Latest revision |
Your text |
Line 36: |
Line 36: |
|
| |
|
| If none of the above apply to you, you're still at threat of random attack events, whereby an attacker from anywhere on the internet obtains or hijacks your machine, identity, or accounts after achieving an exploit in your network, device, or service provider. | | If none of the above apply to you, you're still at threat of random attack events, whereby an attacker from anywhere on the internet obtains or hijacks your machine, identity, or accounts after achieving an exploit in your network, device, or service provider. |
|
| |
| == Devices to Use ==
| |
|
| |
| There are three levels of classification that we abide by for information, as inspired by US Government information protocols.
| |
|
| |
| * Top Secret - Grave danger to your person, your livelihood, or that of your friends and family.
| |
| ** Public/private keypairs - HTTPS certificates, SSH/GPG signing and authentication keys, cryptocurrency wallets
| |
| * Secret - Possibility of harm to your person, your livelihood, or that of your friends and family. Generally, information that the government knows (such as financial information) is considered Secret rather than Top Secret.
| |
| ** Your location, your address.
| |
| ** Account passwords.
| |
| * Confidential - Embarassment, deanonymization, or possible risks to your person, your livelihood, or that of your friends and family.
| |
| ** Contact information, usernames
| |
| ** Unfortunately, if your personal data has been publicly leaked online, consider it only confidential.
| |
|
| |
| Due to the prior possibility of backdoors, you should not consider smartphones to be suitable for Top Secret information. If you have no other choice (such as an emergency situation), try to mitigate your risks by sharing data only through means and services your adversary might not have or be able to compromise in time.
| |
|
| |
| === Top Secret ===
| |
|
| |
| * Devices: Open Source Hardware only: Libreboot laptops, Beagleboard, Raspberry Pi without VGA Blob.
| |
| ** No smartphones are allowed. The proprietary baseband and unlocked bootloader could have unlimited access to your RAM and your storage.
| |
| ** They're not going to be the best devices ever, and maybe not even the ones you use each day, but at least they're something you can trust.
| |
| * Operating Systems: G. Reproducible builds if at all possible.
| |
| * Networking: Onion Networks, i2p or Tor (hidden services only!!!)
| |
|
| |
| === Secret ===
| |
|
| |
| * Chat: Encrypted chat and email.
| |
| * Networking: HTTPS encryption
| |
|
| |
| === Confidential ===
| |
|
| |
| * Chat: Normal chat and email.
| |
| * Networking: HTTPS encryption
| |
|
| |
|
| [[Category:Draft]] | | [[Category:Draft]] |