91–100 of 108 posts
We have a /48 at home using IPv6 privacy extensions for the full address but that isn’t a useful component of a strategy if I’m being identified by the /48 rather than the full 128-bit address.
OK, it's not horrible advice. But there's no mention of Tor, which is arguably the best available way to "avoid leaving tracks around the Internet". And better yet, using Whonix, which prevents leaks around Tor. Using multiple email addresses is good. But if you're sloppy about browser hardening, they'll all get linked. More generally, there's compartmentalization. Not just multiple email addresses, but multiple VMs,…
Shout out to https://www.qubes-os.org/ Qubes OS, an Open Source research implementation of this concept on the OS level. BYO OPSEC.
> If you’re in that category, Ms. Winterton recommended Ghostery, a free plug-in for most web browsers that “blocks the trackers and lists them by category,” she wrote. I’m not sure I can recommend Ghostery, as their business model is a bit suspicious: https://en.wikipedia.org/wiki/Ghostery#Criticism > Using websites whose addresses begin with https are also safe; they, too, encrypt their data before it’s sent to you…
I would suggest Privacy Badger nowadays (as a complement to the irreplaceable uBlock origin).
OK, it's not horrible advice. But there's no mention of Tor, which is arguably the best available way to "avoid leaving tracks around the Internet". And better yet, using Whonix, which prevents leaks around Tor. Using multiple email addresses is good. But if you're sloppy about browser hardening, they'll all get linked. More generally, there's compartmentalization. Not just multiple email addresses, but multiple VMs,…
> More generally, there's compartmentalization. Not just multiple email addresses, but multiple VMs, connecting through different VPNs, and/or Tor instances. Modern machines can run several Linux VMs, and switching among them is as easy as switching among app windows. Shout out to https://www.qubes-os.org/ Qubes OS, an Open Source research implementation of this concept on the OS level. BYO OPSEC.
The learning curve for that is steeper than for VirtualBox, however. As is, with absolutely no doubt, the security level. In that it uses a hardened version of the Xen hypervisor. That also means tighter hardware requirements, however.
My suspicion is that few know, and fewer are doing it.
An important goal? Help those who care enough become aware enough to take action.
Earlier quoted context omitted.
> More generally, there's compartmentalization. Not just multiple email addresses, but multiple VMs, connecting through different VPNs, and/or Tor instances. Modern machines can run several Linux VMs, and switching among them is as easy as switching among app windows. Shout out to https://www.qubes-os.org/ Qubes OS, an Open Source research implementation of this concept on the OS level. BYO OPSEC.
Yeah, love Qubes too. The learning curve for that is steeper than for VirtualBox, however. As is, with absolutely no doubt, the security level. In that it uses a hardened version of the Xen hypervisor. That also means tighter hardware requirements, however.
> Log in or create a free New York Times account to continue reading in private mode."
quite ironic :)
Install uMatrix and block all 3rd party JavaScript. It breaks functionality in some sites that embed social networks' widgets, but other than that works like a charm. As a bonus sites load at least 30% faster.
Exactly my experience, going on 3 to 4 years now. Spend the time to learn uMatrix. It's an incredible investment into yourself and your web experience. I barely browse on mobile anymore since I don't have uMatrix, although Brave does allow blocking scripts and some stuff quite easily. Highly recommend Brave on mobile.
Earlier quoted context omitted.
Yeah, love Qubes too. The learning curve for that is steeper than for VirtualBox, however. As is, with absolutely no doubt, the security level. In that it uses a hardened version of the Xen hypervisor. That also means tighter hardware requirements, however.
I agree fully. I would be really interested in generalizing their security model amongst more (probably inadequate) hardware. We can dream :)
While I was at it, I used multiple pfSense VMs to create nested VPN chains. Sort of like Tor circuits, but static (so much less anonymous) but also much faster.
Then Whonix came along. And it works very well with nested VPN chains.