Commit Graph

275 Commits

Author SHA1 Message Date
pterocles
12b99c9ea9 Update Appendix B7: Caution about Session Messenger
1. Avoid usage of multiple tenses or tense-switching at all costs.
2. Avoid using too many words when you can substitute less.
3. At first mention, use lowercase "perfect forward secrecy" followed
by abbr. "PFS".
4. Use common English words, not "defavorable". Try saying "bad" in
most cases. Prefix "de-" usually means "off, from".
2022-08-28 13:03:49 -04:00
Alex Anderson
1c1da8df66 Merge branch 'master' of github.com:NobodySpecial256/thgtoa 2022-08-28 16:26:35 +00:00
Alex Anderson
b9635680d9 Update guide.md 2022-08-28 16:17:18 +00:00
TwoSixtyThreeFiftyFour
6296e18128 Added caution/warning about Session Messenger
Added caution/warning about Session Messenger
2022-08-28 16:06:39 +00:00
TwoSixtyThreeFiftyFour
df73f7ba68 Update to other messaging apps comparisons charts
- Mentioning those that are outdated/unmaintained and that those will be removed in next releases
- Adding https://github.com/bkil/secuchart which is a  maintained project
- Adding disclaimer that we do not necessarily endorse their opinions
- Removed spaces between list items (and we should consider doing that on the whole guide)
2022-08-28 09:57:17 +00:00
TwoSixtyThreeFiftyFour
d73c049221 Separation Molly
Separation Molly
2022-08-28 09:11:33 +00:00
TwoSixtyThreeFiftyFour
0f3b52d916 Merge branch 'master' into Adding-Molly-IM-mention 2022-08-28 09:05:37 +00:00
pterocles
5d89aca4d4 Fix grammar in final commits
Signed-off-by: pterocles <th.thgtoa@disroot.org>
2022-08-25 09:48:22 -04:00
TwoSixtyThreeFiftyFour
9de4397764 ToC fix
Normally the last one
2022-08-25 12:52:37 +00:00
TwoSixtyThreeFiftyFour
3b8dbde8e6 Sync fixes again
Sync fixes again
2022-08-25 12:41:40 +00:00
TwoSixtyThreeFiftyFour
69c729b8a0 Update fixes to be in sync with current guide.md
Update fixes to be in sync with current guide.md
2022-08-25 12:31:06 +00:00
TwoSixtyThreeFiftyFour
9f133c439d Re-adding missing B6 and car warning.
Re-adding missing B6 and car warning.
2022-08-25 09:29:21 +00:00
TwoSixtyThreeFiftyFour
ec306242f7 Fixed some .onion links that were HTTPS when only working on HTTP
Fixed some .onion links that were HTTPS when only working on HTTP
2022-08-25 02:25:25 +00:00
pterocles
cba1af022c Small fixes
* Organizational fixes will work for now until later when we can cleanup.
* Missed a few superscript links

I think it looks beautiful!
Signed-off-by: pterocles <th.thgtoa@disroot.org>
2022-08-24 16:21:57 -04:00
TwoSixtyThreeFiftyFour
6f1b0cc7eb Getting rid of Archive.org , Wikiless , Nitter , Invidious cross-references
Getting rid of Archive.org , Wikiless , Nitter , Invidious cross-references
2022-08-24 18:23:49 +00:00
TwoSixtyThreeFiftyFour
b29c0fdb31 Just a few small updates
The IMEI section only mentions a physical burner phone as a solution. Added that there are other solutions online besides the physical burner/pre-paid card.

Added nuance to the advice from "never rely on commercial services" to "never rely on commercial services as a first line of anonymity" 

Changed a "my advice" to "our advice"
2022-08-22 19:09:00 +00:00
TwoSixtyThreeFiftyFour
996ab7097e Merge branch 'master' into Add-information-warning-smart-devices 2022-08-22 15:37:01 +00:00
T. H
4aff9b20e7 Merge pull request #208 from Anon-Planet/add-link-linddun-video
Adding link to an endorsed LINDDUN video
2022-08-21 16:52:55 +00:00
TwoSixtyThreeFiftyFour
ab2ef128ac Adding link to an endorsed LINDDUN video
Adding link to video endorsed by LINDDUN designers
2022-08-21 09:30:09 +00:00
TwoSixtyThreeFiftyFour
ff2799e8b8 Adding removed delimiter
Adding removed delimiter
2022-08-21 03:16:36 +00:00
Than Harrison
83f643c3ef Re: Adding some Orbot information/disclaimer
Commit 3fa1c502f0 ("Adding some Orbot information/disclaimer to
prevent people from being mislead") has minor spelling and grammar
mistakes that can be fixed.

Fixes those errors. Also adds additional context.
Signed-off-by: Than Harrison <th.thgtoa@disroot.org>
2022-08-20 18:04:26 -04:00
TwoSixtyThreeFiftyFour
3fa1c502f0 Adding some Orbot information/disclaimer
Adding some Orbot information/disclaimer to prevent people from being mislead
2022-08-20 18:32:40 +00:00
Alex Anderson
ccb0ac1e6e Merge branch 'master' of github.com:NobodySpecial256/thgtoa 2022-08-18 23:29:40 +00:00
Alex Anderson
1c6bdd2a1d Migrated back to original domain 2022-08-18 23:27:39 +00:00
Alex Anderson
24843f3403 Merge pull request #204 from pterocles/minor-patch-format
Fix minor formatting issue
2022-08-18 15:16:06 +00:00
Alex Anderson
39b29a7120 Merge pull request #203 from pterocles/meek-azure-onion-browser
Add link to meek-azure issue support dropped for iOS Onion Browser
2022-08-18 15:15:18 +00:00
T. H
f7d0a34e05 Fix minor formatting issue 2022-08-17 20:16:08 -04:00
pterocles
38ebe5bee4 Fix missing Archive.org link
* Missing archive link fix

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-17 01:35:53 -04:00
T. H
4ec157fba3 Mention running bridge types ranked by difficulty
* To run any of them, it only requires small knowledge of Linux.
  this places the information required into the realm of possibility,
  even for unseasoned Linux users.

* Note: there are many guides on both Tor Project and Stack Overflow.

* Consider running either the 1st or 2nd options as they are the easiest.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-17 01:30:08 -04:00
T. H
e1c9919407 Merge pull request #197 from pterocles/transparency-reports
Update transparency reports
2022-08-17 05:01:38 +00:00
pterocles
ad72f59d1a Small addition: add link to meek-azure documentation for iOS
* add link to commit where iOS Onion Browser dropped meez-azure:
  "Removed Meek Azure bridge [support], since Microsoft announced
  starting to block it."

* Remove dupe reference to footnote #522 and #523
  (document will now render this as reference #516)

* Add link to Tor Project:
  "Run Tor Bridges to Defend the Open Internet"

