personal-security-checklist/5_Privacy_and-Security_Gadgets.md

Item	Description
USB Data Blocker	There are many exploits that allow an attacker to infect your device with malware and/ or steal data, when you plug it in to what appears to be a USB power outlet. If you are charging your phone while travelling, a USB data blocker will prevent anything other than power from getting to your device, by removing the connection between the 2 data wires. The PortaPower brand, also comes with a fast charging chip, since without the data connection your device would otherwise charge at minimum speed
Microphone Blocker	A microphone blocker is a device that prohibits audio hacking, in the form of a hardware accessory for a smartphones, laptops etc. It functions as a dummy mic jack, so the device thinks it has a microphone plugged in, and hence disables the internal one
Faraday Pouch	Faraday Shield is an enclosure that blocks electromagnetic fields. It is useful to keep any device which could be hacked through sending or receiving signals in such a case, such as car keys, or a smart phone
RFID Blocking Cards	If you are concerned about card skimming, you can use an RFID blocking sleeve to protect your contactless payment and identity cards. RFID-enabled credit cards and passports wirelessly transmit the necessary personal information to a RFID reader within a few inches to complete a transaction. This is subject to hacking since the transmission protocol is not encrypted. However there are proportionately very few crimes RFID-skimmer reported, and most credit cards have a low contactless limit
Web Cam Covers	Web cam covers are quite self-exoplanetary, they physically conceal the lenses on your laptop or phone camera, to prevent a malicious actor (hacker, government, corporation etc) from watching you through the camera. It may sound paranoid, but unfortunately it happens, and it is a relatively simply process for someone to gain remote access to a webcam. Even Mark Zuckerberg covers his webcam! Of course you could just use some tape, rather than buying a cover
Port Blockers	There are many attacks that involve an attacker inserting a USB device (such as a BadUSB/ Rubber Ducky/ Malduino) to an open USB port. Adding a port blocker doesn't render you safe from this, since the attacker could take the time to try and remove it, but it could protect you for an opportunistic attack
Privacy Filter	Privacy filters are polarized sheets of plastic, that when placed over a computer screen prevent screen visibility from any angle other than straight on. They make it harder for anyone to look over your shoulder and see your data confidential
YubiKey	The YubiKey is a small hardware device used to secure access on mobile devices, computers, and servers to all of your online accounts. It allows for second-factor authentication, hence protecting anyone other than you from logging in. It is said to be more convenient and more secure than using a mobile authenticator, but there are reasons for and against
Encrypted Kingston Data Traveler	Good value, easy-to-use with no installation required. Built-in hardware encryption and high password protection. Also optionally allows for automatic cloud backup option to protect against data loss (which doesn't say much about their faith in this USB device, but jokes aside-) this is a very affordable and well rated little device
IornKey - Durable Encrypted USB	Claiming to provide "uncompromising data security", IornKey has strong encryption combined with a very durable USB drive, to prevent against data loss. It is certified for enterprise usage, so if you are storing other peoples personal data- this is the drive for you
Hardware Encrypted USB 3.0 Drive	OS & Platform independent, with 100% hardware encryption, so it works perfectly with all operating systems. USB 3.0 with Read/Write Speeds of 116/43 MBps. GDPR complient and FIPS 140-2 Level 3, NLNCSA DEP-V & NATO Restricted Level Certified with real time military grade AES-XTS 256-bit hardware encryption
Hardware Encrypted External Hard Drive	Similar to the iStorage hardware encrypted USB 3.1 drive, this external hard drive has high capacity and strong hardware encryption. Data is encrypted with FIPS PUB 197 Validated Encryption Algorithm, and against a 7 - 15 digit alpha-numeric pin, with erasing capabilities for multiple failed login attempts
Fingbox - Home Network Monitoring	Fing Box is an optional companion to the Fing App. It provides network monitoring and security capabilities, to protect your home/ work network. As well as the functionality of the app, the FingBox allows you to block intruders and notify you about unknown devices as well as analyse your network for vulnerabilities, such as open ports. You can also see which devises are near your home at what time (even if they're not connected to your WiFi), and improve network speed with scheduled analysis and bandwidth allocation. Best to try out the Fing app alone, before buying the FindBox, but both are great products for netowrk monitoring and security
Bootable Drive Eraser	Easy-to-use bootable USB will completely erase your hard drive with military grade destruction, making it near-impossible for any files or personal data to be recovered. This should be done before you sell, or dispose of any hard drive. Of course there are various .ISOs you can download and flash to a USB yourself if you do not want to spend money, but this USB supports all devices and is quick and easy to use, with excellent results
Mobile Privacy Screen	Similar to the laptop/ monitor privacy filter, this screen protector will prevent anyone from seeing what is on your screen when reading from an angle
Faraday Pouch	Larger version of the faraday key and phone pouch, you can put your laptop, tablet and other larger devices in this to block all incoming and outgoing signals
ArmourCard - Active RFID Jamming	Unlike the RFID blocking credit-card wallets, the Armour Card uses active RFID micro-jamming to confuse and block any near-by readers. It is powered with a 24-month battery, and activates as soon as an RFID reader is within range, sending out void signals to protect all your credit cards, passports and devices
Deauth Detector	Most WiFi hacks begin by sending deauth packets, so that connected clients will briefly be disconnected to the network. This ESP8266 comes pre-flashed with @SpaceHuhn's deauth detector (which you can view here, on GitHub). Once it detects deauthentication or disassociation frames, it will activate a speaker to notify you
Kensington Lock	Quite self-explanatory, this lock will make it harder for someone to steal your laptop, and get to your data. Of course it does require that your laptop has the Kensington Security Slot, which many do
Anti-Surveillance Clothing	Facial recognition is being rolled out in most countries now, the patterns on these clothes, will confuse facial, object and number plate recognition, injecting junk data in to the systems, hence making it harder for automated systems to monitor and track you
Nano Ledger	If you are in possession of BitCoin or other crypto then one of the most secure ways to store, send and receive coins is with a hardware wallet. Ledger has a solid reputation when it comes to hardware encryption, and the main principle behind their wallets is to provide full isolation between the private keys and your easy-to-hack computer or smartphone
Cold Storage	If you are not planning on spending your crypto any time soon, and do not want to trust a tech-based solution, then consider this metal cold storage wallet. Unlike writing your private key down on paper, this will not fade, and cannot be destroyed by water, fire of other environmental circumstances. Of course you could just engrave your key on a small sheet of aluminium
Anonabox	Plug-and-play Tor router, that can be used with public WiFi while travelling, or at home. Anonabox provides easy access to the deep web and lets you bypass censorship, protect your location, deter data collection and more. It can also be used with a VPN, or for online hosting. Of course you could build a similar product your self using a Raspberry Pi and a WiFi range extender
BitDefender Box	An easy-to-use home firewall to block malware, and other attacks for all internet-connected devices. Has other additional features such as parental controls, and requires no technical knowledge to set-up
Solo Key	Another FIDO2 physical security key for 2-facto authentication and storing encryption keys. SoloKeys have both open source hardware and software, they are easy to use out of the box, but can also be used for developers and makers, since there is a well documented CLI

