Professional Documents
Culture Documents
Glenn Greenwald: Why privacy matters Over the last 16 months, as I've debated th
is issue around the world, every single time somebody has said to me, "I don't r
eally worry about invasions of privacy because I don't have anything to hide." I
always say the same thing to them. I get out a pen, I write down my email addre
ss. I say, "Here's my email address. What I want you to do when you get home is
email me the passwords to all of your email accounts, not just the nice, respect
able work one in your name, but all of them, because I want to be able to just t
roll through what it is you're doing online, read what I want to read and publis
h whatever I find interesting. After all, if you're not a bad person, if you're
doing nothing wrong, you should have nothing to hide." Not a single person has t
aken me up on that offer.
Glenn Greenwald in Why privacy matters - TED Talk
Related: How do you counter the "I have nothing to hide?" argument?
Global Mass Surveillance - The Fourteen Eyes
UKUSA Agreement
The UKUSA Agreement is an agreement between the United Kingdom, United States, A
ustralia, Canada, and New Zealand to cooperatively collect, analyze, and share i
ntelligence. Members of this group, known as the Five Eyes, focus on gathering a
nd analyzing intelligence from different parts of the world. While Five Eyes cou
ntries have agreed to not spy on each other as adversaries, leaks by Snowden hav
e revealed that some Five Eyes members monitor each others citizens and share int
elligence to avoid breaking domestic laws that prohibit them from spying on thei
r own citizens. The Five Eyes alliance also cooperates with groups of third part
y countries to share intelligence (forming the Nine Eyes and Fourteen Eyes), how
ever Five Eyes and third party countries can and do spy on each other.
Five Eyes
1. Australia
2. Canada
3. New Zealand
4. United Kingdom
5. United States of America
Nine Eyes
6. Denmark
7. France
8. Netherlands
9. Norway
Fourteen Eyes
10. Belgium
11. Germany
12. Italy
13. Spain
14. Sweden
Why is it not recommended to choose a US based service?
USA
Services based in the United States are not recommended because of the countrys s
urveillance programs, use of National Security Letters (NSLs) and accompanying g
ag orders, which forbid the recipient from talking about the request. This combi
nation allows the government to secretly force companies to grant complete acces
s to customer data and transform the service into a tool of mass surveillance.
An example of this is Lavabit a discontinued secure email service created by Lad
ar Levison. The FBI requested Snowdens records after finding out that he used the
service. Since Lavabit did not keep logs and email content was stored encrypted
, the FBI served a subpoena (with a gag order) for the services SSL keys. Having
the SSL keys would allow them to access communications (both metadata and unencr
ypted content) in real time for all of Lavabits customers, not just Snowden s.
Ultimately, Levison turned over the SSL keys and shut down the service at the sa
me time. The US government then threatened Levison with arrest, saying that shut
ting down the service was a violation of the court order.
Key disclosure law - Who is required to hand over the encryption keys to authori
ties?
Mandatory key disclosure laws require individuals to turn over encryption keys t
o law enforcement conducting a criminal investigation. How these laws are implem
ented (who may be legally compelled to assist) vary from nation to nation, but a
warrant is generally required. Defenses against key disclosure laws include ste
ganography and encrypting data in a way that provides plausible deniability.
Steganography involves hiding sensitive information (which may be encrypted) ins
ide of ordinary data (for example, encrypting an image file and then hiding it i
n an audio file). With plausible deniability, data is encrypted in a way that pr
events an adversary from being able to prove that the information they are after
exists (for example, one password may decrypt benign data and another password,
used on the same file, could decrypt sensitive data).
Related Information
Avoid all US and UK based services
Proof that warrant canaries work based on the surespot example.
http://en.wikipedia.org/wiki/UKUSA_Agreement
http://en.wikipedia.org/wiki/Lavabit#Suspension_and_gag_order
https://en.wikipedia.org/wiki/Key_disclosure_law
http://en.wikipedia.org/wiki/Portal:Mass_surveillance
VPN providers with extra layers of privacy
All providers listed here are outside the US, use encryption, accept Bitcoin, su
pport OpenVPN and have a no logging policy.
