-The hosted version of Hush Line is the first free and open-source anonymous tip-line-as-a-service and the easiest way to get started. It's as simple as signing up, and you'll have a way for anyone to send you a private message. It's for those needing one or more tip lines without worrying about managing and maintaining their infrastructure.
+The hosted version of Hush Line is the first free and open-source anonymous tip-line-as-a-service and the easiest way to get started. It's as simple as signing up, and you'll have a way for anyone to send you a private message. It's for those needing one or more tip lines without worrying about managing and maintaining technical infrastructure.
You'll need an invite code to register for a Hush Line account. To get one, send a message to https://beta.hushline.app/submit_message/hushline-beta. Once you have the invite code, register your account at https://beta.hushline.app/register.
diff --git a/book/print.html b/book/print.html
index ddc0f3b..dd29b90 100644
--- a/book/print.html
+++ b/book/print.html
@@ -318,7 +318,7 @@ The hosted version of Hush Line is the first free and open-source anonymous tip-line-as-a-service and the easiest way to get started. It's as simple as signing up, and you'll have a way for anyone to send you a private message. It's for those needing one or more tip lines without worrying about managing and maintaining their infrastructure.
+The hosted version of Hush Line is the first free and open-source anonymous tip-line-as-a-service and the easiest way to get started. It's as simple as signing up, and you'll have a way for anyone to send you a private message. It's for those needing one or more tip lines without worrying about managing and maintaining technical infrastructure.
You'll need an invite code to register for a Hush Line account. To get one, send a message to https://beta.hushline.app/submit_message/hushline-beta. Once you have the invite code, register your account at https://beta.hushline.app/register.
@@ -327,7 +327,7 @@ After creating your account, you'll be redirected to the login page. Enter the username and password you just created.
Note: To protect your privacy, we don't require any PII, including your email address or phone number.
The hosted version of Hush Line is the first free and open-source anonymous tip-line-as-a-service and the easiest way to get started. It's as simple as signing up, and you'll have a way for anyone to send you a private message. It's for those needing one or more tip lines without worrying about managing and maintaining their infrastructure.
+The hosted version of Hush Line is the first free and open-source anonymous tip-line-as-a-service and the easiest way to get started. It's as simple as signing up, and you'll have a way for anyone to send you a private message. It's for those needing one or more tip lines without worrying about managing and maintaining technical infrastructure.
You'll need an invite code to register for a Hush Line account. To get one, send a message to https://beta.hushline.app/submit_message/hushline-beta. Once you have the invite code, register your account at https://beta.hushline.app/register.
diff --git a/book/searchindex.js b/book/searchindex.js
index 8eb09dc..bc28687 100644
--- a/book/searchindex.js
+++ b/book/searchindex.js
@@ -1 +1 @@
-Object.assign(window.search, {"doc_urls":["intro.html#hush-line-field-manual","prereqs/general.html#general-prerequisites","prereqs/general.html#contents","prereqs/general.html#software","prereqs/general.html#1-tor-browser","prereqs/general.html#2-gmail","prereqs/general.html#3-mailvelope","prereqs/general.html#creating-keys","prereqs/general.html#what-is-pgp-lets-use-a-non-technical-metaphor","prereqs/general.html#4-create-your-keys","prereqs/general.html#5-verify-your-email-address","prereqs/general.html#6-copy-your-pgp-key","prereqs/general.html#app-password","prereqs/general.html#7-create-an-app-password","prereqs/general.html#general-prerequisites","prereqs/general.html#contents","prereqs/general.html#software","prereqs/general.html#1-tor-browser","prereqs/general.html#2-gmail","prereqs/general.html#3-mailvelope","prereqs/general.html#creating-keys","prereqs/general.html#what-is-pgp-lets-use-a-non-technical-metaphor","prereqs/general.html#4-create-your-keys","prereqs/general.html#5-verify-your-email-address","prereqs/general.html#6-copy-your-pgp-key","prereqs/general.html#app-password","prereqs/general.html#7-create-an-app-password","prereqs/threat-modeling.html#threat-modeling-for-hush-line-deployment","prereqs/threat-modeling.html#introduction","prereqs/threat-modeling.html#understanding-the-threats","prereqs/threat-modeling.html#low-threats","prereqs/threat-modeling.html#medium-threats","prereqs/threat-modeling.html#high-threats","prereqs/threat-modeling.html#malicious-actors--misinformation","hosted/getting-started.html#getting-started","hosted/getting-started.html#register","hosted/getting-started.html#log-in","hosted/getting-started.html#getting-started","hosted/getting-started.html#register","hosted/getting-started.html#log-in","hosted/sending.html#sending-messages","hosted/receiving.html#reading-messages","hosted/receiving.html#message-encryption","hosted/receiving.html#mailvelope","hosted/settings.html#settings","hosted/settings.html#profile-settings","hosted/settings.html#display-name","hosted/settings.html#authentication","hosted/settings.html#two-factor-authentication","hosted/settings.html#change-password","hosted/settings.html#change-username","hosted/settings.html#email--pgp","hosted/settings.html#email-delivery","hosted/settings.html#pgp","hosted/settings.html#advanced","hosted/settings.html#delete-account","hosted/admin.html#admin-view","hosted/paid.html#paid-features","hosted/paid.html#additional-usernames","hosted/paid.html#inbox","hosted/paid.html#secondary-inboxes","installation/personal-server.html#hush-line-personal-server","installation/personal-server.html#1-plug-in-ethernet","installation/personal-server.html#2-power-up-the-device","installation/personal-server.html#3-wait-5-mins-for-a-setup-code-to-display","installation/personal-server.html#4-scan-the-code","installation/personal-server.html#5-add-smtp--pgp-information","installation/personal-server.html#6-email-confirmation","installation/personal-server.html#7-using-hush-line","prereqs/index.html#hush-line-self-hosted-prerequisites","prereqs/index.html#general","prereqs/index.html#raspberry-pi","prereqs/index.html#vps","prereqs/raspberrypi.html#raspberry-pi-prerequisites","prereqs/raspberrypi.html#hardware","prereqs/raspberrypi.html#prepping-your-pi","prereqs/raspberrypi.html#1-raspberry-pi-imager","prereqs/raspberrypi.html#prep-your-card","prereqs/raspberrypi.html#2-install-raspberry-pi-os","prereqs/raspberrypi.html#boot-up-and-log-in-to-your-pi","prereqs/raspberrypi.html#3-insert-microsd-card","prereqs/raspberrypi.html#4-log-in","prereqs/raspberrypi.html#5-update-your-system","prereqs/vps.html#vps-prerequisites","prereqs/vps.html#digital-ocean","prereqs/vps.html#1-create-an-account","prereqs/vps.html#2-create-a-vps","prereqs/vps.html#3-log-in","prereqs/vps.html#4-update-your-system","installation/index.html#installing-hush-line","installation/index.html#choosing-the-right-deployment","installation/index.html#where-to-install-hush-line","installation/index.html#boosting-security","installation/index.html#maintenance--updates","installation/index.html#conclusion","installation/tor-only.html#tor-only-install","installation/tor-only.html#1-run-the-installer","installation