauthorised Access
|Scenario Task Description=It's very easy to get a website up and running these days, but it's pretty tough to keep it secure and stable against a continually evolving and maturing array of cyber attacks. In order to protect your website, you will need to consider its technical set-up, the software you are using to create the site and its content, as well as the various types of plugins and extensions enabled for extra features on that site. Most importantly, you need to have a contingency plan, by asking yourself what happens in case of an emergency. This includes:

* creating regular backups of your files and database, in case your online content gets lost due to a technical problem or an attack;
* knowing your hosting provider's terms of service and their readiness to protect you during an attack;
* knowing your Domain name service (DNS) provider's security options and terms of service;
* implementing mitigation solutions in advance of a crisis.

In most cases, for non-technical users it is advised to create a site/profile on an existing platform catering especially for this, like [https://wordpress.com/ WordPress], [https://medium.com/ Medium] and [http://www.livejournal.com/ Livejournal] to name a few of the bigger providers. They look after all the back end details, leaving you to create and manage content on the site. You can also choose to host your blog at one of the non-profit groups including [http://noblogs.org/ NoBlogs] or someone from this [https://help.riseup.net/ca/security/resources/radical-servers list].
}}

I want to protect my email account from unauthorised access

2015-11-24T22:04:08Z

Dmitri: removed hacking threat category

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Email
|Scenario Task Type=Unauthorised Access
|Scenario Task Description=There are many things you can do to protect your email account from unauthorised entry or hacking. There are quite a few things your email provider should do as well, so [[To find a reliable email provider|pick one wisely]]. First and foremost your account must be protected by a [https://learn.equalit.ie/wiki/Better_Passwords good password]. You also need to make sure that your computer is free from [[I want to protect my computer from virus infection|malware]].
}}

I want to protect my computer from virus infection

2015-11-24T22:03:26Z

Dmitri: removed hacking threat category

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Computer
|Scenario Task Type=Unauthorised Access
|Scenario Task Description=Like its biological predecessor, a computer virus can be caught in a lot of different circumstances. It may be impossible to prevent your computer from exposure but a series of defensive mechanisms should be able to stop the infection. They include:

* Automatic updates installation for the operating system (Windows, Mac, etc) and all software
* A registered and functioning [https://securityinabox.org/en/guide/avast/windows anti-virus]
* Use either the native [https://support.apple.com/en-us/HT201642 Mac] or [http://windows.microsoft.com/en-us/windows-8/windows-firewall-from-start-to-finish Windows] firewall or a third-party [https://securityinabox.org/en/guide/comodo/windows firewall] on your computer
* Use the [https://securityinabox.org/en/guide/firefox/windows NoScript] and [https://addons.mozilla.org/en-us/firefox/addon/flashblock/ FlashBlock] extensions for Firefox or [https://chrome.google.com/webstore/detail/flashcontrol/mfidmkgnfgnkihnjeklbekckimkipmoe?hl=en FlashControl] and [https://chrome.google.com/webstore/detail/scriptblock/hcdjknjpbnhdoabbngpmfekaecnpajba?hl=en ScriptBlock] for Chrome
* Switch to [https://en.wikipedia.org/wiki/Linux_distribution#Popular_distributions Linux] or use the security-oriented [https://tails.boum.org/ Tails] or [https://www.qubes-os.org/ QubesOS] operating systems

Furthermore, detailed guides are available in the [https://ssd.eff.org/en/module/how-do-i-protect-myself-against-malware Surveillance Self Defense] project and the [https://securityinabox.org/en/guide/malware Security in-a-box] toolkit.
}}

I want to be protected from malicious emails

2015-11-24T22:02:50Z

Dmitri: removed hacking threat category

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=Email
|Scenario Task Type=Unauthorised Access
|Scenario Task Description=A huge quantity of malicious content can access your computer through your email inbox. This could be annoying but harmless unsolicited advertising (spam), [https://en.wikipedia.org/wiki/Malware malicious software] embedded in an attachment or within the message itself, and various types of [https://en.wikipedia.org/wiki/Phishing#Link_manipulation links] leading you to infected web pages. Many tools exist to protect your computer from infection but they will never be 100% effective and a lot of discretion is advised when opening or reacting to content received in an email message. To learn how to check if an email you have received is malicious, read [https://ssd.eff.org/en/module/how-avoid-phishing-attacks this manual] by the Electronic Frontier Foundation. Also, be aware of [https://en.wikipedia.org/wiki/Spyware#Rogue_anti-spyware_programs rogue software] promising to protect your computer.
}}

