<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:dw="https://www.dreamwidth.org">
  <id>tag:dreamwidth.org,2016-11-22:2563090</id>
  <title>Cybersecurity for the Trumped</title>
  <subtitle>Tips and tricks to improve your online privacy and security</subtitle>
  <author>
    <name>cybersecurity</name>
  </author>
  <link rel="alternate" type="text/html" href="https://cybersecurity.dreamwidth.org/"/>
  <link rel="self" type="text/xml" href="https://cybersecurity.dreamwidth.org/data/atom"/>
  <updated>2017-02-15T07:36:56Z</updated>
  <dw:journal username="cybersecurity" type="personal"/>
  <entry>
    <id>tag:dreamwidth.org,2016-11-22:2563090:3347</id>
    <link rel="alternate" type="text/html" href="https://cybersecurity.dreamwidth.org/3347.html"/>
    <link rel="self" type="text/xml" href="https://cybersecurity.dreamwidth.org/data/atom/?itemid=3347"/>
    <title>10. Instant messaging and chat</title>
    <published>2017-02-08T14:54:26Z</published>
    <updated>2017-02-15T07:36:56Z</updated>
    <category term="cybersecurity"/>
    <category term="pidgin"/>
    <category term="voicechat"/>
    <category term="facebook"/>
    <category term="google"/>
    <category term="smartphone"/>
    <category term="messengers"/>
    <category term="signal"/>
    <category term="chat. videochat"/>
    <dw:security>public</dw:security>
    <dw:reply-count>0</dw:reply-count>
    <content type="html">Many of us like to stay in touch with others in real time. For that purpose, we have a lot of tools that we can use. Some of them are safer than others. Let's look at some popular ones...&lt;br /&gt;&lt;a href="http://twitter.com"&gt;&lt;br /&gt;Twitter&lt;/a&gt; is very popular and not private/secure in any way. Assume that anything you tweet is public.&lt;br /&gt;&lt;a href="https://en.wikipedia.org/wiki/Internet_Relay_Chat"&gt;IRC&lt;/a&gt; has been around for a long time. It's still used by many. It's not secure unless you use &lt;a href="https://null-byte.wonderhowto.com/how-to/hack-like-pro-install-use-secure-irc-client-with-otr-0163318/"&gt;OTR&lt;/a&gt; (Off The Record).&lt;br /&gt;Facebook Messenger... well, it's Facebook. Not secure in any way.&lt;br /&gt;WhatsApp is encrypted, but the metadata is still logged, and says more than the actual conversations; also, it's owned by Facebook.&lt;br /&gt;Google+, Google Hangouts, Gchat... it's Google. Avoid.&lt;br /&gt;ICQ and Yahoo chat? &lt;a href="https://www.cnet.com/news/yahoo-icq-chats-still-vulnerable-to-government-snoops/"&gt;Not secure&lt;/a&gt;.&lt;br /&gt;Skype is popular for voice and video chat. But it's owned by Microsoft nowadays. The calls are encrypted, but there's that pesky metadata thing again. So it's &lt;a href="https://www.comparitech.com/blog/information-security/is-skype-safe-and-secure-what-are-the-alternatives/"&gt;not really secure&lt;/a&gt;.&lt;br /&gt;SMS (text messages) are not secure at all.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;So what are the better options?&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;&lt;a href="https://whispersystems.org/"&gt;Signal&lt;/a&gt; is well-known for being recommended by Snowden. It does &lt;strong&gt;voice chat&lt;/strong&gt; as well as &lt;strong&gt;instant messaging&lt;/strong&gt;. Can be used on smartphones and desktops.&lt;br /&gt;&lt;a href="https://telegram.org/"&gt;Telegram&lt;/a&gt; is a cloud-based mobile and desktop &lt;strong&gt;messaging&lt;/strong&gt; app with a focus on security and speed. It works on many platforms and also in your browser. I like this one.&lt;br /&gt;&lt;a href="https://hoccer.com/"&gt;Hoccer&lt;/a&gt; is a privacy-conscious &lt;strong&gt;messaging&lt;/strong&gt; and file sharing app for smartphones.&lt;br /&gt;&lt;a href="https://getconfide.com/"&gt;Confide&lt;/a&gt; is a &lt;strong&gt;messaging app&lt;/strong&gt; for smartphones and Windows and OSX computers; it's hyped to be very secure (messages cannot be kept). But it's closed source, so who knows, and some experts say it's &lt;a href="https://www.theregister.co.uk/2017/02/15/white_house_drama_and_confide_app/"&gt;not great&lt;/a&gt;.&lt;br /&gt;&lt;a href="https://tox.chat/"&gt;Tox&lt;/a&gt; is another good option that works for &lt;strong&gt;messaging, voice and video chat&lt;/strong&gt;. There are &lt;a href="https://tox.chat/clients.html"&gt;clients&lt;/a&gt; (= software) available for all platforms.&lt;br /&gt;&lt;a href="https://ring.cx/"&gt;Ring&lt;/a&gt; serves a similar function. It also allows &lt;strong&gt;group chats&lt;/strong&gt; (teleconferencing)&lt;br /&gt;&lt;a href="https://www.linphone.org/"&gt;Linphone&lt;/a&gt;: same same.&lt;br /&gt;And if you do not want to download or install anything or get an account, there is always &lt;a href="https://talky.io/"&gt;Talky&lt;/a&gt; &lt;strong&gt;video chat&lt;/strong&gt; which can simply be used on the web. Set up a 'room' by choosing a room name, send the other person the URL for your room, and you're off.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-size: larger;"&gt;&lt;strong&gt;So which one do I use?&lt;/strong&gt;&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;The one you can get your friends or family to use.&lt;br /&gt;&lt;br /&gt;&lt;span style="font-size: larger;"&gt;&lt;strong&gt;&lt;br /&gt;A note on the technical side of all of this&lt;/strong&gt;&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;We need to distinguish between two things when talking about chat/messaging software: there's the software and there's the &lt;a href="https://techterms.com/definition/protocol"&gt;protocol&lt;/a&gt;. &lt;br /&gt;Just like PDF documents can be opened with Adobe Reader, and many people assume that this is the only option... but in reality, there are lots of different programs that can open PDFs. Likewise, there are different programs that can handle different protocols, and even programs that can handle a whole lot of them!&lt;br /&gt;For example, I use IRC, ICQ and Telegram, but I don't want three programs running on my laptop all the time. So I use multi-protocol messenger software, that can handle all three of these and more.&lt;br /&gt;&lt;br /&gt;Some good multi-protocol programs are:&lt;br /&gt;&lt;a href="https://pidgin.im/"&gt;Pidgin&lt;/a&gt; (for Linux, Windows, OSX)&lt;br /&gt;&lt;a href="http://www.miranda-im.org/"&gt;Miranda IM&lt;/a&gt; (for Windows)&lt;br /&gt;&lt;a href="https://adium.im/"&gt;Adium&lt;/a&gt; (for OSX)&lt;br /&gt;These are mainly meant for laptops and desktop computers. On a smartphone, a dedicated app is generally the better option.&lt;br /&gt;&lt;br /&gt;Some instant messaging protocols are:&lt;br /&gt;ICQ, IRC, Gadugadu, AIM, AOL, XMPP, Bonjour, Telegram (has OTR feature built in).&lt;br /&gt;&lt;br /&gt;If you want secure instant messaging on a protocol that's not inherently encrypted, look into adding an &lt;a href="http://www.howtogeek.com/190811/how-and-why-to-use-otr-for-private-instant-messaging/"&gt;OTR plugin&lt;/a&gt;.&lt;br /&gt;&lt;br /&gt;Further reading (and even more apps) in &lt;a href="https://bits.blogs.nytimes.com/2014/03/19/can-you-trust-secure-messaging-apps/"&gt;this article&lt;/a&gt; in the New York Times.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;div style="text-align: center;"&gt;&lt;a class="ContextualPopup-trigger" href="https://cybersecurity.dreamwidth.org/431.html"&gt;&lt;img border="2" alt="Go back to the index of Cybersecurity for the Trumped." src="https://v.dreamwidth.org/10853719/2563090" /&gt;&lt;/a&gt;&lt;br /&gt;Back to Index&lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;img src="https://www.dreamwidth.org/tools/commentcount?user=cybersecurity&amp;ditemid=3347" width="30" height="12" alt="comment count unavailable" style="vertical-align: middle;"/&gt; comments</content>
