Can I improve at something?

Questions
21

Hello,

I’d add the following improvements :

  • A Pixel with GrapheneOS (if you can afford it)
    • Then group your apps per profile and add a secure mixnet like Nym to each of this profile with different entry / exit gateways
  • DNS : Host your own ADGuard server
  • OS : Change to SecureBlue, KickSecure, or QubesOS if your hardware allows that
    • If you can buy a computer like NovaCustoms ones who comes with Dasharo, that’s even better
  • Use a NitroKey 3 : It’s OpenSource, CC EAL 6 and guarantees an offline storage for your access keys + most sensitive passwords.
    • > Please use a spear key in case of loss of the first one…
  • Mails can be secure under certain threat models but should not be recommended anymore because they were not built on a model with privacy nor security in mind
    • Do you use SimpleLogin to put aliases everywhere ?
  • How about your backups ?
  • How about your banking privacy ?
  • Signal requires you to give a phone number. Even if it’s the most known privacy-friendly alternative, you may want to move to SimpleX, Olvid, Session or Tox according to your threat model
  • If you live in a country where the government is not known for threatening free speech nor privacy and has good data protection policies, you may want to use online services hosted in your country and by a company legally hosted there

I’d be happy to get anyone’s opinion on those, I may be missing something !

22

I am not a “doomsayer”, I am a realist. Everyone who is sincerely interested in privacy, should internalize a zero trust mindset. Otherwise you are just fooling yourself.

The privacy priests preach easy solutions “to protect your privacy”: Apps, custom ROMs, secure browsers, Linux, VPN, whatever. They are lulling the people into a false sense of privacy. They are disseminating the harmful idea, that you can get privacy by simply doing X or Y. They tell you, to shut up and not question their “solutions”.

But the root of the problem is somewhere else. The problem is our psychological dependence on internet technology. The less we are dependent on internet and computer technology, the more we gain true privacy. And this is something what can’t be fixed with an app or another device.

23

You have two options:

  1. cabin in the woods
  2. cave in the mountains

I’m not intentionally being snarky here, but threat models exist for a reason: not everyone is about to blow the whistle and getting chased all the way to Russia.

The lower threat models exist for a reason and many people, including myself, are content with that.

24

OP told us his/her threat model:

And I wrote on this basis my reply.

25

Using secure browsers and linux are harmful ideas if you believe in privacy. Very realistic. :roll_eyes: