13 ms·
Ask HN: My country is undergoing a coup, which encryption software should I use?
My country (Israel) is going through a coup d'état, which would result in a regime that can use surveillance without going through the courts.
Israel has one the most advanced surveillance capabilities, that has long been used to target other peoples and nations, but as far as is known, not its own people. This might now change.
I am trying to prepare in advance with encryption software, and optimally a way to communicate if traditional networks go down. Unfortunately other nations have gone through similar situations recently, so I'm wondering if there's a known guideline for these situations.
- sdfzguf 3y agoTechnical subreddits often have up to date wiki entries. - https://old.reddit.com/r/PrivacyGuides/ https://old.reddit.com/r/PrivacyGuides/ - https://old.reddit.com/r/privacy/ https://old.reddit.com/r/privacy/ You can also look here: - https://www.privacyguides.org/ https://www.privacyguides.org/ All of this can only be seen as a starting point. The provided links will not give a thoroughly picture. Look further.
- sdfzguf 3y agoI went through some notes and will just dumb more links here. - https://www.eff.org/ https://www.eff.org/ - https://ssd.eff.org/ https://ssd.eff.org/ - https://www.wilderssecurity.com/ https://www.wilderssecurity.com/ - https://wiki.archlinux.org/title/Security https://wiki.archlinux.org/title/Security - https://wiki.archlinux.org/title/Category:Security https://wiki.archlinux.org/title/Category:Security
- botencat 3y agoThank you
- subsection1h 3y agoFYI, Privacy Guides is a shitshow. It was formerly privacytools.io[1], and in 2019, the creator[2] of privacytools.io stopped contributing[3] and a new contributor[4] immediately focused on donations[5], became the admin[6] and took control[7] of most assets, including donations but excluding the domain and Twitter account[8]. In 2021, the creator of privacytools.io launched a new privacytools.io[9] and added affiliate links[10], and the Privacy Guides team shut down r/privacytoolsIO rather than return it[11] to the creator. Like I said, a shitshow. [1] https://github.com/privacytools/privacytools.io https://github.com/privacytools/privacytools.io [2] https://www.reddit.com/user/BurungHantu https://www.reddit.com/user/BurungHantu [3] https://github.com/privacytools/privacytools.io/commits?author=privacytoolsIO https://github.com/privacytools/privacytools.io/commits?auth... [4] https://github.com/jonaharagon https://github.com/jonaharagon [5] https://github.com/privacytools/privacytools.io/commits?after=b8661944ee9f8fdd8c9f0ba2e31391e3cec522c3+139&author=jonaharagon https://github.com/privacytools/privacytools.io/commits?afte... [6] https://github.com/privacytools/privacytools.io/commit/4b60a4d211a557dd2e4b072b0688279a924f28d5 https://github.com/privacytools/privacytools.io/commit/4b60a... [7] https://redd.it/tuo7mm https://redd.it/tuo7mm [8] https://twitter.com/privacytoolsIO https://twitter.com/privacytoolsIO [9] https://redd.it/pxtw2y https://redd.it/pxtw2y [10] https://www.reddit.com/r/VPNTorrents/comments/raftz6/i_made_a_video_covering_the_demise_of/hni41lg/ https://www.reddit.com/r/VPNTorrents/comments/raftz6/i_made_... [11] https://redd.it/qk7vn0 https://redd.it/qk7vn0
- brewdad 3y agoI don't really care about petty arguments between the contributors. Is the information available there reliable or not? If not, can you suggest an alternative?
- sdfzguf 3y agoI didn't knew about it when I commented. About the .io page: Affiliate links are always a no-go. You can't trust a source that profits from you buying into their recommendations. Edit: I didn't check if anything OP says is correct. Just asuming and following along ...
- farseer 3y agoState overreach and surveillance is a global trend. Don't mind me saying this: As a Jewish citizen with fair skin, a dual passport you would probably do fine, unless you are an Arab... Even under the most tyrannical regimes such as Iran, Myanmar, Russia, China etc. The elite are rarely targeted by the state apparatus. If you are a majority ethnic group with family links in the military, bureaucracy, big business politics etc. You are mostly safe. If not, well encryption is not going to save you. Take your family and run.