DIY Security Products

Don't want to spend money? Most of the products above, plus some that wearn't included can be built at home with some pretty simple hardware and open source software. The following list will point you in the right direction to start making!

• Network-wide add-block - Pi Hole is a simple yet powerful app, that can be installed on a Raspberry Pi, and once you've updated your routers DNS servers to point to it, all resources on the blacklist will be blocked, at the point of origin. This makes it much more powerful than a browser add-on, and will also speed your internet up
• Encrypted USB - You can use VeraCrypt to create an encrypted USB drive, using any off-the shelf USB drive
• Home VPN - Pi_VPN lets you use OpenVPN to connect to your home network from anywhere, through your Pi. See this guide for set-up instructions. This will work particularly well in combination with Pi Hole.
• USB Password Manager - Storing your passwords in the cloud may be convinient, but you cannot ever be certain they won't be breached. KeePass is an offline password manager, with a portable ddition that can run of a USB. There's also an app. See also KeePassX and KeePassXC which are popular communnity forks with additional functionality
• Automated Backups - Syncthing is a privacy-focused continuous file synchronization program. You can use it to make on-site backups as well as encrypted and sync your data with your chosen cloud storage provider
• Bootable Drive Eraser - You can flash the DBAN or KillDisk ISO file onto a USB, boot from it and securly, fully wipe your hard drives. This is useful to do before selling or disposing of a PC.
• Deauth Detector - Since most wireless attacked begin by sending out deauthentication packets, you can flash SpaceHuhns DeatuhDetector, onto a standard ESP8266 NodeMCU, plug it in, and wait to be notified of wireless deauth attacks
• Tor WiFi Network - Using OnionPi, you can create a second wireless network, that routed traffic through Tor. This is very light-weight so can be done with just a Pi Zero W. Here is a configuration guide
• Faraday Case - If you want to block signals for devices such as car keys, smart phone, laptop or even just RFID-enabled cards and passports, you can line a box or pouch with Faraday Fabric

If you are confident with electronics, then you could also make:

• USB Data Blocker - By simple removing the data wires from a USB adapter, you can create a protector to keep you safe while charing your device in public spaces. See this guide for more info (note: fast charge will not work)
• Hardware Encrypted Password Manager - Even better than a software-encrypted password manager, is the hardpass0.2 which is a very simple hardware-encrypted USB store, using GnuPG Smart card, GNU Password Standard and this source code all running on a Pi Zero. See also the Zamek Project, using this source code to achive a similar functioning hardware-password manager
• U2F USB Token - Similar to the FIDO2 2-factor authentication USB keys, U2f-Zero by Conor Patrick, lets you turn a Pi Zero into a second-factor auth method. Note: project no longer activley maintained, see NitroKey instead
• PC auto-lock Flash Drive - Turn a flash drive into a lock/ unlock key for your PC, allowing you to quickly lock your device when needed [deprecated]
• Headless Pi Zero SSH server - Create an small test server, that you can SSH into for development, in order to not have to run risky or potentially dangerous code or software directly on your PC, see this artticle for getting started