Home Forums Hunting & Shooting Hunter's Campfire Secure Communications Options (from an IT security professional)

Yeah I have toyed with the idea of stripping most of Google off my Android phone. I use so few apps it wouldn't be hard. But I do use a multifactor authentication tool for secure access to my work network. And that tool will not work on a rooted phone.

A VPN is like an encrypted tunnel to a proxy address. Think of all the traffic of all the people using the VPN as funneling through one server online, or one of a handful. So all those people will be masquerading as if they originated from that server address. You may live in Texas and you look like you're in Maine or Canada.

I hate bloatware and apps I never use. Besides, most of the apps, even though theyre not in use, "call home" ...A LOT! On my home network I run pihole to block a lot of BS. But...its a never ending task to block most of these intrusive companies.

I hooked up to the internet when it was still fairly young. Hardly anybody had a web page back then and the few bulletin boards were very basic.

Now look at what it is. People have to take precautions to keep it from complicating their lives.

Thanks, but do they always switch around where your location appears or will it always go where the VPN company is? I mean, if it could always show me as in TX but never in CA I'd be happy.

And it sucks your multifactor deal won't work on a "rooted phone".

Me. I deal with IT security every day at work. I'm also a Certified Information Systems Security Professional (CISSP). There are also other members that have similar background that I'm sure can speak their minds as well. I think Roger was asking in another thread about options for communicating securely. If you still want to stay online and have a smart phone, there are some suggestions that have been made by members. I'll just add my 2 cents here. Take it for what it's worth...

Get rid of Facebook, Twitter, Yahoo, Google, and Microsoft logons. If you need an explanation of why at this point, please do yourself a favor and start a thread calling Travis a homo and enjoy that for a while.

For me, getting rid of Facebook, Twitter, Yahoo and Microsoft logons was easy, I just ripped the Band-Aid off. Google is more complicated. My Gmail account is all over the place online. I need to scrub all my online accounts. Cancel all the ones that are stupid to keep, and then change my account email address for the rest. If you have an android phone, it's difficult to use without a Google account and still use the core services or fetch apps off the Google play store for instance. It isn't impossible but it would required way more expertise than many have. But you can go into your Google account details and turn off a bunch of features like location history, search history etc. Yeah they probably can dig that off their servers but it would take effort.

I am going to a secure email address and account. An organization called protonmail is out of Switzerland. It's secure, encrypted email, they don't have ads, and they don't keep logs of email. They claim that even they cannot read your email. They also have a real VPN app (not just a proxy server) that does end to end encryption from your device to the VPN server. That makes it impossible for your ISP to watch your activities. Both the email and the VPN have free options, without ads and without logging and with full encryption. The paid accounts offer more features and bandwidth like being able to secure multiple devices simultaneously, having multiple email alias accounts, more load balancing across multiple servers, more email storage, more bandwidth etc. They only make money if someone gets a paid account so you may want to consider that. As an example, I got a paid email and VPN bundle deal on Black Friday for $8/ month called their "plus" plan. I can try and find a link to that if anyone is interested if it's still active on their web site.

For a messenger, a lot of people use Facebook messenger. Again, at this point- stupid. Some folks use a messenger called Whatsapp. Well, Facebook bought them, so still stupid. I am researching a secure messenger called "Signal", which is open source, not owned by any of the douche bag tech companies, and offers end to end encryption. That's all I know for now. If anyone is interested in that as an option, I will check it out and reply to the thread. The challenging thing about a messenger, is that whoever you communicate with will likely need the same app or the end to end encryption is moot and you might as well just shout your secrets out the window at rush hour.

For online searches, please do not use Google, Yahoo, or Bing anymore. Some have suggested they use Duckduckgo. That's better but not best imo. Yes, you are not using the Google servers for your searches. But as OP mentioned in another thread, Duckduckgo does use an archive of Google's search database. Google may not be tracking your searches in real time, but the search results may be optimized by their AI algorithms to give you targeted results that THEY want to give people to steer humans' thinking in a certain direction. For example, if you were to search on "corrupt politicians", Google's AI may give you a bunch of targeted results referring to Trump first, instead of Biden or Hilary etc. And that bias may be archived in what Duckduckgo uses. As someone mentioned in another thread, I use Qwant for a search engine which is out of France.

Bottom line, when looking for ways to securely communicate online, there is no perfect solution, but some simple changes can make you a lot more obscure. When looking at secure email, messengers and search engines, it's sad to say but I tend to look at options under the European Union security laws. Their privacy laws are much more strict than ours in the States. Our tech companies are in on the agenda and they are in bed with some very bad people.

Take care and welcome to Amerika comrads.

Jake, Do you have or know of a list of the steps necessary to shut down FB properly and de-fang their intrusions / stealing of your data?

I can't tell you the exact steps because I can longer get in LOL. But somewhere in the account settings there is a deactivate option and you should be given an option to either deactivate for 30 days or to completely delete. I just choose the delete option. I assume they have all your correspondence archived somewhere even if you delete, but at least they won't have information on you going forward.

If you're persistent enough in the account settings and dig around you'll run into an area just as Jake mentioned. While it wouldn't let me "full delete" it did allow me to deactivate and as long as I didn't attempt a log in for 30 days it would then delete my account. As Jake said they have your original account information archived somewhere I'm sure but you can't do anything about that, only the future

BTW, I did this on NOV 4 when I was proven right about FB, twatter, etc. I assume/hope it's still that easy to unplug

Jake, Do you have or know of a list of the steps necessary to shut down FB properly and de-fang their intrusions / stealing of your data?

Thank you Jake and others. I'm trying Brave right now, working out bugs. I'll probably try Opera too then decide which I'll keep. But Firefox will be gone!

BTW, I also use Thunderbird, is there an alternative to that?