Internet Communications
From Steal This Wiki
Communications via the Internet
Pretty much all internet communication is or can be monitored by the authorities. Certainly, once you're identified as a dissenter, everything you do will be watched.
This section lays out ways to work within this environment and ways to, in some cases, get around the overseeing eyes of Big Brother.
Using Email Securely
While access to internet cafes or other public access point maybe monitored (CCTV will hardly ever be noticeable), if you pay by cash and use a disposable one time email address like hotmail or gmail it is very unlikely that your identity will be pin pointed. This is obviously only useful if the the recipient is not in danger of being compromised or if you can agree predetermined times to communicate using 'disposable email addresses at each end.
Looking at Web Pages Securely
Remember that while you are looking at web pages all kinds of information may be free to leak into you mind and even your soul. Check that you are conscious of this at all times. If possible use an ad blocker and make sure you do not look at web pages when you are tired or under the influence of any medication that may reduce your conciousness. Even the most legitimate looking and well designed web page may well contain information that is either completely incorrect or deliberately misleading.
Social Networks & IM (Instant Messaging)
Although fun and even useful, be aware that social networks can expose your personal details to other people. Make sure you understand what you are sharing with whom. Many services by their nature allow many people even the whole of the internet to see the message you thought you just sent to a friend. Educate yourself and be aware.
IM tends to be more unambiguous but like email is inherently not secure or private.
Encryption
While it is fairly trivial to install industrial strength free open source email encryption on any personal computer like GNU Privacy Guard for windows or see here for other platforms, it is only as good as your personal security habits. It maybe easy enough for security agencies to crack your encryption and there may well be 'back-door' access that you don't know about, you can only consider this to be a way of slowing down third party access to your private information. If any third party wants access to your information they may feel the quickest way is to 'persuade' you to had over your encryption keys.
see Crypto section below.
Remember Pattern Matching
Remember that in general the pattern of your web browsing and email contact just like the pattern of your phone calls and credit card transactions will be much more telling than individual records. Just in the way that Credit card companies will now automatically notice if your spending goes outside the norm either in geography or amount it is certain that electronic communication can be monitored easily in the same way and act accordingly.
Email - What it is and isn't! (and thoughts on security)
Email is short for electronic mail. Now that we have email, email users refer to regular mail — received via the Post Office — disparagingly as Snail Mail. Inherent in its form, is its speed. When you send a letter through snail mail it can take days to arrive. When you send an email it arrives in the recipient's "email box" (inbox) nearly immediately. The only delay being the time it takes for the sender and recipient's email servers and the recipient's email client to synchronize with one another.
There is another difference though, (every rose has a thorn, right?) while snail mail arrives days later and doesn't run on Sundays it does require the use of tangible resources such as paper and stamps. It does have one benefit that email doesn't — it's usually in a sealed envelope. So speed or security. Oh, and email is probably massively less hungry on resources...
In practice, the only thing stopping your postal carrier (or any one of the various postal workers who touch your envelope from the time it's picked up to the time it's delivered) from opening and re-sealing your mail is the law of your country (but when did that stop anyone?). When it comes to email, they are still figuring out how to handle it from a legal perspective. Recent court decisions have tended to side with privacy advocates when it comes to who can read your email, how it is obtained and the responsibilities of the Internet Service Provider (ISP).
On the other hand ISP whistle-blowers have informed the public that media companies such as AT&T who provide you with your internet service wasted little time in responding to the government's request/demand for access to its data and voice lines. If you are using email you should expect the same kind of privacy you have when you are browsing the internet: None. Assume that someone is reading your email and assume that someone is watching all of your internet activity.
Don't communicate important or sensitive information through email. Once you've established groups of people or partners in actions, only use email when absolutely necessary. You should be similarly concerned about talking on the phone, but somewhat less so. The bottom line is that the only secure methods of communication involve direct conversations and sealed envelopes. But if there is a reason for the government to suspect you of illegal activities (read: anything they don't want you to do for any reason), then you should be careful on the phone and using snail mail just as you are careful with email.
