CrunchBang Linux Forums / Tips for privacy and security

Re: Tips for privacy and security

dummy@example.com (kbmonkey) — Sun, 12 May 2013 15:23:34 +0000

Here is an interesting page that explains how to choose better, secure passwords. See the "How can I apply this to my daily life?" section.

https://www.grc.com/haystack.htm

Re: Tips for privacy and security

dummy@example.com (Near) — Sun, 05 May 2013 00:11:47 +0000

hey guys, where is Tails?

https://tails.boum.org/

"Tails is a live DVD or live USB that aims at preserving your privacy and anonymity."
..but you can use it from VirtualBox ofc.

Re: Tips for privacy and security

dummy@example.com (anonymous) — Sun, 24 Feb 2013 15:08:52 +0000

Change the link for CookieSafe (Firefox add-on) to:

https://addons.mozilla.org/en-us/firefo … ompatible/

Re: Tips for privacy and security

dummy@example.com (sorcerer's_apprentice) — Sun, 17 Feb 2013 15:52:57 +0000

Tunafish wrote:

^ Thanks, added a link to your thread in the first post!
tuna

Thanks, tuna. I appreciate that.

Re: Tips for privacy and security

dummy@example.com (Tunafish) — Sun, 17 Feb 2013 15:40:01 +0000

^ Thanks, added a link to your thread in the first post!

tuna

Re: Tips for privacy and security

dummy@example.com (sorcerer's_apprentice) — Mon, 11 Feb 2013 17:13:08 +0000

Thank you all for contributing to and maintaining this topic.

As I have been reading through this thread I thought of a few things I'd like to mention:

Addons:

On the first page in the addon-section there are some addons which don't appear to be that trustworthy. In particular:

1) SSL-Blacklist doesn't seem to be available much longer.

2) Showip Some users over at mozilla.org suspect this addon to be spyware.

3) BrowserProtect The same with this one.

4) Hide-My-IP Seems to be commercial software. Only supported on OSX and Win. Also how does it work? Who collects the data? What do they use it for? Why bother wasting time, money and trust with this tool when you could be using TOR?

5) priv3 Although trustworthy, it's unnecessary when using Adblock with anti-tracking filters. (For more info on how to use Adblock see my Thread on security)

Clarification:

tunafish wrote:

Does anyone know how http://time.is/ finds my exact hometown? When i lookup my ip on different services, the result is never my city. So.. why is time.is so exact? Does anyone know?

Yup. It uses your IP-address to locate you. Try using it with TOR and you will see the difference.

chaanakya wrote:

If you want to get rid of your useragent entirely, create a new String preference in about:config
general.useragent.override
and leave it blank.

I would strongly advise against this. Not using a user-agent lets you stick out like hell from the crowd of browsers out there. Go to panopticlick.eff.org to verify what I just wrote.

See the section on Firefox in my thread on security for a better configuration.

In the security thread I already mentioned twice in this short post I go over a lot of stuff that hasn't been discussed here. So if you're interested just have a look. I will be updating that post regularly as soon as I think it needs updating. That could be because I have to refine/revise what I wrote there - or because someone pointed me to a better solution or another tool/config to use. What I want to get at is: there will be some change going on in that thread and you are heartily invited to contribute to it.

Maybe over time it becomes so comprehensive that I (or some volunteer) will host it as a separate website/blog to make the content available to a larger audience.

Thanks!

Re: Tips for privacy and security

dummy@example.com (vlax) — Tue, 25 Dec 2012 20:49:11 +0000

thank, all this topic is really useful

Re: Tips for privacy and security

dummy@example.com (nadir) — Thu, 13 Dec 2012 01:55:02 +0000

Freddythunder: setting a non-default port in /etc/ssh/sshd_config helps a lot too.
I use fail2ban.

Like many already said: i2p is very good.

Re: Tips for privacy and security

dummy@example.com (Freddythunder) — Mon, 10 Dec 2012 21:45:11 +0000

Abraham Lincoln wrote:

The problem with quotes on the internet is you never know if they are genuine

On the original note, I just found DenyHosts that will watch your failed login attempts and add incessant IP addresses to your deny hosts file. I just put it in today after looking at /var/log/auth.log - Had like a few hundred attempts at my ssh at 4 am this morning. And I'm nobody!! Here's a link to a wiki page for it:
http://www.tomschaefer.org/wiki/index.p … _Denyhosts

Re: Tips for privacy and security

dummy@example.com (bozhkov) — Mon, 10 Dec 2012 15:36:22 +0000

It is generally a good idea to take whatever anyone says with a pinch of salt, state and economic agendas are quite dominant in mass media.

Re: Tips for privacy and security

dummy@example.com (R3nCi) — Fri, 07 Dec 2012 16:12:31 +0000

bozhkov wrote:

Possibly true, but have in mind RT stands for Russia Today and yeah

An excellent point. I understand that it is a good idea to take everything they say with a grain of salt

Re: Tips for privacy and security

dummy@example.com (bozhkov) — Thu, 06 Dec 2012 15:44:53 +0000

Possibly true, but have in mind RT stands for Russia Today and yeah

Re: Tips for privacy and security

dummy@example.com (R3nCi) — Wed, 05 Dec 2012 03:29:38 +0000

'Everyone in US under virtual surveillance' - NSA whistleblower — RT

RT.com wrote:

RT: Tell me about the most outrageous thing that you came across during your work at the NSA.
WB: The violations of the constitution and any number of laws that existed at the time. That was the part that I could not be associated with. That’s why I left. They were building social networks on who is communicating and with whom inside this country. So that the entire social network of everybody, of every US citizen was being compiled overtime. So, they are taking from one company alone roughly 320 million records a day. That’s probably accumulated probably close to 20 trillion over the years. The original program that we put together to handle this to be able to identify terrorists anywhere in the world and alert anyone that they were in jeopardy. We would have been able to do that by encrypting everybody’s communications except those, who were targets. So, in essence you would protect their identities and the information about them until you could develop probable cause, and once you showed your probable cause, then you could do a decrypt and target them. And we could do that and isolate those people all alone. It wasn’t a problem at all. There was no difficulty in that.

Re: Tips for privacy and security

dummy@example.com (damionhh) — Thu, 22 Nov 2012 23:08:05 +0000

well thats not exactly what my bookmarks are, but you get the point.

Re: Tips for privacy and security

dummy@example.com (el_koraco) — Thu, 22 Nov 2012 22:53:25 +0000

damionhh wrote:

mostly animal porn sites

That's surprisingly honest considering the creepiness level. I guess you'll have to figure it out, I don't wanna have nothing to do with rabbit orgies.