Sortable VPN Providers Table
Yearly Price
Free Trial
# Servers
Jurisdiction
Website
54
Yes
162
Italy AirVPN.org
45
No
5
Sweden AzireVPN.com
99
No
27
Hong Kong
blackVPN.com
$ 52
Yes
18
Iceland
Cryptostorm.is
$ 33
No
6
Seychelles
Doublehop.me
39,99 No
432
Northern Cyprus
EarthVPN.com
$ 36
No
27
Sweden FrootVPN.com
$ 65
Yes
88
Malaysia
hide.me
$ 100 Yes
21
Gibraltar
IVPN.net
60
Yes
23
Sweden Mullvad.net
$ 48
Yes
475
Panama NordVPN.com
84
Yes
24
Sweden oVPN.se
150 No
41
Panama Perfect-Privacy.com
$ 90
No
300
Seychelles
Proxy.sh
$ 35.88 Yes
48
Seychelles
Trust.Zone
$ 39.99 No
122
Hong Kong
VPN.ht
35,88 No
80
Sweden VPNTunnel.com
Note: Using a VPN provider will not make you anonymous. But it will give you a b
etter privacy. A VPN is not a tool for illegal activities. Don t rely on a "no l
og" policy.
Our VPN Provider Criteria
Operating outside the USA or other Five Eyes countries.
More: Avoid all US and UK based services.
OpenVPN software support.
Accepts Bitcoin, cash, debit cards or cash cards as a payment method.
No personal information is required to create an account. Only username, passwor
d and Email.
We re not affiliated with any of the above listed VPN providers. This way can gi
ve you honest recommendations.
More VPN Provider
Spreadsheet with unbiased, independently verifiable data on over 100 VPN service
s. (Join the discussion on Reddit)
Related VPN information
Which VPN Services Take Your Anonymity Seriously? 2016
(Note: The providers listed first in the TorrentFreaks article are sponsored)
How To Make VPNs Even More Secure
VPN, privacy and anonymity - SpiderOak
Beware of False Reviews - VPN Marketing and Affiliate Programs
I am Anonymous When I Use a VPN - 7 Myths Debunked
(Note: While this is a good read, they also use the article for self promotion)
Proxy.sh VPN Provider Sniffed Server Traffic to Catch Hacker
Ethical policy - All of the reasons why Proxy.sh might enable logging
IVPN.net will collect your email and IP address after sign up
Read the Email statement from IVPN.
blackVPN announced to delete connection logs after disconnection
What is a warrant canary?
Warrant Canary Example
A warrant canary is a posted document stating that an organization has not recei
ved any secret subpoenas during a specific period of time. If this document fail
s to be updated during the specified time then the user is to assume that the se
rvice has received such a subpoena and should stop using the service.
Warrant Canary Examples:
https://proxy.sh/canary
https://www.ivpn.net/resources/canary.txt
https://www.vpnsecure.me/files/canary.txt
https://www.bolehvpn.net/canary.html
https://lokun.is/canary.txt
https://www.ipredator.se/static/downloads/canary.txt
Related Warrant Canary Information
Warrant Canary Frequently Asked Questions
Companies and organizations with warrant canaries
Browser Recommendation
Mozilla Firefox
Firefox is fast, reliable, open source and respects your privacy. Don t forget t
o adjust the settings according to our recommendations: WebRTC and about:confi
g and get the privacy add-ons.
Download: www.firefox.com
OS: Windows, Mac, Linux, Android, BSD.
Tor
Tor
ied
and
Browser Bundle
Browser is your choice if you need an extra layer of anonymity. It s a modif
version of Firefox, it comes with pre-installed privacy add-ons, encryption
an advanced proxy.
Download: www.torproject.org
OS: Windows, Mac, Linux, iOS, Android, OpenBSD.
Browser Fingerprint - Is your browser configuration unique?
Your Browser sends information that makes you unique amongst millions of users a
nd therefore easy to identify.
Fingerprint image
When you visit a web page, your browser voluntarily sends information about its
configuration, such as available fonts, browser type, and add-ons. If this combi
nation of information is unique, it may be possible to identify and track you wi
thout using cookies. EFF created a Tool called Panopticlick to test your browser
to see how unique it is.
Test your Browser now
You need to find what most browsers are reporting, and then use those variables
to bring your browser in the same population. This means having the same fonts,
plugins, and extensions installed as the large installed base. You should have a
spoofed user agent string to match what the large userbase has. You need have t
he same settings enabled and disabled, such as DNT and WebGL. You need your brow
ser to look as common as everyone else. Disabling JavaScript, using Linux, or ev
en the TBB, will make your browser stick out from the masses.
Modern web browsers have not been architected to assure personal web privacy. Ra
ther than worrying about being fingerprinted, it seems more practical to use fr
ee software plugins like Privacy Badger, uBlock Origin and Disconnect. They not
only respect your freedom, but your privacy also. You can get much further with
these than trying to manipulate your browser s fingerprint.
Related Information
How Unique Is Your Web Browser? Peter Eckersley, EFF.
Join our discussion on reddit.com about browser fingerprinting.
Our Firefox privacy add-ons section.
BrowserLeaks.com - Web browser security testing tools, that tell you what exactl
y personal identity data may be leaked without any permissions when you surf the
Internet.
