Commit Graph

274 Commits

Author SHA1 Message Date
Alex Anderson
1c1da8df66
Merge branch 'master' of github.com:NobodySpecial256/thgtoa 2022-08-28 16:26:35 +00:00
Alex Anderson
b9635680d9
Update guide.md 2022-08-28 16:17:18 +00:00
TwoSixtyThreeFiftyFour
6296e18128
Added caution/warning about Session Messenger
Added caution/warning about Session Messenger
2022-08-28 16:06:39 +00:00
TwoSixtyThreeFiftyFour
df73f7ba68
Update to other messaging apps comparisons charts
- Mentioning those that are outdated/unmaintained and that those will be removed in next releases
- Adding https://github.com/bkil/secuchart which is a  maintained project
- Adding disclaimer that we do not necessarily endorse their opinions
- Removed spaces between list items (and we should consider doing that on the whole guide)
2022-08-28 09:57:17 +00:00
TwoSixtyThreeFiftyFour
d73c049221
Separation Molly
Separation Molly
2022-08-28 09:11:33 +00:00
TwoSixtyThreeFiftyFour
0f3b52d916
Merge branch 'master' into Adding-Molly-IM-mention 2022-08-28 09:05:37 +00:00
pterocles
5d89aca4d4
Fix grammar in final commits
Signed-off-by: pterocles <th.thgtoa@disroot.org>
2022-08-25 09:48:22 -04:00
TwoSixtyThreeFiftyFour
9de4397764
ToC fix
Normally the last one
2022-08-25 12:52:37 +00:00
TwoSixtyThreeFiftyFour
3b8dbde8e6
Sync fixes again
Sync fixes again
2022-08-25 12:41:40 +00:00
TwoSixtyThreeFiftyFour
69c729b8a0
Update fixes to be in sync with current guide.md
Update fixes to be in sync with current guide.md
2022-08-25 12:31:06 +00:00
TwoSixtyThreeFiftyFour
9f133c439d
Re-adding missing B6 and car warning.
Re-adding missing B6 and car warning.
2022-08-25 09:29:21 +00:00
TwoSixtyThreeFiftyFour
ec306242f7
Fixed some .onion links that were HTTPS when only working on HTTP
Fixed some .onion links that were HTTPS when only working on HTTP
2022-08-25 02:25:25 +00:00
pterocles
cba1af022c
Small fixes
* Organizational fixes will work for now until later when we can cleanup.
* Missed a few superscript links

I think it looks beautiful!
Signed-off-by: pterocles <th.thgtoa@disroot.org>
2022-08-24 16:21:57 -04:00
TwoSixtyThreeFiftyFour
6f1b0cc7eb
Getting rid of Archive.org , Wikiless , Nitter , Invidious cross-references
Getting rid of Archive.org , Wikiless , Nitter , Invidious cross-references
2022-08-24 18:23:49 +00:00
TwoSixtyThreeFiftyFour
b29c0fdb31
Just a few small updates
The IMEI section only mentions a physical burner phone as a solution. Added that there are other solutions online besides the physical burner/pre-paid card.

Added nuance to the advice from "never rely on commercial services" to "never rely on commercial services as a first line of anonymity" 

Changed a "my advice" to "our advice"
2022-08-22 19:09:00 +00:00
TwoSixtyThreeFiftyFour
996ab7097e
Merge branch 'master' into Add-information-warning-smart-devices 2022-08-22 15:37:01 +00:00
T. H
4aff9b20e7
Merge pull request #208 from Anon-Planet/add-link-linddun-video
Adding link to an endorsed LINDDUN video
2022-08-21 16:52:55 +00:00
TwoSixtyThreeFiftyFour
ab2ef128ac
Adding link to an endorsed LINDDUN video
Adding link to video endorsed by LINDDUN designers
2022-08-21 09:30:09 +00:00
TwoSixtyThreeFiftyFour
ff2799e8b8
Adding removed delimiter
Adding removed delimiter
2022-08-21 03:16:36 +00:00
Than Harrison
83f643c3ef
Re: Adding some Orbot information/disclaimer
Commit 3fa1c502f0 ("Adding some Orbot information/disclaimer to
prevent people from being mislead") has minor spelling and grammar
mistakes that can be fixed.

Fixes those errors. Also adds additional context.
Signed-off-by: Than Harrison <th.thgtoa@disroot.org>
2022-08-20 18:04:26 -04:00
TwoSixtyThreeFiftyFour
3fa1c502f0
Adding some Orbot information/disclaimer
Adding some Orbot information/disclaimer to prevent people from being mislead
2022-08-20 18:32:40 +00:00
Alex Anderson
ccb0ac1e6e
Merge branch 'master' of github.com:NobodySpecial256/thgtoa 2022-08-18 23:29:40 +00:00
Alex Anderson
1c6bdd2a1d
Migrated back to original domain 2022-08-18 23:27:39 +00:00
Alex Anderson
24843f3403
Merge pull request #204 from pterocles/minor-patch-format
Fix minor formatting issue
2022-08-18 15:16:06 +00:00
Alex Anderson
39b29a7120
Merge pull request #203 from pterocles/meek-azure-onion-browser
Add link to meek-azure issue support dropped for iOS Onion Browser
2022-08-18 15:15:18 +00:00
T. H
f7d0a34e05
Fix minor formatting issue 2022-08-17 20:16:08 -04:00
pterocles
38ebe5bee4
Fix missing Archive.org link
* Missing archive link fix

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-17 01:35:53 -04:00
T. H
4ec157fba3
Mention running bridge types ranked by difficulty
* To run any of them, it only requires small knowledge of Linux.
  this places the information required into the realm of possibility,
  even for unseasoned Linux users.

* Note: there are many guides on both Tor Project and Stack Overflow.

* Consider running either the 1st or 2nd options as they are the easiest.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-17 01:30:08 -04:00
T. H
e1c9919407
Merge pull request #197 from pterocles/transparency-reports
Update transparency reports
2022-08-17 05:01:38 +00:00
pterocles
ad72f59d1a
Small addition: add link to meek-azure documentation for iOS
* add link to commit where iOS Onion Browser dropped meez-azure:
  "Removed Meek Azure bridge [support], since Microsoft announced
  starting to block it."

* Remove dupe reference to footnote #522 and #523
  (document will now render this as reference #516)

* Add link to Tor Project:
  "Run Tor Bridges to Defend the Open Internet"

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-16 12:23:31 -04:00
T. H
37c8d9fbc1
Merge branch 'master' into transparency-reports 2022-08-16 14:18:41 +00:00
TwoSixtyThreeFiftyFour
b1383ca8c5
Merge branch 'master' into Adds-face-generator-tool 2022-08-16 09:10:45 +00:00
TwoSixtyThreeFiftyFour
4b021dd946
Added warning/disclaimer
Added warning/disclaimer
2022-08-16 09:05:08 +00:00
Alex Anderson
8798e86345
Merge pull request #195 from TwoSixtyThreeFiftyFour/Fix-bad-link
Fix bad links to VPN logging policies
2022-08-15 21:04:56 +00:00
Alex Anderson
9b0d957746
Merge pull request #196 from TwoSixtyThreeFiftyFour/mention-of-#OSINT-in-the-guide
Adding mention of OSINT room in guide
2022-08-15 21:04:42 +00:00
Alex Anderson
ae8cfc1bfc
Merge pull request #187 from TwoSixtyThreeFiftyFour/Updates-to-Appendix-B3-about-Threat-Modeling
Update of the threat modeling appendix (B3)
2022-08-15 21:04:28 +00:00
Alex Anderson
98f6c2215f
Merge pull request #202 from TwoSixtyThreeFiftyFour/Bad-link-fix
Update bad link Appendix R
2022-08-15 21:03:53 +00:00
Alex Anderson
3dc5e2e53f
Merge pull request #199 from TwoSixtyThreeFiftyFour/Update-of-side-channel-browser-attack-warning
Update on browser side-channel attack section
2022-08-15 20:57:41 +00:00
TwoSixtyThreeFiftyFour
01fe6744c1
Update bad link Appendix R
Update bad link Appendix R
2022-08-15 19:37:13 +00:00
T. H
cbb3c49666
Revert a commit and cleanup a pointer
This reverts commit 7736c42bd7.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:51:47 -04:00
pterocles
870347b784
Add microarchitecture bugs and related research to Appendix B5
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:41:04 -04:00
pterocles
5cca117aa1
Move content to Appendix B5: Types of CPU attacks
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:39:40 -04:00
pterocles
6b5b8e5656
Fix pointer to Appendix B4 while adding Appendix B5
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:35:47 -04:00
pterocles
7736c42bd7
a
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 11:01:18 -04:00
pterocles
7d80648d88
Doc: Microarchitecture bugs in Intel and AMD CPUs
Add information about microarchitecture bugs