Email can still be a good way to share reference material or for bringing people together. Still, be careful with it. Don't give your email address to anyone unless you know them or are confident in their security. When you sign up for access to sites on the web that require log-ins, read their privacy statements and never provide your email address, even to a person or a party appearing to represent your ISP. Don't even give your email password to your friends or family. Don't use your email to store important information or personal files on financial or other personal information — save it locally on your computer and/or print it out for your files. If something arrives in your email inbox that might be necessary for someone else to be able to access in an emergency, or if you are unavailable — temporarily or otherwise — then it doesn't belong only in your email inbox.
The Bottom Line...
The bottom line is that your email inbox is yours and yours alone, Email offers a efficient and easy means of communication for people with access to it but it's also easily vulnerable to access from the outside. Treat it appropriately, and treat it with respect.
Months can go by if you are planning something with your friends on email without any indication that it's being accessed illegally, you can let your guard down, believing that you are speaking in private and then suddenly, without warning, you're being hauled into jail and your computer is taken as evidence against you.
You might not have done anything, but that doesn't matter. We no longer live in a society where the government allows free speech if we ever did. But hell, governments never never stopped anyone doing anything.
Even the suggestion of the idea of a notion of an intangible threat is enough to put you away. And the more innocent you are, the more likely you are to be tortured — cops, especially the feds, don't like to be wrong, and it should be obvious to anyone who reads the news that the government will stop at nothing to get what it wants or to make it appear like it has what it wants. Don't let your own email be your undoing. Use it with respect and caution.
Webmail
Webmail is now cheap and plentiful. Just remember that the contents are readable by anyone that your company wants to give access to, even if you have deleted the messages; many services just make them invisible to you while still keeping a full archive for the cops. If you are ever in jail or any institution, make a new account and don't e-mail anyone but non-activist friends and family, as your email and surfing will always be watched.
When using webmail (or generally browsing), try to use a browser like Firefox, which has many extensions that are perfect for hiding/deleting/encrypting your history or your searches or your email content.
Free email sites
Most everyone and their dog does free email now. Here are some of the big ones:
- Freenigma is a Firefox extension for encrypting emails from Yahoo or Gmail.
Local Email
Local download email is the original way to get your email, but your information is saved on your hard drive by default. You read files that are downloaded automatically to your drive by your email application. Everything you send and receive, in addition to being kept by the email server in the same way that webmail works, is also stored on your drive.
The files are deleted from the server and saved on your computer. Often, emails remain on server backup even after you retrieve and delete them. All of these emails are readable by a pig who gets his hands on your laptop.
Whether using local email or webmail, your emails are kept on a server. ANY and ALL internet communication can be intercepted or monitored.
How to Post Information on the Web
Keep It Simple
Not everyone has a cable modem, DSL or dedicated T1 line. When designing a website or other web presence, consider making a low graphics or even graphics-free version for folks using dial-up services or overloaded proxy services. If you're running a web radio station, consider a Low-Fi audio feed. For the truly security cautious Flash, Java and Javascript plugins are all problems as are other plugin type website gadgets. Give viewers the option of viewing a straight HTML site with normally linked pictures and downloads. Test your site in Internet Explorer, Links, LYNX, Firefox/Mozila, Konqueror, Opera, and mobile phone browsers and almost everyone should be happy.
Blog & Micro Blogging
There are many free blog sites which have many options. Most now have an option to post via SMS and email. If you want a regular readership, be sure to post on a regular basis (at least once a week).
Popular Blogging Services
Blogger Hosted for you for free. Part of the Google empire (for good or evil?).
WordPress.com Choice of hosted of download the software and run on your own server.
MySpace Hosted Heavily monitored by the US Government and owned by Rupert Murdoch's News Corporation (The goons who run Fox News)
Micro Blogging Services
Mostly known by the biggest of the pack which is currently (Aug 08) Twitter. Allows you to post a SMS length text message from anywhere that is in some way connected to the internet. This includes to and from most modern mobile (cell) phones. You can choose who can see your postings; either people you approve or anyone.
College or Personal Web Space
Most colleges and some ISP's give webspace and a shell account when you register. An account for low bandwidth sites will be a fine option, but if your site becomes hot quickly, you could be shut down or charged for bandwidth usage.
Geocities offers free, yet limited web space. The design aspect is incredibly simple (drag and drop), and features a way to include HTML code. However, all of your pages will have closeble advertisements on the right-hand side of the page. Limit your use of bandwidth by limiting your image, video, and music uploads.
Bittorrent
The bittorrent protocol allows for easy downloading of large files, as well as easing the dissemination of your own stuff. Using torrents and tracker websites, you can find almost anything from the latest movies and games to applications and operating systems. The bittorrent protocol uses your upstream bandwith to reshare the content as you are downloading.
- Warning: Consider using PeerGuardian 2 or similar block list software if you download unlicensed content through P2P networks. This may protect you from being contacted by known copyright license collection organizations that are known to use questionable legal intimidation tactics.
Photohosting Sites
Photo hosting sites are an easy way to distribute or share photos.. Be sure to read the terms and conditions to be sure you retain rights and ownership if that is important to you, you will also want to research the takedown policy for controversial content. Here are a few sites http://www.photobucket.com http://www.imageshack.us http://www.flickr.com Flickr
Photo File Security
Remember kids, your camera does leave a digital fingerprint the cops can follow, strip the EXIF data from all photos before posting so they are less easily traced. In Linux install the program jhead which edits the JPEG image file headers, in command line type
jhead -de *
in your photo directory and date and camera information for all of the .jpeg and .jpg files will be stripped. If you are a Windows or Mac user just select and copy the part of the pic you want to the clipboard, then paste into a paint program and save.
Your cameras pixels also leave a fingerprint, there has been some work eliminating the background uniform pixel noise from cameras by adding a random pixel shading to pictures. If you plan to photograph for radical causes it is wise to use a different camera than the one you use to post family photos on flickr.
Indymedia
Indymedia is a news site for an alternative viewpoint. It is a very activist source and covers activist news.
Many news sites now include a discussion area at the bottom. This is usually not read by the regular news viewer and is mostly a place for debate between posters.
Video on Torrent or Video sites
Video of police violence, corpgov malfeasance, or active resistance can be posted to video viewing sites or to bittorrent location sites. YouTube which has been bought by Google Video are basic sites for this, as they offer a huge number of viewers, but you may be more easily prosecuted if the pigs want to sue the video of them off of the web. Youtube will delete videos of police or other violence it it exceeds their acceptable policy. Liveleak and other video sites get less traffic but have more open terms or service.
Usenet and Listservs
Usenet used to be a great way to spread and discuss information. Much like the abuse of the CB radio networks in the USA, the sheer weight of spam and flame wars drove most serious users out, excluding a few special interest groups. Usenet can still be useful, especially if you are able to filter through the garbage. The good stuff can be filtered from the bad stuff using email applications or webmail services that provide good filtering, sorting and viewing options. A well set-up inbox can be extremely helpful in getting to the information you really want to read.
http://en.wikipedia.org/wiki/Usenet
Internet Phone Communication - VOIP (Voice over Internet Protocol)
Skype is a "free" VOIP (Voice over Internet Protocol) service, but with proprietary communication protocol. The closed nature of the protocol make not possible to check the privacy level. If possible prefer free and open software like Ekiga
Free World Dialup Free open SIP service
Instant Messaging Anywhere
There are several instant messenger clients and services, most free for anyone to use. If you look around, you can even likely find one that will blast through your work or school firewall. Don't expect any IM's to be private, and understand that most services keep a log.
Web Radio Streaming
Stream like the professionals do! Software and hardware for web-streaming is easy to obtain and easy to set up, with the hardware cheap, and the software free and open-source. Get yourself an older machine, and boot some sort of Linux/BSD operating system on it. Debian[[1]], Ubuntu [[2]] are easy to set up GNU/Linux variants, and NetBSD [[3]] is a portable BSD system. Install icecast[4] and rip/download some mp3s. Information on each of these OS and programs is available on their websites.
Network Printing
While not really getting your message out ON the net, you can really get a radical message OVER the net to unsuspecting audiences. If you can make an exciting eye-catching flyer, people will recognize and grab your work. You have to figure out how to get past firewalls from outside or even print at your own corpgov job without getting caught (or, print it on the day you are fired). Print servers are also often unpatched for security and become a great scan server to use in initiating attacks on the network. Another fun idea, if you figure out the printer admin access, is to upload a script on the day you quit that bank job that will regularly print radical messages, posters, or even this book until the IT department wipes or junks the printer or server. However, attacks which involve printing out all of the ink and paper are not usually warranted as we are not at war with the trees.
Most schools offer computer labs and allow students to print a maximum number of pages a day. Use this to your advantage! Draw up some fliers, print them on 3x3 settings off of a school library or computer lab printer for (somewhat above) your maximum number of free pages. Doing this once a day, or whenever the advisors change shifts to get an unlimited supply of print jobs.
Connecting:
Wi-Fi network
Many neighbors have open wifi networks that were left in their default unlocked mode. This is either by accident or the owners wanted to give free access. Often times, the owner will not change the default password from "admin" to a better password, so you may be able to gain access to the network by using the "admin" password. Many of these "admin" passwords can also be found online. Be a good nerd, and at most open ports or DMZ your machine, if you will be around for awhile. Don't rudely lock someone out of their AP or change the SSID to 10053r, p0wn3d, or 1d10t. Something like that will likely make them secure the node, ruining a good open node.
Wi-Finder
Cheap Wi-Finders, keychain wifi detectors will help you quickly survey an area to see if you have a Wi-Fi node nearby, that way you can leave your lappy in the pack. A good idea is to waterproof and tape one to your bicycle handlebars or stick it under the sun shade of your bike helmet so you can see the LED's.
Net&Buzz
Most hipper local coffeehouses offer free WiFi and the signal often leaks out into the surrounding area. If you buy coffee there regularly, thank them so they keep it running. If you need Internet for a long stretch, go in after taking a bath and wearing clean clothes; that way they won't kick you out. Plug in and buy a coffee or cake at least every hour and a half. Avoid squatting at high traffic times and most importantly of all, leave a tip!
Cyber-Hobo Code
Where there is open wireless to be had, why not let people know? Take a tip from Wall Painting and use our hobo code, )( the opposing half circles means open wireless node, while a closed circle means a closed network, chalk it on the curb. If you manage to crack the encryption on a closed network and get online leave the passphrase on the corner of the building near the ground.
Where to Sit
When out using free public wireless Internet, there is often a dearth of chairs. Many camping stores sell a light, inexpensive mini tripod stool which folds up into a 2/3 meter long bundle. You can strap this to your bike frame or pack for portability.
Cantenna, Antenna or Woktenna
If you are able to detect a wireless access point but not connect, often a directional high gain antenna will get you a strong enough signal for full connectivity. You can build or buy these antennas. http://en.wikipedia.org/wiki/Cantenna
If you can buy them, it is advisable, for durability sake, to spend the money for a 14dB or higher patch (flat) antenna and a quality tough antenna pigtail. Since these pigtails are fragile, a spare is advisable. Even if your laptop has built-in wireless, a high power removable wifi card that you can attach your antenna to will get you online in many densely populated environments where the built in antenna would normally fail.
Another option is the so-called "Wok-fi" antenna - which is often cheaper and more effective, at the expense of being bulkier and more fragile.
WEP/WMA
WEP is an old encryption used on 802.11b wireless networks. It is easily cracked, and some business and government offices may have an older personal wifi access point installed in big exec offices so they can play on their mahogany paneled laptops. Any reasonable IT department would have implemented better security.
