Live data from Hacker News

Ask HN: My country is undergoing a coup, which encryption software should I use?

news.ycombinator.com

11–20 of 54 posts

Re: Ask HN: My country is undergoing a coup, which encryption software should I use?

#14
Use briar [1] for online+offline end-to-end encrypted messaging. Use LineageOS [2] without gapps (aka without Google Play Services) and get a device that is officially supported with current LineageOS version. Don't use any XDA developer builds, because they're known to be infected with malware.

Obviously don't use Meta or Google apps, because that's where the backdoors are for governments. Don't use WhatsApp, don't use Telegram, don't use Threema. They're compromised.

Use AppWarden [3] to enable/disable/verify the usage of known trackers in your apps.

Use NetGuard [4] as an Android firewall.

Use F-Droid [5] and Fennec builds [6], with uBlock Origin to protect your smartphone from malvertisements.

Never synchronize your contacts, block contacts access for all Apps; and make sure you don't use their real names. Contacts stored on or accessed by SIM cards (e.g. call history) can be downloaded via Class 0 SMS, remotely.

If possible, I'd avoid MediaTek based SoCs because their rootkit was leaked a couple years ago and it works still on newer chipsets. I would recommend an "as open source as possible" device, like the Google Pixel devices or the Fairphones.

On your Desktop or Laptop machines you should switch to a Linux distro of your choice. The most reasonable secure ones are Arch (not beginner friendly), Manjaro, OpenSUSE - or as a beginner friendly alternative - LinuxMint.

Would advise against Debian/Ubuntu though for security reasons (which would include LinuxMint).

The Arch maintainers (and therefore Manjaro, too) heavily reduced the attack surface of SUID binaries or LOL binaries that could be abused for privilege escalations and/or remote exploits/persistence etc. [7]

[1] https://briarproject.org/

[2] https://wiki.lineageos.org/devices

[3] https://gitlab.com/AuroraOSS/AppWarden

[4] https://netguard.me

[5] https://f-droid.org/

[6] https://f-droid.org/en/packages/org.mozilla.fennec_fdroid/

[7] https://gtfobins.github.io/

edit: clarification of LinuxMint

Re: Ask HN: My country is undergoing a coup, which encryption software should I use?

#15

Is there an actual coup going on? I can't find any articles on this.

There isn't a coup.

A controversial judiciary bill that was spearheaded by Netenyahu just passed in Israel despite massive opposition to it.

Also, to OP - nothing will work if Israeli ISPs and the Govt actually wanted to implement internal surveillance (which they in fact do in some limited manner).

That said, I doubt such a situation would arise.

Re: Ask HN: My country is undergoing a coup, which encryption software should I use?

#16

Is there an actual coup going on? I can't find any articles on this.

My understanding is there is legislation being enacted which strips power from elected or appointed groups and places that power with the executive.

A soft coup through “patriot act” style legislation

Re: Ask HN: My country is undergoing a coup, which encryption software should I use?

#17

Use briar [1] for online+offline end-to-end encrypted messaging. Use LineageOS [2] without gapps (aka without Google Play Services) and get a device that is officially supported with current LineageOS version. Don't use any XDA developer builds, because they're known to be infected with malware. Obviously don't use Meta or Google apps, because that's where the backdoors are for governments. Don't use WhatsApp, don't…

I really don't want to derail the thread as it is useful, but i'm curious about the security reasons against Debian/Ubuntu.

Re: Ask HN: My country is undergoing a coup, which encryption software should I use?

#18

Use briar [1] for online+offline end-to-end encrypted messaging. Use LineageOS [2] without gapps (aka without Google Play Services) and get a device that is officially supported with current LineageOS version. Don't use any XDA developer builds, because they're known to be infected with malware. Obviously don't use Meta or Google apps, because that's where the backdoors are for governments. Don't use WhatsApp, don't…

I really don't want to derail the thread as it is useful, but i'm curious about the security reasons against Debian/Ubuntu.

I'm also curious how Mint resolves the security threat of Debian and Ubuntu, given its lineage.

Re: Ask HN: My country is undergoing a coup, which encryption software should I use?

#19

Use briar [1] for online+offline end-to-end encrypted messaging. Use LineageOS [2] without gapps (aka without Google Play Services) and get a device that is officially supported with current LineageOS version. Don't use any XDA developer builds, because they're known to be infected with malware. Obviously don't use Meta or Google apps, because that's where the backdoors are for governments. Don't use WhatsApp, don't…

Why would Mint, a desktop-oriented fork of Ubuntu, be more secure than Ubuntu?

Re: Ask HN: My country is undergoing a coup, which encryption software should I use?

#20
post #5

State overreach and surveillance is a global trend. Don't mind me saying this: As a Jewish citizen with fair skin, a dual passport you would probably do fine, unless you are an Arab... Even under the most tyrannical regimes such as Iran, Myanmar, Russia, China etc. The elite are rarely targeted by the state apparatus. If you are a majority ethnic group with family links in the military, bureaucracy, big business poli…

> trend

Overreach is a trend? So it will be passe eventually?

> global [...] run

To where, Mars?

(Thought I would complement your utterly unhelpful comment with one of my own.)

Post reply on HN