It's been a very busy year for Intel and AMD CPUs. Researchers have
discovered bugs left and right. One of them was revealed recently and I
felt compelled to add not only it but also information regarding other
types of attacks that aren't yet in the guide.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 10:26:32 -04:00
TwoSixtyThreeFiftyFour
f4d6530ffd
Adding warning about cars emergency calling features
Small update to Appendix N: Warning about smartphones and smart devices

Adding small warning about cars having some cell network related features
2022-08-13 17:02:51 +00:00
TwoSixtyThreeFiftyFour
c3199f7cec
Update on browser side-channel attack section
See:

-  Release tweet: <https://twitter.com/ma1/status/1557751019945299969> <sup>[[Archive.org]](https://web.archive.org/web/https://twitter.com/ma1/status/1557751019945299969)</sup>
-  User explanation: <https://noscript.net/usage/#crosstab-identity-leak-protection> <sup>[[Archive.org]](https://web.archive.org/web/https://noscript.net/usage/#crosstab-identity-leak-protection)</sup>
-  Tor Project Forum Post: <https://forum.torproject.net/t/tor-browser-can-leak-your-identity-through-side-channel-attack/4005/2> <sup>[[Archive.org]](https://web.archive.org/web/https://forum.torproject.net/t/tor-browser-can-leak-your-identity-through-side-channel-attack/4005/2)</sup>
-  NoScript extension for Firefox (Firefox, and other Firefox-based browsers except Tor Browser): https://addons.mozilla.org/en-US/firefox/addon/noscript/
-  NoScript extension for Chromium based browsers (Brave, Chrome, Edge, and other Chromium-based browsers): https://chrome.google.com/webstore/detail/noscript/doojmbjmlfjjnbmnoijecmcbfeoakpjm?hl=en

- Removed advice to install Lekuidator+ on TBB since it's now handled by NoScript and on by default.
- Added NoScript as preferred for other Browsers (requires settings, on by default on private Windows).
- Changed Lekuidator+ from main mitigation to alternative to NoScript.
2022-08-13 15:30:58 +00:00
pterocles
022c9f6169
Update transparency reports
- Discord transparency report
- Snapchat transparency report
- TitkTok transparency report
- Reddit transparency report
- Twitter transparency report (link)

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-12 02:00:19 -04:00
TwoSixtyThreeFiftyFour
40e4a28464
Adding mention of OSINT room in guide
Adding mention of OSINT room in guide
2022-08-09 10:41:50 +00:00
TwoSixtyThreeFiftyFour
2a72f370fb
Approved
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-09 10:09:19 +00:00
TwoSixtyThreeFiftyFour
d98d84379c
Merge branch 'master' into Updates-to-Appendix-B3-about-Threat-Modeling 2022-08-09 10:07:58 +00:00
TwoSixtyThreeFiftyFour
6d7d57e9e2
Fix bad links to VPN logging policies
Fix bad links to VPN logging policies
2022-08-09 09:35:05 +00:00
TwoSixtyThreeFiftyFour
0f15b8f74f
Merge branch 'Updates-to-Appendix-B3-about-Threat-Modeling' into pterocles/update-threat-modeling-section 2022-08-09 09:28:09 +00:00
TwoSixtyThreeFiftyFour
a99181080b
samm update removing name 2022-08-09 09:19:46 +00:00
Alex Anderson
66227ce576
Merge pull request #149 from pterocles/patch-1
Appendix L: list format, make it easier to skim through
2022-08-07 20:55:35 +00:00
Alex Anderson
5f9242537a
Merge pull request #162 from TwoSixtyThreeFiftyFour/Small-fixes-in-the-pay-with-crypto-section
Small fix in the "pay with crypto section"
2022-08-07 20:55:14 +00:00
Alex Anderson
3f6665f9d1
Merge pull request #153 from TwoSixtyThreeFiftyFour/Add-Tor-Mirror-URL-to-Readme-and-Guide
Add tor mirror url to readme and guide
2022-08-07 20:52:35 +00:00
TwoSixtyThreeFiftyFour
6cd3d17b07
Update guide.md
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-06 19:57:50 +00:00
T. H
9e6cd3826f
Update guide.md 2022-08-06 06:24:27 +00:00
pterocles
a193dcba82
The commit 0ef3728442 ("Update of the threat modeling section") is
missing some key elements:

Specify whom created the LINDDUN online tool. Define acronym and
explain that it is synergistic with STRIDE methodology. Add optional
illustration from Dr. K. Wuyts' 2015 publication: Privacy Threats in Software
Architectures, Ph.D. Thesis, Doctor of Engineering Science (PhD) (Leuven),
KU Leuven, January 16, 2015.

Fixes: #188 ("Update of the threat modeling section")

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-04 14:27:44 -04:00
TwoSixtyThreeFiftyFour
0ef3728442
Update of the threat modeling section
Update of the threat modeling section
2022-08-04 15:00:20 +00:00
TwoSixtyThreeFiftyFour
c3b9f0b9a6
Adds https://generated.photos/face-generator to creating identities section
Adds https://generated.photos/face-generator to creating identities section

Removes the archive.org link to thispersondoesnotexist as it's pointless?
2022-08-04 14:25:37 +00:00
TwoSixtyThreeFiftyFour
79b01253a0
little grammar fix 2022-08-04 14:03:06 +00:00
TwoSixtyThreeFiftyFour
9256fc675a
Adds Molly next to Signal in the guide
Adds Molly next to Signal in the guide
2022-08-04 14:00:53 +00:00
TwoSixtyThreeFiftyFour
a3e487a79c
Update guide.md
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-03 19:07:00 +00:00
TwoSixtyThreeFiftyFour
454f04492e
Move to 1.1.6pre
Move to 1.1.6pre to change the date and reflect that many changes did happen since 1.1.5
2022-08-03 14:19:26 +00:00
Alex Anderson
8de6b5bb69
Merge pull request #182 from pterocles/pterocles/update-tor-route
Update on Tor Browser
2022-08-01 21:10:32 +00:00
pterocles
524331a69f
Update options for Tor route on Android
Fix out of date options/settings for Tor on Android.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 12:06:01 -04:00
pterocles
aabd9a121d
Update images for Tor route
Images were out of date. Updated and used PNGs for them.

Tor Project has condensed their settings and it is no longer
necessary to manually configure bridges.

Automatic censorship detection and circumvention:
https://blog.torproject.org/new-release-tor-browser-115/

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:48:02 -04:00
pterocles
79bdd14fbb
Refine and finish Connection Assist notification
Add refined notice and Archive link

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:17:57 -04:00
pterocles
b208098eae
Add notice about Connection Assist
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:07:19 -04:00
pterocles
6a183e5865
Fix a word/typo
Overlooked a word

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 10:56:43 -04:00
Alex Anderson
c8b03a5228
Merge pull request #173 from TwoSixtyThreeFiftyFour/add-link-to-stylometry-reduction-article
Added link to countering linguistic analysis
2022-07-31 22:09:57 +00:00
Alex Anderson
3ac382a96e
Merge pull request #175 from TwoSixtyThreeFiftyFour/remove-bad-links
Removal and fix of some bad links
2022-07-31 22:07:58 +00:00
Alex Anderson
c174ce335f
Merge pull request #178 from TwoSixtyThreeFiftyFour/recommended-vpn-logging-policies-links
Adding recommended VPNs logging policies links
2022-07-31 22:06:36 +00:00
pterocles
2d8480417a
Update on Tor Browser
Tor Browser Bundle (TBB) now has easier settings for the user.

TBB also makes the connection simpler for the user:
- Now enabled by default, moat will help you configure bridges.
- Bridge cards for viewing your Tor bridges make it both pretty and more useful for the user.
2022-07-31 15:57:02 -04:00
TwoSixtyThreeFiftyFour
174bbdf42a
Update one link from old to org repo
Update one link from old to org repo
2022-07-31 14:16:09 +00:00
TwoSixtyThreeFiftyFour
7a6cb1e484
Update guide.md 2022-07-31 11:43:08 +00:00
TwoSixtyThreeFiftyFour
305c4b9150
Adding link to the no-logging policies of our recommended VPN providers
Adding link to the no-logging policies of our recommended VPN providers in Appendix G
2022-07-31 11:41:09 +00:00
TwoSixtyThreeFiftyFour
36254ef366
Update guide.md
agreed

