Topic: anti-NSA - gotta like it (and stay up-to-date)

[devnullius]

FROM: http://www.newscientist.com/article/mg21829215.400?#commentForm

How to stop the NSA spying on your data

13 June 2013 by Hal Hodson
Magazine issue 2921. Subscribe and save
For similar stories, visit the US national issues Topic Guide
Revelations about government snooping show just how much they know about us. But there are ways to opt out

Editorial "Big brother needs a data privacy policy"

BIG BROTHER really is watching you. A series of revelations over the past week has revealed the extent of the US government's snooping. But there are ways that the average citizen can avoid the prying eyes of the state.

Last week, whistleblower Edward Snowden – a former contractor with the National Security Agency (NSA) – told UK newspaper The Guardian that the NSA not only has details of phone calls made by millions of Verizon customers, it also has some form of access to its citizens' internet activity as part of a programme named Prism.

The details of exactly how the NSA accesses personal data held by US internet companies are still unclear (see "Split the difference"). Access to Verizon's call metadata was obtained using a secret court order forcing the firm to hand over information including call duration, number and cellphone tower details.

But the main cause for concern is that network science today means governments can glean remarkable insights from the vast amount of data they compile about their citizens' every move. So what exactly can they find out about us – and how can we opt out?

Tanya Berger-Wolf at the University of Illinois in Chicago, who studies methods of extracting information from large data sets, says combining data from sources such as Google, Facebook and Verizon can tell you a lot. "You can put together a very good, composite dossier of a person," she says.

Phone calls alone can provide plentiful information. Yves-Alexandre de Montjoye of the Massachusetts Institute of Technology and colleagues analysed 1.5 million anonymised call records from a Western cell carrier. They showed that it takes just four calls or text messages, each made at a different time and place, to distinguish one person's movements from everyone else's (Nature Scientific Reports, doi.org/msd).

An experiment by German politician Malte Spitz shows what happens when you fuse such data with online activity. Spitz sued German telecoms giant Deutsche Telekom to get it to hand over six months of his own phone data. Then, working with German newspaper Die Zeit, Spitz melded that data with social network and other web information about him to create a map that tracked his movements and activities. It showed where Spitz was at any given time, what he was doing, how many calls he made and how long he was connected to the internet. The NSA's supercomputers would make light work of creating an even more detailed portrait of anyone it was interested in.

Chris Clifton, who works on data privacy at Purdue University in Indiana, says the NSA will be using software to sort the records into groups by similarity – people who make lots of calls, for example, or people who never call abroad. Patterns in time could be useful, too. If one call appears to spark a flurry of others, that might mean the first phone number belongs to an authority figure in a criminal organisation, for instance.

But for citizens who want to guard their privacy, there are a number of options. Apps like Silent Circle and RedPhone can already encrypt your calls and send them over a data connection or Wi-Fi instead of through your carrier's voice network. They also stop carriers from logging end phone numbers. Downloads have exploded since The Guardian's revelations – but such apps do not give you full anonymity because they cannot prevent your movements between phone masts being tracked.

A new standard for communication known as WebRTC (Web Real-Time Communication) could enable users to make calls over the internet without leaving any traces at all. That's because it doesn't rely on centralised servers but rather sends traffic directly between individual computers.

Combined with an encrypted connection using the anonymising Tor network, which sends data via volunteer networks of computers, WebRTC could keep your internet communications invisible to prying eyes.

An organisation called Tor Servers is aiming to bolster traffic speeds across Tor exit nodes – the points at which traffic from Tor enters the real internet. Its mission statement is to "make the Tor network more stable, faster and more anonymous for everyone".

There are even efforts afoot to build an entirely new internet, one free from control by large corporations and, by extension, governments. Project Meshnet aims to have its own router hardware, and for this to communicate without using the infrastructure of large telecoms companies. That is still some way off, but for now you can use the software version, called cjdns, which runs on existing infrastructure. Physical Meshnets are already up and running in Maryland, Seattle and New York.