  </entry>
  <entry>
    <id>tag:dreamwidth.org,2016-11-22:2563090:2499</id>
    <link rel="alternate" type="text/html" href="https://cybersecurity.dreamwidth.org/2499.html"/>
    <link rel="self" type="text/xml" href="https://cybersecurity.dreamwidth.org/data/atom/?itemid=2499"/>
    <title>8. Smartphones</title>
    <published>2016-12-08T21:20:14Z</published>
    <updated>2016-12-23T09:11:02Z</updated>
    <category term="cell phone"/>
    <category term="facebook"/>
    <category term="wifi"/>
    <category term="cybersecurity"/>
    <category term="messengers"/>
    <category term="apps"/>
    <category term="smartphone"/>
    <dw:security>public</dw:security>
    <dw:reply-count>0</dw:reply-count>
    <content type="html">I'm about the least likely person to write about this, because I do not own a smartphone. But someone has to do it, so I'll go ahead and do it. I'll be doing research as I go along, and cite my sources for you to peruse if you want to. As always, keep in mind that corrections and additions are welcomed.&lt;br /&gt;&lt;br /&gt;So. &lt;a href="https://www.privacyrights.org/consumer-guides/privacy-age-smartphone"&gt;Smartphones&lt;/a&gt;. Almost everyone in the industrialized world now carries one of these palm-sized computers with them. And they are a great way to keep track of people. It's a lot like Orwell's vision of the surveillance state of the future, with one big difference: we don't have to be forced to wear a tracking device. We do it by ourselves, because it's convenient and fun and offers a lot of options that we really want. Here's what your smartphone can reveal about you.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-size: larger;"&gt;&lt;strong&gt;What kind of information is being collected? By who?&lt;/strong&gt;&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;Your telecom provider is, at the very least, keeping tabs on the following:&lt;br /&gt;    &lt;ul&gt;&lt;li&gt;Incoming and outgoing calls: the phone numbers you call, the numbers that you receive calls from, and the duration of the call;&lt;/li&gt;&lt;li&gt;Incoming and outgoing text messages: the phone numbers you send texts to and receive texts from;&lt;/li&gt;&lt;li&gt;How often you check your e-mail or access the Internet;&lt;/li&gt;&lt;li&gt;Your location.&lt;/li&gt;&lt;/ul&gt;Not all providers keep your data for the same amount of time. Check this &lt;a href="http://www.usnews.com/news/articles/2015/05/22/how-long-cellphone-companies-store-your-call-records"&gt;article&lt;/a&gt;. Oh, and if you're not excited about the Trump presidency, &lt;a href="http://arstechnica.com/tech-policy/2016/12/t-mobile-excited-about-life-under-trump-reversal-of-net-neutrality-rules/"&gt;T-Mobile&lt;/a&gt; may not be your provider of choice.&lt;br /&gt;Other parties who may be privvy to your information:&lt;br /&gt;&lt;ul&gt;&lt;li&gt;Retailers can nowadays follow you through cameras, using face recognition, and combine that information with the MAC address of your smartphone which can, in many cases, be linked to a specific individual. The difference between Bluetooth-tracking beacons and Wi-Fi tracking  systems is that the modern smartphone leaves Wi-Fi on, even when  manually switched off for data connectivity, as a way of pinpointing its  location. &lt;a href="https://www.theguardian.com/technology/2016/jan/21/shops-track-smartphone-uk-privacy-watchdog-warns"&gt;Source&lt;/a&gt;.&lt;/li&gt;&lt;li&gt;If you're using the Facebook app, Facebook has access to:  &lt;ul&gt;&lt;li&gt;Your contacts, including modification and adding or changing  calendar events. They know who is in your phone and can contact them.&lt;/li&gt;&lt;li&gt;Your exact location. They know where you are at any time.&lt;/li&gt;&lt;li&gt;Your camera, including taking pictures and videos at any time, as  well as recording from the microphone. They can get at anything you&amp;rsquo;re  saying or looking at.&lt;/li&gt;&lt;li&gt;Your text messages, your calls, and can call phone numbers. They can see who you&amp;rsquo;ve contacted recently.&lt;/li&gt;&lt;li&gt;Your internal storage, including permission to delete anything. They can see the files on your phone.&lt;/li&gt;&lt;li&gt;Full Internet access anytime, changing your wallpaper, opening up  over other apps, and downloading files. They can make little tweaks  without your knowledge.&lt;/li&gt;&lt;li&gt;When posting a status, the app can determine what song you&amp;rsquo;re listening  to or what TV show is on in the background, and tag your status  with this information. &lt;a href="http://www.makeuseof.com/tag/use-facebook-android-without-invasive-permissions/"&gt;Source&lt;/a&gt;.&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;Many different apps send location information and other data to third parties. That includes things like games and flashlight apps.&lt;/li&gt;&lt;li&gt;If you're using Chrome as your mobile browser, Google has access to your browser history, open tabs, passwords and more.&lt;/li&gt;&lt;/ul&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;&lt;br /&gt;Settings&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;Lock down your phone's security settings. &lt;a href="http://www.makeuseof.com/tag/smartphone-privacy-settings-need-activate-today/"&gt;Here's how&lt;/a&gt;.&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;&lt;br /&gt;&lt;br /&gt;Apps&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;Apps are what makes a smartphone a smartphone: it can run software, programs, applications, in one word: apps. These apps need permissions to do things; a browser, for example, needs permission to use the internet. Permissions are the only layer of defense between your phone and an app.  If an application has malicious intent, all you have to do is allow it  on your phone with invasive permissions to create problems. &lt;br /&gt;Never give permissions to an app without at least reading what they are, and thinking about what that means. Try to understand the permissions required by the app: is there some  legitimate reason or is something malicious happening in the background?  To give an example, a calculator or torchlight application shouldn&amp;rsquo;t be  requesting access to your contacts. Likewise, many applications  shouldn&amp;rsquo;t be requesting your GPS location: it could potentially give  away when you&amp;rsquo;re not currently at home (useful information for anyone  breaking into your house).  If you&amp;rsquo;re not comfortable with the  permissions being requested, it&amp;rsquo;s always best to cancel the  installation. &lt;a href="https://community.giffgaff.com/t5/Blog/Smartphone-App-Permissions-Secure-Your-Privacy-amp-Keep-Your/ba-p/11811901"&gt;Source&lt;/a&gt;.