/tor-only.html#2-add-email-information","installation/tor-only.html#3-confirmation-email","installation/public-web.html#tor--public-web-install","installation/public-web.html#1-run-the-installer","installation/public-web.html#2-add-information","installation/public-web.html#3-configure-dns","installation/public-web.html#4-confirmation-email","usage/index.html#installing-hush-line","usage/info.html#information-page","usage/info.html#when-to-use-hush-line","usage/info.html#hush-line-addresses","usage/info.html#share-it","usage/info.html#verify-your-address","usage/sending.html#sending-messages","usage/sending.html#1-tor","usage/sending.html#2-public-websites","usage/sending-files.html#sending-files","usage/sending-files.html#onionshare","usage/sending-files.html#sharing-files","usage/sending-files.html#private-key","usage/sending-files.html#preparing-files","usage/reading.html#reading-messages","usage/reading.html#gmail--mailvelope","usage/handling-files.html#handling-files","features/index.html#hush-lines-features","features/index.html#1-pgp-email-encryption","features/index.html#2-simple-guided-setup","features/index.html#3-tor-ready","features/index.html#4-automatic-https-certificates","features/index.html#5-intrusion-detection","features/index.html#6-firewall","features/index.html#7-automatic-updates","features/index.html#8-ip-address-scrubbing","features/index.html#9-hardened-nginx-security-headers","features/index.html#10-no-account-needed","features/index.html#11-new-censorship-resistance-research","resources/index.html#more-resources","glossary.html#glossary"],"index":{"documentStore":{"docInfo":{"0":{"body":87,"breadcrumbs":5,"title":4},"1":{"body":0,"breadcrumbs":3,"title":2},"10":{"body":27,"breadcrumbs":5,"title":4},"100":{"body":26,"breadcrumbs":9,"title":3},"101":{"body":38,"breadcrumbs":9,"title":3},"102":{"body":45,"breadcrumbs":9,"title":3},"103":{"body":24,"breadcrumbs":9,"title":3},"104":{"body":11,"breadcrumbs":8,"title":3},"105":{"body":13,"breadcrumbs":9,"title":2},"106":{"body":30,"breadcrumbs":10,"title":3},"107":{"body":12,"breadcrumbs":10,"title":3},"108":{"body":31,"breadcrumbs":8,"title":1},"109":{"body":37,"breadcrumbs":9,"title":2},"11":{"body":28,"breadcrumbs":5,"title":4},"110":{"body":12,"breadcrumbs":9,"title":2},"111":{"body":56,"breadcrumbs":9,"title":2},"112":{"body":43,"breadcrumbs":10,"title":3},"113":{"body":33,"breadcrumbs":11,"title":2},"114":{"body":29,"breadcrumbs":10,"title":1},"115":{"body":50,"breadcrumbs":11,"title":2},"116":{"body":27,"breadcrumbs":11,"title":2},"117":{"body":15,"breadcrumbs":11,"title":2},"118":{"body":20,"breadcrumbs":9,"title":2},"119":{"body":22,"breadcrumbs":9,"title":2},"12":{"body":0,"breadcrumbs":3,"title":2},"120":{"body":70,"breadcrumbs":11,"title":2},"121":{"body":0,"breadcrumbs":6,"title":3},"122":{"body":23,"breadcrumbs":7,"title":4},"123":{"body":22,"breadcrumbs":7,"title":4},"124":{"body":29,"breadcrumbs":6,"title":3},"125":{"body":24,"breadcrumbs":7,"title":4},"126":{"body":27,"breadcrumbs":6,"title":3},"127":{"body":18,"breadcrumbs":5,"title":2},"128":{"body":23,"breadcrumbs":6,"title":3},"129":{"body":21,"breadcrumbs":7,"title":4},"13":{"body":77,"breadcrumbs":5,"title":4},"130":{"body":23,"breadcrumbs":8,"title":5},"131":{"body":22,"breadcrumbs":6,"title":3},"132":{"body":47,"breadcrumbs":8,"title":5},"133":{"body":25,"breadcrumbs":5,"title":2},"134":{"body":197,"breadcrumbs":4,"title":1},"14":{"body":0,"breadcrumbs":5,"title":2},"15":{"body":5,"breadcrumbs":4,"title":1},"16":{"body":0,"breadcrumbs":4,"title":1},"17":{"body":13,"breadcrumbs":6,"title":3},"18":{"body":18,"breadcrumbs":5,"title":2},"19":{"body":22,"breadcrumbs":5,"title":2},"2":{"body":5,"breadcrumbs":2,"title":1},"20":{"body":0,"breadcrumbs":5,"title":2},"21":{"body":65,"breadcrumbs":9,"title":6},"22":{"body":21,"breadcrumbs":6,"title":3},"23":{"body":27,"breadcrumbs":7,"title":4},"24":{"body":28,"breadcrumbs":7,"title":4},"25":{"body":0,"breadcrumbs":5,"title":2},"26":{"body":77,"breadcrumbs":7,"title":4},"27":{"body":0,"breadcrumbs":8,"title":5},"28":{"body":32,"breadcrumbs":4,"title":1},"29":{"body":11,"breadcrumbs":5,"title":2},"3":{"body":0,"breadcrumbs":2,"title":1},"30":{"body":31,"breadcrumbs":5,"title":2},"31":{"body":34,"breadcrumbs":5,"title":2},"32":{"body":59,"breadcrumbs":5,"title":2},"33":{"body":56,"breadcrumbs":6,"title":3},"34":{"body":37,"breadcrumbs":3,"title":2},"35":{"body":19,"breadcrumbs":2,"title":1},"36":{"body":21,"breadcrumbs":2,"title":1},"37":{"body":37,"breadcrumbs":5,"title":2},"38":{"body":19,"breadcrumbs":4,"title":1},"39":{"body":21,"breadcrumbs":4,"title":1},"4":{"body":13,"breadcrumbs":4,"title":3},"40":{"body":68,"breadcrumbs":5,"title":2},"41":{"body":10,"breadcrumbs":5,"title":2},"42":{"body":48,"breadcrumbs":5,"title":2},"43":{"body":37,"breadcrumbs":4,"title":1},"44":{"body":0,"breadcrumbs":3,"title":1},"45":{"body":11,"breadcrumbs":4,"title":2},"46":{"body":31,"breadcrumbs":4,"title":2},"47":{"body":0,"breadcrumbs":3,"title":1},"48":{"body":16,"breadcrumbs":5,"title":3},"49":{"body":4,"breadcrumbs":4,"title":2},"5":{"body":18,"breadcrumbs":3,"title":2},"50":{"body":25,"breadcrumbs":4,"title":2},"51":{"body":0,"breadcrumbs":4,"title":2},"52":{"body":8,"breadcrumbs":4,"title":2},"53":{"body":11,"breadcrumbs":3,"title":1},"54":{"body":0,"breadcrumbs":3,"title":1},"55":{"body":6,"breadcrumbs":4,"title":2},"56":{"body":43,"breadcrumbs":4,"title":2},"57":{"body":0,"breadcrumbs":5,"title":2},"58":{"body":33,"breadcrumbs":5,"title":2},"59":{"body":8,"breadcrumbs":4,"title":1},"6":{"body":22,"breadcrumbs":3,"title":2},"60":{"body":8,"breadcrumbs":5,"title":2},"61":{"body":40,"breadcrumbs":6,"title":4},"62":{"body":22,"breadcrumbs":5,"title":3},"63":{"body":17,"breadcrumbs":6,"title":4},"64":{"body":11,"breadcrumbs":9,"title":7},"65":{"body":11,"breadcrumbs":5,"title":3},"66":{"body":44,"breadcrumbs":7,"title":5},"67":{"body":18,"breadcrumbs":5,"title":3},"68":{"body":36,"breadcrumbs":6,"title":4},"69":{"body":8,"breadcrumbs":7,"title":5},"7":{"body":0,"breadcrumbs":3,"title":2},"70":{"body":11,"breadcrumbs":3,"title":1},"71":{"body":12,"breadcrumbs":4,"title":2},"72":{"body":7,"breadcrumbs":3,"title":1},"73":{"body":0,"breadcrumbs":9,"title":3},"74":{"body":24,"breadcrumbs":7,"title":1},"75":{"body":19,"breadcrumbs":8,"title":2},"76":{"body":45,"breadcrumbs":10,"title":4},"77":{"body":0,"breadcrumbs":8,"title":2},"78":{"body":50,"breadcrumbs":11,"title":5},"79":{"body":0,"breadcrumbs":10,"title":4},"8":{"body":65,"breadcrumbs":7,"title":6},"80":{"body":22,"breadcrumbs":10,"title":4},"81":{"body":22,"breadcrumbs":8,"title":2},"82":{"body":31,"breadcrumbs":9,"title":3},"83":{"body":32,"breadcrumbs":7,"title":2},"84":{"body":15,"breadcrumbs":7,"title":2},"85":{"body":12,"breadcrumbs":8,"title":3},"86":{"body":56,"breadcrumbs":8,"title":3},"87":{"body":23,"breadcrumbs":7,"title":2},"88":{"body":24,"breadcrumbs":8,"title":3},"89":{"body":11,"breadcrumbs":6,"title":3},"9":{"body":21,"breadcrumbs":4,"title":3},"90":{"body":35,"breadcrumbs":6,"title":3},"91":{"body":57,"breadcrumbs":6,"title":3},"92":{"body":29,"breadcrumbs":5,"title":2},"93":{"body":25,"breadcrumbs":5,"title":2},"94":{"body":36,"breadcrumbs":4,"title":1},"95":{"body":15,"breadcrumbs":6,"title":2},"96":{"body":24,"breadcrumbs":7,"title":3},"97":{"body":58,"breadcrumbs":8,"title":4},"98":{"body":23,"breadcrumbs":7,"title":3},"99":{"body":33,"breadcrumbs":10,"title":4}},"docs":{"0":{"body":"Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. It's intended for journalists and newsrooms to offer a public tip line; by educators and school administrators to provide students with a safe way to report potentially sensitive information, or employers, Board rooms, and C-suites for anonymous employee reporting. Think of a box in your office or school where people can slip in anonymous messages, with a lock on it that only you have the key to open. It's intended for journalists and newsrooms to offer a public tip line, by educators and school administrators to provide students with a safe way to report potentially sensitive information, or employers for anonymous employee reporting. This guide will show you how to set up your own Hush Line. The source files for this guide are available on GitHub . See that repo for licensing information.","breadcrumbs":"Introduction » Hush Line Field Manual","id":"0","title":"Hush Line Field Manual"},"1":{"body":"","breadcrumbs":"Prereqs » General Prerequisites","id":"1","title":"General Prerequisites"},"10":{"body":"Before using your key, you'll have to verify your email address. Look for a message from Mailvelope Key Server in your Gmail inbox. The message is encrypted, and when opened, you'll be prompted for your Mailvelope password to read the email. After entering your password, click the link.","breadcrumbs":"Prereqs » 5. Verify your email address","id":"10","title":"5. Verify your email address"},"100":{"body":"After logging in to and updating either your Raspberry Pi or VPS, enter the following command to start the installation process: curl --proto '=https' --tlsv1.2 -sSfL https://install.hushline.app | bash Choose \"Tor + Public Domain\" at the first prompt for the installation type.","breadcrumbs":"Self-Hosted » Installation » Tor + Public Website » 1. Run The Installer","id":"100","title":"1. Run The Installer"},"101":{"body":"Hush Line will email the encrypted Hush Line message to the account you configure here. You'll also need to purchase a domain name for your Hush Line. We'll need the following information: Domain name SMTP email address SMTP address: smtp.gmail.com App password (from prerequisites) Port: 465 Public PGP key (from prerequisites)","breadcrumbs":"Self-Hosted » Installation » Tor + Public Website » 2. Add Information","id":"101","title":"2. Add Information"},"102":{"body":"Now, we need to point your domain name to your new Droplet. When the installer reaches the final step, it will display the exact information that you need to enter in your domain's DNS settings. Once the installation completes, you'll see a message that looks like this: ✅ Installation complete! Hush Line is a product by Science & Design.\nLearn more about us at https://scidsg.org.\nHave feedback? Send us an email at hushline@scidsg.org. ● Hush Line is running\nhttps://ourdemo.app\nhttp://jnaoywuss3dbgrmroeoqtsjymzf46in7lzh3bx6nwv3bzvwmhdvqytad.onion","breadcrumbs":"Self-Hosted » Installation » Tor + Public Website » 3. Configure DNS","id":"102","title":"3. Configure DNS"},"103":{"body":"You'll receive an encrypted email confirming your Hush Line's successful installation which, includes your addresses and a link to download Tor Browser. 🎉 Congratulations! You've successfully set up your own public anonymous tip line!","breadcrumbs":"Self-Hosted » Installation » Tor + Public Website » 4. Confirmation Email","id":"103","title":"4. Confirmation Email"},"104":{"body":"Let's learn how to get your very own Hush Line up and running so you can receive private information from your community.","breadcrumbs":"Self-Hosted » Using Hush Line » Installing Hush Line","id":"104","title":"Installing Hush Line"},"105":{"body":"Hush Line deploys with an information page that provides the sender with additional information that might be helpful before submitting a message.","breadcrumbs":"Self-Hosted » Using Hush Line » Information Page » Information Page","id":"105","title":"Information Page"},"106":{"body":"We've leaned on the guidance from Whistleblower.org and included some information from their resources for when to use a tip line. They include when you have evidence of wrongdoing, including: a violation of law, rule, or regulation, gross mismanagement, a gross waste of funds, abuse of authority, or a substantial danger to public health or safety.","breadcrumbs":"Self-Hosted » Using Hush Line » Information Page » When to use Hush Line","id":"106","title":"When to use Hush Line"},"107":{"body":"If you deployed to a public domain, you'll find both your onion address and public website listed here.","breadcrumbs":"Self-Hosted » Using Hush Line » Information Page » Hush Line addresses","id":"107","title":"Hush Line addresses"},"108":{"body":"The information on this page can be shared and the link to the page itself should be posted in multiple locations to make it easy to verify. You can: print the page and place it in common areas, copy the info and email it broadly, add the info link on your website and social channels, and add the link in your email signature.","breadcrumbs":"Self-Hosted » Using Hush Line » Information Page » Share it!","id":"108","title":"Share it!"},"109":{"body":"Before you trust any link, whether an onion domain or a public website, you should verify its address. We encourage Hush Line operators to post their address in at least three different locations - social media, website, and email signature, for example - so individuals sending a message can verify they have the correct address before visiting and sharing potentially sensitive information.","breadcrumbs":"Self-Hosted » Using Hush Line » Information Page » Verify your address!","id":"109","title":"Verify your address!"},"11":{"body":"After confirming that your email was verified, click on the supplied URL. Your PGP Key is in the grey box, beginning with -----BEGIN PGP PUBLIC KEY BLOCK----- and ending with -----END PGP PUBLIC KEY BLOCK-----. Copy your entire key into a notepad for easy access.","breadcrumbs":"Prereqs » 6. Copy your PGP key","id":"11","title":"6. Copy your PGP key"},"110":{"body":"For someone in your community to send you a Hush Line message, they just need to go to one of your addresses and enter their message.","breadcrumbs":"Self-Hosted » Using Hush Line » Sending Messages » Sending Messages","id":"110","title":"Sending Messages"},"111":{"body":"If you chose a Tor-only deployment, you should have seen an output like this after installation was completed: ✅ Installation complete! Hush Line is a product by Science & Design.\nLearn more about us at https://scidsg.org.\nHave feedback? Send us an email at hushline@scidsg.org. • Hush Line is running\nhttp://5450rww63n5yvp5xzojb41rcx63g3pwaig63ezwp×5x75igzh×4w6qyd…onion This information should also be in the confirmation email you received upon successfully setting up your Hush Line. Open up Tor Browser and paste your onion address in the address bar. Tor is a little slower than regular internet, so it'll take a few seconds before your site loads.","breadcrumbs":"Self-Hosted » Using Hush Line » Sending Messages » 1. Tor","id":"111","title":"1. Tor"},"112":{"body":"If you deployed Hush Line to a public website, you should have seen an output like this: ✅ Installation complete! Hush Line is a product by Science & Design.\nLearn more about us at https://scidsg.org.