How do I know if someone else is accessing my email account

2015-11-24T22:01:38Z

Dmitri: removed hacking threat category

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=I want to protect my email account from unauthorised access
|Scenario Task Type=Unauthorised Access
|Scenario Task Description=The three main email providers offer a 'Recent Activity' notification window where you can view where and how your account was last accessed.
*[https://security.google.com/settings/security/notifications Google recent activity]
*[https://account.live.com/Activity?mkt=en-US Hotmail recent activity]
*[https://www.yahoo.com/notifications# Yahoo notification]

 
}}

Find a reliable hosting provider

2015-11-24T22:01:12Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=My Website
|Scenario Task Type=Unauthorised Access, Surveillance
|Scenario Tools and Services=Autistici, RiseUp
|Scenario Task Description=If you are setting up your own website for the first time, or want to find a more secure solution for the website you already have, you will have to look into the complicated market of hosting providers, where making the right choice can be hard. To understand what you need to look for, consider the following points:

* Larger companies will be more reliant on existing control panels and automated processes to solve your problems and less willing to go out of their way specifically for you. On the other hand, their infrastructure could be better suited to mitigate [https://en.wikipedia.org/wiki/Denial-of-service_attack an attack]
* Research company reviews from past customers
* Read the terms of service, in particular their mitigation options during an attack
* Look for details on their data centre location, internal systems security, client privacy, customer support agreements

In any case, keep your own backup of the site and make sure you are in control of the [https://en.wikipedia.org/wiki/Domain_Name_System DNS records] so as to switch providers when necessary. A more [https://learn.equalit.ie/wiki/Choose_a_hosting_provider detailed guide] is available for those considering their hosting options.

'''Commercial Hosting'''
* [https://aws.amazon.com/ec2/ Amazon EC2] - huge amount of features and resources, a bit overwhelming for non-technical users at fiprst
* [https://www.dreamhost.com/ Dreamhost] - Many hosting options with a control panel, DNS registration included
* [http://wpengine.com/ WpEngine] - popular option for Wordpress site hosting

'''Non-commercial Hosting'''
* [http://www.autistici.org/ Autistici] - free hosting for activists on servers run by people who care about users' privacy and security
* [https://help.riseup.net/ca/security/resources/radical-servers A list of non-profit] hosting and Internet service providers, catering to activist causes

 
}}

Data

2015-11-24T22:00:23Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Scenario
|Scenario Task Type=Unauthorised Access, Data Loss
|Scenario Task Description=Your data is your own. Protecting it from loss, corruption and unauthorised access requires effort and by default your data is only as secure as the device it is stored on. This section deals with protecting your offline data. For information on protecting your data on the Internet, please refer to the sections on [[Email]], [[Online Conversations]], [[Access to the Web]]
}}

Computer

2015-11-24T22:00:05Z

Dmitri: removed hacking threat category

{{Scenario Task
|Scenario Task Format=Scenario
|Scenario Task Type=Unauthorised Access
|Scenario Task Description=A large portion of our digital identities, years of work history and meticulously configured software rests on our computers. A broken, stolen or otherwise malfunctioning computer could be a small (or large) calamity. This section deals with how best to protect your computer from various physical and digital risks.
 
}}

2 factor authentication

2015-11-24T21:59:40Z

Dmitri:

{{Scenario Task
|Scenario Task Format=Solution
|Scenario Task Parent=I want to protect my email account from unauthorised access
|Scenario Task Type=Unauthorised Access
|Scenario Task Description=[https://en.wikipedia.org/wiki/Two-factor_authentication 2-factor authentication] also known as 2-step and 2fa is a method of authenticating yourself with a combination of two components: something you know (a password) and something you have (e.g. a mobile phone). The idea behind this method is that it's incredibly difficult for the hacker to have access to both components. The service must be offered by your email provider and many of them do now. Please have a look at this excellent report by Citizen Lab on [https://citizenlab.org/2015/08/iran_two_factor_phishing/ 2fa phishing attacks], in particular the conclusions and recommendations within.

*[https://www.google.ca/landing/2step/ Google 2-step verification] and the [https://support.google.com/accounts/answer/1066447?hl=en Authenticator] application for your smartphone that allows you to generate codes without Internet access
*[http://windows.microsoft.com/en-ca/windows/two-step-verification-faq Hotmail 2-step verification]
*[https://help.yahoo.com/kb/SLN5013.html Yahoo 2-step verification]
*[https://www.facebook.com/help/148233965247823 Facebook Login Approval]
*[https://support.twitter.com/articles/20170388# Twitter Login Verification]
 
[https://help.yahoo.com/kb/SLN5013.html Here's a list] of other popular online services that provide 2fa.

 
}}