nitrohorse Ⓐ @andreas@nitro.horse

Some tips from the EFF (https://ssd.eff.org/en/module/attending-protest).

Before the Protest
- Enable full-disk encryption on your device
- Remove fingerprint unlock and FaceID
- Install Signal
- Back up your data
- Buy a prepaid, disposable phone
- Consider biking or walking to the protest (to avoid Automated License Plate Reader Systems)

During the Protest
- Take photos and videos without unlocking your device
- Enable airplane mode

After the Protest
- Scrub metadata on photos

#Privacy

"I became an Anarchist when I decided to drop the theories and stop seeking power. When I stopped concerning myself with those things I realised that true Anarchy is my nature. It is our nature. It is what we were doing before the theories arrived, it is what we were doing before we were encouraged to be in competition with each other."

- Benjamin Zephaniah, 'Why I Am an Anarchist'

http://dogsection.org/why-i-am-an-anarchist

#anarchism

New guide from Security Without Borders written by https://www.randhome.io.

“Here's a new guide on how to check-up the integrity and find potential compromises of online email and social media accounts [such as Google/Twitter/Facebook/Yahoo].”

https://guides.securitywithoutborders.org/guide-to-account-check-up/

#Privacy #Security

Between Electoral Politics and Civil War: Anarchists Confront the 2020 Election

https://crimethinc.com/2020/10/21/between-electoral-politics-and-civil-war-anarchists-confront-the-2020-election

#Anarchism

FYI Cloudflare’s 1.1.1.1 resolver and their resolver for Firefox have separate privacy policies.

1.1.1.1
- https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver
- https://cloudflare-dns.com/dns-query

Resolver for Firefox
- https://developers.cloudflare.com/1.1.1.1/privacy/firefox
- https://mozilla.cloudflare-dns.com/dns-query
- Meets Mozilla’s TRR requirements: https://wiki.mozilla.org/Security/DOH-resolver-policy

#Privacy

Site Isolation is available for testing in Firefox Nightly. Will be generally available next year.

https://www.zdnet.com/article/firefox-site-isolation-feature-enters-user-testing-expected-next-year

How to enable:
1. Access the about:config page.
2. Set the "fission.autostart" and "gfx.webrender.all" prefs to "true".

“Once enabled, users can test if Site Isolation is active by hovering their mouse over a Firefox tab. If enabled, the tooltip will show the [F] indicator that Fission is active, along with the PID — the OS process ID for each Firefox tab.”

#Privacy

“Russia has granted U.S. whistleblower Edward Snowden permanent residency rights, his lawyer said on Thursday, a step towards Russian citizenship if he wants it.”

https://www.reuters.com/article/usa-security-snowden-russia-int-idUSKBN2771Q3

“The account was not protected by two-factor authentication... It’s the second time Gevers has gained access to Trump’s Twitter account.

The first time was in 2016, when Gevers and two others extracted and cracked Trump’s password from the 2012 LinkedIn breach. The researchers took his password — “yourefired” — his catchphrase from the television show The Apprentice — and found it let them into his Twitter account.”

“A Dutch security researcher says he accessed President Trump’s @realDonaldTrump Twitter account last week by guessing his password: “maga2020!”.”

https://techcrunch.com/2020/10/22/dutch-hacker-trump-twitter-account-password

New vanity url: https://encrypted-dns.party

TIL Comcast is a partner in Mozilla's Trusted Recursive Resolver (TRR) program.

https://wiki.mozilla.org/Security/DOH-resolver-policy#Conforming_Resolvers

Public resolver: https://doh.xfinity.com/dns-query

Privacy policy: https://www.xfinity.com/privacy/policy/dns

#Privacy

Fixed a bug which caused profiles to override each other. Now you can have multiple encrypted DNS profiles installed for easier toggling 🌟

Change log: https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html

“Google has released Chrome version 86.0.4240.111 earlier today to deploy security fixes, including a patch for an actively exploited zero-day vulnerability.”

https://www.zdnet.com/article/google-releases-chrome-security-update-to-patch-actively-exploited-zero-day

#Security

“As of October 20, 2020, uBO-Extra is discontinued and is no longer present in the Chrome Web store. Instart Logic's anti-user agent technology appears to have gone away and consequently the extension has become useless, as its main purpose was to foil Instart Logic's 3rd parties obfuscation technology.”

https://nitter.snopyta.org/gorhill/status/1318601650567860227

#Privacy

SnowHaze can now be set as a default browser in iOS 14.

#Privacy