An humble privacy-first thread (aka escape corps thread) for the digital refugee

[dacookingsenpai]

I wanted to share with you some of the tips and tricks I learned during years of web, focusing on privacy alternatives to mainstream services.
Besides the usual VPN thing, there are a ton of other methods to protect your privacy without changing your life or charging your cc.

If this post becomes popular ( I mean, if there is interest) I will post more

Ok is time for the tip:

- Use Invidious instead of Youtube: Invidious is a privacy-first frontend for YouTube. Is self hosted by volunteers (or by yourself). If you want to test it, I made a small demo instance for you all

As maybe many of you already knew this, extra tip due to being the first poster:

- Use Qwant instead of Google Search (and Maps) for a tracker free experience. They use both anonymized APIs from the various providers and their own index. Personally it's up to the task

Feel free to ask, add or simply discuss privacy methods on the web!

 

[brokenrecord]

I'm personally more of a fan of searx instances for searches.
priv.au works well for me, but there's lots more at searx.space

Also, Qwant Maps uses OpenStreetMaps, so your mileage may vary.

My actual tip:
- Use libredirect to automatically route normal links to the more privacy-preserving options. There's the added advantage of not having to remember the names or URLs of sites that keep changing.

 

[dacookingsenpai]

LibRedirect is very very nice!

I used to host a searchx instance but I noticed a really worsening in search quality: did you notice it?

 

[Some_porcupine]

i believe i seen browsers thread discussing these already

 

[Cobalt]

1. Get a paper map of your local area, get a library card, get a pocket notebook, get an MP3 player or an old Ipod. Listen to radio, NPR reads off the same headlines all the other news orgs do. Maybe a replace your smartphone with a dumbphone if your baller enough. Want to talk to strangers? Go to a bar instead of Plebbit or 4chinz. Congrats, you just cut back on like half your digital footprint! If your so concerned about the privacy of your digital devices, then maybe consider just not using digital devices as much.

2. When you use the computer still, just don't do shit you don't want anyone else seeing. Who gives a fuck you played some Steam games and watched a movie or looked up a recipe. Even like most porn, who cares? Its not like your the only person to have ever watched it. I get trying to avoid datamining and such, go ahead and use google alternatives and whatnot. Get adblock, tracker blockers, VPN, and whatever else. Keep your photos off social media, etc. basic, common sense stuff. You don't really need to go full autist about it though. Your not a journalist in North Korea or an area 51 insider, and I sure as hell hope you aren't a pedo or cybercriminal. Hell, if you were doing illegal stuff online, it would be in your interest to also have a super visible normie tier digital footprint.

 

[dacookingsenpai]

If your so concerned about the privacy of your digital devices, then maybe consider just not using digital devices as much.

Unfortunately, both due to work and to actual distance from a populated place, I can't use them less than I do (more or less). Anyway, is like saying "Don't use credit cards if you are concerned about them being cloned". I mean, it works but is a patch on top of something that is wrong in the first place.

Who gives a fuck you played some Steam games and watched a movie or looked up a recipe. Even like most porn, who cares?

Arguing that you don't care about privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say
That's Snowden, I know you did not say that you don't care about privacy but still applies to the "who gives a fuck about what you do". Namely, if you are searched for anything (even if you are not guilty) they look at every naked bit of your devices (at least here).

Hell, if you were doing illegal stuff online, it would be in your interest to also have a super visible normie tier digital footprint.

That's actually true, disguising basically

 

[Cobalt]

Unfortunately, both due to work and to actual distance from a populated place, I can't use them less than I do (more or less). Anyway, is like saying "Don't use credit cards if you are concerned about them being cloned". I mean, it works but is a patch on top of something that is wrong in the first place.

I always hear stuff like this being said. I understand it being necessary for school and work, but I mean the government already knows where you go to work and school anyways, and any private individual committed enough could probably find out regardless of what tech you use. For personal tech use you can find a workaround for virtually everything you do online. It just isn't as easy or convenient. I think the vast majority of people could use tech much less. Most people just simply don't want to. They've become so accustomed to the convenience and creature comforts of it all that no one can imagine their life without using this or that device or software and they just don't give a shit about any of the downsides. Its like cars, there's X number of vehicle related fatalities each year. But we collectively as a society have decided that number of fatalities is acceptable, for the ease and convenience that driving cars gives us. It would be great if there were no fatalities, but realistically that's never going to happen. Likewise, total privacy on tech is simply never going to happen, so if its an issue your that worried about, then yeah, don't use the stuff.

Arguing that you don't care about privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say
That's Snowden, I know you did not say that you don't care about privacy but still applies to the "who gives a fuck about what you do". Namely, if you are searched for anything (even if you are not guilty) they look at every naked bit of your devices (at least here).