And there are ways to protect people's privacy while still obtaining information. An MIT project called openPDS works by only allowing third parties to ask questions of a data set, without allowing them to get their hands on the raw data. This, combined with legal systems that notify individuals when their data has been searched, could change the privacy debate. "Such a 'mixed approach' to privacy is the way forward," de Montjoye says.

This article appeared in print under the headline "We know who you are"

Split the difference
The US National Security Agency's Prism program seems to be lifting personal data from the internet. How?

Internet giants including Google and Facebook strongly deny that the NSA has direct access to its servers. There is another way, however. A slide from an internal NSA Powerpoint presentation suggests the agency is siphoning directly from fibre-optic cables. To do this, it probably uses "splitters", which split the light beam.

Recent research by Andrew Clement at the University of Toronto, Canada, shows that 99 per cent of US internet traffic goes through one of just 18 cities. So if the NSA installed splitters at a few strategic points "it could intercept a large proportion of internet traffic", Clement says.


Karma

Devvie


~~~ notemail@facebook.com ~~~

Conare nullius momenti videri fortasse missilibus careant
——
All spelling mistakes are my own and may only be distributed under the GNU General Public License! – (© 95-1 by Coredump; 2-013 by DevNullius)

[Samker]

Interesting reading, well done D. 

[devnullius]

http://prism-break.org/

Opt out of PRISM, the NSA’s global data surveillance program.

Stop reporting your online activities to the American government with these free alternatives to proprietary software.

******************************************

Operating system

Apple OS X

Google Chrome OS

Microsoft Windows

OR →   

GNU/Linux
Free, open source operating system.

Debian
Popular ethical GNU/Linux distribution.

Fedora
Fast, stable, powerful GNU/Linux distribution.

Tails
Live CD/USB designed for privacy.

Trisquel
FSF endorsed, user-friendly GNU/Linux distribution.

*BSD
FreeBSD, OpenBSD, NetBSD, PC-BSD.

******************************************

Web browser

Apple Safari

Google Chrome

Microsoft Internet Explorer

OR →   

GNUzilla IceCat
GNU version of Firefox. add-torbutton

Mozilla Firefox


Open source web browser. add-torbutton recommends non-free addons

Tor Browser Bundle
Encrypted, anonymous browsing.
Web browser plugins

AND ALSO →   

HTTPS Everywhere
Encrypts your communications thousands of websites.

Fix Tracking!
Guide to stop getting tracked online.

Torbutton
Tor plugin for IceCat and Firefox. advanced

******************************************

Web search

Google Search

Microsoft Bing

Yahoo! Search

OR →   

DuckDuckGo
Anonymous, unlogged web searches. partly proprietary* usa-hosted

Seeks Project
Open decentralized platform for collaborative search.

Startpage
Private, unlogged web searches. proprietary*

YaCy
Decentralized web search.

******************************************

DNS provider

Google Public DNS

OR →   

OpenNIC Project
Total DNS neutrality.

Namecoin
Decentralized DNS based on Bitcoin technology.
Darknet

AND ALSO →   

Freenet
Decentralized censorship-resistant network.

I2P
The invisible internet project.

Nightweb
Anonymous I2P network for Android.

Syndie
Distributed, anonymous forum software.
Online transactions

******************************************

PayPal

Google Wallet

OR →   

Bitcoin
P2P digital currency with no central authority.

Alternative cryptocurrencies
List of alternative encrypted digital currencies.

******************************************

Email services