Our hacks use a computer running Linux but there are also windows and Mac programs for this. Airsnort and Aircrack can help you bust the WEP/WMA encryption: this software package comes as an downloadable option with most Linux distros. Sample some net traffic, then let Aircrack look for weak packets, unlocking the encryption key. If your are a MS-Windows user, booting up with Knoppix STD or other security live distros will give you most of the security hacking tools you will need.
Community Wireless Co-Op
Many cities have community wifi co-ops which provide free internet and possibly other services from their access areas. These are great for anonymous surfing. Be sure to clear out all personal identifying settings and cookies from your browser and computer before you feel too secure and of course using TOR helps obscure what you are doing too.
To start see if you have any local businesses that wouldn't mind hosting wireless internet for their customers. This can be as simple as installing a used wireless access point and opening it up to an AP with a custom Linux firmware on it so you can control bandwidth and other services. While there are companies who may give out free hardware and even Internet access to businesses willing to host their service we mostly avoid them since they are ad based services and who knows what information is being reported back to home base.
For local businesses interested in hosting wireless internet for their customers simply research ad based internet alternatives such as http://www.anchorfree.com. They will provide the business of interest with the equipment and setup.
Pirate Wireless
An interesting spin on community wireless is if at work you find a live network cable and power port you can just plug in an old access point and make a pirate wireless hotspot, of course it would have to make the signal available somewhere useful to justify the expense, maybe a directional antenna to extend the range and some disguise is in order to keep it safe. Alternatively drill holes high on the wall to the outside for your wires and install a plastic waterproof electrical box outside where there would be no suspicion. Make everything look professional and seal all holes for moisture and it might last for years.
HTTP over DNS
Many who pay for WiFi networks or crippled corporate networks still allow DNS queries. This opening can be exploited to allow tunnel access to a server and then out to the Internet. http://thomer.com/howtos/nstx.html
Cellular GPRS
Mobile phone based Internet connections are quite expensive and have the added detriment of being fully traceable back to you within a few meters, like all mobile phone use. The upside is possible broadband, even in remote areas or while in transit. However, it drains battery life quickly, and will give you a very sub-par viewing experience.
Mobile Acess Point
Most of the Linux based routers have an internal serial port or two. It will be either 3.3v or 5v. This serial port is a great way to connect a whole campout or crash house to the internet, you will need to add PPPD to the firmware and set up the config files. Use the mobile phone to dial in or get GPRS access, as most unlocked mobile phones accept serial connections and almost all phones accept some Hayes AT commands, you could also cable connect to an older real(non-winmodem) modem this way if DSL is not an option.
Add a battery pack or cigarette lighter adapter and you can even share Internet with a group traveling in several nearby cars, a train, or a bus. Beware of the next cellular bill after your net party unless you have an unlimited data account.
Bluetooth Sniping
Bluetooth, just like Wi-Fi, uses 2.4 Ghz microwaves. This means Wi-Fi directional antennas and amplifiers can be soldered onto your Bluetooth dongles and cards. Using this technique, locked executive phone books can be obtained, bogus phone or sms messages can be sent, or GPRS internet connections can be established. http://www.newscientist.com/article.ns?id=dn7461
Wired Ethernet
Often, you can quietly plug a patch cable into the library network when nobody is looking, Know how to get past the often minimal security, and don't abuse the sneak on. The library is our friend, not a thing to be abused.
Subnet Sniffing
Use of Linux "tcpdump" and watching the traffic will help you establish what subnet you are plugged into, even if there is no DHCP server to hand you an IP address. The "ifconfig" command will be used to set your IP address and subnet, "route" will be used to set your internet gateway. Windows users can use the GUI to add network a address and default gateway settings.
DNS
If you have to sneak onto a network without a DHCP server to give you an IP address, you may need to plug in your own DNS servers found in 'network settings'. There are a few stable ones in locations all over the world. Either edit /etc/resolv.conf and add these addresses in Unix/Linux or change the Windows DNS settings in your network TCP/IP settings.
