-
-
Save xtremebeing/c6cf38c590ef6b72f7c0e3b78820b593 to your computer and use it in GitHub Desktop.
Guide for proper Opsec and comsec for the paranoid.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # OPS Info | |
| ## Info: | |
| * Google Custom Alerts: http://google.com/alerts/ | |
| * Google Reverse Image search instructions: https://support.google.com/websearch/answer/1325808?hl=en | |
| ## Antitheft Apps : | |
| * Lookout: https://www.lookout.com/ | |
| * Prey: https://preyproject.com/ | |
| ## Antitracking Plug-ins and Extensions | |
| * AdBlock Plus: https://adblockplus.org/ | |
| * Blur: https://dnt.abine.com/#register | |
| * Disconnect: https://disconnect.me/ | |
| * Ghostery: https://www.ghostery.com/en/ | |
| ## Password Managers (see also Chapter 10) | |
| * 1Password: http://www.agilebits.com/onepassword/ | |
| * KeePass: http://www.keepass.info/ | |
| * LastPass: https://lastpass.com/ | |
| ## Searching Your Name | |
| * Spokeo: http://www.spokeo.com/ | |
| * USSearch: http://www.ussearch.com/ | |
| * Intelius: http://www.intelius.com/ | |
| # OPS Data: | |
| ## Red Alert List | |
| - Passwords | |
| - Real, full (family) name | |
| - Address of your home, workplace, or school | |
| - Social Security number | |
| - Government ID numbers (driver’s license number and passport number) | |
| - Date and place of birth | |
| - Biometric information (fingerprints, facial recognition, voice recognition) | |
| - Computer’s IP address (a unique number that identifies your computer on the Internet) | |
| - Specific location (geolocation numbers, like from your phone or in tagged photos) | |
| - Credit and debit card numbers, security codes, and expiration dates | |
| - Bank account numbers | |
| - Answers to common security questions | |
| ## Yellow Alert List | |
| - Name you use day to day, if different from your legal name | |
| - Primary screen name(s) | |
| - Email address (if it’s not public) | |
| - Telephone number | |
| - Race, sexual orientation, and gender | |
| - Mailing address (if it’s different from your residence; otherwise it’s red) | |
| - Country, state, and city of residence | |
| - ZIP code (or postal code) | |
| - Google Voice number | |
| ## Green List | |
| - Secondary screen names or account names (say, a throwaway email that forwards to your primary address) | |
| - Mailing address or PO box | |
| - Digital, online phone number, such as a Skype number | |
| - Email addresses that are not linked to a vital service, such as your bank account | |
| - Photos and videos that don’t embarrass you or reveal private information | |
| - Social media profiles on sites where you’re confident you understand the privacy settings | |
| - General likes, favorites, and things you enjoy sharing on social media sites | |
| - Single-use or gift credit cards | |
| ## Breaches | |
| - FTC data breach complaint report: https://www.ftccomplaintassistant.gov/ and click Identity Theft | |
| - Hack checker: https://haveibeenpwned.com/ (has many, but not all) | |
| - Hard drive recovery: DriveSavers; http://www.drivesaversdatarecovery.com/ | |
| ## Account Recovery | |
| - Amazon: Use Help -> Contact Us | |
| - AppleCare: https://www.apple.com/support/applecare/ | |
| - eBay: 1.866.961.9253 (Tell them you’d like to talk about “Account—someone has used your account.”) | |
| - Facebook: https://www.facebook.com/hacked/ | |
| - Google: http://www.google.com/accounts/recovery/ | |
| - Microsoft (Outlook, Xbox, Hotmail, and so on): https://account.live.com/acsr/ | |
| - PayPal: 1.888.221.1161 (Outside the United States, call 1.402.935.2050.) | |
| - Twitter: https://support.twitter.com/forms/hacked/ | |
| - Yahoo!: https://help.yahoo.com/kb/helpcentral/ or 1.800.318.0612 | |
| - For help finding direct phone numbers that may save you a ton of time, check out http://gethuman.com/. | |
| ## Backup Services and Products | |
| - Amazon Cloud Services: http://aws.amazon.com/backup-recovery/ | |
