Professional Documents
Culture Documents
Ramiro Romani Privacy Mindset and Practice
Ramiro Romani Privacy Mindset and Practice
Ramiro Romani Privacy Mindset and Practice
PRACTICE
Ramiro Romani
5/16/2021
https://above-agency.com
https://above-agency.com
Join newsletter
Office Servers
Our Services
neo-network
Contact: ramiro@above-agency.com
Where are we going in
120 Minutes?
●
Privacy and its importance
(demo) (10)
Mindset vs Practice (5)
https://above-agency.com
●
●
Privacy Framework (15)
●
Threat Awareness (15)
●
Privacy Strategies /
Processes (15)
●
Privacy Practice (60)
What is privacy?
●
Definition
●
Long term vision
https://above-agency.com
Not paranoia
●
●
Practiced every day
https://above-agency.com
Demo
●
Example of a real world privacy investigation
●
May be a bit disturbing
https://above-agency.com
It starts with a target (one piece of info, general
●
description)
Exercise
●
What did you learn from the demo?
●
What could have the target done differently to
protect themselves?
https://above-agency.com
●
Do you see your privacy having similar issues?
Mindset vs. Practice
●
Mindset: Awareness &
attention
Practice: Mindset acted
https://above-agency.com
●
upon
●
Can you have one and not
the other?
A Framework
●
Identify
●
Protect
https://above-agency.com
Detect
●
●
Respond
●
Recover
IDENTIFY: Awareness
●
Awareness starts with knowledge
●
What are the major information systems of today and in the past
How can these be used against us
https://above-agency.com
●
●
How centralized can this data get?
Awareness
●
Web Browsing
●
Social Networks
Operating Systems
https://above-agency.com
●
●
Phones
●
ISPs
●
Online Communities
●
Govt Agencies
IDENTIFY: Web Browsing
●
Search engines
●
Tracking scripts
How do they track you?
https://above-agency.com
●
●
IP Logging
●
First & third party cookies
●
Logged into account
●
Browser fingerprinting
●
Tracking scripts
PROTECT: Web Browsing
●
Browser configuration
●
Addon protection
Choice of browser
https://above-agency.com
●
●
Choice of search engine
●
What’s your score after protection?
IDENTIFY & PROTECT: Social
Networks
●
Google / Youtube
●
Facebook / Instagram / WhatsApp
LinkedIn
https://above-agency.com
●
●
Twitter / Tumblr
IDENTIFY & PROTECT: OS
●
The lowest level of privacy you can have.
●
Open-Source Operating Systems
How to migrate
https://above-agency.com
●
Windowslatest.com, 2020
IDENTIFY & PROTECT: Networks
●
Local threats
●
Regional threats
What is leaked?
https://above-agency.com
●
●
VPNs
Widebinary.org
VPN Demo
●
Our current situation (unprotected?)
●
Why is the provider important?
What makes a VPN good?
https://above-agency.com
●
●
Mullvad Analysis
●
Mullvad Demo
●
Your new protection
IDENTIFY: World Infrastructure
●
PRISM
●
ECHELON
XKeyScore
https://above-agency.com
●
●
Five Eyes / Nine Eyes / Thirteen Eyes
RESPOND & RECOVER: Tools,
Password Manager
●
Why use a password manager?
●
The right types of passwords
Bitwarden Demo
https://above-agency.com
●
Protect & Detect
• Data Defense
• Information Hiding
• Identity Siloing
https://above-agency.com
• Monitor Breaches
Tools: Emails
• Emails: Are they secure?
• Types of mail
• What makes a good email service?
https://above-agency.com
• Criteria:
●
Logging
●
Jurisdiction
●
Retention
Extensions
• Email Masking services • GPG Encryption
• Blur by Abine • Demo
●
w34jkl@opayq.com
https://above-agency.com
• AnonAddy
●
Username based addresses
●
amazon@aa.anonaddy.com
• SimpleLogin
• Choice between totally randomized or custom
keyword username
• Outgoing emails as well
Encrypted Messengers
• Criteria
●
Open-Source
Privacy Policy
https://above-agency.com
●
●
Data Gathered / Contact Tracing
●
Transport Centralization
●
Partner Risks
Briar
• Is the most secure and best for serious
private communication.
• Can only create contacts in person, first
https://above-agency.com
contact is established.
• Can choose how you want the message
transmitted.
• Good for non-critical asynchronous
communication
Briar
https://above-agency.com
Mobile Operating Systems
• Criteria
●
Open-Source
Lineage OS
https://above-agency.com
●
●
CalyxOS
●
GrapheneOS
●
F-Droid
Resources
Private.sh ●
F-Droidl
SearX
●
Briar
UblockOrigin
●
Threema
Umatrix
Mullvad
Look how far we’ve come.
https://above-agency.com
The journey never ends. :)