Android

Warning: The Android operating system provided with phones and tablets is often modified with the addition of proprietary applications from Google or others and may compromise your privacy. We strongly recommend replacing it with Replicant (or compile Android from source for your device).

A must read: Mission Impossible: Hardening Android for Security and Privacy, by Mike Perry at The Tor Blog.

App Store
vlasnički*
Amazon Appstore
Google Play
DNS
Beleške

Google-ov javni DNS trajno čuva informaciju o Vašem ISP-u i lokaciji za analizu. Vaša ip-adresa se čuva 24 sata.

OpenNIC nema službenu polisu koja se tiče privatnosti/anonimizacije. Više informacija ovde.

vlasnički*
Google Public DNS
Email Accounts
Beleške

For more email providers, take a look at Privacy-Conscious Email Services. Please decide for yourself whether if you trust them with your data. For more discussion about safe email providers, please see issue #461.

MyKolab is hosted in Switzerland and benefits from the strong Swiss privacy laws. It is run exclusively with free software and using the service supports the development of Kolab. Also, it lets you export all your data at any time.

Riseup’s services may also be accessed via their Tor Hidden Service addresses. A list is available here.

Why not Hushmail? See 'compromises to email privacy'.

If you have the technical aptitude, consider running your own mail server.

vlasnički*
Facebook
Gmail
Microsoft Outlook.com
Yahoo! Mail
Yandex.Mail
Email Alternatives
Beleške

Bitmessage is a promising alternative to email, but it has not yet been audited by security professionals. Use at your own risk. If you decide to try out Bitmessage, make sure to generate a completely random ID to greatly reduce the probability of ID collisions.

RetroShare has not been thoroughly audited by security professionals for possible security issues.

vlasnički*
Email Clients
Beleške

Switching from a proprietary service like Gmail to one of the more transparently-run email services on PRISM Break is the first step to a secure email account.

The second step is getting you and your contacts to encrypt your plain text messages with PGP encryption. This section contains free email clients that support PGP.

Read the Email Self-Defense guide by the Free Software Foundation to learn how to encrypt your email messages.

Here is a guide by Security In A Box to encrypting your email with Mozilla Thunderbird, GNU Privacy Guard (GPG), and Enigmail.

Find out more about the differences between Mozilla Thunderbird and Icedove.

vlasnički*
Email Encryption
Beleške

“Pretty Good Privacy (PGP) je program sa enkripciju i dekripciju koji pruža kriptografsku privatnost i autentičnost za komunikaciju podacima. PGP se često koristi za potpisivanje, enkripciju i dekripciju tekstova, email-a, datoteka, direktorija i celih particija diska da bi se povećala sigurnost email komunikacije.”

PRISM Break does not recommended S/MIME email encryption because of its reliance on third-party certificates from central authorities. Read more here.

Experimental PGP projects worth looking at are OpenPGP Keychain (a APG fork) and GnuPG for Android by the Guardian Project.

Read the Email Self-Defense guide by the Free Software Foundation to learn how to encrypt your email messages.

vlasnički*
File Storage & Sync
Beleške

Cloud file storage is also available via Chwala/iRony components of Kolab with the capability to integrate various storage backends. Files are accessible via storage layer access options, WebDAV and Kolab web interface integrating Roundcube.

Tarsnap is not recommended on PRISM Break due to its lack of anonymous payment options and strict copyright on the client that makes it difficult to replace the service in the event Tarsnap is shut down.

BitTorrent Sync, MEGA, and SpiderOak are services that are built on either partially or fully proprietary software. They will not be recommended on PRISM Break until they open source the entirety of their codebase.

With closed source software, you need to have 100% trust in the vendor because there's nothing except for their morality in the way of them leaking your personal information. Even if you can vouch for their integrity, proprietary software invariably has more uncaught security bugs and exploits because there are fewer eyes examining the source code.

Another alternative to cloud storage is local backup with external hard drives and USB flash drives. This method is reliably more secure than storing data on a network, but comes at a convenience cost.

vlasnički*
Dropbox
Google Drive
Microsoft OneDrive
Dopisivanje
Beleške

“Off-the-Record Messaging, često nazivan OTR, je kriptografski protokol koji pruža jaku enkripciju za instant messaging razgovore. OTR koristi kombinaciju AES algoritma sa simetričnim ključem, Diffie–Hellman razmenu ključa i SHA-1 hash funkciju. Kao dodatak autentičnosti i enkripciji, OTR pruža i perfect forward tajnovitost and malleable enkripciju.

Primarna motivacija koja se krije iza ovog protokola je pružanje poverljivih razgovora, kao razgovori u pravom životu i nepoznati izvori u novinarstvu.”

Wikipedia

Wikipedia

Imajte u obziru da Pidgin čuva šifre za Vaše korisničke račune bez enkripcije. Ovo možete zaobići tako što ne čuvate šifre unutar Pidgin-a, enkriptujete Vaš operativni sistem ili čuvate Vaše Pidgin šifre sigurno sa Debian pidgin-gnome-keyring paketom.

Pidgin sa omogućenim OTR-om i dbus-om ima lokali sigurnosti bug. Pogledajte upstream bug izveštaj za više informacija i moguće rešenje.

vlasnički*
AOL Instant Messenger
Apple Messages
Facebook
Google Allo
Google Hangouts
ICQ
LINE
Skype
Tencent QQ
Trillian
Viber Messenger
WeChat
WhatsApp
Mail Servers
Beleške

A beginner’s guide to running your own mail server is available here: “NSA-proof your e-mail in 2 hours”.

