4 ms·

Have a look at Orbot. https://guardianproject.info/apps/orbot/ https://guardianproject.info/apps/orbot/ It is Tor on Android devices.

rafaelm 13y ago
I thought that was only for using the web on phones, but I just saw that it also works with Twitter and any app that supports proxies. Thanks! This is one of those times when I wish there was a simple, secure messaging app for everyone. I don't know if apps like whisper or threema are 100% safe so I'm wary about recommending them.
- middleclick 13y ago
  If you are looking for a secure desktop IM client, look at Pidgin with OTR. https://securityinabox.org/en/pidgin_main https://securityinabox.org/en/pidgin_main For Android, I had probably trust anything by Moxie. Plus, you don't need to trust him - it's open source. Not that you have to verify it, but it's a good chance it's more secure than closed-source products.
- e12e 13y ago
  https://whispersystems.org/ https://whispersystems.org/ TextSecure / RedPhone and/or https://silentcircle.com/ https://silentcircle.com/ are a good place to start -- but AFAIK might not provide all the protection you need in a case like this. Assumptions: * the government has (or can easily) link you/your associates to a SIM/Router/DSL/Phoneline * link your ip to said sim/router * the government probably already have you listed as an "enemy" (assuming you've ever said or done anything useful in terms of protest, aren't completely spineless or apathetic) Historically (in Latin/South America), at least one group will have support from the US -- so assume all VPN traffic is logged for trying to match up things like twitter posts to in-country IPs. The only reasonable action is to use TOR for onion routing, and encryption tunnelled through that. This will still show that you communicate covertly (covertly, being "not-open"). It will still show bursts of activity, and clustering of devices (Note that if you both have access to location meta-data, and have half a brain and a couple of informers/officers noting down where people are gathering, you can feed that back into lists of SIM/IMEIs to target...). The best approach would probably be to generate a rate-limited stream of traffic over TOR, and allow that stream to be replaced by communication as needed. I don't know of any tool to do this for phones -- but layering TOR and jabber+OTR might be about as good as you're going to get for now?

rafaelm 13y ago

I thought that was only for using the web on phones, but I just saw that it also works with Twitter and any app that supports proxies. Thanks! This is one of those times when I wish there was a simple, secure messaging app for everyone. I don't know if apps like whisper or threema are 100% safe so I'm wary about recommending them.

middleclick 13y ago
If you are looking for a secure desktop IM client, look at Pidgin with OTR. https://securityinabox.org/en/pidgin_main https://securityinabox.org/en/pidgin_main For Android, I had probably trust anything by Moxie. Plus, you don't need to trust him - it's open source. Not that you have to verify it, but it's a good chance it's more secure than closed-source products.
e12e 13y ago
https://whispersystems.org/ https://whispersystems.org/ TextSecure / RedPhone and/or https://silentcircle.com/ https://silentcircle.com/ are a good place to start -- but AFAIK might not provide all the protection you need in a case like this. Assumptions: * the government has (or can easily) link you/your associates to a SIM/Router/DSL/Phoneline * link your ip to said sim/router * the government probably already have you listed as an "enemy" (assuming you've ever said or done anything useful in terms of protest, aren't completely spineless or apathetic) Historically (in Latin/South America), at least one group will have support from the US -- so assume all VPN traffic is logged for trying to match up things like twitter posts to in-country IPs. The only reasonable action is to use TOR for onion routing, and encryption tunnelled through that. This will still show that you communicate covertly (covertly, being "not-open"). It will still show bursts of activity, and clustering of devices (Note that if you both have access to location meta-data, and have half a brain and a couple of informers/officers noting down where people are gathering, you can feed that back into lists of SIM/IMEIs to target...). The best approach would probably be to generate a rate-limited stream of traffic over TOR, and allow that stream to be replaced by communication as needed. I don't know of any tool to do this for phones -- but layering TOR and jabber+OTR might be about as good as you're going to get for now?