4 ms·
Hey everyone. Apologies for the blatant plug but seeing as we are talking about security precautions for non-profits and journalists, it's probably relevant...
by secfirstmd 10y ago
Hey everyone. Apologies for the blatant plug but seeing as we are talking about security precautions for non-profits and journalists, it's probably relevant...
We build a tool specifically to help non-profits and journalists learn about and manage their digital and physical security on the move. It's called Umbrella App. It's free, open source, on Android and contains tons of lessons on privacy related issues like digital and physical security. Umbrella has everything from how to do basic stuff like communicate with basic tools like Signal to sending a secure email with PGP. However, the unique bit is we also have stuff on the physical side, like how to plan travel, cross borders, set-up a secure physical meeting, deal with detecting surveillance, covering a protest, respond to a kidnapping etc. Basically we have tried to make it a bit of a one-stop-shop for security for regular people, activists, refugees and journalists. We also pull security feeds from places like the UN, Centres for Disease Control etc - which is obviously very important to folks in places like Syria or affected by Zika/Ebola.
There’s tons of really relevant stuff in it, especially for those now mobilising for the first time on some issues. Loads of people are writing guides that solve small parts of the puzzle but we have tried to provide the whole picture in the one place.
Google Play Store:
https://play.google.com/store/apps/details?id=org.secfirst.umbrella https://play.google.com/store/apps/details?id=org.secfirst.u...
Amazon App Store:
https://www.amazon.com/Security-First-Umbrella-made-easy/dp/B01AKN9M1Y https://www.amazon.com/Security-First-Umbrella-made-easy/dp/...
F-Droid Repo:
https://secfirst.org/fdroid/repo https://secfirst.org/fdroid/repo
Github Repo:
https://github.com/securityfirst https://github.com/securityfirst
Code Audit:
https://secfirst.org/blog.html https://secfirst.org/blog.html
Hope some folks here find it useful/interesting!
Ends blatant plug
- idlewords 10y agoPlease get this vetted by real security people. The fact that you mention PGP suggests to me you haven't.
- secfirstmd 10y agoHow can a standard guide to installing and using PGP through various different methods be a security issue?
- idlewords 10y agoBecause people should not be using PGP for secure messaging.
- secfirstmd 10y agoOn what grounds? on what threat models? on what attacks? what alternatives?
- codelitt 10y agoPGP isn't user friendly, but from the Snowden leaks we learned it is one of the few encryption standards the NSA hasn't been able to break. TLS and most configs of VPN protocols were shown to be easily compromised. PGP was basically shown to be a show stopper. 1. http://m.spiegel.de/international/germany/a-1010361.html http://m.spiegel.de/international/germany/a-1010361.html
- secfirstmd 10y agoAgreed. It has many problems but it's still one of the only games in town.
- willstrafach 10y ago> TLS and most configs of VPN protocols were shown to be easily compromised. This is a major claim to be making, and it is false. It is not helpful to spread misinformation like this.
- codelitt 10y agoEasily was, perhaps, not the correct adverb, but the linked article above as well as this one below go into it more. It does not appear to be false. http://www.theverge.com/2014/12/28/7458159/encryption-standards-the-nsa-cant-crack-pgp-tor-otr-snowden http://www.theverge.com/2014/12/28/7458159/encryption-standa... Bruce Schneier has said while large government actors may be able to exploit it, it's still recommended: https://www.theguardian.com/world/2013/sep/05/nsa-how-to-remain-secure-surveillance https://www.theguardian.com/world/2013/sep/05/nsa-how-to-rem...