| - Box: https://www.box.com/personal/file-sync/ | |
| - CrashPlan: http://www.code42.com/crashplan/ | |
| - iCloud: https://www.apple.com/icloud/ | |
| - DropBox: https://www.dropbox.com/ | |
| ## Create an Account with a New Email Provider | |
| - Gmail: https://accounts.google.com/signup | |
| - Hushmail: https://www.hushmail.com/signup/ | |
| - iCloud: https://support.apple.com/kb/ph2620?locale=en_US | |
| - Microsoft Outlook: http://www.microsoft.com/en-us/outlook-com/ (click Sign up) | |
| - Yahoo! Mail: https://overview.mail.yahoo.com/ | |
| - Zoho Mail: https://mail.zoho.com/biz/createAcc.do | |
| ## Encryption Products | |
| - VeraCrypt: https://veracrypt.codeplex.com/ | |
| - CipherShed: https://ciphershed.org/ | |
| ## Encryption Programs | |
| - BitLocker for Windows: https://technet.microsoft.com/en-us/library/cc732774.aspx | |
| - FileVault for Mac: https://support.apple.com/en-us/HT204837 | |
| ## Place a Fraud Alert | |
| - Equifax: 1.800.525.6285; http://www.equifax.com/; PO Box 740241, Atlanta, GA 30374-0241 | |
| - Experian: 1.888.397.3742; http://www.experian.com/; PO Box 2002, Allen, TX 75013 | |
| - TransUnion: 1.800.680.7289; http://www.transunion.com/; Fraud Victim Assistance Division, PO Box 6790, Fullerton, CA 92834-6790 | |
| ## Women Issues | |
| - NNEDV (National Network to End Domestic Violence) Technology Safety | |
| - & Privacy Toolkit for Survivors: Safety tips, information, and privacy | |
| - strategies for survivors of abuse, stalking, bullying and harassment; | |
| - http://techsafety.org/resources-survivors/ | |
| - Online copyright infringement claim forms: http://copyright.gov/onlinesp/agenta.pdf | |
| - Whois lookups: http://www.whoishostingthis.com/; http://www.yougetsignal.com/ | |
| - Without My Consent: Legal paths for online harassment victims; http://www.withoutmyconsent.org/ | |
| ## Counseling, Therapy, and Support | |
| - American Counseling Association: Counselor and therapist locators; http://www.counseling.org/ | |
| - American Psychological Association, Psychology Help Center: http://www.apa.org/helpcenter/ | |
| - Breakthrough.com: Confidential online counseling and therapy | |
| - eTherapi.com: Reputable, secure website and network where you can talk to a therapist online | |
| - Fight Cyberstalking: http://www.fightcyberstalking.org/ | |
| - National Association of Social Workers: Tips on finding a therapist and resource links; http://www.helpstartshere.org/find-a-social-worker/ | |
| - Rape, Abuse & Incest National Network: Sexual assault and sexual trauma help resources; https://rainn.org/get-help/ or 1.800.656.HOPE [4673] | |
| - | |
| Tech savvy therapists who “get it”: http://smartprivacy.tumblr.com/therapists/ | |
| ## DMCA Takedown Request Services | |
| DMCA Defender: http://dmcadefender.com/ (Make sure you read reviews or talk to others who have used these services before you trust them with your private problems.) | |
| ## Outsourcing | |
| - Amazon’s Mechanical Turk: http://www.mturk.com/ | |
| - Elance.com | |
| - RemoteStaff.com.au | |
| - YourManInIndia.com | |
| - Kuhustle.com (co.ke) | |
| ## Reputation Services and Image Removal | |
| - Abine: https://www.abine.com/ | |
| - DMCA Defender: http://www.dmcadefender.com/ | |
| - Reputation.com | |
| ## Revenge Porn Support Organizations | |
| - Army of She: http://www.armyofshe.com/ | |
| - Ban Revenge Porn: http://www.banrevengeporn.com/ | |
| - Crash Override Network: Combating Online Hate: http://www.crashoverridenetwork.com | |
| - End Revenge Porn: http://www.endrevengeporn.org/ and http://www.endrevengeporn.org/professionals-helping-victims/ | |
| - IWF: https://www.iwf.org.uk/report/ | |
| - Women Against Revenge Porn: http://www.womenagainstrevengeporn.com/ | |
| ## Identity Theft | |
| - Fix credit reports: http://www.consumer.ftc.gov/articles/0291-disputing-errors-credit-reporting-companies/ | |