Gmail

Outlook

Yahoo! Mail

OR →   

Bitmessage
Encrypted, decentralized email server. beta

RiseUp
Secure and private email accounts. invite-only

******************************************

Email desktop clients

Apple Mail

Microsoft Outlook

Novell Groupwise

OR →   

Claws Mail
Lightweight email application with GPG support.

Evolution
Free email and calendar application with GPG support.

Icedove
Free version of Mozilla Thunderbird.

KMail
KDE email client with GPG support.

Mozilla Thunderbird
Open source email application. recommends non-free addons*
Email encryption

AND ALSO →   

Enigmail
An OpenPGP plugin for Thunderbird/Icedove.

GNU Privacy Guard - GPG
Free OpenPGP implementation.

Mailvelope
OpenPGP encryption for webmail.

WebPG
GnuPG/PGP in your browser.

******************************************

Maps

Apple Maps

Google Maps
OR →   

OpenStreetMap
Free, collaborative world wide map.

******************************************

Cloud storage

Apple iCloud

Dropbox

Google Drive

Microsoft SkyDrive

OR →   

git-annex assistant
Synchronizes folders on each of your computers & drives.

ownCloud
Cloud data in your control.

Sparkleshare
Self-hosted version control and file sync.

Tahoe-LAFS
Free and open cloud storage system.

******************************************

Social networking

Google+

Facebook

LinkedIn

Twitter

OR →   

Diaspora*
Community-run, distributed social network.

Friendica
Open source, free social web server.

GNU Social
Self-hosted, decentralized social network.

Lorea
Distributed and federated social nodes.

Movim
Private, decentralized social network server. xmpp/jabber

pump.io
Self-hosted social stream server.

Salut à Toi
Multi-frontend, multipurpose communication tool. xmpp/jabber

Tent
Free, autonomous social network protocol.

******************************************

Instant messaging

AOL Instant Messenger

Google Talk

OS X Messages

Yahoo! Messenger

OR →   

Cryptocat
Private, encrypted online conversations.

Off-the-Record Messaging - OTR
Install and enable in Pidgin for encrypted chat.

Pidgin
Open source chat program. xmpp/jabber otr

Adium
Pidgin for OS X (remember to enable OTR). xmpp/jabber

RetroShare
Free, secure, P2P communications platform.

******************************************

Video conferencing/VoIP

FaceTime

Google+ Hangouts

Google Talk

Skype

OR →   

Jitsi
Encrypted text and video chat. xmpp/jabber sip (Devnullius's choice, only last year!)

Linphone
Encrypted voice and video client. sip

Mumble
Encrypted, low-latency voice chat.

******************************************

Media publishing

Flickr

Instagram

Picasa

Tumblr

YouTube

OR →   

GNU MediaGoblin
Decentralized media publishing platform.

Piwigo
Free photo gallery platform.

WordPress
Free website/blog CMS.

Zenphoto
Free media website CMS.

******************************************

Document collaboration

Google Docs

OR →   

Ethercalc
Multi-user spreadsheet server.

Etherpad
Open source, real-time collaborative documents.

******************************************

Web analytics

Google Analytics

OR →   

Piwik
Open source, self-hosted web analytics.

******************************************

Android

Google Android

OR →   

CyanogenMod
Aftermarket firmware for Android devices. mostly free*

Replicant
Fully free Android distribution.

******************************************

Android App Store (EDIT: but first read Pez's articles...! :s)


Google Play

OR →   

F-Droid
Free and open source apps for Android.

******************************************

Android Apps

Google Chrome

WhatsApp Messenger

OR →   

CSIPSimple
Free, encrypted VoIP for Android.

Gibberbot
Private, secure OTR messaging for Android.

