If you’re truly concerned that your privacy may have been compromised, don’t use your own computer. Go to an internet cafe or other public service such as a library and use the computer there if you can. Otherwise you should be reasonably safe by using your own computer with the following suggestions. Avoid using versions of MS Windows; these are a relatively non-secure set of Operating Systems. Try to use linux distributions such as:
Take great care when copying to a USB drive (or optical media such as CD, DVDs, etc) then running on a suitable computer. Many of these Linux (and BSD) distributions can be run directly from optical media or USB so you can use them before installing anything on your computer. Take the time to learn about open-source operating systems, start by bookmarking the DISTROWATCH site.
Several other tools for various purposes are as follows:
Take great care to configure any anonymisation networks as a Relay, not as an Exit Node. Many well-known social media and other hidden services, including illicit services, are accessible via various anonymisation networks which provide improved end-to-end security.
Other useful applications are:
Email is a very important service for many reasons. Presently there are many email service providers that offer varying levels of security. JMAP is an official open API standard for modern email clients, with efforts underway to completely redesign modern email with intrinsic security by incorporating this standard.
But what if you’re unable to use the new JMAP email services? There is a simple process that you can use to communicate using any email service. Here’s how it works:
- Person A registers with a new email account and notes the login credentials (ie. username and password).
- Person A logs in and drafts a message, but does not send it. The message is saved in the drafts folder.
- Person A logs out.
- Person A gives the login credentials to their trusted contact Person B, in person.
- Person B then logs in to the same email account.
- Person B can then read the saved message from Person A in the drafts folder, then deletes it.
- Person B replies by creating a new message and saves that into the drafts folder.
- Person B logs out.
- Person A can then log back in and read the saved message from Person B before composing a reply as above.
This communication can take place without a single message being emailed through any server or domain, which makes surveillance very difficult. This requires participants to access the same email account and some degree of coordination between them. Also, remember to change your email settings to disallow tracking and other features. There are many helpful tips available online, specifically how to improve your email’s SPA.
A number of free, online, disposable email providers are also available:
Your browsers are important too:
If your Operating System is a 64-bit OS, use 64-bit versions of these browsers. Be sure to keep them updated and configured properly at all times. Do remember to disable any tracking or DNS prefetching before use. To test whether your browser is protected against online tracking techniques:
Set your home page in your browsers to one of:
To share files:
In each browser you should search for and install the following extensions / add-ons / plugins:
There are also free applications that can be downloaded and installed for secure instant messaging:
The OTR site lets you send secure, anonymous messages to your contacts. A facility for self-destructing one-way messages is also available. This is purely browser-based, no installation of any software is necessary. You should also consider using services or extensions that function as secure VPNs or dVPNs such as:
If you’d prefer to set up your own VPN Server, then you may use this resource as a starting point:
These let you route your browsing activities through virtual private networks or remote proxies located in different jurisdictions. Don’t access your email, financial or other personal sites through them, unless they have sufficient security in place, nor should you use any untrusted proxy with handling your personal business (ie. those that require login credentials or financial information). Ensure that whichever browser you use, you’re familiar with its Incognito or Private Browsing Mode and that it’s configured to clear its cache automatically when it’s closed.
Further information and reviews are contained in these excellent resources:
Other useful software:
- SPACEBARCHAT – Alternative to Discord.
- JAMI – Alternative to Skype and Zoom.
- MASTODON – Alternative to X.
- MINDS – Alternative to Facebook.
- VENTOY – Bootable USB solution.
- NOTESNOOK – Alternative to Evernote.
- LIBREOFFICE – Alternative to Microsoft Office.
- OPENDESK – Alternative Office Suite.
- USBIMAGER – Writes compressed disk images to USB drives and creates backups.
- BALENAETCHER – Burn images to SD Cards and USB drives.
There is a great deal of further information regarding counter surveillance that couldn’t be included because it’s outside the scope of this article.