- 208.67.222.222
- 208.67.220.220
PPPoE and VPN
Many ADSL providers use PPPoE or VPN to connect. We are still looking for a crack to this protocol. We would be thankful for any tips.
Mac Address Spoofing
Every network device has a unique ID called a MAC address. If you copy another machine's mac address and use it on your computer, you may be able to obtain access on certain wireless or wired networks. Often there will be an authentication of some other type you must pass as well, but the MAC address is often an easy way to secure home networks. If you do get kicked from a network, try changing the network MAC address (MAC address has nothing to do with being a Macintosh or not), as this is how a machine is usualy banned from a network. MAC addresses are also used in wireless networks.
Dialup
Free Dialup Services
When a corporation "gives" you internet, beware, as you will likely be forced to stare at ads on part of your screen. Worst-case-scenario, they have full access to your data.
- New England http://www.freedialup.org/site/
- New York http://www.metconnect.com/about.html
- Western Washington http://www.nocharge.com/connect.htm
- USA http://account.netzero.net/s/landing?group=freecorp&refcd=cj&cf=cj&AID=10388574&PID=61738
Netzero lets you have ten hours of dialup internet for free. This is an ad-supported service, which only works on either MS Windows or Linspire-Linux platforms.
- Denver, Co http://www.nyx.net/
Nonprofit Unix shell and dialup access co-op, lots of l33t options for connect.
If you are on the run and need to get online, see Free_Telephones for tips on covertly connecting to phone lines.
Crypto:
pgp and gpg
PGP (pretty good privacy) and its younger open source cousin GPG (Gnu Privacy Guard) are simple programs that use a shared key and a private key to encrypt data and messages. Many programs have GPG. Inside one of the most useful is a clipboard helper where you paste your text into the box, hit the encrypt button, and your clipboard now has the encrypted message. There is really no end to the applications that can have GPG inside from VOIP phones to instant messengers.
TOR Onion Servers
Obfuscate the origin of your connection. This provides good privacy from end use sites, but not against telcos and some larger governments who have the ability to monitor end to end internet packet traffic in real time. http://en.wikipedia.org/wiki/Tor_(anonymity_network)
If you find that the TOR network is suddenly not working be sure to check for an update in version at the http://tor.eff.org/ website. Some major Linux distros and other software packages may fall behind and not issue automatic updates if you have not set the updater to check the official TOR package sources.
One often unused feature of the TOR network is the ability to host hidden servers. Once you have the software running you can visit .onion sites which are as difficult to trace as a web surfer running TOR. Visit http://l6nvqsqivhrunqvs.onion/ for a popular reliable hidden discussion forum while your TOR is turned, http://eqt5g4fuenphqinx.onion/ is the official TOR core.onion site when it is up, here is where sites on the onion should be listed. Better yet set up your own hidden server.
SSH encrypted shell access
The standard secure way to connect for console or tunneled connections to most Unix/Linux type servers. You can use SSH to tunnel or forward almost any service see http://souptonuts.sourceforge.net/sshtips.htm for more ideas. See http://www.openssh.com/ for the real thing or http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html for Putty the small Windows client which will happily run from your USB keychain drive.
The following command you will start a Socks5 type proxy to forward all of your browsing to a remote server vial a remote tunnel:
ssh -D 1420 user@server.com
The -D means you want to have SSH make a Socks5 type proxy the number (1420 or whatever you like) is the port you want to connect it to. User is your username on a remote server and after the @ sign is the web address of your server, you will be asked for your password after connecting.
If you want to keep your browsing free of the IT department entirely also route your DNS requests through the Socks proxy, in Firefox type
about:conf
in the address bar and hit enter, you will be dropped into the manual config editing page of Firefox, scroll down to
network.proxy.socks_remote_dns
and toggle it to true (default is false) now got to Edit>Preferences>Connection Settings and click the Manual Proxy Configuration button, In the SOCKS Host add the address 127.0.0.1 and the port will be whatever you set after the -D (our example used 1420, choose something over 1000) be sure that SOCKS-5 is selected. Once TOR is set up and working install Torbutton in Firefox and add your port settings to make your switch quick as a mouse click.