I understand what the Snowden quote is saying. I'm not saying not to care about your privacy. I'm a guy who literally doesn't use any social media except for this and like 4chan, I use all the common sense privacy stuff, VPN, this and that Google alternative and what have you. What I'm saying is that I don't get why people feel they are entitled to complete privacy in what is an inherently public space. If my neighbor sees me at the grocery store, I'm not going to be upset about it, because what does it matter if my neighbor knows that I, like everyone else, buy groceries? Now if I was going to go buy drugs, I would actively take precautions so that my neighbor doesn't know I buy drugs, for obvious reasons. The grocery store is a public place, you don't expect total anonymity and privacy in the grocery store, whoever is in there and sees you sees you. Like this, the internet is a public place, you don't own the infrastructure this shit is running on or through. While its a nice thing to have and you should take steps to protect yourself, I don't understand why people feel they should expect, or are even owed total anonimity online. You wouldn't shout out your name and address in the grocery store, but you are still present in it, there is a sign that you are there. This is how the internet is. You protect certain things about you, but never expect that there isn't any sign of you or your identity. This cycling back to my first point. If you your so worried about it, don't do it on technology or the internet. Your probably never going to be 100% able to hide it anyways.

 

[FacelessMan]

I've heard about using compartmentalization for privacy, so use different virtual machines for different activities. So maybe a regular normal VM for doing normal stuff, like accessing your email, doing work, contacting friends, playing game etc and having a normal digital footprint. The other for things you don't want linked to your real identity. I guess also using VPNs that don't require you to put a lot of personal information, or just use Tor instead (Tor on it's own is fine, you don't need VPN, and also Tor isn't 100% either, so don't put your trust in Tor completely). Also don't nullify your privacy and anonymity by switching on your VPN or Tor, and then login to your personal gmail, or personal whatsapp, this just nullifies your anonymity.

Also for reducing digital footprint, don't post too many photos on social media, don't put your real name when signing up. Also, lurking on website instead of actively engaging with users on the website, or writing comments reduces your fingerprint. There are ways to ID people simply by what they comment, via unique phrases, words, the length of words that you use etc. I don't really comment to much on forums (except for here of course).

Maybe also compartmentalize the emails that you use, to prevent linking of identities. I.e if you use an email for a sus website, then use that same email for you personal instagram, then if a data leak happens, people will instantly know you use and access such a website (Ok people may not bother to check, but maybe your employer when doing a background check. Use an email for specifically work related stuff only so you don't get rejected because of internet activities). So use different emails, or use the many temporary email services when signing up. There are also temporary phone number services you can use if you don't want to use your real phone number to sign up to something. Of course don't use these service for very sensitive things, or things that can be linked to your real identity, or you'll nullify whatever privacy effect the service gave you in the first place.

Probably the number one tip is, if your doing sus activity on the internet you don't want to be linked to you, don't access those sus sites using things linked to your real identity. I can't remember were, but there's a website somewhere that is essentially a huge compendium of the different steps you can take to be private and anonymous online, including when using crypto services. I'll see if I can find it (Also again don't put complete trust in such guides, do research and make sure you actually understand, and start implementing these practices so you don't forget)

EDIT:
I found the website that I was referencing above. The onion link to the website is referenced in the website itself, so you can visit it over Tor as well
I've also correctly some points that may not be clear

 

[Cobalt]

I've heard about using compartmentalization for privacy, so use different virtual machines for different activities. So maybe a regular normal VM for doing normal stuff, like accessing your email, doing work, contacting friends, playing game etc and having a normal digital footprint. The other for things you don't want linked to your real identity. I guess also using VPNs that don't require you to put a lot of personal information, or just use Tor instead (Tor on it's own is fine, you don't need VPN, and also Tor isn't 100% either, so don't put your trust in Tor completely). Also don't nullify your privacy and anonymity by switching on your VPN or Tor, and then login to your personal gmail, or personal whatsapp, this just nullifies your anonymity.

Also for reducing digital footprint, don't post too many photos on social media, don't put your real name when signing up. I don't really comment to much on forums (except for here of course).

Maybe also compartmentalize the emails that you use, to prevent linking of identities. I.e if you use an email for a sus website, then use that same email for you personal instagram, then if a data leak happens, people will instantly know you use and access such a website (Ok people may not bother to check, but maybe your employer when doing a background check. Use an email for specifically work related stuff only so you don't get rejected because of internet activities). So use different emails, or use the many temporary email services when signing up. There are also temporary phone number services you can use if you don't want to use your real phone number to sign up to something. Of course don't use these service for very sensitive things, or things that can be linked to your real identity, or you'll nullify whatever privacy effect the service gave you in the first place.

Probably the number one tip is, if your doing sus activity on the internet you don't want to be linked to you, don't access those sus sites using things linked to your real identity. I can't remember were, but there's a website somewhere that is essentially a huge compendium of the different steps you can take to be private and anonymous online, including when using crypto services. I'll see if I can find it (Also again don't put complete trust in such guides, do research and make sure you actually understand, and start implementing these practices so you don't forget)

For VPNs I'd recommend Mullvad or PIA (Private Internet Access) I like Mullvad because its based in Sweden and theres no accounts. Instead of email or phone number they just give you a random number when you install it. You can pay with crypto or write your random number on a slip of paper and mail it and cash to their office to pay for it. Also PIA is good because they have been proven in court to not keep logs and they've told the FBI to fuck off before which is based. VPNs in general aren't the silver bullet people think they are, but its worth it. Even if it doesn't protect you from feds or whatever it'll help keep you safe from a lot of third party tracking and such.

 

[morus]

(Tor on it's own is fine, you don't need VPN, and also Tor isn't 100% either, so don't put your trust in Tor completely)

Tor is pretty much 100% if you use hidden services (.onion), same for i2p. You just get to dodge metadata farming (tor browser does this for you) and leaks (eg. .onion site embeds clearnet content). So my tip would be to use these as much as possible.

 

[brokenrecord]

For VPNs I'd recommend Mullvad or PIA (Private Internet Access) I like Mullvad because its based in Sweden and theres no accounts. Instead of email or phone number they just give you a random number when you install it. You can pay with crypto or write your random number on a slip of paper and mail it and cash to their office to pay for it. Also PIA is good because they have been proven in court to not keep logs and they've told the FBI to fuck off before which is based. VPNs in general aren't the silver bullet people think they are, but its worth it. Even if it doesn't protect you from feds or whatever it'll help keep you safe from a lot of third party tracking and such.

PIA was bought by Kape Technologies around 4 years ago, I wouldn't trust them on their whole "no-logs" shtick. The same company operates PIA, ExpressVPN, CyberGhost VPN and ZenMate VPN. They also own a bunch of VPN review websites. I wonder if there's any conflict of interest there...

I personally don't use Mullvad because they don't let you port forward anymore, but it's a good provider.

 

[Karbalet]

I've heard about using compartmentalization for privacy, so use different virtual machines for different activities. So maybe a regular normal VM for doing normal stuff, like accessing your email, doing work, contacting friends, playing game etc and having a normal digital footprint.

Qubes OS does all this well. All of the windows are under one desktop environment. You can have firefox opened in the for-work virtual machine and your password manager open in the offline-data virtual machine, with the offline-data one being offline of course, meaning that your password manager never touches the internet. That makes it virtually impossible to break into from the outside. If you don't mind a little inconvenience I highly recommend it.

Maybe also compartmentalize the emails that you use, to prevent linking of identities. I.e if you use an email for a sus website, then use that same email for you personal instagram, then if a data leak happens, people will instantly know you use and access such a website (Ok people may not bother to check, but maybe your employer when doing a background check. Use an email for specifically work related stuff only so you don't get rejected because of internet activities). So use different emails, or use the many temporary email services when signing up. There are also temporary phone number services you can use if you don't want to use your real phone number to sign up to something. Of course don't use these service for very sensitive things, or things that can be linked to your real identity, or you'll nullify whatever privacy effect the service gave you in the first place.

Simple Login does this well too. You have several emails that all forward emails sent to them back to your main email. They're all under one account which makes it easy to manage. You can always make multiple account for multiple emails.

Ultimately though @Cobalt is right. The most private way of doing things is with no technology at all. Only use cash (amazon is shit anyways). If you have to buy things online, use monero. Don't use technology for communicating anything important to anyone (write letters if you have to). Don't own a phone (pocket tracking device). Live in the woods (no microphones). Make everything yourself (no serial numbers).

 

[FacelessMan]

Qubes OS does all this well. All of the windows are under one desktop environment. You can have firefox opened in the for-work virtual machine and your password manager open in the offline-data virtual machine, with the offline-data one being offline of course, meaning that your password manager never touches the internet. That makes it virtually impossible to break into from the outside. If you don't mind a little inconvenience I highly recommend it.

Simple Login does this well too. You have several emails that all forward emails sent to them back to your main email. They're all under one account which makes it easy to manage. You can always make multiple account for multiple emails.

Ultimately though @Cobalt is right. The most private way of doing things is with no technology at all. Only use cash (amazon is shit anyways). If you have to buy things online, use monero. Don't use technology for communicating anything important to anyone (write letters if you have to). Don't own a phone (pocket tracking device). Live in the woods (no microphones). Make everything yourself (no serial numbers).

I've heard about qubes os . I've seen people recommend qubes + whonix. I probably should have mentioned this. Also yes, no technology will keep you safe, but increasingly tech is everywhere. Even cars have computers now, and there is also a push towards vehicles becoming electric.

 

[eve]

Also yes, no technology will keep you safe, but increasingly tech is everywhere. Even cars have computers now, and there is also a push towards vehicles becoming electric.

it seems like nowadays most companies and ppl use technology for stuff just for the sake of it, instead of actually becuz its moar convenient or wahtever .... like theres no reason to have air conditioning in a car controlled by a huge tablet thing its just clunky and awful and blergh not 2 mention that its a privacy nitemare

https://foundation.mozilla.org/en/blog/privacy-nightmare-on-wheels-every-car-brand-reviewed-by-mozilla-including-ford-volkswagen-and-toyota-flunks-privacy-test/

 

[Some_porcupine]

fakeness: wtf happened in 2010s that people now support rich people/monopolies? (not all irl, but on interent, most of normies), like they ever care, provide something... they do, but we surely could do better (ok, id stop here and wait away my black parade 20-sec phase...)