| - IRS ID Theft Affidavit Form 14039: http://www.irs.gov/pub/irs-pdf/f14039.pdf | |
| - IRS Identity Protection Specialized Unit: 1.800.908.4490 | |
| - Social Security Administration fraud hotline: 1.800.269.0271 | |
| - Wipe or overwrite the drive or memory on your phone: Blancco; http://dban.org/ | |
| ## Antitheft Tracking Apps | |
| - AVG: http://www.avg.com/us-en/for-android | |
| - Kapersky: http://www.kaspersky.com/mobile_security | |
| - Lookout: https://www.lookout.com/ | |
| - McAfee: http://home.mcafee.com/store?CategoryId=Mobile | |
| - Prey: https://preyproject.com/ | |
| - Where’s My Droid: http://wheresmydroid.com/ | |
| ## FTC Identity Theft Report | |
| - To create: http://www.consumer.ftc.gov/articles/0277-create-identity-theft-report/ | |
| - To file: http://ftccomplaintassistant.gov/Questions: 1.877.IDTHEFT (438.4338) | |
| ## Place a Fraud Alert and Get Copies of Your Credit Reports | |
| - Equifax: 1.800.525.6285 | |
| - Experian: 1.888.397.3742 | |
| - TransUnion: 1.800.680.7289 | |
| ## Place a Security Freeze on Your Credit | |
| - Equifax: https://www.freeze.equifax.com/ | |
| - Experian: https://www.experian.com/freeze/center.html | |
| - TransUnion: http://www.transunion.com/securityfreeze | |
| ## Social Media Privacy Settings | |
| - Facebook: http://www.facebook.com/settings/?tab=privacy/ | |
| - Google: http://www.google.com/dashboard/; | |
| - https://plus.google.com/settings/; | |
| - https://www.google.com/safetycenter/ (for more information on managing and securing your account); http://myaccount.google.com/ | |
| - Twitter: http://www.twitter.com/settings/security/ | |
| ## Photo Sharing Site Privacy Settings | |
| - Flickr: https://www.flickr.com/account/privacy/ | |
| - Imgur: https://help.imgur.com/hc/en-us/articles/201746817-Image -and-album-privacy-explained/ | |
| - Instagram: https://help.instagram.com/116024195217477/ | |
| ## Find Tracking Companies | |
| - Ghostery (http://www.ghostery.com/): With their free software download, every time you go to a website, a pop-up window tells you all the companies that are grabbing your data. | |
| - PrivacyFix.com: This site tells you only what Google, Yahoo!, BlueKai, Bizo, and eXelate know, but it also lists more than 300 tracking companies and helps you opt out of being tracked by them. | |
| ## People-Finder Sites | |
| - BeenVerified: http://www.beenverified.com/ | |
| - DOBSearch: https://www.dobsearch.com/ | |
| - Intelius: http://www.intelius.com/ | |
| - LexisNexis: http://www.lexisnexis.com/en-us/products/public-records.page | |
| - Spokeo: http://www.spokeo.com/WhitePages: http://www.whitepages.com/ | |
| - WhitePages: http://www.whitepages.com/ | |
| ## Opt Out of Data Mining | |
| There isn’t one single clearinghouse where you can put yourself on a “do not track” list, but you can opt out of data mining by all members of industry associations: | |
| - Self-Regulatory Program for Online Behavioral Advertising of the | |
| - Digital Advertising Alliance (DAA): http://www.aboutads.info/choices/ | |
| - Do Not Track: http://www.donottrack.us/ | |
| - Mobile App Tracking: http://www.optoutmobile.com/optout/index.html | |
| - Network Advertising Initiative: http://www.networkadvertising.org/choices/ | |
| ## Dating and Sexy time | |
| - Sample in-person safety guidelines for online dating: http://www.chemistry.com/help/safety/ | |
| ## Browser Plug-ins and Extensions | |
| - Adblock Plus: Blocks ads and tracking for most advertisers; https://adblockplus.org/. | |
| - AppLock: https://play.google.com/store/apps/details?id=com.domobile.applock | |
| - AVG PrivacyFix: Manages all social media privacy settings; https://www.privacyfix.com/start/install. | |
| - Blur: Blocks tracking, password management, disposable email addresses, and much more; https://dnt.abine.com/#register. | |
| - BugMeNot: Bypasses the sign-in on websites that require your info to simply read a page; http://bugmenot.com/. | |