&lt;br /&gt;Here's a guide for &lt;a href="https://thehackernews.com/2015/06/android-permission-manager.html"&gt;Android&lt;/a&gt;. Here's one for &lt;a href="http://www.howtogeek.com/211623/how-to-manage-app-permissions-on-your-iphone-or-ipad/"&gt;iPhone&lt;/a&gt;. &lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;br /&gt;&lt;span style="font-size: larger;"&gt;The risks of free WiFi&lt;/span&gt; &lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;Using public WiFi isn't unlike having a conversation in a public  place: Others can overhear you. If you don't take precautions,  information your devices send over a public WiFi network goes out in  clear text &amp;mdash; and anyone else on the network could easily take a look at  what you're doing with just a few simple software tools.&lt;br /&gt; Someone spying could easily pick up your passwords or other private  information. If you use the same password on multiple sites, that could  be a big problem. (But you should not be doing that anyway.)&lt;br /&gt; The next potential problem is what is called a honeypot. Thieves  might set up their own WiFi hotspot with an unassuming name like &amp;quot;Public  WiFi&amp;quot; to tempt you to connect so they can grab up any data you send.  These are easy to set up without any kind of special equipment &amp;mdash; it  could be done just using a laptop or smartphone &amp;mdash; so you could run into  them anywhere.&lt;br /&gt; Finally, using public WiFi puts you at risk for session hijacking, in  which a malicious hacker who's monitoring your WiFi traffic attempts to take over  an open session you have with an online service (like a social media  site or an email client) by stealing the browser cookies the service  uses to recognize who you are. Once hackers have that cookie, they can  pretend to be you on these sites or even find your login and password  information stored inside the cookie. &lt;a href="http://www.techlicious.com/tip/how-to-protect-your-privacy-on-public-wifi-networks/"&gt;Source.&lt;/a&gt;&lt;br /&gt;&lt;br /&gt;When you're using a public WiFi:&lt;ul&gt;&lt;li&gt;Make sure you know that you are connecting to the right WiFi hotspot and not one that has a similar or generic-sounding name. And read the terms and conditions.&lt;/li&gt;&lt;li&gt;Check that you are using HTTPS by looking at the URL of the site you are connecting to. Also check the spelling of the URL itself.&lt;/li&gt;&lt;li&gt;it&amp;rsquo;s better to use a mobile browser than an app, because &lt;a rel="noopener" target="_blank" href="https://nakedsecurity.sophos.com/2014/01/10/just-how-secure-is-that-mobile-banking-app/"&gt;browsers are more fussy&lt;/a&gt;  when it comes to checking and verifying these HTTPS connections.  Essentially, apps can be accepting bogus security credentials without  your knowledge, and that&amp;rsquo;s a problem if you&amp;rsquo;re doing something important  like online banking or buying stuff online. &lt;a href="https://fieldguide.gizmodo.com/how-to-stay-safe-on-public-wifi-1779464400"&gt;Source&lt;/a&gt;.&lt;/li&gt;&lt;li&gt;Use a VPN. More about that &lt;a href="https://cybersecurity.dreamwidth.org/2781.html"&gt;here&lt;/a&gt;.&lt;/li&gt;&lt;li&gt;Use two-factor authentication wherever possible.&lt;/li&gt;&lt;li&gt;If you want to be extra careful, avoid doing anything over public WiFi that needs you to enter a password.&lt;/li&gt;&lt;/ul&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;&lt;br /&gt;Avoid the Facebook app&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;From a viewpoint of privacy, Facebook is one of the worst offenders. The Facebook app, doubly so. So if you cannot live without Facebook, at least don't use it through the app; instead, view it inside your browser of choice. Or for a nice compromise: use a wrapper app like Tinfoil or Metal (Android).&lt;br /&gt;&lt;br /&gt;&lt;span style="font-size: larger;"&gt;&lt;strong&gt;&lt;br /&gt;Messenger apps&lt;/strong&gt;&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;Whatsapp is a very popular messenger app for smartphones. The good news is that it's lately been made to use encryption; the bad news is that it's &lt;a href="https://www.theguardian.com/technology/2014/feb/19/facebook-buys-whatsapp-16bn-deal"&gt;owned by Facebook&lt;/a&gt;, who of course still gets the metadata (who are you talking to, when and how often?)&lt;br /&gt;A good alternative that's been getting a lot of attention is &lt;a href="https://whispersystems.org/"&gt;Signal&lt;/a&gt;. And another good option is &lt;a href="https://telegram.org/"&gt;Telegram&lt;/a&gt;. Both of these offer encryption and are free, as well as ad-free!&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;&lt;br /&gt;Going off-grid&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;If it makes you uncomfortable to be tracked so closely all the time, go off-grid now and then. It's a good idea to switch your smartphone off when you're not using it; unfortunately, that's not always enough anymore. Modern smartphones never turn off completely and you can't always take the battery out anymore, either. A good way to cut off all information to and from the device is to put inside a signal blocking pouch! &lt;a href="http://killyourphone.com/"&gt;Complete how-to here&lt;/a&gt;.&lt;br /&gt;&lt;br /&gt;It's also a smart option to split your phone use off from your smartphone use. You could get an old-fashioned 'dumbphone' and use that to make calls, while reserving your smartphone for browsing on the go. Compartimentalization again. Non-smartphones are often sold as prepaid phones in bigger electronics stores; make sure you are getting a simlockfree phone. Bonus: many of them have really long standby times!&lt;br /&gt;&lt;br /&gt;&lt;span style="font-size: larger;"&gt;&lt;strong&gt;&lt;br /&gt;Phones and OSses&lt;/strong&gt;&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;Which smartphones are the most private and secure? &lt;a href="http://www.zdnet.com/article/want-a-secure-privacy-smartphone-the-experts-suggest/"&gt;Read more here.&lt;/a&gt;&lt;br /&gt;It seems pretty clear that Androids are the least secure, since you're always giving a lot of data to Google and cheaper Chinese Androids may also send data home to the manufacturer. Older versions of Android are worse than up to date ones.&lt;br /&gt;iPhones may be slightly better since Apple is mostly in the hardware business, advertising: not so much. iPhones are also fairly hard to hack.&lt;br /&gt;Windows phones are not too bad either, for similar reasons.&lt;br /&gt;Alternative OSses are probably a step up: &lt;a href="https://www.mozilla.org/en-US/firefox/os/"&gt;Firefox OS&lt;/a&gt; (but as a phone OS, that project is dead in the water), &lt;a href="https://sailfishos.org/"&gt;Sailfish&lt;/a&gt;, &lt;a href="https://www.cyanogenmod.org/"&gt;Cyanogenmod&lt;/a&gt; if you like to tinker. If you're really, really serious about all of this, get a &lt;a href="https://www.silentcircle.com/"&gt;Blackphone&lt;/a&gt;.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;div style="text-align: center;"&gt;&lt;a href="https://cybersecurity.dreamwidth.org/431.html"&gt;&lt;img border="2" src="https://v.dreamwidth.org/10853719/2563090" alt="Go back to the index of Cybersecurity for the Trumped." /&gt;&lt;/a&gt;&lt;br /&gt;Back to Index&lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;img src="https://www.dreamwidth.org/tools/commentcount?user=cybersecurity&amp;ditemid=2499" width="30" height="12" alt="comment count unavailable" style="vertical-align: middle;"/&gt; comments</content>