Kolab integrates Roundcube into its webclient and offers desktop clients as well. Recent versions also feature a file cloud turning it into a complete solution for personal information management.

What is an MTA?

“Within Internet message handling services (MHS), a message transfer agent or mail transfer agent (MTA) or mail relay is software that transfers electronic mail messages from one computer to another using a client–server application architecture. An MTA implements both the client (sending) and server (receiving) portions of the Simple Mail Transfer Protocol.

The terms mail server, mail exchanger, and MX host may also refer to a computer performing the MTA function. The Domain Name System (DNS) associates a mail server to a domain with mail exchanger (MX) resource records containing the domain name of a host providing MTA services.”

vlasnički*
Operating Systems (Mobile)
Beleške

iOS i WP su vlasnički operativni sistemi čiji izvorni kod nije dostupan za reviziju od strane treće osobe. Ne trebate im verovati niti pri komunikaciji niti pri skladištenju podataka uređaju koji je zatvoren kao crna kutija.

vlasnički*
BlackBerry
CyanogenMod
Google Android
Microsoft Windows Phone
Social Networks
Beleške

If you have system administration knowledge, please strongly consider running an instance of pump.io (or something else) for your friends, family, or favorite community. Many of them would be willing and grateful to escape Facebook if you provide them a way out.

For those of you without your own server, RetroShare is the easiest way to start your own encrypted social network.

identi.ca is a popular Twitter-like social networking hub for the free and open source software community runs a pump.io software platform.

vlasnički*
Facebook
Google+
LinkedIn
Twitter
VPN Clients
Beleške

Encrypted virtual private network (VPN) technology can be used by ordinary Internet users to connect to proxy servers for the purpose of protecting one’s identity and online footprint.

More on Wikipedia.

vlasnički*
Dodaci za internet pretraživače
Beleške

Installing your own add-ons into the Tor Browser is not recommended, as they may bypass Tor or otherwise harm your anonymity and privacy. Check the EFF's Panopticlick to see how trackable your browser configuration is by third parties.

If you're using a Firefox-based browser, you can safeguard your browsing habits and stop advertising companies from tracking you by installing uBlock Origin, Request Policy, and HTTPS Everywhere.

A more advanced alternative to Request Policy would be uMatrix.

Install NoScript and enable ‘Forbid scripts globally’ to improve the security of your browser by preventing 0day JavaScript attacks. This is a drastic option as it will render many websites unusable as they rely heavily on JavaScript. NoScript offers a whitelist you can use to selectively enable JavaScript for sites you trust, but this is considered especially bad for your anonymity if you're using NoScript with the Tor Browser Bundle.

Why is Adblock Plus not recommended? Adblock Plus shows “acceptable ads” by default, which works against the purpose of the add-on. Either disable acceptable ads or use uBlock Origin instead.

vlasnički*
Ghostery
Web Browsers
Beleške

Try to use Tor Browser Bundle (TBB) for all of your web surfing. It will offer you far better anonymity than any other browser. Make sure to learn the basics of Tor before using it. If the site you want to visit will not work in the TBB, try Firefox intead, but realize these browsers do not anonymize your ip by default.

TBB notes: Using the TBB to sign into websites that contain your real ID is counterproductive, and may trip the site's fraud protection. Make sure to check for HTTPS before signing in to a website through Tor. Signing into HTTP websites can result in your ID being captured by a Tor exit node.

Firefox notes: This browser uses Google search by default: replace it with a more private alternative. Another debranded alternative to Firefox is Iceweasel, a browser for Debian-based distributions.

Why are Chromium, SRWare Iron, et al. not recommended on PRISM Break? More info here.

Warning for mobile devices & Tor: Websites using HTML5 <video> tags will leak <video>-related DNS queries and data transfer outside of Tor.

vlasnički*
Google Chrome
Opera
Yandex.Browser
Internet pretraživači
Beleške

DuckDuckGo is a software-as-a-service (SaaS) hosted around the world that provides you with anonymous search results from these sources. DDG open source components are available here.

There is also a DuckDuckGo hidden service at 3g2upl4pq6kufc4m.onion for Tor users.

MetaGer is a SaaS by the German non-profit SUMA e.V. that provides you with anonymous meta search results.

Startpage is a SaaS hosted in the USA and the Netherlands that provides you with anonymous Google search and image results through a free proxy.

Ixquick (run by the same company as Startpage) is a meta search engine that returns combined results from nearly 100 sources - excluding Google.

Seeks acts as a personalizing Web server or proxy between you and your data feeds. Connect most search engines, RSS/ATOM feeds, Twitter/Identica, Youtube/Dailymotion, wikis, and basically any source of data, and Seeks will produce a fused personalized stream of results to your queries. See list of Web Seeks nodes.

Tor users may use Seeks hidden service at 5plvrsgydwy2sgce.onion.

YaCy is a promising project that offers fully decentralized peer-to-peer search. The more people who start using it, the better the results will become.

vlasnički*
Google Search
Microsoft Bing
Yahoo Search
Yandex Search
World Maps
vlasnički*
Apple Maps
Bing Maps
Google Earth