PRIVACY MINDSET &

PRACTICE
Ramiro Romani
5/16/2021

https://above-agency.com
https://above-agency.com
Join newsletter
Office Servers
Our Services
neo-network

Contact: ramiro@above-agency.com
Where are we going in
120 Minutes?
●
Privacy and its importance
(demo) (10)
Mindset vs Practice (5)
https://above-agency.com
●

●
Privacy Framework (15)
●
Threat Awareness (15)
●
Privacy Strategies /
Processes (15)
●
Privacy Practice (60)
 What is privacy?

●
Definition
●
Long term vision

https://above-agency.com
Not paranoia
●

●
Practiced every day
https://above-agency.com
 Demo

●
Example of a real world privacy investigation
●
May be a bit disturbing

https://above-agency.com
It starts with a target (one piece of info, general
●

description)
 Exercise

●
What did you learn from the demo?
●
What could have the target done differently to
protect themselves?
https://above-agency.com
●
Do you see your privacy having similar issues?
 Mindset vs. Practice

●
Mindset: Awareness &
attention
Practice: Mindset acted
https://above-agency.com
●

upon
●
Can you have one and not
the other?
 A Framework

●
Identify
●
Protect

https://above-agency.com
Detect
●

●
Respond
●
Recover
 IDENTIFY: Awareness
●
Awareness starts with knowledge
●
What are the major information systems of today and in the past
How can these be used against us
https://above-agency.com
●

●
How centralized can this data get?
 Awareness
●
Web Browsing
●
Social Networks
Operating Systems
https://above-agency.com
●

●
Phones
●
ISPs
●
Online Communities
●
Govt Agencies
 IDENTIFY: Web Browsing
●
Search engines
●
Tracking scripts
How do they track you?
https://above-agency.com
●

●
IP Logging
●
First & third party cookies
●
Logged into account
●
Browser fingerprinting
●
Tracking scripts
 PROTECT: Web Browsing
●
Browser configuration
●
Addon protection
Choice of browser
https://above-agency.com
●

●
Choice of search engine
●
What’s your score after protection?
 IDENTIFY & PROTECT: Social
Networks
●
Google / Youtube
●
Facebook / Instagram / WhatsApp
LinkedIn
https://above-agency.com
●

●
Twitter / Tumblr
 IDENTIFY & PROTECT: OS
●
The lowest level of privacy you can have.
●
Open-Source Operating Systems
How to migrate
https://above-agency.com
●
Windowslatest.com, 2020
 IDENTIFY & PROTECT: Networks
●
Local threats
●
Regional threats
What is leaked?
https://above-agency.com
●

●
VPNs
Widebinary.org
 VPN Demo
●
Our current situation (unprotected?)
●
Why is the provider important?
What makes a VPN good?
https://above-agency.com
●

●
Mullvad Analysis
●
Mullvad Demo
●
Your new protection
 IDENTIFY: World Infrastructure
●
PRISM
●
ECHELON
XKeyScore
https://above-agency.com
●

●
Five Eyes / Nine Eyes / Thirteen Eyes
 RESPOND & RECOVER: Tools,
Password Manager
●
Why use a password manager?
●
The right types of passwords
Bitwarden Demo
https://above-agency.com
●
 Protect & Detect
• Data Defense
• Information Hiding
• Identity Siloing

https://above-agency.com
• Monitor Breaches
 Tools: Emails
• Emails: Are they secure?
• Types of mail
• What makes a good email service?

https://above-agency.com
• Criteria:
●
Logging
●
Jurisdiction
●
Retention
 Extensions
• Email Masking services • GPG Encryption
• Blur by Abine • Demo
●
w34jkl@opayq.com

https://above-agency.com
• AnonAddy
●
Username based addresses
●
amazon@aa.anonaddy.com
• SimpleLogin
• Choice between totally randomized or custom
keyword username
• Outgoing emails as well
 Encrypted Messengers
• Criteria
●
Open-Source
Privacy Policy
https://above-agency.com
●

●
Data Gathered / Contact Tracing
●
Transport Centralization
●
Partner Risks
 Briar
• Is the most secure and best for serious
private communication.
• Can only create contacts in person, first

https://above-agency.com
contact is established.
• Can choose how you want the message
transmitted.
• Good for non-critical asynchronous
communication
 Briar

https://above-agency.com
 Mobile Operating Systems
• Criteria
●
Open-Source
Lineage OS
https://above-agency.com
●

●
CalyxOS
●
GrapheneOS
●
F-Droid
 Resources

CoverYourTracks Njal.la • Lineage OS

LibreWolf ●
CalyxOS
UngoogleChromium
https://above-agency.com GrapheneOS
●

Private.sh ●
F-Droidl
SearX
●
Briar
UblockOrigin
●
Threema
Umatrix
Mullvad
 Look how far we’ve come.

https://above-agency.com
The journey never ends. :)