\nHave feedback? Send us an email at hushline@scidsg.org. ● Hush Line is running\nhttps://ourdemo.app\nhttp://jnaoywuss3dbgrmroeoqtsjymzf46in7lzh3bx6nwv3bzvwmhdvqytad.onion In the example above, the first and last addresses can load in regular browsers like Chrome, Firefox, or Safari. The onion-only address needs Tor Browser to load.","breadcrumbs":"Self-Hosted » Using Hush Line » Sending Messages » 2. Public Websites","id":"112","title":"2. Public Websites"},"113":{"body":"By design, Hush Line is a text-only, one-way messenger. We've designed it this way to greatly reduce your attack surface by not opening yourself up to accepting the eventually malicious file. There may still be times when you want to receive files, and the best way to do so would be to use OnionShare in combination with Hush Line.","breadcrumbs":"Self-Hosted » Using Hush Line » Sending Messages » Sending Files » Sending Files","id":"113","title":"Sending Files"},"114":{"body":"OnionShare is a free and open-source tool facilitating anonymous peer-to-peer file sharing. It creates an ephemeral onion service that someone can use to access the files you want to share. The service automatically disconnects once the information is downloaded, leaving no trace.","breadcrumbs":"Self-Hosted » Using Hush Line » Sending Messages » Sending Files » OnionShare","id":"114","title":"OnionShare"},"115":{"body":"Simply select the files you want to share, click \"Start Sharing,\" and share that address in your Hush Line message. Since the files are being shared directly from the computer running OnionShare, you'll have to keep the app open and the device powered on, otherwise your data will be unavailable. Choose the option to stop sharing after the files have been sent, and keep in mind that the person you're trying to send a message to may not be able to check their email daily, but when they receive the files, the connection will automatically close.","breadcrumbs":"Self-Hosted » Using Hush Line » Sending Messages » Sending Files » Sharing Files","id":"115","title":"Sharing Files"},"116":{"body":"By default, OnionShare will use a private key to protect the data you want to share - it's basically a strong password that someone will need in order to access your files. 🧠 Remember to include your OnionShare address and private key in your Hush Line message.","breadcrumbs":"Self-Hosted » Using Hush Line » Sending Messages » Sending Files » Private Key","id":"116","title":"Private Key"},"117":{"body":"Before sending files to someone, first zip (sometimes called \"compress\" or \"archive\"), then encrypt them with your recipient's public PGP key.","breadcrumbs":"Self-Hosted » Using Hush Line » Sending Messages » Sending Files » Preparing Files","id":"117","title":"Preparing Files"},"118":{"body":"When someone sends you a Hush Line message, it'll get delivered to the email account you configured during installation. Messages will have the subject line \"🤫 New Hush Line Message Received.\"","breadcrumbs":"Self-Hosted » Using Hush Line » Reading Messages » Reading Messages","id":"118","title":"Reading Messages"},"119":{"body":"When you click on your Hush Line message you might be prompted to enter your Mailvelope password. Recall that this is the password we set up in our prerequisites. 🎉 Congratulations! You're ready to go! If you have any questions, please send questions to hushline@scidsg.org.","breadcrumbs":"Self-Hosted » Using Hush Line » Reading Messages » Gmail + Mailvelope","id":"119","title":"Gmail + Mailvelope"},"12":{"body":"","breadcrumbs":"Prereqs » App Password","id":"12","title":"App Password"},"120":{"body":"By design, Hush Line is a text-only, one-way messenger. We've designed it this way to greatly reduce your attack surface by not opening yourself up to accepting the eventually malicious file. If you really need to accept files, to help protect yourself better, always follow these rules: Instruct users to zip, then encrypt their files with your public PGP key. Avoid downloading unencrypted files from anyone you don't know. When you download the files, save them to a dedicated, external USB drive, never your hard drive. Open the files with a dedicated, offline-only (air-gapped) computer. Never open the files on your personal or work computers.","breadcrumbs":"Self-Hosted » Using Hush Line » Reading Messages » Handling Files » Handling Files","id":"120","title":"Handling Files"},"121":{"body":"","breadcrumbs":"Self-Hosted » Features » Hush Line's Features","id":"121","title":"Hush Line's Features"},"122":{"body":"To enhance the security of communications, Hush Line integrates the PGP (Pretty Good Privacy) protocol. This ensures that every email message is encrypted, offering a secure channel even if the message's content becomes intercepted.","breadcrumbs":"Self-Hosted » Features » 1. PGP Email Encryption","id":"122","title":"1. PGP Email Encryption"},"123":{"body":"Ease of setup is paramount, and Hush Line’s installation script automates the configuration process. From package installations to system settings, the script takes care of the nuances, ensuring a hassle-free experience.","breadcrumbs":"Self-Hosted » Features » 2. Simple, Guided Setup","id":"123","title":"2. Simple, Guided Setup"},"124":{"body":"For users who prioritize anonymity, Hush Line is equipped to function seamlessly over the Tor network. Upon setup, a hidden Tor service is established, directing traffic to the local server. This provides an onion address, allowing users to access the platform anonymously.","breadcrumbs":"Self-Hosted » Features » 3. Tor-Ready","id":"124","title":"3. Tor-Ready"},"125":{"body":"With cyber threats on the rise, secure connections are crucial. Hush Line integrates certbot, automatically fetching and installing HTTPS certificates. This ensures encrypted communication between the user's browser and the Hush Line server.","breadcrumbs":"Self-Hosted » Features » 4. Automatic HTTPS Certificates","id":"125","title":"4. Automatic HTTPS Certificates"},"126":{"body":"Hush Line integrates Fail2Ban, an intrusion prevention tool, designed to scan log files for malicious activity. If any is detected, fail2ban imposes a temporary ban on the suspicious IP, thereby fortifying the platform against brute-force attacks.","breadcrumbs":"Self-Hosted » Features » 5. Intrusion Detection","id":"126","title":"5. Intrusion Detection"},"127":{"body":"The Uncomplicated Firewall (UFW) is incorporated into Hush Line's framework. This firewall tool simplifies the process of managing iptables, ensuring that only approved traffic can access the server.","breadcrumbs":"Self-Hosted » Features » 6. Firewall","id":"127","title":"6. Firewall"},"128":{"body":"Outdated systems are a breeding ground for vulnerabilities. Hush Line leverages the unattended-upgrades package to automate system updates. This ensures that the system always runs the latest security patches and software versions.","breadcrumbs":"Self-Hosted » Features » 7. Automatic Updates","id":"128","title":"7. Automatic Updates"},"129":{"body":"Respecting user privacy, Hush Line has provisions to scrub IP addresses from incoming requests. This means that user location and network information are not stored or logged, enhancing user anonymity.","breadcrumbs":"Self-Hosted » Features » 8. IP Address Scrubbing","id":"129","title":"8. IP Address Scrubbing"},"13":{"body":"Hush Line has a mail server installed to send encrypted messages to your email address. You'll need SMTP information, as well as a password. You should never use your primary account password; instead, create app-specific passwords. These are purpose-made for single applications. From your Gmail account, click on your avatar to access your account-level options. Select Manage Google Account. Next, click on the Security tab on the left, then scroll to the bottom of the page to find App Passwords. Click on App Passwords, then enter a name, then click Create. A dialog will pop up with your app-specific password. Copy it to a notepad for easy access. 🎉 Congratulations, you're now ready to install Hush Line!","breadcrumbs":"Prereqs » 7. Create an app password","id":"13","title":"7. Create an app password"},"130":{"body":"The platform is served using nginx, and the server is configured with security-hardened headers. These headers protect users from various web vulnerabilities like cross-site scripting and clickjacking, ensuring a secure browsing experience.","breadcrumbs":"Self-Hosted » Features » 9. Hardened Nginx Security Headers","id":"130","title":"9. Hardened Nginx Security Headers"},"131":{"body":"Emphasizing ease of use and privacy, Hush Line eliminates the need for account creation. Users can immediately start messaging without the burden of sign-ups or the risk of personal data storage.","breadcrumbs":"Self-Hosted » Features » 10. No Account Needed","id":"131","title":"10. No Account Needed"},"132":{"body":"Hush Line configures a sauteed onions domain when deploying to a public website like a .com, .org, etc. Sauteed Onions is a new method for making your onion address more censorship resistant by binding it to your domain name using HTTPS certificates, creating a new domain that looks like: addressforyouronion.acme.com. Now, when someone uses a certificate search tool like crt.sh and looks for your domain name, they'll find your onion address, too.","breadcrumbs":"Self-Hosted » Features » 11. New Censorship-Resistance Research","id":"132","title":"11. New Censorship-Resistance Research"},"133":{"body":"Working with Whistleblowers , Government Accountability Project Government Accountability Project Resources Here's how to share sensitive leaks with the press , Freedom of the Press Foundation Security considerations for confidential tip pages , Freedom of the Press Foundation","breadcrumbs":"Self-Hosted » Resources » More Resources","id":"133","title":"More Resources"},"134":{"body":"Hush Line site : The website that your Hush Line form is available at. If you're running Hush Line in \"Tor-only\" mode, your Hush Line site will have a URL like http://vfalkrrucjb7pztjskfumnqytpze5iimu4i2t2ygwv6ntylvylt2flad.onion and will be only accessible through the Tor Browser . Hush Line form : The text box form that occupies your Hush Line site. Community members may choose to type and submit a message through this form (thus becoming a source). community : The pool of people who know your Hush Line site's URL. If you only share your Hush Line site's URL with a team of employees, that's your community. If you promote your Hush Line address publicly, your community may be very large. community member : A member of your community. A person who is a potential source. source : The community member who has written and submitted a given message message : The text that a source submits to your Hush Line form. Hush Line only accepts text messages (no multimedia or file attachments). All Hush Line messages are encrypted and thus private. Also note that Hush Line messages only go one-way: from source to user. Hush Line user : The person who runs the Hush Line. We assume the user has access to the Hush Line email address and Hush Line PGP key. Hush Line email address : The email address that receives your Hush Line messages from your sources Hush Line PGP Public Key : The PGP public key that Hushline uses to encrypt all messages before sending emails to your Hush Line email address. Hush Line PGP Private Key : The private PGP key the user uses to decrypt Hush Line messages. The PGP password is also needed to decrypt messages. Hush Line PGP password : The password needed, in combination with the Hush Line PGP Private Key, to decrypt and read messages. (Keep this secret.)","breadcrumbs":"Self-Hosted » Glossary » Glossary","id":"134","title":"Glossary"},"14":{"body":"","breadcrumbs":"Prereqs » General Prereqs » General Prerequisites","id":"14","title":"General Prerequisites"},"15":{"body":"Software Creating Keys App Password","breadcrumbs":"Prereqs » General Prereqs » Contents","id":"15","title":"Contents"},"16":{"body":"","breadcrumbs":"Prereqs » General Prereqs » Software","id":"16","title":"Software"},"17":{"body":"Your Hush Line has the option to only be reachable via the Tor Browser. It's not only the most private but also the easiest to set up and deploy.","breadcrumbs":"Prereqs » General Prereqs » 1. Tor Browser","id":"17","title":"1. Tor Browser"},"18":{"body":"We'll use Gmail for its high reliability. If you don't already have an account, create one. Having an email address separate from your personal account is a good practice.","breadcrumbs":"Prereqs » General Prereqs » 2. Gmail","id":"18","title":"2. Gmail"},"19":{"body":"To decrypt Hush Line messages, we'll use Mailvelope, which integrates with Gmail, adding PGP functionality; add the extension to Firefox or Chrome . Open the extension in your browser and click \"Let's Start.\"","breadcrumbs":"Prereqs » General Prereqs » 3. Mailvelope","id":"19","title":"3. Mailvelope"},"2":{"body":"Software Creating Keys App Password","breadcrumbs":"Prereqs » Contents","id":"2","title":"Contents"},"20":{"body":"","breadcrumbs":"Prereqs » General Prereqs » Creating Keys","id":"20","title":"Creating Keys"},"21":{"body":"Here's how I like to think of PGP: Once set up, you'll have a very special envelope where people can put their messages inside. These envelopes are so special that they can only be opened by one specific letter opener. Now let's say we want to receive secret messages from your friend Bob. First, you give Bob plenty of your special envelopes. (We do not give Bob the letter opener since you don't want Bob to be able to open mail intended for you.) Bob writes his message, places it in one of your envelopes, and sends it to you. When you receive the sealed envelope, you use your letter opener to open it, confident that no one else can read its contents along the way.","breadcrumbs":"Prereqs » General Prereqs » What is PGP? Let's use a non-technical metaphor","id":"21","title":"What is PGP? Let's use a non-technical metaphor"},"22":{"body":"To create our envelopes and letter opener, we're going to use our Mailvelope extension. Click on \"Generate Keys.\" Give your key a name, enter your Gmail address, and create a strong password.","breadcrumbs":"Prereqs » General Prereqs » 4. Create your keys","id":"22","title":"4. Create your keys"},"23":{"body":"Before using your key, you'll have to verify your email address. Look for a message from Mailvelope Key Server in your Gmail inbox. The message is encrypted, and when opened, you'll be prompted for your Mailvelope password to read the email. After entering your password, click the link.","breadcrumbs":"Prereqs » General Prereqs » 5. Verify your email address","id":"23","title":"5. Verify your email address"},"24":{"body":"After confirming that your email was verified, click on the supplied URL. Your PGP Key is in the grey box, beginning with -----BEGIN PGP PUBLIC KEY BLOCK----- and ending with -----END PGP PUBLIC KEY BLOCK-----. Copy your entire key into a notepad for easy access.","breadcrumbs":"Prereqs » General Prereqs » 6. Copy your PGP key","id":"24","title":"6. Copy your PGP key"},"25":{"body":"","breadcrumbs":"Prereqs » General Prereqs » App Password","id":"25","title":"App Password"},"26":{"body":"Hush Line has a mail server installed to send encrypted messages to your email address. You'll need SMTP information, as well as a password. You should never use your primary account password; instead, create app-specific passwords. These are purpose-made for single applications. From your Gmail account, click on your avatar to access your account-level options. Select Manage Google Account. Next, click on the Security tab on the left, then scroll to the bottom of the page to find App Passwords. Click on App Passwords, then enter a name, then click Create. A dialog will pop up with your app-specific password. Copy it to a notepad for easy access. 🎉 Congratulations, you're now ready to install Hush Line!","breadcrumbs":"Prereqs » General Prereqs » 7. Create an app password","id":"26","title":"7. Create an app password"},"27":{"body":"","breadcrumbs":"Prereqs » Threat Modeling » Threat Modeling for Hush Line Deployment","id":"27","title":"Threat Modeling for Hush Line Deployment"},"28":{"body":"Deploying an anonymous tip line, like Hush Line, requires understanding the environment in which it will be used. Different organizations and individuals face unique threats, and this guide aims to help you navigate these challenges. By understanding your threat landscape, you can choose the appropriate deployment method that balances accessibility and security for your needs.","breadcrumbs":"Prereqs » Threat Modeling » Introduction","id":"28","title":"Introduction"},"29":{"body":"To select the correct Hush Line deployment, consider the potential risks and consequences you or your tipsters might face:","breadcrumbs":"Prereqs » Threat Modeling » Understanding the Threats","id":"29","title":"Understanding the Threats"},"3":{"body":"","breadcrumbs":"Prereqs » Software","id":"3","title":"Software"},"30":{"body":"These scenarios typically involve the primary risk of non-targeted or generic cyber threats. The fallout from a security breach is minimal. We recommend the hosted version of Hush Line, providing an address like: https://beta.hushline.app/submit_message/scidsg. Example Use Cases 💼 Small to medium businesses 🏫 Schoolhouses 🎈 Conference organizers","breadcrumbs":"Prereqs » Threat Modeling » Low Threats","id":"30","title":"Low Threats"},"31":{"body":"Here, the risks escalate. They include targeted threats but might not require advanced defense measures. We recommend the hosted version of Hush Line, and prominently displaying both public and onion addresses: https://beta.hushline.app/submit_message/scidsg and http://fx3ewfwnufrfqbqdrbyeb6xwl736olvsfczyv5oqruehwnvk67kthsqd.onion/submit_message/scidsg. Example Use Cases 📈 Publicly traded businesses 🩺 Law or doctor's offices 🚨 Domestic abuse hotlines","breadcrumbs":"Prereqs » Threat Modeling » Medium Threats","id":"31","title":"Medium Threats"},"32":{"body":"These are scenarios where targeted threats are likely, and consequences can be severe, like endangering someone's physical safety. We recommend an onion-only deployment for high-threat environments using a VPS or a local device like a Raspberry Pi. If your physical safety isn't guaranteed and device confiscation is possible, you should only use a VPS, as this will provide the greatest protection for your community, tip line, and yourself. VPS providers like Njalla works seamlessly on Tor Browser, and accepts payments in private cryptocurrencies like ZCash and Monero. Example Use Cases 📰 Journalists 🆘 Government whistleblowers 🚔 Locations with internet censorship","breadcrumbs":"Prereqs » Threat Modeling » High Threats","id":"32","title":"High Threats"},"33":{"body":"If you sign up with our hosted service, we provide human-verified accounts for journalists and newsrooms, so you can have confidence that you're talking to the intended person. For our self-hosted option, the anonymity it provides can be a double-edged sword. While it provides protection for both journalist and whistleblower, it can also shield malicious actors, as the verification system is only available on the self-hosted version. Whistleblowers should always verify the addresses they click on or enter into a browser, and journalists should vet the tips they receive to guard against misinformation campaigns, especially in high-risk scenarios.","breadcrumbs":"Prereqs » Threat Modeling » Malicious Actors & Misinformation","id":"33","title":"Malicious Actors & Misinformation"},"34":{"body":"The hosted version of Hush Line is the first free and open-source anonymous tip-line-as-a-service and the easiest way to get started. It's as simple as signing up, and you'll have a way for anyone to send you a private message. It's for those needing one or more tip lines without worrying about managing and maintaining their infrastructure.","breadcrumbs":"Hosted » Getting Started","id":"34","title":"Getting Started"},"35":{"body":"You'll need an invite code to register for a Hush Line account. To get one, send a message to https://beta.hushline.app/submit_message/hushline-beta. Once you have the invite code, register your account at https://beta.hushline.app/register.","breadcrumbs":"Hosted » Register","id":"35","title":"Register"},"36":{"body":"After creating your account, you'll be redirected to the login page. Enter the username and password you just created. Note: To protect your privacy, we don't require any PII, including your email address or phone number.","breadcrumbs":"Hosted » Log In","id":"36","title":"Log In"},"37":{"body":"The hosted version of Hush Line is the first free and open-source anonymous tip-line-as-a-service and the easiest way to get started. It's as simple as signing up, and you'll have a way for anyone to send you a private message. It's for those needing one or more tip lines without worrying about managing and maintaining their infrastructure.","breadcrumbs":"Hosted » Getting Started » Getting Started","id":"37","title":"Getting Started"},"38":{"body":"You'll need an invite code to register for a Hush Line account. To get one, send a message to https://beta.hushline.app/submit_message/hushline-beta. Once you have the invite code, register your account at https://beta.hushline.app/register.","breadcrumbs":"Hosted » Getting Started » Register","id":"38","title":"Register"},"39":{"body":"After creating your account, you'll be redirected to the login page. Enter the username and password you just created. Note: To protect your privacy, we don't require any PII, including your email address or phone number.","breadcrumbs":"Hosted » Getting Started » Log In","id":"39","title":"Log In"},"4":{"body":"Your Hush Line has the option to only be reachable via the Tor Browser. It's not only the most private but also the easiest to set up and deploy.","breadcrumbs":"Prereqs » 1. Tor Browser","id":"4","title":"1. Tor Browser"},"40":{"body":"When you log in to your account, click on the \"Submit Message\" link at the top of the screen. You can publicly share the URL for this page wherever you're advertising your tip line. You'll notice some instructional text is only visible to you with suggestions for sharing your address. You'll also see a message indicating if you've uploaded a PGP key. This will be visible to someone submitting a message, so if you'll receive sensitive information, it is advised to add your public PGP key in Settings. When you share the address, someone sending a message will see slightly different text, with voice and tone directed at them. If you haven't added a PGP key, you and any visitor will see a warning that messages will not be encrypted.","breadcrumbs":"Hosted » Sending Messages » Sending Messages","id":"40","title":"Sending Messages"},"41":{"body":"New users are greeted by their empty inbox. When you receive a message, they'll appear here.","breadcrumbs":"Hosted » Receiving Messages » Reading Messages","id":"41","title":"Reading Messages"},"42":{"body":"By default, Hush Line doesn't require a PGP key, but it's strongly encouraged. After adding your PGP key, only you can read the messages you receive. As a baseline security measure, we encrypt your message content by default on our server. While this protects the contents of our database, if the encryption key becomes compromised, it can be decrypted. But if you add your PGP key, any message received will only be able to be decrypted by you. If you expect to receive messages containing sensitive content, enabling this feature is strongly encouraged.","breadcrumbs":"Hosted » Receiving Messages » Message Encryption","id":"42","title":"Message Encryption"},"43":{"body":"After installing the Mailvelope extension in your browser, you can decrypt your messages directly in the app. This is highly recommended, as it's one of the easiest and most straightforward methods of decrypting your messages. You'll see a new interface where the encrypted message was. Click \"Show message\" to decrypt. You'll enter the password you created when setting up your PGP key, and the contents will be visible.","breadcrumbs":"Hosted » Receiving Messages » Mailvelope","id":"43","title":"Mailvelope"},"44":{"body":"","breadcrumbs":"Hosted » Settings » Settings","id":"44","title":"Settings"},"45":{"body":"Users can tailor Hush Line to their needs, from adding a display name to adding multiple usernames.","breadcrumbs":"Hosted » Settings » Profile Settings","id":"45","title":"Profile Settings"},"46":{"body":"Users can set a human-readable display name so that someone submitting a message can see \"Submit a message to Science & Design\" rather than \"Submit a message to scidsg\". Verification As a security measure, if a user changes their display name after verification, they'll lose that status and must re-verify their account.","breadcrumbs":"Hosted » Settings » Display Name","id":"46","title":"Display Name"},"47":{"body":"","breadcrumbs":"Hosted » Settings » Authentication","id":"47","title":"Authentication"},"48":{"body":"To improve account security, users can enable two-factor authentication, making account compromises, even in the event of a password leak, impossible.","breadcrumbs":"Hosted » Settings » Two-Factor Authentication","id":"48","title":"Two-Factor Authentication"},"49":{"body":"Users can change their password when needed.","breadcrumbs":"Hosted » Settings » Change Password","id":"49","title":"Change Password"},"5":{"body":"We'll use Gmail for its high reliability. If you don't already have an account, create one. Having an email address separate from your personal account is a good practice.","breadcrumbs":"Prereqs » 2. Gmail","id":"5","title":"2. Gmail"},"50":{"body":"Changing your username is easy but can lead to confusion for end-users, especially for well-known organizations. Verification Like when changing your display name, when you change your username, you'll lose verification and need to go through the process again.","breadcrumbs":"Hosted » Settings » Change Username","id":"50","title":"Change Username"},"51":{"body":"","breadcrumbs":"Hosted » Settings » Email & PGP","id":"51","title":"Email & PGP"},"52":{"body":"Users can have messages delivered to an email address and with the SMTP service of their choosing.","breadcrumbs":"Hosted » Settings » Email Delivery","id":"52","title":"Email Delivery"},"53":{"body":"Users can opt to have their messages encrypted so they're only readable by them. This is a highly encouraged option, especially for journalists.","breadcrumbs":"Hosted » Settings » PGP","id":"53","title":"PGP"},"54":{"body":"","breadcrumbs":"Hosted » Settings » Advanced","id":"54","title":"Advanced"},"55":{"body":"Easily and permanently delete your account whenever you want.","breadcrumbs":"Hosted » Settings » Delete Account","id":"55","title":"Delete Account"},"56":{"body":"Admins can control certain aspects of user settings without having to log in to the server or manually modifying the database. This is where users are verified, where paid features can be manually enabled, or where admins can be created. A highlight panel displays the total number of users and how many have enabled 2fa or added a PGP key. This view helps with internal decision-making, like education campaigns for security best practices.","breadcrumbs":"Hosted » Admin » Admin View","id":"56","title":"Admin View"},"57":{"body":"","breadcrumbs":"Hosted » Paid Features » Paid Features","id":"57","title":"Paid Features"},"58":{"body":"Paid users can add up to five additional usernames. This feature aims to make it easy for organizational users to manage multiple initiatives from the same account. Newsroom editors can have lines for politics, cybersecurity, or world news desks; an educational institution can have lines for students, faculty, or community channels.","breadcrumbs":"Hosted » Paid Features » Additional Usernames","id":"58","title":"Additional Usernames"},"59":{"body":"The account's primary inbox will aggregate and label messages in a single view.","breadcrumbs":"Hosted » Paid Features » Inbox","id":"59","title":"Inbox"},"6":{"body":"To decrypt Hush Line messages, we'll use Mailvelope, which integrates with Gmail, adding PGP functionality; add the extension to Firefox or Chrome . Open the extension in your browser and click \"Let's Start.\"","breadcrumbs":"Prereqs » 3. Mailvelope","id":"6","title":"3. Mailvelope"},"60":{"body":"Account owners can navigate to their secondary username's inboxes from the settings page.","breadcrumbs":"Hosted » Paid Features » Secondary Inboxes","id":"60","title":"Secondary Inboxes"},"61":{"body":"The Personal Server is a physical device running a Tor-only version of Hush Line. This is our customer-facing product that doesn't require a user to use the terminal or SSH to configure their tip line. It uses an e-paper display and web form to guide the user through the setup process, and in a matter of minutes, you can have an anonymous tip line deployed and ready to use.","breadcrumbs":"Personal Server » Hush Line Personal Server","id":"61","title":"Hush Line Personal Server"},"62":{"body":"Before beginning, first plug in the ethernet. The Personal Server doesn't use wifi to help ensure high stability and availability. The setup process will begin once an internet connection is detected.","breadcrumbs":"Personal Server » 1. Plug in ethernet","id":"62","title":"1. Plug in ethernet"},"63":{"body":"Your server optimizes the setup time by coming with all of the necessary software preloaded on the device. When you power up the server, we update your software and Hush Line repository.","breadcrumbs":"Personal Server » 2. Power up the device","id":"63","title":"2. Power up the device"},"64":{"body":"After the updates, your device's screen will display a QR code that links to a locally hosted web form.","breadcrumbs":"Personal Server » 3. Wait ~5 mins for a setup code to display.","id":"64","title":"3. Wait ~5 mins for a setup code to display."},"65":{"body":"Scan the code or visit https://hushline.local/setup from a device on the same network as your Hush Line Personal Server.","breadcrumbs":"Personal Server » 4. Scan the code","id":"65","title":"4. Scan the code"},"66":{"body":"The form will ask for five pieces of information that we set up in the prerequisites . 👉 Make sure your public PGP key is unmodified, beginning with -----BEGIN PGP PUBLIC KEY BLOCK----- and ending with -----END PGP PUBLIC KEY BLOCK-----. The information you'll need: SMTP email address SMTP address: smtp.gmail.com App password (from prerequisites) Port: 465 Public PGP key (from prerequisites)","breadcrumbs":"Personal Server » 5. Add SMTP & PGP information","id":"66","title":"5. Add SMTP & PGP information"},"67":{"body":"You'll receive an encrypted email confirming your Hush Line Personal Server's successful installation. The email will include your address and a link to download Tor Browser.","breadcrumbs":"Personal Server » 6. Email confirmation","id":"67","title":"6. Email confirmation"},"68":{"body":"Your screen will reset and display a QR code linking to a local information page intended for use by individuals interested in using your tip line. You can print this page, copy the content, email it, and post your Hush Line address on your social channels and website. 🎉 Congratulations! You've successfully set up your own anonymous tip line!","breadcrumbs":"Personal Server » 7. Using Hush Line","id":"68","title":"7. Using Hush Line"},"69":{"body":"In this section we'll get everything ready before installing Hush Line.","breadcrumbs":"Self-Hosted » Hush Line Self-Hosted Prerequisites","id":"69","title":"Hush Line Self-Hosted Prerequisites"},"7":{"body":"","breadcrumbs":"Prereqs » Creating Keys","id":"7","title":"Creating Keys"},"70":{"body":"Download Tor Browser Create a Gmail account Create PGP keys using Mailvelope","breadcrumbs":"Self-Hosted » General","id":"70","title":"General"},"71":{"body":"Download the Raspberry Pi Imager Flash a microSD card with Raspberry Pi OS (64-bit)","breadcrumbs":"Self-Hosted » Raspberry Pi","id":"71","title":"Raspberry Pi"},"72":{"body":"Create a Digital Ocean account Create a new server","breadcrumbs":"Self-Hosted » VPS","id":"72","title":"VPS"},"73":{"body":"","breadcrumbs":"Self-Hosted » Option 1: Raspberry Pi » Raspberry Pi Prerequisites","id":"73","title":"Raspberry Pi Prerequisites"},"74":{"body":"Hardware: Raspberry Pi 4 / 3B+ Power: Raspberry Pi USB-C Power Supply Storage: Micro SD Card SD Card Adapter: SD Card Reader Affiliate links","breadcrumbs":"Self-Hosted » Option 1: Raspberry Pi » Hardware","id":"74","title":"Hardware"},"75":{"body":"If you didn't know, your Raspberry Pi doesn't come with an operating system. Don't panic! We're going to install one now called Raspberry Pi OS.","breadcrumbs":"Self-Hosted » Option 1: Raspberry Pi » Prepping Your Pi","id":"75","title":"Prepping Your Pi"},"76":{"body":"Like a Macbook runs MacOS, and a Dell runs Windows, a Raspberry Pi runs Linux, which comes in many different flavors depending on your needs. Since we're using a Raspberry Pi, we'll use Raspberry Pi OS (64-bit), an operating system made just for the Pi. The Imager installs the operating system onto your microSD card, where we'll set up Hush Line. Download it from https://www.raspberrypi.com/software/.","breadcrumbs":"Self-Hosted » Option 1: Raspberry Pi » 1. Raspberry Pi Imager","id":"76","title":"1. Raspberry Pi Imager"},"77":{"body":"","breadcrumbs":"Self-Hosted » Option 1: Raspberry Pi » Prep Your Card","id":"77","title":"Prep Your Card"},"78":{"body":"Open the Raspberry Pi Imager and click Choose OS > Raspberry Pi OS (other) > Raspberry Pi OS (64-Bit). Insert your microSD card into your computer, and then click Choose Storage and select your card. Before clicking Write, click on the Settings gear in the bottom right of the window. Configure the following settings: Hostname = hushline Enable SSH with password authentication User = hush Set a strong password Add wifi settings","breadcrumbs":"Self-Hosted » Option 1: Raspberry Pi » 2. Install Raspberry Pi OS","id":"78","title":"2. Install Raspberry Pi OS"},"79":{"body":"","breadcrumbs":"Self-Hosted » Option 1: Raspberry Pi » Boot up and log in to Your Pi","id":"79","title":"Boot up and log in to Your Pi"},"8":{"body":"Here's how I like to think of PGP: Once set up, you'll have a very special envelope where people can put their messages inside. These envelopes are so special that they can only be opened by one specific letter opener. Now let's say we want to receive secret messages from your friend Bob. First, you give Bob plenty of your special envelopes. (We do not give Bob the letter opener since you don't want Bob to be able to open mail intended for you.) Bob writes his message, places it in one of your envelopes, and sends it to you. When you receive the sealed envelope, you use your letter opener to open it, confident that no one else can read its contents along the way.","breadcrumbs":"Prereqs » What is PGP? Let's use a non-technical metaphor","id":"8","title":"What is PGP? Let's use a non-technical metaphor"},"80":{"body":"Take your SD card and insert it into your Raspberry Pi. You'll find the SD card slide on the bottom of the board, opposite the ethernet ports. Plug the power supply into the device and let it boot up.","breadcrumbs":"Self-Hosted » Option 1: Raspberry Pi » 3. Insert microSD Card","id":"80","title":"3. Insert microSD Card"},"81":{"body":"On a Mac, open Spotlight search by pressing CMD + Space. Enter \"Terminal\" and select the application with the same name. Enter ssh hush@hushline.local, and when prompted, enter the password you created in the second step.","breadcrumbs":"Self-Hosted » Option 1: Raspberry Pi » 4. Log In","id":"81","title":"4. Log In"},"82":{"body":"The last thing we need to do is to update our system. First, we'll give ourselves admin priviledges, then perform the update: Enter sudo su, then apt update && apt -y dist-upgrade && apt -y autoremove. 🎉 That's it, you're ready to get started with Raspberry Pi!","breadcrumbs":"Self-Hosted » Option 1: Raspberry Pi » 5. Update your system","id":"82","title":"5. Update your system"},"83":{"body":"In this section, we'll prepare to install Hush Line on a virtual private server (VPS). This means your Hush Line will run on a rented, private server owned by a company like Digital Ocean . You'll need the following things: Debit or credit card Digital Ocean, or any other VPS provider","breadcrumbs":"Self-Hosted » Option 2: VPS » VPS Prerequisites","id":"83","title":"VPS Prerequisites"},"84":{"body":"Digital Ocean is an infrastructure service provider that provides a cost-effective way to create your first virtual private server (VPS).","breadcrumbs":"Self-Hosted » Option 2: VPS » Digital Ocean","id":"84","title":"Digital Ocean"},"85":{"body":"Go to digitalocean.com and create an account. You'll need to enter payment information before you can create a VPS.","breadcrumbs":"Self-Hosted » Option 2: VPS » 1. Create an Account","id":"85","title":"1. Create an Account"},"86":{"body":"Digital Ocean calls their VPS option Droplets. To create a droplet click the green \"Create\" button at the top of the screen, the click \"Droplets.\" You can configure your server to your desired specifications, but for this guide, we'll choose the following options: Location: San Francisco Image: Debian 12 Size: Basic CPU: Regular SSD @ $4/mo Create a strong password, then click \"Create Droplet.\" After a minute or two, your Droplet should be ready. The \"Resources\" tab should be visible, and just below, you'll see the IP address for your Droplet.","breadcrumbs":"Self-Hosted » Option 2: VPS » 2. Create a VPS","id":"86","title":"2. Create a VPS"},"87":{"body":"On a Mac, open Spotlight search by pressing CMD + Space. Enter \"Terminal\" and select the application with the same name. Enter ssh root@