| - Cocoon: Blocks tracking, offers disposable email addresses; https://getcocoon.com/. | |
| - Disconnect: Blocks Facebook tracking; https://disconnect.me/. | |
| - Do Not Track: http://donottrack.us/ | |
| - DuckDuckGo: A nontracking search engine; https://duckduckgo.com/ | |
| - Ghostery: Alerts you to bugs, tracking, and ad networks on sites you | |
| - visit but can be overwhelming and controversially resells anonymized | |
| - user metrics; https://www.ghostery.com/en/. | |
| - HTTPS Everywhere: Enables encryption automatically on sites that support it; https://www.eff.org/HTTPS-EVERYWHERE. | |
| - PrivacySuite: https://addons.mozilla.org/en-US/firefox/addon/privacysuite/ | |
| ## Browser Security Settings | |
| - Chrome: Settings4(Show advanced settings) Privacy | |
| - Firefox: Preferences4Privacy | |
| - Internet Explorer: Tools4Internet Options4Privacy | |
| - Safari: Preferences4Privacy (and Preferences4Security) | |
| - Safari mobile: Settings4Safari4Privacy & Security | |
| ## Paranoid | |
| - Find your current IP address: http://www.whatismyip.com/ | |
| - PO box application: https://poboxes.usps.com/poboxonline/search/landingPage.do | |
| - VPN, reliable reviews: http://www.torrentfreak.com/?s=VPN/ | |
| ## Credit Freezes and Fraud Alerts | |
| - Experian: http://experian.com/freeze/center.html; http://experian.com/fraud/center.html | |
| - TransUnion: http://transunion.com/securityfreeze/; http://fraud.transunion.com/ | |
| - Equifax: https://www.freeze.equifax.com/; https://www.alerts.equifax.com/ | |
| - | |
| ## Prepaid Credit Cards/Gift Cards | |
| - Amex: http://www.americanexpress.com/gift-cards/ | |
| - Discover: http://www.discover.com/gift-cards/index.shtml | |
| - MasterCard: http://www.mastercard.us/prepaid-gift-card.html | |
| - Visa: http://usa.visa.com/personal/personal-cards/gift-cards/ | |
| - Masked cards (unique, disposable credit cards): MaskMe; http://www.abine.com/maskme/ | |
| ## OpenPGP Encryption | |
| - How it works: http://www.explainthatstuff.com/encryption.html; | |
| - Cryptography.org; “PGP Installation and Use For Dummies,” http://www.qdog.com/pgp/pgp_faq.html | |
| - Browser extension: Mailvelope; https://www.mailvelope.com/ | |
| - Open source alternative: https://www.gnupg.org/ | |
| ## OTR | |
| - How it works: http://www.pressfreedomfoundation.org/encryption-works#otr, otr.cypherpunks.ca | |
| - Chat/IM software clients that come with OTR: Adium, https://adium.im/; Xabber, http://www.xabber.com/; TextSecure, https://whispersystems.org/; ChatSecure, https://chatsecure.org/ | |
| - Chat/IM software client that supports OTR plug-ins: Pidgin; https://pidgin.im/ | |
| ## Recommended Privacy Apps | |
| - Blur: https://www.abine.com/index.html | |
| - ChatSecure: https://chatsecure.org/ | |
| - Cocoon: https://getcocoon.com/ | |
| - RedPhone and Text Secure: https://whispersystems.org/ | |
| - Silent Circle: https://www.silentcircle.com/ and https://blackphone.ch/ | |
| ## Tor (The Onion Router) | |
| - Project site: https://www.torproject.org/ | |
| - How it works: https://www.eff.org/torchallenge/what-is-tor/ | |
| - Apps that use Tor: Orbot for Android; https://guardianproject.info/apps/orbot/ | |
| ## VoIP | |
| - BurnerApp: http://www.burnerapp.com/ | |
| - Google Voice: https://www.google.com/googlevoice/about.html | |
| - Skype: http://www.skype.com/en/ | |
| ## Password Generators | |
| - LastPass: http://lastpass.com/generatepassword.php | |
| - Norton: http://identitysafe.norton.com/password-generator/ | |
| ## Password Managers | |
| - 1Password: http://www.agilebits.com/onepassword/ | |
| - KeePass: http://www.keepass.info/ | |
| - LastPass: https://lastpass.com/ | |
| - oneSafe: http://www.onesafe-apps.com/ | |
| - Password Safe: http://www.passwordsafe.sourceforge.net/ | |
| - Splash ID Safe: http://www.splashdata.com/ |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment