Commit Graph

173 Commits

Author SHA1 Message Date
Alex Anderson
98f6c2215f Merge pull request #202 from TwoSixtyThreeFiftyFour/Bad-link-fix
Update bad link Appendix R
2022-08-15 21:03:53 +00:00
Alex Anderson
3dc5e2e53f Merge pull request #199 from TwoSixtyThreeFiftyFour/Update-of-side-channel-browser-attack-warning
Update on browser side-channel attack section
2022-08-15 20:57:41 +00:00
TwoSixtyThreeFiftyFour
01fe6744c1 Update bad link Appendix R
Update bad link Appendix R
2022-08-15 19:37:13 +00:00
T. H
cbb3c49666 Revert a commit and cleanup a pointer
This reverts commit 7736c42bd7.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:51:47 -04:00
pterocles
870347b784 Add microarchitecture bugs and related research to Appendix B5
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:41:04 -04:00
pterocles
5cca117aa1 Move content to Appendix B5: Types of CPU attacks
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:39:40 -04:00
pterocles
6b5b8e5656 Fix pointer to Appendix B4 while adding Appendix B5
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:35:47 -04:00
pterocles
7736c42bd7 a
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 11:01:18 -04:00
pterocles
7d80648d88 Doc: Microarchitecture bugs in Intel and AMD CPUs
Add information about microarchitecture bugs

It's been a very busy year for Intel and AMD CPUs. Researchers have
discovered bugs left and right. One of them was revealed recently and I
felt compelled to add not only it but also information regarding other
types of attacks that aren't yet in the guide.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 10:26:32 -04:00
TwoSixtyThreeFiftyFour
c3199f7cec Update on browser side-channel attack section
See:

-  Release tweet: <https://twitter.com/ma1/status/1557751019945299969> <sup>[[Archive.org]](https://web.archive.org/web/https://twitter.com/ma1/status/1557751019945299969)</sup>
-  User explanation: <https://noscript.net/usage/#crosstab-identity-leak-protection> <sup>[[Archive.org]](https://web.archive.org/web/https://noscript.net/usage/#crosstab-identity-leak-protection)</sup>
-  Tor Project Forum Post: <https://forum.torproject.net/t/tor-browser-can-leak-your-identity-through-side-channel-attack/4005/2> <sup>[[Archive.org]](https://web.archive.org/web/https://forum.torproject.net/t/tor-browser-can-leak-your-identity-through-side-channel-attack/4005/2)</sup>
-  NoScript extension for Firefox (Firefox, and other Firefox-based browsers except Tor Browser): https://addons.mozilla.org/en-US/firefox/addon/noscript/
-  NoScript extension for Chromium based browsers (Brave, Chrome, Edge, and other Chromium-based browsers): https://chrome.google.com/webstore/detail/noscript/doojmbjmlfjjnbmnoijecmcbfeoakpjm?hl=en

- Removed advice to install Lekuidator+ on TBB since it's now handled by NoScript and on by default.
- Added NoScript as preferred for other Browsers (requires settings, on by default on private Windows).
- Changed Lekuidator+ from main mitigation to alternative to NoScript.
2022-08-13 15:30:58 +00:00
Alex Anderson
66227ce576 Merge pull request #149 from pterocles/patch-1
Appendix L: list format, make it easier to skim through
2022-08-07 20:55:35 +00:00
Alex Anderson
5f9242537a Merge pull request #162 from TwoSixtyThreeFiftyFour/Small-fixes-in-the-pay-with-crypto-section
Small fix in the "pay with crypto section"
2022-08-07 20:55:14 +00:00
Alex Anderson
3f6665f9d1 Merge pull request #153 from TwoSixtyThreeFiftyFour/Add-Tor-Mirror-URL-to-Readme-and-Guide
Add tor mirror url to readme and guide
2022-08-07 20:52:35 +00:00
TwoSixtyThreeFiftyFour
a3e487a79c Update guide.md
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-03 19:07:00 +00:00
TwoSixtyThreeFiftyFour
454f04492e Move to 1.1.6pre
Move to 1.1.6pre to change the date and reflect that many changes did happen since 1.1.5
2022-08-03 14:19:26 +00:00
Alex Anderson
8de6b5bb69 Merge pull request #182 from pterocles/pterocles/update-tor-route
Update on Tor Browser
2022-08-01 21:10:32 +00:00
pterocles
524331a69f Update options for Tor route on Android
Fix out of date options/settings for Tor on Android.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 12:06:01 -04:00
pterocles
aabd9a121d Update images for Tor route
Images were out of date. Updated and used PNGs for them.

Tor Project has condensed their settings and it is no longer
necessary to manually configure bridges.

Automatic censorship detection and circumvention:
https://blog.torproject.org/new-release-tor-browser-115/

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:48:02 -04:00
pterocles
79bdd14fbb Refine and finish Connection Assist notification
Add refined notice and Archive link

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:17:57 -04:00
pterocles
b208098eae Add notice about Connection Assist
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:07:19 -04:00
pterocles
6a183e5865 Fix a word/typo
Overlooked a word

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 10:56:43 -04:00
Alex Anderson
c8b03a5228 Merge pull request #173 from TwoSixtyThreeFiftyFour/add-link-to-stylometry-reduction-article
Added link to countering linguistic analysis
2022-07-31 22:09:57 +00:00
Alex Anderson
3ac382a96e Merge pull request #175 from TwoSixtyThreeFiftyFour/remove-bad-links
Removal and fix of some bad links
2022-07-31 22:07:58 +00:00
Alex Anderson
c174ce335f Merge pull request #178 from TwoSixtyThreeFiftyFour/recommended-vpn-logging-policies-links
Adding recommended VPNs logging policies links
2022-07-31 22:06:36 +00:00
pterocles
2d8480417a Update on Tor Browser
Tor Browser Bundle (TBB) now has easier settings for the user.

TBB also makes the connection simpler for the user:
- Now enabled by default, moat will help you configure bridges.
- Bridge cards for viewing your Tor bridges make it both pretty and more useful for the user.
2022-07-31 15:57:02 -04:00
TwoSixtyThreeFiftyFour
174bbdf42a Update one link from old to org repo
Update one link from old to org repo
2022-07-31 14:16:09 +00:00
TwoSixtyThreeFiftyFour
7a6cb1e484 Update guide.md 2022-07-31 11:43:08 +00:00
TwoSixtyThreeFiftyFour
305c4b9150 Adding link to the no-logging policies of our recommended VPN providers
Adding link to the no-logging policies of our recommended VPN providers in Appendix G
2022-07-31 11:41:09 +00:00
TwoSixtyThreeFiftyFour
36254ef366 Update guide.md
agreed

Co-authored-by: T. H. <pterocles@proton.me>
2022-07-30 16:00:16 +00:00
TwoSixtyThreeFiftyFour
6526f80120 Update guide.md
Ok

Co-authored-by: T. H. <pterocles@proton.me>
2022-07-30 15:59:37 +00:00
TwoSixtyThreeFiftyFour
3fef354d6a Update guide.md
Ok

Co-authored-by: T. H. <pterocles@proton.me>
2022-07-30 15:59:15 +00:00
TwoSixtyThreeFiftyFour
a309e49971 Removal of some obsolete links
- https://anonarchive.org/ removed due to 404
- Internal link [How to spot if someone has been searching your stuff:] fixed
- Temporarily strike-through on odt and pdf links
2022-07-30 10:43:08 +00:00
TwoSixtyThreeFiftyFour
6b5dc93604 Fix of fix of fix
Sorry for this garbage
2022-07-29 17:26:51 +00:00
TwoSixtyThreeFiftyFour
cf96bfe657 Fix to fix
Fix to fix
2022-07-29 11:14:46 +00:00
TwoSixtyThreeFiftyFour
fccb082eaa Fixes as per review
Fixes as per review
2022-07-29 11:12:29 +00:00
TwoSixtyThreeFiftyFour
805a2b44dc Added link to countering linguistic analysis
Added link to Appendix A4 to countering forensics linguistic analysis 

https://seirdy.one/posts/2022/07/09/stylometric-fingerprinting-redux/
2022-07-29 10:55:24 +00:00
TwoSixtyThreeFiftyFour
821918411a Couple of "we" typos
Couple of "we" typos
2022-07-28 05:44:13 +00:00
Alex Anderson
c8ff26bec6 Merge pull request #167 from TwoSixtyThreeFiftyFour/Add-Qubes-4.1.x-tutorial-for-Windows-VMs
Link to Qubes tutorial for installing Windows VMs
2022-07-24 18:45:51 +00:00
Alex Anderson
7da672d892 Made changes 2022-07-24 18:42:50 +00:00
pterocles
86980c4b30 Add link to Arkenfox/user.js
Arkenfox relies on a set of `about:config` tweaks in
Firefox. It allows you to set many privacy and disk 
avoidance related values which provide you with the 
ability to avoid useless Firefox additions and also 
avoid giving your browser a unique value which can
be tracked across the web.

Signed-off-by: pterocles <pterocles@proton.me>
2022-07-24 07:54:50 -04:00
pterocles
ac535721c1 Remove unnecessary addons
Update addons recommended in guide. Explain use of 
`network.http.referer.XOriginPolicy`. Explain 
difference between uBO and NoScript.

Signed-off-by: pterocles <pterocles@proton.me>
2022-07-24 07:36:10 -04:00
TwoSixtyThreeFiftyFour
a1f2727941 Link to Qubes tutorial for installing Windows VMs
Added link to https://github.com/Qubes-Community/Contents/blob/master/docs/os/windows/windows-tools41.md
2022-07-24 11:34:47 +00:00
pterocles
3c280ed041 Fix Windows 10/11 links (#165)
Update Windows 10/11 VM links in ToC and document

Signed-off-by: pterocles <pterocles@proton.me>
2022-07-24 06:59:27 -04:00
TwoSixtyThreeFiftyFour
0aab0e4a24 Small fix in the "pay with crypto section"
Removed outdated info
Added ref to updated info
2022-07-23 07:56:32 +00:00
Alex Anderson
7c91c963cb Merge pull request #160 from TwoSixtyThreeFiftyFour/Fixes-in-browser-fingerprinting-listing
Add item in listing of sites showing your browser fingerprint and fixing typos
2022-07-22 18:17:42 +00:00
TwoSixtyThreeFiftyFour
267c19b4ea Add ref to a DEF CON 25 vid about fingerprinting
Add ref to a DEF CON 25 vid about fingerprinting in various sections
2022-07-22 16:04:54 +00:00
TwoSixtyThreeFiftyFour
022876e4e2 Add item in listing of sites showing your browser fingerprint
Added: https://abrahamjuliot.github.io/creepjs/

Fixed: fixed some typos
2022-07-22 14:43:47 +00:00
Alex Anderson
a446db7e40 Merge branch 'pr/147' 2022-07-22 01:40:00 +00:00
Alex Anderson
a4684ca29f Updated not-recommended section 2022-07-22 01:36:25 +00:00
Alex Anderson
3984c597b4 Merge pull request #157 from pterocles/appendix-n-typo-fix
Fix typo in Appendix N: "additionally"
2022-07-22 01:25:16 +00:00