Showing posts with label safety. Show all posts
Showing posts with label safety. Show all posts

February 07, 2011

Organization: Secure Blogging

Did you know that you can blog via email? If you have a gmail account, which connects via HTTPS, then you can email your blog to make posts. The information you send will be difficult for security goons to decipher even if they are tracking your Internet usage.

Have at least two accounts. One where you discuss items that you are willing to have people see -- such as inane chit-chat with family. This way, if you are forced to reveal your gmail account credentials you can give them one that is safe and perhaps avoid causing a leak. Additionally, make sure your disposable account login is easy to remember.

If they choose to do so the government can certainly see which sites you frequently visit and if particularly interested in you they can save all your communications for their reading pleasure. There is no risk in assuming this and taking precautions to protect yourself (unless gmail or HTTPS use, for example, is a particular warning flag to them).

Why a blog? Because it stays put. People can link to it. They don't have to be awake watching a stream of consciousness at the same time that it is written. It allows totally anonymous comments that can be kept or removed as appropriate. It's great for organizing a large amount of semi-static information for reference. Twitter and Facebook are great for real time connection with other people. They each have their place.

How Do I Set Up A Blog
I'm not going to get into all the bells and whistles that are possible. However, I will walk you through the steps to get a blog and be able to start posting to it. It's been a long time since I created my Google accounts so please correct me if you spot any errors or missing details:

  • Go to mail.google.com and choose to create a new account.
  • Once your account is completed go to blogger.com and create an account using your gmail address.
  • Once you have an account you should see a prominent message asking you to create a blog
  • Give your blog a name and choose a domain (e.g. myblog.blotspot.com)
  • Just pick any one of the blog display themes as you can change it later
  • Create your first post right away
  • You are now a blogger... there is plenty to learn but you have started
From here you can learn how to manage the look of your blog, add links, add widgets, set up email blogging and so on. Just goof around with the UI or ask me some questions and I'll go check it out.

Revolution: Immediate Security Issues

A rumor has circulated that confiscated phones have been bugged before the detained individuals are released. Assuming this is true:

  • Do not use a phone once it has been confiscated unless to spread misinformation. Any call will identify someone that intelligence may want to detain.
  • All communication should be done via external proxy. For example, twitter allows communication without direct contact between parties involved and securely if via HTTPS as does Facebook.
  • Preferably all significant information, such as user names, phone numbers, email addresses, and tactical or strategic plans must be viewed via HTTPS so that it cannot be intercepted as it is sent to your computer or phone.
For more static communications outside of social networks one can set up a new account on Google. Mail and documents within Google are served using HTTPS. However, keep in mind that under interrogation anything stored in a user account may be revealed -- simply by giving away username and password details. It is important to realize that all details can be subject to discovery by regime security elements.

However, this does not reduce the effectiveness of sharing information. For example, this blog contains some strategic ideas but does not identify anyone. The only possibility is that the regime will end up looking for various target address in order to look for people who might be attempt to load it's pages. This blog, and others, can be a vital way to collect and distribute information anonymously.

I am at work and don't have time to provide a lot more information but it is vital that the revolution get serious about these types of things and work to foil the operation of the regime's security apparatus. Failing to do so may be fatal.

Sneaking in some additional thoughts while I have a moment. We need to make sure of several things:
  • Not to collect everybody involved in organizing in one place at one time.
  • Not to have everyone doing the same thing. For example, everyone is consumed by the Ghonim release issue... it only takes a group of organized people to alert media and push the issue. Others need to continue to focus on additional tasks. The regime must be laughing at the swarms of concern... knowing that they can simply detain individuals and progress stops.
  • I don't know if you want to call them committees or not but we need to self organize. I am in communication with another person and am hoping we'll collaborate to develop strategic issues -- so, maybe we are an unofficial strategic issues committee.
  • Useful committees may include a detainee release committee. This one may need people spread worldwide to keep pressure and media attention focused 24x7.
  • I'd suggest we don't enumerate a list of committees. In fact, the less focused we are the harder it is to track us. People very involved know who many other people are. It's not that hard to connect and generate information without sharing contact information.
  • Never forget, everything you read can be read by regime security assholes, never rely on secrecy but instead rely on anonymity and non-specific details. For example, anyone can act on items in this blog if they feel it wise, but nobody is identified in any capacity.
Let's disrupt the security apparatus of this mother fucking regime and kick some ass -- non-violently of course. Stay strong.

Finally, keep in mind, it is possible for the US government to ask Google, Twitter or Facebook to provide usage details. If that concerns you there are certainly other locations but they are likely to have the same issues.

February 05, 2011

Personal Safety

A recent tweet that bears thinking about:

Shhh527 Sandy Beach
SMS Safety: Do not use GPS/location features.