-
-
Notifications
You must be signed in to change notification settings - Fork 76
Security Training: Organizers and Journalists versus The State
Wiki ▸ Security culture ▸ Persona-based training matrix ▸ Security training: Organizers and Journalists versus The State
Attackers | ||||
---|---|---|---|---|
Random Assholes | Assholes with Resources | The State | ||
Defenders | Individuals | Individuals vs Random Assholes | Individuals vs Assholes with Resources | Individuals vs The State |
Organizers and Journalists | Organizers & Journalists vs Random Assholes | Organizers & Journalists vs Assholes with Resources | Organizers & Journalists vs The State | |
Targeted Activists | Targeted Activists vs Random Assholes | Targeted Activists vs Assholes with Resources | Targeted Activists vs The State |
Before you dive too deeply into this practice material, you should first explore the following lower-hanging fruit in the following order:
- Security training: Individuals versus Random Assholes
- Security training: Individuals versus Assholes with Resources
- Security training: Individuals versus The State
- Security training: Organizers and Journalists versus Random Assholes
- Security training: Organizers and Journalists versus Assholes with Resources
- Use alternate service providers (don't use Google's GMail)
- Ideally, use decentralized alternate services/networks
- Have a Jabber+OMEMO fallback for Signal (for the truly frightening case where Signal is censored)
- Secure your SSH servers.
- Use DNS CAA records to help cut down on TLS certificate spoofing.
- Monitor Certificate Transparency (CT) logs to be notified of spoofed (faked) TLS certificates for your domain.
- Use Tor!!!!!11! (or a VPN, such as OpenVPN, Wireguard, Outline VPN/Shadowsocks).
- Host sites somewhere safe (privacytools.io)
- Consider setting up an
.onion
service to access your site/domain - Journalistic organizations should consider SecureDrop
- Use MAT (or another tool) to remove document metadata before sharing online (specially if you need to protects your source)
- If you are providing shared hosting (virtualized, cloud, or shared) environments and infrastructure on legacy hardware, patch the (Intel) hardware on which these environments run using the Intel Microcode Boot Loader.
- awesome-selfhosted - a thorough list of "awesome" self-hosted alternatives to managed services
The NYC chapter of the Anarcho-Tech Collective provides technological and digital infrastructure support services to anti-fascist, anti-racist, and anti-capitalist organizations in New York City. See our Activities and events page for details. Read our Welcome guides to get involved.
We appreciate your support to help us do what we do. If you have the means, please donate BitCoin to 17ByVbkM6mf7bytqWRFwzjqradBkmVh4Tr
.
Found an error in these pages? Please let us know by submitting a new issue ticket.