Difference between revisions of "MyLaptop"

From Technologia Incognita
Jump to: navigation, search
m (txt msg)
m
Line 29: Line 29:
 
=== Laptop / phone ===
 
=== Laptop / phone ===
 
* OS
 
* OS
** Encryption of my home directory (checked the tickbox to encrypt my home directory in Ubuntu)
+
** Encryption of my home directory (ticked the box to encrypt my home directory in Ubuntu)
 
** [https://www.eff.org/deeplinks/2012/10/privacy-ubuntu-1210-amazon-ads-and-data-leaks Ubuntu sends searches to Amazon], disabled this
 
** [https://www.eff.org/deeplinks/2012/10/privacy-ubuntu-1210-amazon-ads-and-data-leaks Ubuntu sends searches to Amazon], disabled this
 
** Probably am going to install another OS on my laptop (prob Debian)
 
** Probably am going to install another OS on my laptop (prob Debian)
Line 56: Line 56:
 
** Using encfs together with Dropbox - [http://www.howtogeek.com/121737/how-to-encrypt-cloud-storage-on-linux-and-windows-with-encfs/ How to]
 
** Using encfs together with Dropbox - [http://www.howtogeek.com/121737/how-to-encrypt-cloud-storage-on-linux-and-windows-with-encfs/ How to]
 
** Will switch to ownCloud as soon as I have set this up (see section "Server")
 
** Will switch to ownCloud as soon as I have set this up (see section "Server")
* Text messages via https://threema.ch/en/ but I'll probably replace this with messaging via my own communication center
+
* Text messages via https://threema.ch/en/ but I'll probably replace this with messaging via my own communication server
  
 
=== Server ===
 
=== Server ===
Line 78: Line 78:
 
* Installed [http://www.asterisk.org/ Asterisk] and tried out the [http://www.linphone.org/ LinPhone] and [http://icanblink.com/ Blink] clients
 
* Installed [http://www.asterisk.org/ Asterisk] and tried out the [http://www.linphone.org/ LinPhone] and [http://icanblink.com/ Blink] clients
 
* Communication works, now stuck at making TLS and sRTP work [https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial Tutorial]
 
* Communication works, now stuck at making TLS and sRTP work [https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial Tutorial]
 
== To do ==
 
* A lot
 
* Have fun and not become too paranoid ;)
 
* Be realistic: if you have a secret, don't put it on the interweb or on your computer
 
  
 
[[Category:Privacy]]
 
[[Category:Privacy]]

Revision as of 19:26, 28 February 2014

Projects
Participants Narya
Skills Software, Social Networking, Common sense, Cryptography, Learning
Status Active
Niche Software
Purpose Education

Goal

  • Make my laptop more MY laptop (and my e-mail.. my calendar... backup... social networks... and well, anything really)
  • Document it. A summary will be placed somewhere on this wiki including relevant links. I'll document it as a sort of diary on my own blog (http://www.van-schaik.org/)

Blog

How

Some of the things I did so far

Several things below were/are new to me, so if you have suggestions for other options or for improvements, please let me know.

Laptop / phone

  • OS
    • Encryption of my home directory (ticked the box to encrypt my home directory in Ubuntu)
    • Ubuntu sends searches to Amazon, disabled this
    • Probably am going to install another OS on my laptop (prob Debian)
  • Changed browser: using firefox now i.s.o. chrome
  • Installed [several browser plugins, e.g.
    • HTTPSeverywhere - make use of https as much as possible
    • Better privacy - remove super cookies
    • DoNotTrack - block advertisement, trackers, web stat trackers
    • Ghostery - comparable with DoNotTrack, but works better
    • NoScript - block JavaScript and Java stuff
  • Alternatives for Google stuff
    • Use DuckDuckGo in stead of google search
    • Removed the mail forwarding to google mail and switched back to my own provider. Actually, it would be better to install your own mail server or perhaps use a peer2peer mail system with e-mail encryption built-in
    • Using a paper agenda now - couldn't find a good portable electronic alternative yet. This works just fine. (use the calendar of owncloud?)
    • Replaced analytics with Piwik
    • OpenStreetMap i.s.o. google maps
  • Removed mail and online banking from my mobile phone (can perhaps be put back after I changed the OS)
  • SSH tunnel to encrypt internet traffic from another network (e.g. a public wifi spot) to a place I trust more
  • Tomboy notes with rsync in stead of Evernote
  • Created a PGP key and set the default settings to "encrypt mail" for the people who are already in my list (key ring)
  • Social media
    • Played around with Diaspora (as alternative to Facebook)
    • Checked out Retroshare - it's retro... and you can share things (chat, forum, mail, file, all friend2friend), uses PGP
    • Problem: no friends :(
  • File storage, sharing, backup
    • Using encfs together with Dropbox - How to
    • Will switch to ownCloud as soon as I have set this up (see section "Server")
  • Text messages via https://threema.ch/en/ but I'll probably replace this with messaging via my own communication server

Server

  • Installed Debian
  • Encrypted disk (option during setup)
  • Have set firewall rules (with Shorewall)
  • Have installed ownCloud - can be used ala dropbox, and it has apps for calendar and contacts
    • I want to have the data on at least two different locations (because... backup):
      • Have to figure out how to set up a virtual encrypted disk which is synchronized with another location
      • If possible synchronize the user database too, so that I can run mirrored ownCloud instances
      • Relevant thread: https://mail.kde.org/pipermail/owncloud/2012-June/003918.html
      • Raspberry Pi with external USB drive might work. Synchronization by BTsync or something like that
    • Need to investigate how to make use of this more secure (info here)
  • Working on setting up https (some explanation, example 1, example 2)
    • Forwarded the https port. Now I need to figure out how to redirect http requests to https
  • Installed Etherpad, as a service, only accessible from certain ips - for making and sharing notes
    • To do next: integrate etherpad with owncloud

Communication

  • The plan is to use SIP phones and a client for chatting and/or video calls
  • Installed Asterisk and tried out the LinPhone and Blink clients
  • Communication works, now stuck at making TLS and sRTP work Tutorial