WebRTC IP Leak Test - Is your IP address leaking?
WebRTC is a new communication protocol that relies on JavaScript that can leak y
our actual IP address from behind your VPN.
While software like NoScript prevents this, it s probably a good idea to block t
his protocol directly as well, just to be safe.
Test your Browser now
How to disable WebRTC in Firefox?
In short: Set "media.peerconnection.enabled" to "false" in "about:config".
Explained:
Enter "about:config" in the firefox address bar and press enter.
Press the button "I ll be careful, I promise!"
Search for "media.peerconnection.enabled"
Double click the entry, the column "Value" should now be "false"
Done. Do the WebRTC leak test again.
If you want to make sure every single WebRTC related setting is really disabled
change these settings:
media.peerconnection.turn.disable = true
media.peerconnection.use_document_iceservers = false
media.peerconnection.video.enabled = false
media.peerconnection.identity.timeout = 1
Now you can be 100% sure WebRTC is disabled.
Test your Browser again
webgl.disabled = true
WebGL is a potential security risk. Source
dom.battery.enabled = false
Website owners can track the battery status of your device. Source
browser.sessionstore.max_tabs_undo = 0
Even with Firefox set to not remember history, your closed tabs are stored tempo
rarily at Menu -> History -> Recently Closed Tabs.
Related Information
ffprofile.com - Helps you to create a Firefox profile with the defaults you like
.
mozillazine.org - Security and privacy-related preferences.
user.js Firefox hardening stuff - This is a user.js configuration file for Mozil
la Firefox that s supposed to harden Firefox s settings and make it more secure.
Privacy Settings - A Firefox addon to alter built-in privacy settings easily wit
h a toolbar panel.
Privacy-Conscious Email Providers - No Affiliates
All providers listed here are operating outside the US and support SMTP TLS. The
table is sortable. Never trust any company with your privacy, always encrypt.
Email Service
Own Domain
Since
Bitcoin Encryption
OpenMailBox.org 2013
No
France 1 GB
Free
Accepted
ProtonMail.ch
Yes
2013
Switzerland
500 MB Free
Accepted
Tutanota.com
Yes
2011
Germany
1 GB
No
Mailfence.com
Yes
2013
Belgium
200 MB Free
Accepted
Built-in
mailbox.org
Yes
2014
Germany
2 GB
12
Accepted
Built-in
Posteo.de
No
2009
Germany
2 GB
12
No
Built-in
Runbox.com
1999
Norway 1 GB
$ 19.95 No
No
Yes
Neomailbox.com 2003
Yes
Switzerland
1 GB
CounterMail.com 2010
Yes
Sweden 500 MB $ 59
Accepted
Built-in
StartMail.com
No
2014
Netherlands
10 GB
$ 59.95 No
Built-in
KolabNow.com
Yes
2010
Switzerland
2 GB
$ 60
Free
Built-in
Built-in
Built-in
$ 49.95 Accepted
Built-in
Accepted
No
CryptoHeaven.com
2001
Canada 200 MB $ 66
No
Built-in
Yes
Interesting Email Providers Under Development
Confidant Mail - An open-source non-SMTP cryptographic email system optimized fo
r large file attachments. It is a secure and spam-resistant alternative to regul
ar email and online file drop services. It uses GNU Privacy Guard (GPG) for cont
ent encryption and authentication, and TLS 1.2 with ephemeral keys for transport
encryption.
Become Your Own Email Provider with Mail-in-a-Box
Mail-in-a-Box
Take it a step further and get control of your email with this easy-to-deploy ma
il server in a box. Mail-in-a-Box lets you become your own mail service provider
in a few easy steps. Its sort of like making your own gmail, but one you control
from top to bottom. Technically, Mail-in-a-Box turns a fresh cloud computer int
o a working mail server. But you dont need to be a technology expert to set it up
. More: https://mailinabox.email/
Privacy Email Tools
gpg4usb - A very easy to use and small portable editor to encrypt and decrypt an
y text-message or -file. For Windows and Linux.
Mailvelope - A browser extension that enables the exchange of encrypted emails f
ollowing the OpenPGP encryption standard.
Enigmail - A security extension to Thunderbird and Seamonkey. It enables you to
write and receive email messages signed and/or encrypted with the OpenPGP standa
rd.
TorBirdy - This extension configures Thunderbird to make connections over the To
r anonymity network.
Email Privacy Tester - This tool will send an Email to your address and perform
privacy related tests.
Related Information
Aging Privacy Law Leaves Cloud E-Mail Open to Cops - Data stored in the cloud for
longer than 6 months is considered abandoned and may be accessed by intelligence
agencies without a warrant. Learning: Use an external email client like Thunder
bird or Enigmail, download your emails and store them locally. Never leave them
on the server.