- bagacrap 3y ago> trend Overreach is a trend? So it will be passe eventually? > global [...] run To where, Mars? (Thought I would complement your utterly unhelpful comment with one of my own.)
- gtirloni 3y ago> Take your family and run. Pretty much my advice when some friends started to discuss having guns at home. If I ever find myself in a situation where I need a gun (because of gang violence, robbery, etc), I'll move neighborhood->city->state->country as needed. It's less critical (IMHO), when it comes to state surveillance (your privacy is jeopardized but your physical security may or may not be, it depends) but I'd apply the same approach.
- tianqi 3y agoI'm afraid I don't agree with this. In China's Cultural Revolution(1966-1976), the elite were the prime target of persecution. They included the intellectual class, the rich, and even political leaders. Millions of elites committed suicide or were persecuted to death during this movement, including even the 2nd president of the country.
- local_issues 3y agoThat many want to do this again is absolutely insane to me. I see so much support for Mao BECAUSE of his murder of landlords and business owners, not DESPITE of his atrocities
- froster 3y agoPeer-to-peer Bluetooth messaging https://usehyperlocal.com https://usehyperlocal.com
- dewey 3y agoThis only says "Join waitlist" and "coming soon". Not exactly helpful.
- gsatic 3y agoThe thing is their tools are totally useless if traditional networks go down. And the prob with surveillance, in the age of the info tsunami, is not having enough people to go break down doors. There is no use if the dumb tool is flagging 20000 posts a minute and you have 1 poor jackass staring at the flood trying to work out who to pick on. That's why however great their tools are they seem totally incapable of Controlling the protests.
- thrawa8387336 3y agoPGP but realistically just talk in person.
- paulryanrogers 3y agoOr GPG, or Veracrypt (hidden volume) Though I agree it's best to speak IRL. Ideally away from voice activated, smart devices
- ecshafer 3y agoIs there an actual coup going on? I can't find any articles on this.
- kotaKat 3y agoAs close to it as you can get. https://www.bbc.com/news/world-middle-east-66258416 https://www.bbc.com/news/world-middle-east-66258416
- ajmurmann 3y agoIt's probably about the vote to limit supreme court powers: https://www.reuters.com/world/middle-east/israels-netanyahu-discharged-hospital-reuters-witness-says-2023-07-24/ https://www.reuters.com/world/middle-east/israels-netanyahu-...
- alephnerd 3y agoThere isn't a coup. A controversial judiciary bill that was spearheaded by Netenyahu just passed in Israel despite massive opposition to it. Also, to OP - nothing will work if Israeli ISPs and the Govt actually wanted to implement internal surveillance (which they in fact do in some limited manner). That said, I doubt such a situation would arise.
- weard_beard 3y agoMy understanding is there is legislation being enacted which strips power from elected or appointed groups and places that power with the executive. A soft coup through “patriot act” style legislation
- nceqs3 3y ago>My understanding is there is legislation being enacted which strips power from elected or appointed groups and places that power with the executive. Who elected the Supreme Court in Israel? Nobody. The power will now lie in the hands of the legislature, which is the definition of democracy.