Orbot
Tor proxy for Android.

RedPhone
Secure private calls for Android. mostly free*

TextSecure
Secure SMS/MMS communication for Android. mostly free*

Xabber
OTR-encrypted instant messaging for Android. xmpp/jabber

******************************************
Apple iOS
- iOS is insecure
- iOS devices contain hardware tracking.
******************************************

iOS Apps

Apple iOS Messages

Apple Mobile Safari

WhatsApp Messenger

OR →   

ChatSecure
Encrypted IM for iOS.

Onion Browser
Secure browsing for iOS.


******************************************
Updated 2013-06-16 by @zcpeng Contribute on GitHub

Donate bitcoin: 1NAfx5GEZHR8t69LjxTeShPP4XXaxeUqQw

A Nylira project
******************************************


KARMA!!

devnullius

[devnullius]

SEE http://prism-break.org/ FOR ACTUAL LINKS, search for:

"Mentioned by the media"

Catalan

“Alternatives per a esquivar el programa nord-americà d'espionatge global” VilaWeb. 2013-06-12.


Dutch

Pruyn, Rowald. “Website wijst hoe je van spionage PRISM afkomt.” ZDNet.be. 2013-06-11.
Pruyn, Rowald. “Website biedt alternatieven om PRISM-spionage te voorkomen.” PCM. 2013-06-10.
“Ontwerper zet 'NSA-vrije' software op een rij.” Trouw. 2013-06-12.


English

/r/technology “How to opt out of PRISM, the NSA’s global data surveillance program.” Reddit. 2013-06-10.
Bilton, Ricardo. “PRISM fears give private search engine DuckDuckGo its best week ever.” VentureBeat. 2013-06-13.
Daws, Ryan. “Looking to hide online? PRISM-break shows you how.” Telecoms Tech. 2013-06-14.
Keiser, Max. “Site of the day: prism-break.org.” Max Keiser Financial War Reports. 2013-06-11.
Neagle, Colin. “How to opt out of PRISM, the NSA’s spying program.” Network World. 2013-06-10.
Phipps, Simon. “How to break out of PRISM.” InfoWorld. 2013-06-14.
Walton, Zach. “Don’t Trust Tech Companies With Your Data? Use These Alternatives .” WebProNews 2013-06-10.
Wheatley, Mike “How To Get Out Of PRISM and Avoid NSA Spying” SiliconANGLE. 2013-06-12


French

Duvauchelle, Antoine “PRISM : la fronde s'organise en Europe et aux Etats-Unis” ZDNet.fr. 2013-06-12.
Big Browser. “PRISM — Comment passer entre les mailles de la surveillance d’Internet ?” Le Monde. 2013-06-11.
L., Julien. “PRISM : des logiciels et services alternatifs pour limiter la surveillance.” Numerama. 2013-06-11.
Legrand, David. “ Cryptocat chiffre vos transferts, l'EFF recommande ses outils alternatifs” PC INpact. 2013-06-11.
Pelletier, Nicolas. “Surveillance : comment contourner le programme Prism.” Rue89. 2013-06-11.
“PRISM – Comment passer entre les mailles de la surveillance d’Internet ?” WikiStrike. 2013-06-11.


German

Fennen, Nicolas. “PRISM-Break: Mit dieser Software der NSA-Spionage entgehen.” Netzpolitik.org. 2013-06-11.
red. “Prism-Break: So surfen sie an der NSA vorbei.” Meedia. 2013-06-12.
Schischka, Benjamin. “Diese Programme sperren Lauscher vom US-Geheimdienst aus.” PC-WELT. 2013-06-12.
“Wie bewege ich mich sicher im Netz?.” Aktuelle Stunde. 2013-06-14.


Polish

altruista. “Nie daj się szpiegować - PRISM BREAK.” strims.pl. 2013-06-12.
fabek. “Nie daj się szpiegować - PRISM BREAK.” Wykop.pl. 2013-06-11.


Spanish

Mu. “De PRISM también se sale.” Barrapunto. 2013-06-12.
Novoa, Jaime “Mozilla, Reddit y EFF lanzan Stopwatching.Us, una campaña en contra de PRISM.” Genbeta. 2013-06-12.


Updated 2013-06-16 by @zcpeng Contribute on GitHub
Donate bitcoin: 1NAfx5GEZHR8t69LjxTeShPP4XXaxeUqQw
A Nylira project

KARMA!!

devnullius

[bartblaze]

Great post devnullius, useful website indeed. Thanks!

[devnullius]

Welcome :) I actually switched to startpage.com as default search engine. After almost 15 years of googling... Surprisingly easy transfer ;p

Karma!

devnullius