  </entry>
  <entry>
    <id>tag:dreamwidth.org,2016-11-22:2563090:2248</id>
    <link rel="alternate" type="text/html" href="https://cybersecurity.dreamwidth.org/2248.html"/>
    <link rel="self" type="text/xml" href="https://cybersecurity.dreamwidth.org/data/atom/?itemid=2248"/>
    <title>7. Facebook</title>
    <published>2016-11-24T11:24:11Z</published>
    <updated>2017-01-31T12:15:56Z</updated>
    <category term="cybersecurity"/>
    <category term="browsers"/>
    <category term="smartphone"/>
    <category term="messengers"/>
    <category term="facebook"/>
    <category term="social media"/>
    <dw:security>public</dw:security>
    <dw:reply-count>0</dw:reply-count>
    <content type="html">Facebook is a problem. Privacy-wise, it's riddled with concerns, but it's so embedded in many people's lives that it's hard to uproot. I have never used Facebook, so everything I'm going to write below is second-hand; please correct me where needed.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;&lt;br /&gt;Why worry about Facebook?&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;Here are some reasons why many people feel that Facebook should not be trusted with the details of your daily life.&lt;ul&gt;&lt;li&gt;First off: Mark Zuckerberg is a jerk. He does not respect his users; their privacy, even less so. He's called his users &lt;a href="http://gawker.com/5636765/facebook-ceo-admits-to-calling-users-dumb-fucks"&gt;'dumb fucks'&lt;/a&gt; for trusting him. Does that offend you? It probably should.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Secondly, privacy settings on Facebook &lt;a href="https://www.theguardian.com/technology/2016/jun/29/facebook-privacy-secret-profile-exposed"&gt;change all the time&lt;/a&gt;. They can't be relied upon. If there is something you're not ready to share with the entire world (under your real name,no less), you should not be sharing it with anyone through Facebook.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Facebook is not designed to show you what you want to see. It's designed to keep you clicking around within the Facebook walled garden for as long as possible. It is, in fact, designed to be &lt;a href="http://www.livescience.com/49585-facebook-addiction-viewed-brain.html"&gt;addictive&lt;/a&gt;. That shouldn't be a surprise, since many websites are.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Facebook tinkers with your &lt;a href="http://www.nytimes.com/2014/06/30/technology/facebook-tinkers-with-users-emotions-in-news-feed-experiment-stirring-outcry.html"&gt;emotions&lt;/a&gt; in ways that aren't good for you. It actively makes people &lt;a href="http://www.newyorker.com/tech/elements/how-facebook-makes-us-unhappy"&gt;unhappier&lt;/a&gt;.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Facebook stores &lt;a href="http://www.geek.com/geek-pick/facebook-stores-up-to-800-pages-of-personal-data-per-user-account-1424807/"&gt;ridiculous amounts of data&lt;/a&gt; about its users and probably &lt;a href="http://www.informationliberation.com/?id=28581"&gt;never deletes it&lt;/a&gt;, even after you close your account.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Facebook builds a &lt;a href="https://www.thesun.co.uk/news/1664178/here-are-the-alarming-98-facts-and-secrets-facebook-knows-about-you/"&gt;very detailed profile&lt;/a&gt; of you, based on your behaviour both on the site itself and on other sites, and uses that for targeted advertising. It also sells this information.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;That's right: Facebook &lt;a href="http://www.businessinsider.com/this-is-how-facebook-is-tracking-your-internet-activity-2012-9"&gt;tracks your surfing&lt;/a&gt; even when you're not on Facebook. If you click a 'like' button anywhere on the web, that is of course recorded; if you don't click it, that's fine too. The fact that it's shown in your browser at all is enough to track your online behaviour.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Facebook gets information from Google searches that lead you to specific companies' websites. Those companies don't just know you visited their website, &lt;a href="http://mashable.com/2014/06/04/google-facebook-ads-search/#X8wEEuHCEkqA"&gt;they know what you  searched&lt;/a&gt; for that led you there. And now they can follow up with you on  Facebook. All for your own convenience, mind you.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Facebook is &lt;a href="http://blog.higg.im/2015/05/28/facebook-are-keylogging-followup-screen-capture-by-aral-balkan/"&gt;keylogging your status updates&lt;/a&gt; as you type them. So even if you decide never to post them, they're being stored.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;All this data is in the hands of a US based company. The US government, or any random cybercriminal, can certainly gain access to it. If you don't want to be spied on, &lt;a href="https://www.theguardian.com/technology/2015/mar/26/leave-facebook-snooped-on-warns-eu-safe-harbour-privacy-us"&gt;don't use Facebook&lt;/a&gt;, not even if you're in Europe. EU laws don't protect you.&lt;/li&gt;&lt;/ul&gt;&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;Getting away&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;&lt;p&gt;So if you don't want to use Facebook, what other options are there? No worries, it's a wide, wide Web out there. Here are some options, depending on what you use Facebook for. Whether these options work for you, also depends on why you want to get away from Facebook. &lt;strong&gt;Always check who owns the platform you're considering joining&lt;/strong&gt;. This can change rapidly and dramatically!&lt;br /&gt;&lt;br /&gt;Part of this information comes from &lt;a href="https://turbofuture.com/internet/Not-Facebook-Alternative-Social-Networking-Sites"&gt;here&lt;/a&gt;.&lt;/p&gt;&lt;div style="margin-left: 40px;"&gt;&lt;br /&gt;&lt;a href="https://linkedin.com"&gt;&lt;strong&gt;LinkedIn&lt;/strong&gt;&lt;/a&gt;: A professional social networking site with  approximately 347 million users worldwide. Good for maintaining  professional contacts with colleagues, clients, and others, LinkedIn can  also be used for finding jobs and recruiting employees. Now owned by Microsoft.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;a href="https://twitter.com"&gt;Twitter&lt;/a&gt;:&lt;/strong&gt; While smaller and more narrow in focus,  Twitter is hardly an also-ran. At last count, it boasted over 284  million active users and 500 million tweets a day. It is growing at  least as fast as Facebook and is causing quite a lot of waves with a  well-publicised role in revolutionary movements in Egypt, Iran, and  other countries. &lt;a href="https://medium.com/@thegrugq/twitter-activist-security-7c806bae9cb0#.crnj2syyw"&gt;Here&lt;/a&gt; is information about staying safe as an activist on Twitter.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;a href="https://pinterest.com"&gt;Pinterest&lt;/a&gt;:&lt;/strong&gt; This platform revolves around the concept  of &amp;quot;pinning&amp;quot; interesting photos, web pages, articles, and other content  onto virtual noticeboards, then sharing them with people. You can  create different pinboards for different interests, events, collections,  or whatever you want. You can view things on other people's pinboards  and repin them on your own. Pinterest has over 72.8 million users and is  growing rapidly.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;a href="https://instagram.com"&gt;Instagram&lt;/a&gt;:&lt;/strong&gt; This isn't just a social network, but it  is being used as one by many. It's an online mobile photo-sharing,  video-sharing, and social networking service that lets users to share  images, videos, and words. Instagram says 300 million people use its  photo app every month, with 70% of them coming from outside the US.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;a href="https://tumblr.com"&gt;Tumblr&lt;/a&gt;:&lt;/strong&gt; Tumblr is part blog and part social  networking site. Users can create their own blogs and follow others' in a  similar way to social networks. Last I checked, it had 420 million  users, probably 30-50 of which are active, and 217 million blogs.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;a href="https://myspace.com"&gt;MySpace&lt;/a&gt;:&lt;/strong&gt; Originally the big name in social  networking, it is most popular with young people and has 50.6 million  monthly active members. Following a re-branding, it is now a  music-orientated site targeted at young people.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;a href="https://tagged.com"&gt;Tagged&lt;/a&gt;:&lt;/strong&gt; A social networking site with approximately  100 million users (but no clear data on how many are active), it is now  also known as if(we). It was the subject of significant controversy in  2009 for allegedly using member's email accounts to repeatedly send  invites to all of their email contacts.&lt;br /&gt;&lt;br /&gt;&lt;a href="http://livejournal.com"&gt;&lt;strong&gt;LiveJournal&lt;/strong&gt;&lt;/a&gt;: Used to be a very popular blogging/networking site, that is still used by many groups in fandom. Currently in Russian hands, and not advertising-free. Faded glory, but still quite usable. But: hosted in Moscow, so don't consider it private or safe.&lt;br /&gt;&lt;br /&gt;&lt;a href="https://dreamwidth.org"&gt;&lt;strong&gt;DreamWidth&lt;/strong&gt;&lt;/a&gt;: Forked from LiveJournal years ago, and the better alternative if you ask me. Popular with fandom, but also good for keeping an online diary that can be as public or restricted as you want it to be. Ad-free, free to use and founded in &lt;a href="https://www.dreamwidth.org/legal/principles"&gt;high ideals&lt;/a&gt;. &lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;a href="https://www.joindiaspora.com/"&gt;Diaspora&lt;/a&gt;:&lt;/strong&gt; This is a nonprofit, user-owned and  distributed social network that gives you full ownership and control of  all the data, photos, writing, etc. that you post. This is in direct  contrast to Facebook, whose policy is to use your data and posts however  it likes.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;a href="https://ello.co"&gt;Ello&lt;/a&gt;:&lt;/strong&gt; Created by a small group of artists who'd  grown tired of clutter, negativity, data mining, and ads. You won't be  forced to watch videos or see ads. Instead of being the intended facebook killer, it found its niche as a thriving, supportive portfolio service for digital artists.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;a href="https://path.com"&gt;Path&lt;/a&gt;:&lt;/strong&gt; A social network that limits you to 50  friends. The idea of this is to allow you to interact with and share  your photos, thoughts, and your life, really, with only the people you  are closest to.&lt;br /&gt;&lt;br /&gt;&lt;a href="https://metafilter.com"&gt;&lt;strong&gt;MetaFilter&lt;/strong&gt;&lt;/a&gt;: Metafilter is a weblog  that anyone can contribute a link or a comment to. This website exists to break down the barriers between people, to  extend a weblog beyond just one person, and to foster discussion among  its members. Also has subsites like AskMefi and FanFare (discussion of popular media like films and books). Good moderation. Good place to find activists.&lt;br /&gt;&lt;br /&gt;&lt;a href="https://reddit.com"&gt;&lt;strong&gt;Reddit&lt;/strong&gt;&lt;/a&gt;: A social news aggregation, web content rating, and discussion  website. Reddit's registered community members can submit content, such  as text posts or direct links. Registered users can then vote  submissions up or down to organize the posts and determine their  position on the site's pages. Beware of the dark corners, not all of this site is safe/pleasant.&lt;br /&gt;&lt;br /&gt;&lt;a href="https://medium.com"&gt;&lt;strong&gt;Medium&lt;/strong&gt;&lt;/a&gt;: in its own words, a place where everyone has a story to share and the best ones are delivered right to you.              Every day, thousands of people turn to Medium to publish their ideas and perspectives. Leaders. Artists. Thinkers.                And ordinary citizens who have a story to tell. &lt;br /&gt;&lt;br /&gt;&lt;a href="https://bookcrossing.com"&gt;&lt;strong&gt;BookCrossing&lt;/strong&gt;&lt;/a&gt;: a worldwide community of book lovers, who want to make the world into a library by leaving books behind in public places, for others to find.&lt;br /&gt;&amp;nbsp;&lt;/div&gt; &lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;Sticking around&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;If you feel that Facebook is something you can't do without, there are still ways to cut down on the tracking and the data gathering. As always, the more of these you can do, the better it is. But even doing just one of them is already an inprovement. &lt;br /&gt;&lt;ul&gt;&lt;li&gt;Go through your privacy settings with a fine-toothed comb. Some tips &lt;a href="http://www.welivesecurity.com/2016/02/09/stay-safe-facebook-cheat-sheet/"&gt;here&lt;/a&gt;, &lt;a href="https://nakedsecurity.sophos.com/2016/06/24/3-ways-to-better-secure-your-facebook-account/"&gt;here&lt;/a&gt; and especially &lt;a href="https://heimdalsecurity.com/blog/facebook-security-privacy-guide/"&gt;here&lt;/a&gt;.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Harden your browser. Install NoScript (or &lt;a href="http://www.huffingtonpost.com/nate-hanson/how-to-stop-facebook-from_b_8160400.html"&gt;a different blocker&lt;/a&gt;) and disallow Facebook scripts.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Have a separate browser (or browser profile) for all your Facebook activity. Allow Facebook scripts only in that one.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Don't use the Facebook app on your phone. If you must use Facebook on your phone, do it through a browser. The app is &lt;a href="https://www.hackread.com/facebook-listening-user-conversation/"&gt;notorious&lt;/a&gt; for &lt;a href="http://thefreethoughtproject.com/facebook-silently-listening-stop/"&gt;spying&lt;/a&gt; on &lt;a href="http://dailycaller.com/2014/09/11/facebooks-messenger-app-has-more-spyware-than-products-designed-specifically-for-surveillance/"&gt;you&lt;/a&gt;. Keep in mind that your smartphone knows exactly where you are&lt;/li&gt;&lt;/ul&gt;&lt;ul&gt;&lt;li&gt;Follow the guidelines posted &lt;a href="http://lifehacker.com/5813990/the-always-up-to-date-guide-to-managing-your-facebook-privacy"&gt;here&lt;/a&gt;.&lt;/li&gt;&lt;/ul&gt;&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;Bonus link!&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;This browser add-on probably doesn't make Facebook safer, as such, but it seems like it could make it more pleasant and at least better for your mental health: &lt;a href="http://www.fbpurity.com/"&gt;FB Purity&lt;/a&gt;.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;div style="text-align: center;"&gt;&lt;a href="https://cybersecurity.dreamwidth.org/431.html"&gt;&lt;img border="2" alt="Go back to the index of Cybersecurity for the Trumped." src="https://v.dreamwidth.org/10853719/2563090" /&gt;&lt;/a&gt;&lt;br /&gt;Back to Index&lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&lt;img src="https://www.dreamwidth.org/tools/commentcount?user=cybersecurity&amp;ditemid=2248" width="30" height="12" alt="comment count unavailable" style="vertical-align: middle;"/&gt; comments</content>
  </entry>
  <entry>
    <id>tag:dreamwidth.org,2016-11-22:2563090:1946</id>
    <link rel="alternate" type="text/html" href="https://cybersecurity.dreamwidth.org/1946.html"/>
    <link rel="self" type="text/xml" href="https://cybersecurity.dreamwidth.org/data/atom/?itemid=1946"/>
    <title>6. Getting away from Google</title>
    <published>2016-11-22T13:32:05Z</published>
    <updated>2016-12-23T09:12:20Z</updated>
    <category term="cybersecurity"/>
    <category term="google"/>
    <category term="chrome"/>
    <category term="email"/>
    <category term="messengers"/>
    <dw:security>public</dw:security>
    <dw:reply-count>0</dw:reply-count>
    <content type="html">&lt;strong&gt;&lt;span style="font-size: larger;"&gt;Why?&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;First of all, why would you want to avoid Google? Well, there are several reasons...&lt;ul&gt;&lt;li&gt;Google offers a lot of services, so they collect a lot of different data from different sources.&lt;/li&gt;&lt;li&gt;Google  connects all the data from these services into a very detailed profile,  meant to advertise at you with more precision. This is their whole  business model and they're very good at it.&lt;/li&gt;&lt;li&gt;Google is quite willing to share this profile with the US government. They only need to ask.&lt;/li&gt;&lt;li&gt;Google has been known to break promises about privacy and data retaining policy. Here's the &lt;a href="http://indiatoday.intoday.in/technology/story/google-breaks-privacy-promise-with-allo-slammed-by-snowden/1/770738.html"&gt;most recent case&lt;/a&gt;.&lt;/li&gt;&lt;li&gt;They also are known never to delete any data.&lt;/li&gt;&lt;/ul&gt;Need more reasons? I sure don't.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;&lt;br /&gt;How?&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;p&gt;How  can you get away from Google? There are lots of things you can do. Any  of the items listed below will decrease the stream of data that flows  from you to Google. The more you can do, the smaller it gets.&lt;br /&gt;Most of  their services have decent alternatives; some are so good you'll  be  happy you jumped ship. But before you do, clean out all that you  can.&lt;/p&gt;Check to see if your &lt;a href="https://history.google.com/history"&gt;web history&lt;/a&gt; has been recorded by Google. If so, you need to wipe all of it. Do the same with your location, which Google &lt;a href="https://maps.google.com/locationhistory/b/0"&gt;very kindly keeps a record of&lt;/a&gt; just for us. &lt;br /&gt;Next up: YouTube. Go to YouTube and click both &lt;strong&gt;Clear all watch history&lt;/strong&gt;, and &lt;strong&gt;Pause watch history&lt;/strong&gt;.  From now on, when watching YouTube, do it when logged out of Google, as  with all your browsing. If you need to log into your Google account for  some reason, do that in a separate browser, and log out after use.&lt;br /&gt; &lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;&lt;br /&gt;Stop using Google for searches&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;This  is easy. Start using a different search engine, and set your browser to  use the new one as the default. Google listens in  on your searches,  doubly so when you are logged into a Google account  (so don't do that  in your normal browser). Here are some privacy-conscious search engines.&lt;br /&gt;&lt;br /&gt;&lt;a href="http://duckduckgo.com/"&gt;DuckDuckGo&lt;/a&gt;&lt;br /&gt;&lt;a href="https://www.startpage.com/"&gt;StartPage&lt;/a&gt; &amp;lt;--- my personal favourite&lt;br /&gt;&lt;a href="https://ixquick.com/"&gt;Ixquick&lt;/a&gt;&lt;br /&gt;&lt;a href="https://www.qwant.com/"&gt;Qwant&lt;/a&gt;&lt;br /&gt;&lt;a href="http://blekko.com/"&gt;Blekko&lt;/a&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;Stop using Google Docs&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;Google  Docs is pretty great, which makes it seem like it's hard to quit. But  here are some alternatives. Some of them are hosted outside of the US:  always a plus.&lt;br /&gt;What we're looking for: online collaborative  document editing and sharing, with the possibility  of keeping documents  hidden from those who aren't logged in. It needs to  have some  formatting options, and to have some kind of protection  against data  loss through accidental simultaneous editing. It would be great if it  were something that can be viewed and used inside a webbrowser. It would  be nice if it were free!&lt;br /&gt;&lt;a href="http://etherpad.org/"&gt;Etherpad&lt;/a&gt; is great for quick editing of simple documents in groups, in real time and with no editing conflicts.&lt;br /&gt;Here's &lt;a href="https://www.zoho.com/docs/"&gt;Zoho&lt;/a&gt;. Here's &lt;a href="https://evernote.com"&gt;Evernote&lt;/a&gt;. Here's &lt;a href="http://www.thinkfree.com/thinkfree/thinkfreeMain.jsp"&gt;ThinkFree&lt;/a&gt;.&lt;br /&gt;&lt;a href="https://mailfence.com/"&gt;Mailfence&lt;/a&gt; is in Belgium, privacy-oriented, and may be your one stop shop for docs and email.&lt;br /&gt;You could also possibly make do with &lt;a href="http://www.libreoffice.org/"&gt;LibreOffice&lt;/a&gt; documents saved in &lt;a href="https://www.dropbox.com/"&gt;Dropbox&lt;/a&gt; or elsewhere.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-size: larger;"&gt;&lt;strong&gt;Stop using Google Maps&lt;/strong&gt;&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;Easy-peasy. Use &lt;a href="https://wego.here.com"&gt;Here,&lt;/a&gt; &lt;a href="http://www.mapquest.com/"&gt;Mapquest&lt;/a&gt;, or another one of &lt;a href="http://www.brit.co/google-map-alternatives-no-wifi/"&gt;several&lt;/a&gt; &lt;a href="http://beebom.com/google-maps-alternatives/"&gt;sites and apps&lt;/a&gt;. Plenty of options here!&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-size: larger;"&gt;&lt;strong&gt;Stop using Google Talk&lt;/strong&gt;&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;Google  Talk is Google's instant messenger. We have to make the distinction  between the service (the protocol) and the software here. Google Talk is  generally used through your browser, so many people do not use any  specific software when they are using this service (and Google's  servers). There are other protocols, as well as other software; some  well-known services are ICQ (remember? It still exists), MSN, Facebook  messenger, Jabber, and nowadays Signal and Telegram. Most services offer  their own software but can also be used through third-party software.&lt;br /&gt;&lt;br /&gt;There are a lot of options out there. The world is full of options for instant messengers. &lt;a href="https://whispersystems.org/"&gt;Signal&lt;/a&gt; is said to be great for privacy; &lt;a href="https://telegram.org/"&gt;Telegram&lt;/a&gt; is good too. These can be used on your desktop, laptop and smartphone. I'll write more about chat and messengers later.&lt;br /&gt;&lt;br /&gt;The  hard part with this one: getting your friends and other contacts to  join you on a different service. Usually, users of one service cannot  talk to users on another one. If this is a problem for now, you could  start using Gtalk through a third-party application for now, so you  don't have to log in into your Google account in your browser. There's  that compartimentalizing thing again!&lt;br /&gt;Good clients for desktops and laptops include &lt;a href="http://www.miranda-im.org/"&gt;Miranda IM&lt;/a&gt; for Windows, &lt;a href="https://pidgin.im/"&gt;Pidgin&lt;/a&gt; for Linux and &lt;a href="https://adium.im/"&gt;Adium&lt;/a&gt; for OS X.&lt;br /&gt;&lt;a href="http://meetfranz.com/"&gt;Franz&lt;/a&gt; is multi-platform, and in fact so is Pidgin. But there are others out there.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;Stop using Google Translate&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;This is tough. Google is probably just the best option here.Try &lt;a href="http://www.bing.com/translator/"&gt;Bing&lt;/a&gt;, or install some &lt;a href="http://alternativeto.net/software/google-translate/"&gt;translation software&lt;/a&gt;. &lt;br /&gt;Then  again, they are certainly storing the content of the text that you are  translating, but probably not a whole lot else, as long as you're logged  out of any Google accounts. You're logged out, right?&lt;br /&gt;&lt;br /&gt;&lt;span style="font-size: larger;"&gt;&lt;strong&gt;&lt;br /&gt;Stop using Blogger&lt;/strong&gt;&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;Move your Blogger blog over to &lt;a href="http://www.creativebloq.com/web-design/best-blogging-platforms-121413634"&gt;a different service&lt;/a&gt;.  Yes, it'll hurt a bit. But there are tons of good options. You could  clear it out and leave a link to your new home behind, if you want  people to be able to find it easily. You may lose some readers and  commenters, but you'll gain new ones.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;Stop using Google+&lt;br /&gt;&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;Just stop. No need for a replacement.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-size: larger;"&gt;&lt;strong&gt;Stop using Google Chrome&lt;/strong&gt;&lt;/span&gt;&lt;br /&gt;&lt;br /&gt;Start using &lt;a href="http://moem.dreamwidth.org/340185.html"&gt;a different browser&lt;/a&gt;. If you're a creature of habit, Chromium is for you. &lt;br /&gt;Install it, and let it import your bookmarks. Then, in Chrome, go to &lt;strong&gt;Settings &amp;gt; Advanced Settings &amp;gt; Privacy &amp;gt; Clear Browsing Data&lt;/strong&gt;. Tick all the boxes, so it all gets deleted. &lt;br /&gt;Finally, delete your Google Chrome profile from your computer. In Windows it's generally stored in &lt;strong&gt;C:/Users/[yourusername]/AppData/Local/Go&lt;wbr&gt;&lt;/wbr&gt;ogle/Chrome/User Data&lt;/strong&gt;. &lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;&lt;span style="font-size: larger;"&gt;Stop using Google Mail&lt;/span&gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;I   know this is a big step! It's fine not to do this straight away. It is  a  step that has a lot of positive impact on your privacy, so it's a  great thing to do, but save it  for last if you're finding it scary.&lt;br /&gt;Before  you switch to another  email provider, which is something I strongly  recommend, go into your  Gmail account and clean out all email that you  don't care about; then  set up Thunderbird (or a different email client  of your choice) and  download all the email you want to keep. &lt;a href="https://www.lifewire.com/gmail-access-thunderbird-1173150"&gt;Here's how&lt;/a&gt;. Also download your address book: &lt;a href="https://www.lifewire.com/import-gmail-contacts-to-thunderbird-1173152"&gt;here's how&lt;/a&gt;.&lt;br /&gt;Go   back into your Gmail account and delete everything. All emails and all   addresses. We don't know how deleted they really are. But it may help.&lt;br /&gt;Now you're ready to sign up with a &lt;a href="http://moem.dreamwidth.org/339431.html"&gt;non-US email provider that offers encryption&lt;/a&gt;. Congratulations!&lt;br /&gt;&lt;br /&gt;Now, the ultimate step is to delete your Google account. If and when you're ready.&lt;br /&gt;&lt;br /&gt;Further reading on getting away from Google:&lt;br /&gt;&lt;a href="http://lifehacker.com/5876794/going-google-free-the-best-alternatives-to-google-services-on-the-web"&gt;Going Google-Free: The Best Alternatives to Google Services on the Web&lt;/a&gt;&lt;br /&gt;&lt;a href="https://impossiblehq.com/complete-guide-leaving-google/"&gt;How To De-Google-ify Your Life: The Complete Guide To Leaving Google&lt;/a&gt;&lt;em&gt;&lt;br /&gt;&lt;/em&gt;&lt;a href="https://raventools.com/blog/google-alternatives/"&gt;The Best Google Alternatives For Email, Search, Docs and Everything Else&lt;/a&gt;&lt;em&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;As always: if I'm in the wrong, please set me straight and steer me to decent sources. Thank you!&lt;/em&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;div style="text-align: center;"&gt;&lt;a href="https://cybersecurity.dreamwidth.org/431.html"&gt;&lt;img border="2" alt="Go back to the index of Cybersecurity for the Trumped." src="https://v.dreamwidth.org/10853719/2563090" /&gt;&lt;/a&gt;&lt;br /&gt;Back to Index&lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;img src="https://www.dreamwidth.org/tools/commentcount?user=cybersecurity&amp;ditemid=1946" width="30" height="12" alt="comment count unavailable" style="vertical-align: middle;"/&gt; comments</content>
  </entry>
  <entry>
    <id>tag:dreamwidth.org,2016-11-22:2563090:788</id>
    <link rel="alternate" type="text/html" href="https://cybersecurity.dreamwidth.org/788.html"/>
    <link rel="self" type="text/xml" href="https://cybersecurity.dreamwidth.org/data/atom/?itemid=788"/>
    <title>2. A list of things you can do</title>
    <published>2016-11-22T11:52:42Z</published>
    <updated>2016-12-23T09:16:15Z</updated>
    <category term="passwords"/>
    <category term="messengers"/>
    <category term="addons"/>
    <category term="encryption"/>
    <category term="email"/>
    <category term="google"/>
    <category term="providers"/>
    <category term="cybersecurity"/>
    <category term="browsers"/>
    <category term="facebook"/>
    <category term="social media"/>
    <category term="list"/>
    <dw:security>public</dw:security>
    <dw:reply-count>0</dw:reply-count>
    <content type="html">&lt;p&gt;A lot of people are worried about their level of online privacy and  safety lately, for reasons that shouldn't be too hard to understand. The  big thing here is that US companies collect data, and the US   government can grab hold of that data if they feel there's a need; if   you are now under a government that you distrust, it makes sense to   reduce the amount of data that you hand over to US-based companies.  &lt;br /&gt;Here's  a list of things you can do. Some are easy and some are hard, but   every one of them can help. Even if you can only do one of these things,  it's worth doing.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;Here's the hardest one,  for many of you:  Get off of Facebook. Facebook collects a LOT of data,  even when you're  not on it. It's not just what you post on Facebook,  it's also about  your surfing habits on other sites, and a lot more. All  this data is  under the control of a man who called his users 'dumb  fucks' for  trusting him. If that offends you, good! It should. If you  feel you  cannot do without Facebook, consider abandoning your account  and  setting up a new one, using an altered version of your name, and   reconnecting with your friends on that. Changes like that help obfuscate   your digital trail.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Get away from Google. I will post  in  more details about this later, because Google is an ecosystem that   consists of a lot of services. Most of them have good replacements! The   very fact that Google has all these services is also why it's so   potentially dangerous: they collect a LOT of different data from all   those sources and combine it all into a very detailed profile. Need a   good search engine? Try &lt;a href="http://startpage.com"&gt;StartPage&lt;/a&gt;.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Get   your e-mail off of US soil. Use an e-mail provider that's hosted in   Europe and offers encryption. There are plenty of them and some of the  good ones are free.  More information on that is now posted &lt;a href="http://moem.dreamwidth.org/339431.html"&gt;here&lt;/a&gt;.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Compartimentalize.   Use different browsers for different purposes. Use different providers   for different services, so that your data is split up and therefore  less  meaningful. Keep your profiles on social media and other websites   separate. (I know, I don't always do that either. But I do have a few   online hangouts that you probably don't know about.)&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Here's   another hard one. Don't use a smartphone. If you must, be very wary of   the apps you install. Review and think about the permissions your apps   ask to use. Can they also operate with less? Switch it off when it's  not  in use. If you can make do with a nonsmart cellphone, or use that  for  phone calls and use your smartphone for data only, do that. That's   compartimentalizing too.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Here's some easy stuff! Use   adblockers and other browser add-ons that improve privacy. Your surfing   experience will be safer and faster and the sites you visit will look   nicer! This is another good topic for a &lt;a href="http://moem.dreamwidth.org/340185.html"&gt;separate post,&lt;/a&gt;  but for  now I'll throw out some names: UBlock Origin, Ghostery,  BetterPrivacy,  PrivacyBadger, DecentralEyes, SelfDestructing Cookies.  If you use Ghostery, be sure to check the settings carefully, as the  default is not great.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Also easy: if a service you are using  offers two-factor authentication, set that up. It makes your accounts a  lot harder to  break into. This is especially important for webmail  accounts, since they are often the key to a lot of other things, because  many services use email to reset passwords.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Another fairly  easy one, and we should all be doing this already: use good, strong  passwords and be smart about using them. Read more on that &lt;a href="http://moem.dreamwidth.org/340412.html"&gt;here&lt;/a&gt;.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;Learn   to use an e-mail client that supports encryption. You may not need it   now, but it's a good option to have. Thunderbird is just fine for this;   with the add-ons Enigmail and GPG installed, it works well. It's also  an all-around good e-mail program. And if more people use encryption,   those who use it won't stand out anymore. Remember when mail used to be   private? E-mail should be private, too.&lt;/li&gt;&lt;br /&gt;&lt;li&gt;If you haven't yet,  consider getting away from Apple and Microsoft. Linux  isn't just for   geeks anymore. There are several good looking, easy to use Linux based  OSses nowadays, they can run on most of the hardware that you are using,  and they are free. Ask your friendly local nerd or  cybersmart  cousin  to show you Linux Mint. Bonus: your computer will  probably run  faster,  and will not need to be replaced as rapidly!&lt;/li&gt;&lt;br /&gt;&lt;li&gt;One of the best  things you  could do would be to attend a cryptoparty: an interactive  workshop  about cybersecurity, often aimed at beginners. Find out &lt;a href="https://www.cryptoparty.in/"&gt;here&lt;/a&gt; when and where they are happening. A good place to ask about this would also be your local &lt;a href="http://hackerspaces.org/"&gt;hackerspace&lt;/a&gt;;   hackerspaces are physical spaces (as in, buildings/rooms) where people   get together to tinker and to share knowledge about many things,   cybersecurity being one of them. Don't worry about the bad reputations   of hackers; there are good reasons why malicious hackers generally stay   away from hackerspaces (they don't need them, they aren't welcome, and   they don't want the extra visibility).&lt;/li&gt; &lt;br /&gt;&lt;/ul&gt;&lt;br /&gt;&lt;br /&gt;&lt;div style="text-align: center;"&gt;&lt;a href="https://cybersecurity.dreamwidth.org/431.html"&gt;&lt;img border="2" src="https://v.dreamwidth.org/10853719/2563090" alt="Go back to the index of Cybersecurity for the Trumped." /&gt;&lt;/a&gt;&lt;br /&gt;Back to Index&lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;img src="https://www.dreamwidth.org/tools/commentcount?user=cybersecurity&amp;ditemid=788" width="30" height="12" alt="comment count unavailable" style="vertical-align: middle;"/&gt; comments</content>
  </entry>
</feed>