- 3y ago
- cookiengineer 3y agoUse briar [1] for online+offline end-to-end encrypted messaging. Use LineageOS [2] without gapps (aka without Google Play Services) and get a device that is officially supported with current LineageOS version. Don't use any XDA developer builds, because they're known to be infected with malware. Obviously don't use Meta or Google apps, because that's where the backdoors are for governments. Don't use WhatsApp, don't use Telegram, don't use Threema. They're compromised. Use AppWarden [3] to enable/disable/verify the usage of known trackers in your apps. Use NetGuard [4] as an Android firewall. Use F-Droid [5] and Fennec builds [6], with uBlock Origin to protect your smartphone from malvertisements. Never synchronize your contacts, block contacts access for all Apps; and make sure you don't use their real names. Contacts stored on or accessed by SIM cards (e.g. call history) can be downloaded via Class 0 SMS, remotely. If possible, I'd avoid MediaTek based SoCs because their rootkit was leaked a couple years ago and it works still on newer chipsets. I would recommend an "as open source as possible" device, like the Google Pixel devices or the Fairphones. On your Desktop or Laptop machines you should switch to a Linux distro of your choice. The most reasonable secure ones are Arch (not beginner friendly), Manjaro, OpenSUSE - or as a beginner friendly alternative - LinuxMint. Would advise against Debian/Ubuntu though for security reasons (which would include LinuxMint). The Arch maintainers (and therefore Manjaro, too) heavily reduced the attack surface of SUID binaries or LOL binaries that could be abused for privilege escalations and/or remote exploits/persistence etc. [7] [1] https://briarproject.org/ https://briarproject.org/ [2] https://wiki.lineageos.org/devices https://wiki.lineageos.org/devices [3] https://gitlab.com/AuroraOSS/AppWarden https://gitlab.com/AuroraOSS/AppWarden [4] https://netguard.me https://netguard.me [5] https://f-droid.org/ https://f-droid.org/ [6] https://f-droid.org/en/packages/org.mozilla.fennec_fdroid/ https://f-droid.org/en/packages/org.mozilla.fennec_fdroid/ [7] https://gtfobins.github.io/ https://gtfobins.github.io/ edit: clarification of LinuxMint
- monsieurgaufre 3y agoI really don't want to derail the thread as it is useful, but i'm curious about the security reasons against Debian/Ubuntu.
- balnaphone 3y ago
- grayhatter 3y agoEncryption is impossible* after the fact. The most important thing you could do today is read! Learn as much as you can. figure out the basics of both operational security, and bootstraping encryption. Then, and here's the important part, share everything you've learned as widely as you possibly can, write guides, write tutorials, make videos. All of information you need is available, but if the people you want to communicate with don't know it, or don't have access to it. It doesn't help either of you.
- grayhatter 3y agoImpossible but only for some definitions of the word. Put more simply it's much much easier to have it *before* you need it.
- refulgentis 3y agoThank you this is wise: is there anything more specific than that you could offer? After double-checking, OP didn't ask to encrypt things from the past, and "read and share" isn't quite going to help get someone started, sort of becomes a catch-22 at that point. I really hope there's some info to offer people who don't have tech experience. It'd be a lot to ask to acquire a tech background then a security-specific one, especially if all we can say is "read"
- rabidonrails 3y agoLet's level set here a bit. There is no coup d'etat. Here's the definition of a coup: _a sudden, violent, and unlawful seizure of power from a government_ that is not what's happening here on either side. Instead here's a quick review of what's happening. Currently the Israeli supreme court can strike down laws based on what they deem "reasonability." As you might guess, this is a pretty strong power for the court to hold because it's subjective. The new legislation would remove much of this power. Those for this change argue that this is a good move because elected officials should be working for the people that they represent, not a court that gets to unilaterally make decisions. The opposition argues that this power being handed to the elected officials without the oversight of the court's reasonability power and thus might allow bad actors to take additional control and do things that don't represent a substantial, but minority, population. I'm not arguing for either side, but calling this a coup is wrong.
- lock-the-spock 3y agoMany countries have similar veto powers for their courts. The exact reasoning of course is different. But no one elected official working for the court in israel. There is an important difference between a court able to block something and being able to do own legislation (as it does often in the US). The Israeli court was never able to do legislation, only to block the government from going too far in any new direction.
- ctrlp 3y agoDoes it not amount to the same thing? Striking down laws (blocking) and finding interpretations that become precedent (making) seem like two sides of the same coin.
- bjourne 3y agoGerman socialists also described Hitlers rise to power as a "coup" or implied that he "seized" the chancellorship unlawfully. It was too painful for them to admit that so many of their countrymen supported Fascism and that he won a democratic election. I'd imagine botencat is in a very similar situation. Remember Trump's "Muslim ban"? The US courts declared the law unconstitutional and prevented its implementation. The judicial reform would make it de facto impossible for the Israeli supreme court to strike down whatever crazy stuff the right-wing extremist government comes up with. Death penalty for stone throwers? No problem.