Co-authored-by: T. H. <pterocles@proton.me>
2022-07-30 16:00:16 +00:00
TwoSixtyThreeFiftyFour
6526f80120
Update guide.md
Ok

Co-authored-by: T. H. <pterocles@proton.me>
2022-07-30 15:59:37 +00:00
TwoSixtyThreeFiftyFour
3fef354d6a
Update guide.md
Ok

Co-authored-by: T. H. <pterocles@proton.me>
2022-07-30 15:59:15 +00:00
TwoSixtyThreeFiftyFour
a309e49971
Removal of some obsolete links
- https://anonarchive.org/ removed due to 404
- Internal link [How to spot if someone has been searching your stuff:] fixed
- Temporarily strike-through on odt and pdf links
2022-07-30 10:43:08 +00:00
TwoSixtyThreeFiftyFour
6b5dc93604
Fix of fix of fix
Sorry for this garbage
2022-07-29 17:26:51 +00:00
TwoSixtyThreeFiftyFour
cf96bfe657
Fix to fix
Fix to fix
2022-07-29 11:14:46 +00:00
TwoSixtyThreeFiftyFour
fccb082eaa
Fixes as per review
Fixes as per review
2022-07-29 11:12:29 +00:00
TwoSixtyThreeFiftyFour
805a2b44dc
Added link to countering linguistic analysis
Added link to Appendix A4 to countering forensics linguistic analysis 

https://seirdy.one/posts/2022/07/09/stylometric-fingerprinting-redux/
2022-07-29 10:55:24 +00:00
TwoSixtyThreeFiftyFour
821918411a
Couple of "we" typos
Couple of "we" typos
2022-07-28 05:44:13 +00:00
Alex Anderson
c8ff26bec6
Merge pull request #167 from TwoSixtyThreeFiftyFour/Add-Qubes-4.1.x-tutorial-for-Windows-VMs
Link to Qubes tutorial for installing Windows VMs
2022-07-24 18:45:51 +00:00
Alex Anderson
7da672d892
Made changes 2022-07-24 18:42:50 +00:00
pterocles
86980c4b30
Add link to Arkenfox/user.js
Arkenfox relies on a set of `about:config` tweaks in
Firefox. It allows you to set many privacy and disk 
avoidance related values which provide you with the 
ability to avoid useless Firefox additions and also 
avoid giving your browser a unique value which can
be tracked across the web.

Signed-off-by: pterocles <pterocles@proton.me>
2022-07-24 07:54:50 -04:00
pterocles
ac535721c1
Remove unnecessary addons
Update addons recommended in guide. Explain use of 
`network.http.referer.XOriginPolicy`. Explain 
difference between uBO and NoScript.

Signed-off-by: pterocles <pterocles@proton.me>
2022-07-24 07:36:10 -04:00
TwoSixtyThreeFiftyFour
a1f2727941
Link to Qubes tutorial for installing Windows VMs
Added link to https://github.com/Qubes-Community/Contents/blob/master/docs/os/windows/windows-tools41.md
2022-07-24 11:34:47 +00:00
pterocles
3c280ed041
Fix Windows 10/11 links (#165)
Update Windows 10/11 VM links in ToC and document

Signed-off-by: pterocles <pterocles@proton.me>
2022-07-24 06:59:27 -04:00
TwoSixtyThreeFiftyFour
0aab0e4a24
Small fix in the "pay with crypto section"
Removed outdated info
Added ref to updated info
2022-07-23 07:56:32 +00:00
Alex Anderson
7c91c963cb
Merge pull request #160 from TwoSixtyThreeFiftyFour/Fixes-in-browser-fingerprinting-listing
Add item in listing of sites showing your browser fingerprint and fixing typos
2022-07-22 18:17:42 +00:00
TwoSixtyThreeFiftyFour
267c19b4ea
Add ref to a DEF CON 25 vid about fingerprinting
Add ref to a DEF CON 25 vid about fingerprinting in various sections
2022-07-22 16:04:54 +00:00
TwoSixtyThreeFiftyFour
022876e4e2
Add item in listing of sites showing your browser fingerprint
Added: https://abrahamjuliot.github.io/creepjs/

Fixed: fixed some typos
2022-07-22 14:43:47 +00:00
Alex Anderson
a446db7e40
Merge branch 'pr/147' 2022-07-22 01:40:00 +00:00
Alex Anderson
a4684ca29f
Updated not-recommended section 2022-07-22 01:36:25 +00:00