Crypto Privacy Copy Pasta

comment.md

Do your part to resist Government surveillance and take back your privacy:

• Browser Privacy: HTTPS Everywhere, AdBlock Plus + EasyList, Disconnect, NoScript (FireFox), NotScript (Chrome)
• VPNs: Private Internet Access (US), BTGuard (Canada), ItsHidden (Africa), Ipredator (Sweden), Faceless.me (Cyprus / Netherlands)
• Internet Anonymization: Tor, Tor Browser Bundle, I2P
• Disk Encryption: TrueCrypt (Windows / OSX / Linux), File Vault (Mac).
• File/Email Encryption: GPGTools + GPGMail (Mac), GPG4Win (Windows), Enigmail (Windows / OSX / Linux)
• IM Encryption: Pidgin + Pidgin OTR
• IM/Voice Encryption: Mumble, Jitsi
• Phone/SMS Encryption: WhisperSystems, Ostel, Spore, Threema, Silent Circle ($$$)
• Google Alternative: DuckDuckGo, StartPage
• Digital P2P Currency: BitCoin
• Live Anonymous/Secure Linux: TAILS Linux

If you have any problems installing or using the above software, please contact the projects. They would love to get feedback and help you use their software.

Have no clue what Cryptography is or why you should care? Checkout the Crypto Party Handbook or the EFF's Surveillance Self-Defense Project.

Just want some simple tips? Checkout EFF's Top 12 Ways to Protect Your Online Privacy.

---

If you liked this comment, feel free to copy/paste it.

Reduced the VPN list to only the P2P friendly VPNs.

Thanks for updating this list and caring, mate :)

I personally use Firefox with the NoScript addon and it allows me to avoid:

• google tracking
• undesired advertisements
• nasty js going on that I may be unaware of

And when I'm sure a site is clean, I whitelist them.

The internet is a big, full of love, full of scary place. Shield yourself from the scary and enjoy the love :)

Enigmail works on OSX as well.

Multiple redditors recommend http://privateinternetaccess.com.

Added DuckDuckGo as a Google alternative.

TrueCrypt is also available for OSX.

Thank you @ivals and @postmodern.

By the way @ivals is their such a thing as a VPN for cell phone carriers?

Saw this on Reddit. Consider adding in RequestPolicy to the browser privacy addons. It gives you finer grained control for cross-site requests. Eg. If you allow javascript on Google's sites, you can't control if another (non-Google) site is allowed access them. (Of course, Ghostery takes care that for most things.) RequestPolicy would let you change access to Google from a different site.

Considering adding Spore and Ostel to Voice Encryption.

Consider dm-crypt + LUKS as an alternative to TrueCrypt for Disk Encryption under Linux.
http://forums.fedoraforum.org/showthread.php?p=1397886
http://www.privacylover.com/encryption/analysis-is-there-a-backdoor-in-truecrypt-is-truecrypt-a-cia-honeypot/

Also consider using S/MIME for Email Encryption on all platforms.

@ScarletEmerald I thought about including them, but most Linux installers already support them out of the box (create a partition, select "Encrypted"). I also suspected that Linux users would already know about them.

A redditor suggested adding the following Chrome extensions to Browser Privacy:

• Google Analytics Opt-out Add-on
• Keep My Opt-Outs
• DoNotTrackMe
• HTTPS Everywhere
• AdBlockPlus

@postmodern That may be true, but I would still suggest including them to make the list comprehensive, especially since they may be the superior alternatives. There may also be Linux users looking to add encryption post-install who would benefit from hearing about all available alternatives.

Please remove Ghostery and substitute in EasyPrivacy or Fanboy's Privacy List instead. Using either of these subscriptions will block the same things as Ghostery does.

Ghostery is written by an ad company. There's a conflict an interest. Meanwhile, AdBlock Plus isn't, nor are these lists' maintainers, affiliated with ad companies.

Added Private Internet Access to the VPNs list, based on this recommendation

Great list :-)
Take a look to http://www.opennicproject.org/ for alternative DNS servers.

Any chance you'll put Project Meshnet on there?

Also maybe just cjdns

Replace Ghostery with DoNotTrackMe or Disconnect? Apparently Ghostery's parent company actually sells the anonymous data it collects.

Another great source of privacy protecting tools can be found at https://prism-break.org/

@postmodern I'd say Disconnect looks better. HN discussion here

And why not Ad-Block instead of ABP?

Added GPG4Win

Added Threema

@PhearTheCeal replaced Ghostery with Disconnect. You can opt-out of the "acceptable ads" in Ad Block Plus.

@postmodern We need to pull out TrueCrypt right away

Source: http://arstechnica.com/security/2014/05/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/

I recommend µBlock over AdBlock, it's more resource efficient. The EFF's Privacy Badger is a good alternative to Ghostery. Ixquick is another privacy-focused search engine (they even have a new, less 1999 look coming soon, I see!).

For the Browser Privacy category, I recommend adding uBlock Origin and uMatrix (also by @gorhill, like NoScript but with much more granularity) as well as ScriptSafe for Chrome (which is like NoScript but with a better interface). KB SSL Enforcer is a good alternative to HTTPS Everywhere, too; it learns which sites support HTTPS and which don't rather than relying on a central list.

CASVPN is currently providing its best VPN service in more than 57 countries.CASVPN has a huge infrastructure and with great customer support, we are performing well. The super fast and super secure servers make CASVPN best vpn service according to speed and security perspective.

My own list of privacy tools https://privacytoolslist.com. I list as many worthy open source & free privacy tools as possible so that a person has a choice what tool to use. Any any comments and suggestions are welcome at my issue tracker.