If your boss blocks port 22 (normal SSH port) you can be a sneak too and route through the almost always open SSL port (443).
Network Stealth
Disguise Your Gear
If you have secretly left a server in an office or other secure location, maybe an inside job, using their bandwidth broadcasting your radical news it must look like it belongs there. A nice clean modern case can often be found that will match the equipment where you are making the setup. Other options may be to to hide the server above ceiling tiles or placing a very small mini-ITX or other single board type machines double side taped under or behind a desk or cubicle partition. Hunting these down will drive IT nuts if they even ever figure out where all of their bandwidth is going. see Infiltrating for more ideas
Covert Server
Shell Accounts Game
Acquire shell access to as many servers as possible to be able to SSH over borders and obscure the point of origin while on the internet. This can be quite useful:
- once you have a shell account, use it to proxify your web use. The web requests will look like they came form the server and not you. See SSH encrypted shell access above for details.
Wi-Fi and DMZ - A router to put your box on the net
Many home DSL lines have the Wi-Fi router unconfigured. Use the default password to take control and DMZ your machine. You are now live on the internet and can direct your domain name to this IP address for small scale web presence.
Dynamic DNS
There are now many dynamic DNS and DNS forwarding services available for free. Using these services you can direst web traffic from a domain name to your constantly changing DSL line IP address, some services also will redirect to an unblocked network port if your ISP blocks port 80. Many home network routers will automatically update your dynamic DNS provider, if your router does not support these updates there are many update programs that run on Windows, Mac, and Unix/Linux.
Generic Owned Box plugged into an Open Network
Any old computer plugged into a DSL line or office network and allowed to have an IP address on the internet can be a hidden server. Your server can be used to store files, serve a website, or even remotely browse the net, obscuring your location.
Arousing Suspicion
An encrypted transmission will generate suspicion on the internet. Always assume your data is being sniffed and act accordingly.
Anonymous Surfing
There are services that allow web surfing by-proxy which leave behind no trail of your visited websites on the computer. Great for sneaking past work or school snoops, but the Feds might be able to watch these networks. These proxies slow down your connection speed a bit, and may interfere with downloading, but for security, it's worth it. However, the fact that you've been on a proxy site for two hours may attract suspicion.
- Anonymouse - http://anonymouse.org/
- Guardster - http://www.guardster.com/ (Free low-level service, but won't work on encrypted SSL sites)
- Shadowsurf - http://www.shadowsurf.com/
- Proxify - http://proxify.com/
Off By One
A simple and free Non-Java web browser for Windows that fits on a CD or flash drive, but doesn't require installation onto the hard drive for use. It's only 1.2 MB and can be compressed down to about 460KB for distribution. When the disc is removed, all browser information goes with it. The page and image caches are memory-resident and utilize no disk storage, so after each session, any "cookies" simply vanish. The drawbacks to its small size is that it doesn't support JavaScript, applets, plug-ins or Flash.
Mozilla Firefox - Portable Edition
A 25 MB version of the web-browser that can travel with you on your clip flash drive (along with your bookmarks and cookies that won't be on the computer you're using). Runs on Windows or Wine on Linux/UNIX.
Torpark
Torpark is a useful free software that allows you to surf the internet anonymously. It can be used to help confuse the government or police from easily finding your location, and, when installed onto a flash drive, it can be used on public computers to bypass any filters. It can be found at this location: http://www.torrify.com/index.php. Torpark now includes red underline spell check built into the modified Firefox browser.
Links
Humorous and/or useful page of further links on this topic:
- Free Internet tools for tin foil hat wearers. Good annotated links to all kinds of anonomizers, Mapping, spying and so on.
- Adeona is an open source cross platform application that will help you or the person you liberated the laptop from locate it again. Yes it's the one that allows you to take pictures of the current custodian of the laptop in question as well (plus instructions for wiping it).