OpenMailBox keeps one year logs of meta-data - Forum discussion, reply of the se
rver admin.
With May First/Riseup Server Seizure, FBI Overreaches Yet Again
Autistici/Inventati server compromised - The cryptographic services offered by t
he Autistici/Inventati server have been compromised on 15th June 2004. It was di
scovered on 21st June 2005. One year later. During an enquiry on a single mailbo
x, the Postal Police may have tapped for a whole year every user s private commu
nication going through the server autistici.org/inventati.org.
Email Clients
Thunderbird
ThunderbirdMozilla Thunderbird is a free, open source, cross-platform email, new
s, and chat client developed by the Mozilla Foundation. Thunderbird is an email,
newsgroup, news feed, and chat (XMPP, IRC, Twitter) client.
Website: mozilla.org
OS: Windows, Mac, Linux, BSD.
Claws Mail
Claws MailClaws Mail is a free and open source, GTK+-based email and news client
. It offers easy configuration and an abundance of features. It is included with
Gpg4win, an encryption suite for Windows.
Website: claws-mail.org
OS: Windows, Mac, Linux, BSD, Solaris, Unix.
Worth Mentioning
K-9 Mail - An independent mail application for Android. It supports both POP3 an
d IMAP mailboxes, but only supports push mail for IMAP.
GNU Privacy Guard - Email Encryption. GnuPG is a GPL Licensed alternative to the
Google search link fix - Firefox extension that prevents Google, Yahoo and Yande
x search pages from modifying search result links when you click them. This is u
seful when copying links but it also helps privacy by preventing the search engi
nes from recording your clicks. (Open Source)
Encrypted Instant Messenger
If you are currently using an Instant Messenger like WhatsApp, Viber, LINE or Th
reema you should pick an alternative here.
Mobile: Signal
Open Whisper SystemsSignal is a mobile app developed by Open Whisper Systems. Th
e app provides end-to-end encrypted instant messaging. Signal is free and open s
ource, enabling anyone to verify its security by auditing the code. Encrypted gr
oup chats are also supported. The development team is supported by community don
ations and grants. There are no advertisements, and it doesn t cost anything to
use.
Android: google.com iOS: apple.com
OS: Android, iOS.
Desktop: Ricochet
Ricochet uses the Tor network to reach your contacts without relying on messagi
ng servers. It creates a hidden service, which is used to rendezvous with your c
ontacts without revealing your location or IP address. Instead of a username, yo
u get a unique address that looks like ricochet:rs7ce36jsj24ogfw. Other Ricochet
users can use this address to send a contact request - asking to be added to yo
ur contacts list.
Download: www.ricochet.im
OS: Windows, Mac, Linux.
Off-the-Record: ChatSecure
ChatSecure is a free and open source messaging app that features OTR encryption
over XMPP. You can connect to your existing account on Google, create new accoun
ts on public XMPP servers (including via Tor), or even connect to your own serve
r for extra security. ChatSecure only uses well-known open source cryptographic
libraries to keep your conversations private.
Download: www.chatsecure.org
OS: iOS, Android, other OTR Clients.
Worth Mentioning
Cryptocat - Encrypted open source messenger. Supports file sharing and multiple
devices. Available for Windows, Linux and Mac.
Kontalk - A community-driven instant messaging network. Supports end-to-end encr
yption. Both client-to-server and server-to-server channels are fully encrypted.
Conversations - An open source Jabber/XMPP client for Android 4.0+ smart phones.
Supports end-to-end encryption with either OTR or openPGP.
Related Information
Ricochet, the Messenger That Beats Metadata, Passes Security Audit | Motherboard
Secure Messaging Scorecard | Electronic Frontier Foundation
Which apps and tools actually keep your messages safe?
Chatting in Secret While We re All Being Watched - firstlook.org
Encrypted Video & Voice Messenger
If you are currently using an Video & Voice Messenger like Skype, Viber or Googl
e Hangouts you should pick an alternative here.
Signal for Mobile
Open Whisper SystemsSignal is a mobile app developed by Open Whisper Systems. Th
e app provides end-to-end encryption for your calls. Signal is free and open sou
Website: leastauthority.com
OS: Linux, Windows, Mac, OpenSolaris, BSD. (Installation for advanced users)
Related Information
Cryptomator - Free client-side AES encryption for your cloud files. Open source
software: No backdoors, no registration.
reddit.com - Should SpiderOak be avoided? Read the discussion in our subreddit.
Self-Hosted Cloud Server Software
If you are currently using a Cloud Storage Services like Dropbox, Google Drive,
Microsoft OneDrive or Apple iCloud you should think about hosting it on your own
.
Seafile
SeafileSeafile is a file hosting software system. Files are stored on a central
server and can by synchronized with personal computers and mobile devices via th
e Seafile client. Files can also be accessed via the server s web interface.
Website: seafile.com
Client OS: Windows, Mac, Linux, iOS, Android. Server: Linux, Raspberry Pi, Windo
ws.
Pydio
PydioPydio is open source software that turns instantly any server (on premise,
NAS, cloud IaaS or PaaS) into a file sharing platform for your company. It is an
alternative to SaaS Boxes and Drives, with more control, safety and privacy, an
d favorable TCOs.
Website: pyd.io
OS: Windows, Mac, Linux, iOS, Android.
Tahoe-LAFS
Tahoe-LAFSTahoe-LAFS is a Free and Open decentralized cloud storage system. It d
istributes your data across multiple servers. Even if some of the servers fail o
r are taken over by an attacker, the entire file store continues to function cor
rectly, preserving your privacy and security.
Website: tahoe-lafs.org
OS: Windows, Mac, Linux.
Worth Mentioning
ownCloud - Free and open-source, allows anyone to install and operate it for fre
e on a private server, with no limits on storage space or the number of connecte
d clients.
Secure File Sync Software
SparkleShare
SparkleShareSparkleShare creates a special folder on your computer. You can add
remotely hosted folders (or "projects") to this folder. These projects will be a
utomatically kept in sync with both the host and all of your peers when someone
adds, removes or edits a file.
Website: sparkleshare.org
OS: Windows, Mac, Linux.
Syncany
SyncanySyncany allows users to backup and share certain folders of their worksta
tions using any kind of storage. Syncany is open-source and provides data encryp
tion and incredible flexibility in terms of storage type and provider. Files are
encrypted before uploading.
Website: syncany.org
OS: Windows, Mac, Linux.
Syncthing
SyncthingSyncthing replaces proprietary sync and cloud services with something o
pen, trustworthy and decentralized. Your data is your data alone and you deserve
to choose where it is stored, if it is shared with some third party and how it
s transmitted over the Internet.
Website: syncthing.net
OS: Windows, Mac, Linux, Android, BSD, Solaris.
Worth Mentioning
git-annex - Allows managing files with git, without checking the file contents i
nto git. While that may seem paradoxical, it is useful when dealing with files l
arger than git can currently easily handle, whether due to limitations in memory
, time, or disk space.
Password Manager Software
If you are currently using a password manager software like 1Password, LastPass,
Roboform or iCloud Keychain you should pick an alternative here.
Master Password - Cross-platform
Master PasswordMaster Password is based on an ingenious password generation algo
rithm that guarantees your passwords can never be lost. Its passwords aren t sto
red: they are generated on-demand from your name, the site and your master passw
ord. No syncing, backups or internet access needed.
Website: masterpasswordapp.com
OS: Windows, Mac, Linux, iOS, Android, Web.
KeePass / KeePassX - Local
KeePassKeePass is a free open source password manager, which helps you to manage
your passwords in a secure way. All passwords in one database, which is locked
with one master key or a key file. The databases are encrypted using the best an
d most secure encryption algorithms currently known: AES and Twofish. See also:
KeePassX.
Website: keepass.info
OS: Windows, Mac, Linux, iOS, Android, BSD.
Encryptr - Cloud Based
EncryptrEncryptr is simple and easy to use. It stores your sensitive data like p
asswords, credit card data, PINs, or access codes, in the cloud. However, becaus
e it was built on the zero knowledge Crypton framework, Encryptr ensures that on
ly the user has the ability to access or read the confidential information.
Website: spideroak.com
OS: Windows, Mac, Linux, Android.
Worth Mentioning
Secure Password Generator - generates a unique set of custom, high quality, cryp
tographic-strength password strings which are safe for you to use.
SuperGenPass - A master password and the domain name of the Web site you are vis
iting is used as the seed for a one-way hash algorithm (base-64 MD5). The output o
f this algorithm is your generated password. You remember one password (your mast
er password), and SGP uses it to generate unique, complex passwords for the Web s
ites you visit. Your generated passwords are never stored or transmitted, so you
can use SGP on as many computers as you like without having to sync anything.
Password Safe - Whether the answer is one or hundreds, Password Safe allows you
to safely and easily create a secured and encrypted user name/password list. Wit
h Password Safe all you have to do is create and remember a single "Master Passw
ord" of your choice in order to unlock and access your entire user name/password
list.
Related Information
Edward Snowden on Passwords - YouTube
File Encryption Software
If you are currently not using encryption software for your hard disk, emails or
file archives you should pick an encryption software here.
VeraCrypt - Disk Encryption
VeraCryptVeraCrypt is a source-available freeware utility used for on-the-fly en
cryption. It can create a virtual encrypted disk within a file or encrypt a part
ition or the entire storage device with pre-boot authentication. VeraCrypt is a
fork of the discontinued TrueCrypt project. It was initially released on June 22
, 2013. According to its developers, security improvements have been implemented
and issues raised by the initial TrueCrypt code audit have been addressed.
Website: veracrypt.codeplex.com
OS: Windows, Mac, Linux.
GNU Privacy Guard - Email Encryption
GnuPGGnuPG is a GPL Licensed alternative to the PGP suite of cryptographic softw
are. GnuPG is compliant with RFC 4880, which is the current IETF standards track
specification of OpenPGP. Current versions of PGP (and Veridis Filecrypt) are
interoperable with GnuPG and other OpenPGP-compliant systems. GnuPG is a part of
the Free Software Foundation s GNU software project, and has received major fun
ding from the German government. GPGTools for Mac OS X.
Website: gnupg.org
OS: Windows, Mac, Linux, Android, BSD.
PeaZip - File Archive Encryption
PeaZipPeaZip is a free and open-source file manager and file archiver made by Gi
orgio Tani. It supports its native PEA archive format (featuring compression, mu
lti volume split and flexible authenticated encryption and integrity check schem
es) and other mainstream formats, with special focus on handling open formats. I
t supports 181 file extensions (as of version 5.5.1).
Mac alternative: Keka is a free file archiver.
Website: peazip.org
OS: Windows, Linux, BSD.
Worth Mentioning
Cryptomator - Free client-side AES encryption for your cloud files. Open source
software: No backdoors, no registration.
miniLock - Browser plugin for Google Chrome / Chromium to encrypt files using a
secret passphrase. Easy to use. From the developer of Cryptocat.
AES Crypt - Using a powerful 256-bit encryption algorithm, AES Crypt can safely
secure your most sensitive files. For Windows, Mac, Linux and Android.
DiskCryptor - A full disk and partition encryption system for Windows including
the ability to encrypt the partition and disk on which the OS is installed.
Self-contained Networks
If you are currently browsing the Clearnet and you want to access the Dark web t
his section is for you.
I2P Anonymous Network
I2PThe Invisible Internet Project (I2P) is a computer network layer that allows
applications to send messages to each other pseudonymously and securely. Uses in
clude anonymous Web surfing, chatting, blogging and file transfers. The software
that implements this layer is called an I2P router and a computer running I2P i
s called an I2P node. The software is free and open source and is published unde
r multiple licenses.
Website: geti2p.net
OS: Windows, Mac, Linux, Android, F-Droid.
GNUnet Framework
GNUnetGNUnet is a free software framework for decentralized, peer-to-peer networ
king and an official GNU package. The framework offers link encryption, peer dis
covery, resource allocation, communication over many transports (such as tcp, ud
p, http, https, wlan and bluetooth) and various basic peer-to-peer algorithms fo
r routing, multicast and network size estimation.
Website: gnunet.org
OS: GNU/Linux, FreeBSD, NetBSD, OpenBSD, Mac, Windows.
The Freenet Project
FreenetFreenet is a peer-to-peer platform for censorship-resistant communication
. It uses a decentralized distributed data store to keep and deliver information
, and has a suite of free software for publishing and communicating on the Web w
ithout fear of censorship. Both Freenet and some of its associated tools were or
iginally designed by Ian Clarke, who defined Freenet s goal as providing freedom
of speech on the Internet with strong anonymity protection.
Website: freenetproject.org
OS: Windows, Mac, Linux.
Worth Mentioning
Tor Project - Provides anonymity to websites and other servers. Servers configur
ed to receive connections only through Tor are called hidden services.
RetroShare - Open Source cross-platform, Friend-2-Friend and secure decentralise
d communication platform.
Decentralized Social Networks
If you are currently using Social Networks like Facebook, Twitter or Google+ you
should pick an alternative here.
diaspora*
diaspora* diaspora* is based on three key philosophies: Decentralization, freedo
m and privacy. It is intended to address privacy concerns related to centralized
social networks by allowing users set up their own server (or "pod") to host co
ntent; pods can then interact to share status updates, photographs, and other so
cial data.
Website: diasporafoundation.org
Friendica
FriendicaFriendica has an emphasis on extensive privacy settings and easy server
installation. It aims to federate with as many other social networks as possibl
e. Currently, Friendica users can integrate contacts from Facebook, Twitter, Dia
spora, GNU social, App.net, Pump.io and other services in their social streams.
Website: friendica.com
GNU social
GNU socialWhile offering functionality similar to Twitter, GNU social seeks to p
rovide the potential for open, inter-service and distributed communications betw
een microblogging communities. Enterprises and individuals can install and contr
ol their own services and data. Notable public deployments are quitter.se and gn
usocial.no.
Website: gnu.io
Worth Mentioning
Libertree - A free, libre, open-source software which is intended to provide a w
ay for people to create their own social network. Currently in an invitational a
lpha phase.
Related Information
Delete your Facebook account - Direct link to delete your Facebook account witho
ut being able to reactivate it again.
How To Permanently Delete A Facebook Account - This guide will take you through
a smooth and successful Facebook account deletion.
Domain Name System (DNS)
CloudNS - Service
An australian based security focused DNS provider. Features: DNSCrypt Support to
provide confidentially and message integrity, complete trust validation of DNSS
EC enabled names, namecoin resolution of .bit domain names and no domain manipul
ation or logging.
Website: cloudns.com.au
OS: Cross-platform.
DNSCrypt - Tool
DNSCryptA protocol for securing communications between a client and a DNS resolv
er. The DNSCrypt protocol uses high-speed high-security elliptic-curve cryptogra
phy and is very similar to DNSCurve, but focuses on securing communications betw
een a client and its first-level resolver.
Website: dnscrypt.org
OS: Windows, Mac, Linux, iOS with Jailbreak.
OpenNIC - Service
OpenNICOpenNIC is an alternate network information center/alternative DNS root w
hich lists itself as an alternative to ICANN and its registries. Like all altern
ative root DNS systems, OpenNIC-hosted domains are unreachable to the vast major
ity of the Internet. Only specific configuration in one s DNS resolver makes the
se reachable, and very few Internet service providers have this configuration.
Website: opennicproject.org
OS: Cross-platform.
Worth Mentioning
NoTrack - A network-wide DNS server which blocks Tracking sites. Currently works
in Debian and Ubuntu.
Namecoin - A decentralized DNS open source information registration and transfer
system based on the Bitcoin cryptocurrency.
Productivity Tools
Etherpad
EtherpadEtherpad is a highly customizable Open Source online editor providing co
llaborative editing in really real-time. Etherpad allows you to edit documents c
ollaboratively in real-time, much like a live multi-player editor that runs in y
our browser. Write articles, press releases, to-do lists, etc.
Website: etherpad.org
OS: Windows, Mac, Linux.
EtherCalc
EtherCalcEtherCalc is a web spreadsheet. Data is saved on the web, and people ca
n edit the same document at the same time. Changes are instantly reflected on al
l screens. Work together on inventories, survey forms, list management, brainsto
rming sessions..
Website: ethercalc.net
OS: Windows, Mac, GNU/Linux, FreeBSD, Browser.
ProtectedText
ProtectedTextProtectedText is an open source web application. It encrypts and de
crypts text in the browser, and password (or it s hash) is never sent to the ser
ver - so that text can t be decrypted even if requested by authorities. No cooki
es, no sessions, no registration, no users tracking.
Website: protectedtext.com
OS: All Browsers.
Worth Mentioning
dudle - An online scheduling application, which is free and OpenSource. Schedule
meetings or make small online polls. No email collection or the need of registr
ation.
Turtl - Remember ideas, track research, share documents, or bookmark your favori
te sites. Turtl makes it easy to organize your life and uses solid encryption to
keep it all safe.
PC Operating Systems
If you are currently using a operating system like Microsoft Windows or Apple Ma
c OS X you should pick an alternative here.
Debian
DebianDebian is a Unix-like computer operating system and a Linux distribution t
hat is composed entirely of free and open-source software, most of which is unde
r the GNU General Public License, and packaged by a group of individuals known a
s the Debian project.
Website: debian.org
Trisquel
TrisquelTrisquel is a Linux-based operating system derived from Ubuntu. The proj
ect aims for a fully free software system without proprietary software or firmwa
re and uses Linux-libre, a version of the Linux kernel with the non-free code (b
inary blobs) removed.
Website: trisquel.info
Qubes OS
Qubes OSQubes is an open-source operating system designed to provide strong secu
rity for desktop computing. Qubes is based on Xen, the X Window System, and Linu
x, and can run most Linux applications and utilize most of the Linux drivers.
Website: qubes-os.org
Warning
Don t use Windows 10 - It s a privacy nightmare
Worth Mentioning
OpenBSD - A project that produces a free, multi-platform 4.4BSD-based UNIX-like
operating system. Emphasizes portability, standardization, correctness, proactiv
e security and integrated cryptography.
Arch Linux - A simple, lightweight Linux distribution. It is composed predominan
tly of free and open-source software, and supports community involvement. Parabo
la is a completely open source version of Arch Linux.
Whonix - A Debian GNU/Linux based security-focused Linux distribution. It aims t
o provide privacy, security and anonymity on the internet. The operating system
consists of two virtual machines, a "Workstation" and a Tor "Gateway". All commu
nication are forced through the Tor network to accomplish this..
Live CD Operating Systems
Tails
TailsTails is a live operating system, that starts on almost any computer from a
DVD, USB stick, or SD card. It aims at preserving privacy and anonymity, and he
lps to: Use the Internet anonymously and circumvent censorship; Internet connect
ions go through the Tor network; leave no trace on the computer; use state-of-th
e-art cryptographic tools to encrypt files, emails and instant messaging.
Website: tails.boum.org
KNOPPIX
KNOPPIXKnoppix is an operating system based on Debian designed to be run directl
y from a CD / DVD (Live CD) or a USB flash drive (Live USB), one of the first of
its kind for any operating system. When starting a program, it is loaded from t
he removable medium and decompressed into a RAM drive. The decompression is tran
sparent and on-the-fly.
Website: knopper.net
Puppy Linux
Puppy LinuxPuppy Linux operating system is a lightweight Linux distribution that
focuses on ease of use and minimal memory footprint. The entire system can be r
un from RAM with current versions generally taking up about 210 MB, allowing the
boot medium to be removed after the operating system has started.
Website: puppylinux.org
Worth Mentioning
Tiny Core Linux - A minimal Linux operating system focusing on providing a base
system using BusyBox and FLTK. The distribution is notable for its size (15 MB)
and minimalism, with additional functionality provided by extensions.
Mobile Operating Systems
CyanogenMod
CyanogenModCyanogenMod is an open-source operating system for smartphones and ta
blets, based on Android. It is developed as free and open source software based
on the official releases of Android by Google.
Website: cyanogenmod.org
Firefox OS
Firefox OSFirefox OS is a Linux kernel-based open-source operating system for sm
artphones and tablet computers and is set to be used on smart TVs. It is being d
eveloped by Mozilla.
Website: mozilla.org
Ubuntu Touch
Ubuntu TouchUbuntu Touch is a mobile version of the Ubuntu operating system deve
loped by Canonical UK Ltd and Ubuntu Community. It is designed primarily for tou
chscreen mobile devices such as smartphones and tablet computers.
Website: ubuntu.com
Worth Mentioning
Replicant - A free and open-source operating system based on the Android, which
aims to replace all proprietary Android components with their free software coun
terparts.
Copperhead - Another free and open-source mobile OS based on Linux. Currently on
ly supports a few devices, all in the Nexus line.
OmniROM - OmniROM was created in response to the perceived commercialization of
CyanogenMod. The directors of Cyanogen Inc. refuse to make signature spoofing a
default feature of Cyanogen OS, making it harder to stay anonymous, and in parti
cular to hide your identity from Google. OmniROM has signature spoofing enabled
as a default feature. It supports more devices than Copperhead, but fewer than C
yanogenMod.
Open Source Router Firmware
OpenWrt
OpenWrtOpenWrt is an operating system (in particular, an embedded operating syst
em) based on the Linux kernel, primarily used on embedded devices to route netwo
rk traffic. The main components are the Linux kernel, util-linux, uClibc and Bus
yBox. All components have been optimized for size, to be small enough for fittin
g into the limited storage and memory available in home routers.
Website: openwrt.org
pfSense
pfSensepfSense is an open source firewall/router computer software distribution
based on FreeBSD. It is installed on a computer to make a dedicated firewall/rou
ter for a network and is noted for its reliability and offering features often o
nly found in expensive commercial firewalls. pfSense is commonly deployed as a p
erimeter firewall, router, wireless access point, DHCP server, DNS server, and a
s a VPN endpoint.
Website: pfsense.org
LibreWRT
LibreWRTLibreWRT is a GNU/Linux-libre distribution for computers with minimal re
sources, such as the Ben Nanonote, ath9k based wifi routers, and other hardware
that respects your freedom with emphasis on free software. It is used by the Fre
e Software Foundation on their access point and router which provides network co
nnectivity to portable computers in their office.
Website: librewrt.org
Worth Mentioning
OpenBSD - A project that produces a free, multi-platform 4.4BSD-based UNIX-like
operating system. Emphasizes portability, standardization, correctness, proactiv
e security and integrated cryptography.
DD-WRT - A is Linux-based firmware for wireless routers and wireless access poin
ts. It is compatible with several models of routers and access points.
Don t use Windows 10 - It s a privacy nightmare
Microsoft introduced a lot of new features in Windows 10 such as Cortana. Howeve
r, most of them are violating your privacy.
Windows 10 Privacy