- boeingUH60 3y agoCoup d'état - an illegal and overt attempt by the military or other government elites to unseat the incumbent leader. How about not exaggerating first. I had to run to Google to see if Israel was actually having a coup, lol. A coup is not something I'll even wish on my worst enemy.
- botencat 3y agoNot all coups are violent/military. Today Israel's extreme government passed the first laws of the judicial overhaul bringing Israel closer to an autocracy, where there is only one power, the government, with unbalanced and unchecked power.
- rabidonrails 3y agoThe definition of a coup would include either a show of force or an illegal action. Neither of those is happening here. [1]https://www.google.com/search?q=define+coup+d%27etat https://www.google.com/search?q=define+coup+d%27etat [2]https://en.wikipedia.org/wiki/Coup_d%27%C3%A9tat https://en.wikipedia.org/wiki/Coup_d%27%C3%A9tat [3]https://www.merriam-webster.com/dictionary/coup%20d%27etat https://www.merriam-webster.com/dictionary/coup%20d%27etat
- toss1 3y agoYes, that is a good definition of a coup. Notice that it does not require bloodshed or boots on the ground. In a self-determining society or democracy all institutions are largely independent; this includes both the institutions of government such as the Executive, Judiciary, and Legislature, as well as the institutions of civil society including the press, academia, industry, education, religion sport, etc. In an autocracy, these institutions are bent to the will of the executive. When a group in a democracy takes actions to corrupt or co-opt the independence of the institutions, it doesn't matter whether or not violence is involved; it is legitimately a coup, especially as far as practical results are concerned for those newly under autocratic rule. You are quibbling about dictionary minutiae and ignoring the very real threat posed to OP, and his request for help.
- Proven 3y ago[dead]
- toast0 3y agoA lot of this depends on your threat model and how much of a target you think you are. If you are worried about your safety, it's better to leave than figure out workarounds. And it's likely easier to get out before things get bad; consider going on an international vacation --- if things look fine, enjoy your trip and go back; if not, figure out what comes next from there. If you aren't really worried about your safety, but just want to avoid getting hassled about communications and don't want to lose communications with the outside world... Definitely do encrypted messenger stuff. But also, try to set up alternate communications. Even though they're not hard to block, many government shutdowns don't block fixed line internet service, land line telephones, or international voice calling. If you can setup a dial-up internet account with an ISP in another country, you may be able to use that from your landline even if internet via domestic ISPs is all shut down. Of course, if the regime is interested, your telephone company would have records of the calls (at least destination and length) and that might get you put on a list. But also note, if most of your contacts are local, and local communications are disrupted; having access to international communications doesn't help you communicate with your contacts, unless they've done the same thing and the more people who have set it up, the more likely it is to be noticed.
- throwawayadvsec 3y agoIsrael will hack your devices, Mossad could come into your home when you're not there, encryption is kind of useless if you're actually targeted. PGP and Luks could get you tortured. Leave this hellhole or do nothing "incriminating".
- nivertech 3y agoWhat you're mistakenly referring to as a "coup d'état" is actually an effort to prevent the use of Pegasus on innocent citizens by the judiciary, law enforcement, and the State Attorney General, who were appointed by previous governments. There have been more than a thousand of unlawful Pegasus cases so far (tens or hundreds of thousands if you count text messages from other people on contact lists and WhatsApp group messages). It's possible that almost every smartphone user in Israel was affected in some way. Some were even against the acting Prime Minister. So, yes, you do need to protect your privacy, but for entirely diff. reasons. The only sure way to achieve this is by going off-the-grid. -- Israel's Law Committee has approved a judge-led probe into the NSO Pegasus spyware. https://www.jpost.com/israel-news/article-746164 https://www.jpost.com/israel-news/article-746164