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-16 12:23:31 -04:00
T. H
37c8d9fbc1 Merge branch 'master' into transparency-reports 2022-08-16 14:18:41 +00:00
TwoSixtyThreeFiftyFour
b1383ca8c5 Merge branch 'master' into Adds-face-generator-tool 2022-08-16 09:10:45 +00:00
TwoSixtyThreeFiftyFour
4b021dd946 Added warning/disclaimer
Added warning/disclaimer
2022-08-16 09:05:08 +00:00
Alex Anderson
8798e86345 Merge pull request #195 from TwoSixtyThreeFiftyFour/Fix-bad-link
Fix bad links to VPN logging policies
2022-08-15 21:04:56 +00:00
Alex Anderson
9b0d957746 Merge pull request #196 from TwoSixtyThreeFiftyFour/mention-of-#OSINT-in-the-guide
Adding mention of OSINT room in guide
2022-08-15 21:04:42 +00:00
Alex Anderson
ae8cfc1bfc Merge pull request #187 from TwoSixtyThreeFiftyFour/Updates-to-Appendix-B3-about-Threat-Modeling
Update of the threat modeling appendix (B3)
2022-08-15 21:04:28 +00:00
Alex Anderson
98f6c2215f Merge pull request #202 from TwoSixtyThreeFiftyFour/Bad-link-fix
Update bad link Appendix R
2022-08-15 21:03:53 +00:00
Alex Anderson
3dc5e2e53f Merge pull request #199 from TwoSixtyThreeFiftyFour/Update-of-side-channel-browser-attack-warning
Update on browser side-channel attack section
2022-08-15 20:57:41 +00:00
TwoSixtyThreeFiftyFour
01fe6744c1 Update bad link Appendix R
Update bad link Appendix R
2022-08-15 19:37:13 +00:00
T. H
cbb3c49666 Revert a commit and cleanup a pointer
This reverts commit 7736c42bd7.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:51:47 -04:00
pterocles
870347b784 Add microarchitecture bugs and related research to Appendix B5
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:41:04 -04:00
pterocles
5cca117aa1 Move content to Appendix B5: Types of CPU attacks
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:39:40 -04:00
pterocles
6b5b8e5656 Fix pointer to Appendix B4 while adding Appendix B5
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:35:47 -04:00
pterocles
7736c42bd7 a
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 11:01:18 -04:00
pterocles
7d80648d88 Doc: Microarchitecture bugs in Intel and AMD CPUs
Add information about microarchitecture bugs

It's been a very busy year for Intel and AMD CPUs. Researchers have
discovered bugs left and right. One of them was revealed recently and I
felt compelled to add not only it but also information regarding other
types of attacks that aren't yet in the guide.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 10:26:32 -04:00
TwoSixtyThreeFiftyFour
f4d6530ffd Adding warning about cars emergency calling features
Small update to Appendix N: Warning about smartphones and smart devices

Adding small warning about cars having some cell network related features
2022-08-13 17:02:51 +00:00
TwoSixtyThreeFiftyFour
c3199f7cec Update on browser side-channel attack section
See:

-  Release tweet: <https://twitter.com/ma1/status/1557751019945299969> <sup>[[Archive.org]](https://web.archive.org/web/https://twitter.com/ma1/status/1557751019945299969)</sup>
-  User explanation: <https://noscript.net/usage/#crosstab-identity-leak-protection> <sup>[[Archive.org]](https://web.archive.org/web/https://noscript.net/usage/#crosstab-identity-leak-protection)</sup>
-  Tor Project Forum Post: <https://forum.torproject.net/t/tor-browser-can-leak-your-identity-through-side-channel-attack/4005/2> <sup>[[Archive.org]](https://web.archive.org/web/https://forum.torproject.net/t/tor-browser-can-leak-your-identity-through-side-channel-attack/4005/2)</sup>
-  NoScript extension for Firefox (Firefox, and other Firefox-based browsers except Tor Browser): https://addons.mozilla.org/en-US/firefox/addon/noscript/
-  NoScript extension for Chromium based browsers (Brave, Chrome, Edge, and other Chromium-based browsers): https://chrome.google.com/webstore/detail/noscript/doojmbjmlfjjnbmnoijecmcbfeoakpjm?hl=en

- Removed advice to install Lekuidator+ on TBB since it's now handled by NoScript and on by default.
- Added NoScript as preferred for other Browsers (requires settings, on by default on private Windows).
- Changed Lekuidator+ from main mitigation to alternative to NoScript.
2022-08-13 15:30:58 +00:00
pterocles
022c9f6169 Update transparency reports
- Discord transparency report
- Snapchat transparency report
- TitkTok transparency report
- Reddit transparency report
- Twitter transparency report (link)

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-12 02:00:19 -04:00
TwoSixtyThreeFiftyFour
40e4a28464 Adding mention of OSINT room in guide
Adding mention of OSINT room in guide
2022-08-09 10:41:50 +00:00