diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json index 7d298ce0..dd0cbe13 100644 --- a/.devcontainer/devcontainer.json +++ b/.devcontainer/devcontainer.json @@ -81,7 +81,7 @@ }, "extensions": [ "EditorConfig.EditorConfig", - "DavidAnson.vscode-markdownlint", + "rvben.rumdl", "wholroyd.jinja", "mikestead.dotenv", "redhat.vscode-yaml", diff --git a/.rumdl.toml b/.rumdl.toml new file mode 100644 index 00000000..61ad7ea5 --- /dev/null +++ b/.rumdl.toml @@ -0,0 +1,14 @@ +[global] +disable = ["md013", "md033", "md046", "md026"] + +[md007] +indent = 4 + +[md010] +code_blocks = false + +[md024] +siblings_only = true + +[md049] +style = "asterisk" diff --git a/.vscode/extensions.json b/.vscode/extensions.json index 7d8a9d10..af809e02 100644 --- a/.vscode/extensions.json +++ b/.vscode/extensions.json @@ -21,7 +21,7 @@ { "recommendations": [ "EditorConfig.EditorConfig", - "DavidAnson.vscode-markdownlint", + "rvben.rumdl", "wholroyd.jinja", "mikestead.dotenv", "redhat.vscode-yaml", diff --git a/.vscode/settings.json b/.vscode/settings.json index 9a388048..b4962c5a 100644 --- a/.vscode/settings.json +++ b/.vscode/settings.json @@ -91,7 +91,7 @@ }, "editor.unicodeHighlight.ambiguousCharacters": true, "editor.unicodeHighlight.invisibleCharacters": true, - "editor.defaultFormatter": "DavidAnson.vscode-markdownlint", + "editor.defaultFormatter": "rvben.rumdl", "[yaml]": { "editor.defaultFormatter": "redhat.vscode-yaml", "editor.quickSuggestions": { diff --git a/README.md b/README.md index e6da7d35..1cfacb9e 100644 --- a/README.md +++ b/README.md @@ -112,7 +112,7 @@ Committing to this repository requires [signing your commits](https://docs.githu ## Releasing -It is required to create a GitHub release to publish the current site to privacyguides.org. The current `main` branch can be previewed at [https://main.staging.privacyguides.dev](https://main.staging.privacyguides.dev) prior to release. +It is required to create a GitHub release to publish the current site to privacyguides.org. 1. Create a new tag: `git tag -s YYYY.MM.DD -m 'Some message'` - Tag numbering: `YYYY.MM.DD` - if two+ releases are published on the same day, append short commit to the next release, e.g. `YYYY.MM.DD-6aa14e8` diff --git a/blog/posts/differential-privacy.md b/blog/posts/differential-privacy.md index 3ddc78e6..e74bff96 100644 --- a/blog/posts/differential-privacy.md +++ b/blog/posts/differential-privacy.md @@ -45,7 +45,7 @@ A famous example is the AOL search log release. AOL had been logging its users s #### Strava Heatmap Incident -In 2018, the fitness app Strava announced a major update to its heatmap, showing the the workout patterns of users of fitness trackers like Fitbit. +In 2018, the fitness app Strava announced a major update to its heatmap, showing the workout patterns of users of fitness trackers like Fitbit. Analyst [Nathan Ruser](https://x.com/Nrg8000/status/957318498102865920) indicated that these patterns can reveal military bases and troop movement patterns. This is obviously a huge op-sec problem and can endanger the lives of troops. diff --git a/blog/posts/email-security.md b/blog/posts/email-security.md index ad7aa14c..28f1b6ed 100644 --- a/blog/posts/email-security.md +++ b/blog/posts/email-security.md @@ -10,7 +10,7 @@ tags: - Email license: BY-SA schema_type: BackgroundNewsArticle -description: Email is ubiquitous. If you want to function in modern society, you pretty much have to have an email address. But is it really a good idea to still be relying on the same decades old techology? What can we do about replacing it? +description: Email is ubiquitous. If you want to function in modern society, you pretty much have to have an email address. But is it really a good idea to still be relying on the same decades old technology? What can we do about replacing it? preview: cover: blog/assets/images/email-security/cover.png --- diff --git a/blog/posts/mastodon-tutorial-privacy-and-security.md b/blog/posts/mastodon-tutorial-privacy-and-security.md index 1ed08d2e..2aed4aed 100644 --- a/blog/posts/mastodon-tutorial-privacy-and-security.md +++ b/blog/posts/mastodon-tutorial-privacy-and-security.md @@ -266,7 +266,7 @@ Confirm your choice by clicking on "Save changes" on the upper-right. ![Screenshot of the Mastodon web interface showing the "Preferences" page in Preferences.](../assets/images/mastodon-tutorial-privacy-and-security/mastodon-posts-default.webp)
-

Hide posted media (slighly)

+

Hide posted media (slightly)

Additionally, you might want to check the "Always mark media as sensitive" option from the same section. This will label the media as "Sensitive content", and require others to click on it to view the image. This will **not stop anyone from clicking to view it**, including people without a Mastodon account from your account's public page, but it might *slightly* reduce the visibility for certain media. diff --git a/blog/posts/stay-safe-but-stay-connected.md b/blog/posts/stay-safe-but-stay-connected.md index 5ea98ed2..30da6607 100644 --- a/blog/posts/stay-safe-but-stay-connected.md +++ b/blog/posts/stay-safe-but-stay-connected.md @@ -59,7 +59,7 @@ There are different levels to this. It could mean sharing a first name but not a Using a pseudonym and a profile picture that isn't a self-portrait can help significantly to reduce digital footprints and improve online safety. It can also help to detach different accounts from each other, for example by using a certain name for a work account and a pseudonym for a personal alt account. -Remember that that this will not make you anonymous online, however. It will only help hide or separate your legal identity from your public-facing profile. +Remember that this will not make you anonymous online, however. It will only help hide or separate your legal identity from your public-facing profile. If you want to use more serious pseudonymity online, you will also need to consider using different email addresses to sign up, different phone numbers if required, different photos of course, but also different IP addresses, and so on and so forth. diff --git a/docs/about/donate.md b/docs/about/donate.md index 26495781..cbe4a89e 100644 --- a/docs/about/donate.md +++ b/docs/about/donate.md @@ -28,11 +28,12 @@ MAGIC Grants is our fiscal host, and their custom, open-source donation platform
- [![Power Up Privacy]](https://powerupprivacy.com){ rel=nofollow target=_blank title="Power Up Privacy" } - [![DeleteMe]](https://joindeleteme.com){ rel=nofollow target=_blank title="DeleteMe" } + ![Power Up Privacy]{ title="Power Up Privacy" } + [![Cape]](https://www.cape.co){ target=_blank title="Cape" } [Power Up Privacy]: ../assets/img/donors/power-up-privacy.webp [DeleteMe]: ../assets/img/donors/deleteme.webp + [Cape]: ../assets/img/donors/cape.webp
@@ -41,6 +42,7 @@ MAGIC Grants is our fiscal host, and their custom, open-source donation platform Thank you to these organizations who have substantially supported our project in the past. - [Safing](https://safing.io){ rel=nofollow target=_blank }: 2019 – 2021 + - [DeleteMe](https://joindeleteme.com){ rel=nofollow target=_blank }: 2025 ## Active Members @@ -83,7 +85,7 @@ You can become an organizational member by reaching out to Tor Browser is specifically engineered to minimize the uniqueness of each user's fingerprint across various metrics. While it is practically impossible to make all Tor Browser users identical, the goal is to reduce the number of distinguishable "buckets" for each metric. This approach makes it harder to track individual users effectively. + + While this is effective at preserving anonymity, it also creates a digital monoculture where the same vulnerabilities exist across many installations. In cybersecurity, monocultures are generally considered a risk. Security through diversity provides natural segmentation by limiting the impact of an exploit to a smaller segment of users. While such diversity is structurally desirable for security, it inherently compromises user anonymity by making individuals trackable. Additionally, Tor Browser is based on Firefox's Extended Support Release builds, which only receives patches for vulnerabilities considered *Critical* and *High* (not *Medium* and *Low*). This means that attackers could (for example): diff --git a/docs/android/obtaining-apps.md b/docs/android/obtaining-apps.md index 7122ccea..9f1b1f3a 100644 --- a/docs/android/obtaining-apps.md +++ b/docs/android/obtaining-apps.md @@ -121,6 +121,6 @@ The [F-Droid](https://f-droid.org/en/packages) and [IzzyOnDroid](https://apt.izz

F-Droid Basic

-In some rare cases, the developer of an app will only distribute it through F-Droid ([Gadgetbridge](../health-and-wellness.md#gadgetbridge) is one example of this). If you really need an app like that, we recommend using the newer [F-Droid Basic](https://f-droid.org/en/packages/org.fdroid.basic) client instead of the original F-Droid app to obtain it. F-Droid Basic supports automatic background updates without privileged extension or root, and has a reduced feature set (limiting attack surface). +In some rare cases, an app may only be available through F-Droid. If you really need an app like that, we recommend using the newer [F-Droid Basic](https://f-droid.org/en/packages/org.fdroid.basic) client instead of the original F-Droid app to obtain it, as it has a reduced feature set (limiting attack surface).
diff --git a/docs/basics/multi-factor-authentication.md b/docs/basics/multi-factor-authentication.md index 94f129bd..38e09424 100644 --- a/docs/basics/multi-factor-authentication.md +++ b/docs/basics/multi-factor-authentication.md @@ -140,7 +140,7 @@ If the hostname of your system changes (such as due to DHCP), you would be unabl
-The `pam_u2f` module on Linux can provide two-factor authentication for logging in on most popular Linux distributions. If you have a hardware security key that supports U2F, you can set up MFA authentication for your login. Yubico has a guide [Ubuntu Linux Login Guide - U2F](https://support.yubico.com/hc/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F) which should work on any distribution. The package manager commands—such as `apt-get`—and package names may however differ. This guide does **not** apply to Qubes OS. +The `pam_u2f` module on Linux can provide two-factor authentication for logging in on most popular Linux distributions. If you have a hardware security key that supports U2F, you can set up MFA authentication for your login. Yubico has a guide [Ubuntu Linux Login Guide - U2F](https://support.yubico.com/s/article/Ubuntu-Linux-login-guide-U2F) which should work on any distribution. The package manager commands—such as `apt-get`—and package names may however differ. This guide does **not** apply to Qubes OS. ### Qubes OS diff --git a/docs/cloud.md b/docs/cloud.md index ac70c0c7..de069837 100644 --- a/docs/cloud.md +++ b/docs/cloud.md @@ -89,8 +89,6 @@ Tresorit has received a number of independent security audits: [^1]: [ISO/IEC 27001](https://en.wikipedia.org/wiki/ISO/IEC_27001):2013 compliance relates to the company's [information security management system](https://en.wikipedia.org/wiki/Information_security_management) and covers the sales, development, maintenance and support of their cloud services. -They have also received the Digital Trust Label, a certification from the [Swiss Digital Initiative](https://efd.admin.ch/en/swiss-digital-initiative-en) which requires passing [35 criteria](https://swiss-digital-initiative.org/criteria) related to security, privacy, and reliability. - ## Peergos
diff --git a/docs/cryptocurrency.md b/docs/cryptocurrency.md index ba599419..c4e058d2 100644 --- a/docs/cryptocurrency.md +++ b/docs/cryptocurrency.md @@ -74,7 +74,6 @@ There are numerous centralized exchanges (CEX) as well as P2P marketplaces where - [Kraken](https://kraken.com): A well-known CEX. Registration and KYC are mandatory. Card payments and bank transfers accepted. Make sure not to leave your newly purchased Monero on Kraken's platform after the purchase; withdraw them to a self-custody wallet. Monero is not available in all jurisdictions that Kraken operates in.[^1] - [Cake Wallet](https://cakewallet.com): A self-custody cross-platform wallet for Monero and other cryptocurrencies. You can buy Monero directly in the app using card payments or bank transfers (through third-party providers such as [Guardarian](https://guardarian.com) or [DFX](https://dfx.swiss)).[^2] KYC is usually not required, but it depends on your country and the amount you are purchasing. In countries where directly purchasing Monero is not possible, you can also use a provider within Cake Wallet to first buy another cryptocurrency such as Bitcoin, Bitcoin Cash, or Litecoin and then exchange it to Monero in-app. - [Monero.com](https://monero.com) is an associated website where you can buy Monero and other cryptocurrencies without having to download an app. The funds will simply be sent to the wallet address of your choice. -- [RetoSwap](https://retoswap.com) (formerly known as Haveno-Reto) is a self-custody, decentralized P2P exchange platform based on the [Haveno](https://haveno.exchange) project which is available for Linux, Windows, and macOS. Monero can be bought and sold with maximum privacy, since most trading counterparties do not require KYC, trades are made directly between users (P2P), and all connections run through the Tor network. It is possible to buy Monero via bank transfer, PayPal, or even by paying in cash (meeting in person or sending by mail). Arbitrators can step in to resolve disputes between buyer and seller, but be careful when sharing your bank account or other sensitive information with your trading counterparty. Trading with some accounts may be against those accounts' terms of service. ## Criteria diff --git a/docs/data-broker-removals.md b/docs/data-broker-removals.md index cc998615..946c2558 100644 --- a/docs/data-broker-removals.md +++ b/docs/data-broker-removals.md @@ -34,7 +34,6 @@ You should search for your information on these sites first, and submit an opt-o - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PublicDataUSA ([Search](https://publicdatausa.com), [Opt-Out](https://publicdatausa.com/remove.php)) -- Radaris ([Search](https://radaris.com), [Opt-Out](https://radaris.com/page/how-to-remove)) - Spokeo ([Search](https://spokeo.com/search), [Opt-Out](https://spokeo.com/optout)) - That's Them ([Search](https://thatsthem.com), [Opt-Out](https://thatsthem.com/optout)) - USPhonebook ([Search and Opt-Out](https://usphonebook.com/opt-out)) diff --git a/docs/data-redaction.md b/docs/data-redaction.md index 02deb308..7e0ef666 100644 --- a/docs/data-redaction.md +++ b/docs/data-redaction.md @@ -5,11 +5,19 @@ icon: material/tag-remove description: Use these tools to remove metadata like GPS location and other identifying information from photos and files you share. cover: data-redaction.webp --- + Protects against the following threat(s): - [:material-account-search: Public Exposure](basics/common-threats.md#limiting-public-information){ .pg-green } -When sharing files, be sure to remove associated metadata. Image files commonly include [Exif](https://en.wikipedia.org/wiki/Exif) data. Photos sometimes even include GPS coordinates in the file metadata. +When sharing files, be sure to remove associated metadata. Most common file types (including documents, images, and videos) include metadata. Image files, for example, commonly include Exif data. Photos sometimes even include GPS coordinates in the file metadata. + +Windows has a built-in metadata remover, but unfortunately it cannot remove many types of data such as: + +- Documents: Comments, author names, tracked changes, hidden worksheets, slide notes, custom XML, and document revision histories. +- Images: Camera serial numbers, XMP/IPTC data, C2PA metadata, and image thumbnails (which can dangerously expose original details from cropped or erased areas). +- Audio & Video: XMP metadata, C2PA metadata, and certain ID3v2 tag fields. +- Embedded Files: Hidden metadata nested inside images that are embedded within documents.

Warning

diff --git a/docs/desktop-browsers.md b/docs/desktop-browsers.md index af60c51d..da834289 100644 --- a/docs/desktop-browsers.md +++ b/docs/desktop-browsers.md @@ -62,7 +62,7 @@ schema: These are our currently recommended **desktop web browsers** and configurations for standard/non-anonymous browsing. We recommend [Mullvad Browser](#mullvad-browser) if you are focused on strong privacy protections and anti-fingerprinting out of the box, [Firefox](#firefox) for casual internet browsers looking for a good alternative to Google Chrome, and [Brave](#brave) if you need Chromium browser compatibility. -If you need to browse the internet anonymously, you should use [Tor](tor.md) instead. We make some configuration recommendations on this page, but all browsers other than Tor Browser will be traceable by *somebody* in some manner or another. +If you need to browse the internet anonymously, you should use [Tor Browser](tor.md) instead. We make some configuration recommendations on this page, but Tor Browser offers the best protections against online tracking. ## Mullvad Browser @@ -88,7 +88,7 @@ If you need to browse the internet anonymously, you should use [Tor](tor.md) ins
-Like [Tor Browser](tor.md), Mullvad Browser is designed to prevent fingerprinting by making your browser fingerprint identical to all other Mullvad Browser users, and it includes default settings and extensions that are automatically configured by the default security levels: *Standard*, *Safer* and *Safest*. +Like [Tor Browser](tor.md), Mullvad Browser is designed to prevent fingerprinting by making your browser fingerprint similar to a large number of other Mullvad Browser users, and it includes default settings and extensions that are automatically configured by the default security levels: *Standard*, *Safer* and *Safest*. Therefore, it is imperative that you do not modify the browser at all outside adjusting the default [security levels](https://tb-manual.torproject.org/security-settings). When adjusting the security level, you **must** always restart the browser before continuing to use it. Otherwise, [the security settings may not be fully applied](https://www.privacyguides.org/articles/2025/05/02/tor-security-slider-flaw), putting you at a higher risk of fingerprinting and exploits than you may expect based on the setting chosen. @@ -98,7 +98,7 @@ Modifications other than adjusting this setting would make your fingerprint uniq **Without** using a [VPN](vpn.md), Mullvad Browser provides protections against [naive fingerprinting scripts](https://github.com/arkenfox/user.js/wiki/3.3-Overrides-%5BTo-RFP-or-Not%5D#-fingerprinting) similar to other private browsers like Firefox+[Arkenfox](#arkenfox-advanced) or [Brave](#brave). Mullvad Browser provides these protections out of the box, at the expense of some flexibility and convenience that other private browsers can provide. -==For the strongest anti-fingerprinting protection, we recommend using Mullvad Browser in conjunction **with** a VPN==, whether that is Mullvad or another recommended VPN provider. When using a VPN with Mullvad Browser, you will share a fingerprint and a pool of IP addresses with many other users, giving you a "crowd" to blend in with. This strategy is the only way to thwart advanced tracking scripts, and is the same anti-fingerprinting technique used by Tor Browser. +==For the strongest anti-fingerprinting protection, we recommend using Mullvad Browser in conjunction **with** a VPN==, whether that is Mullvad or another recommended VPN provider. When using a VPN with Mullvad Browser, you will share a fingerprint and a pool of IP addresses with many other users, giving you a "crowd" to blend in with. This strategy is the best way to defend against advanced tracking scripts, and is the same anti-fingerprinting technique used by Tor Browser. Note that while you can use Mullvad Browser with any VPN provider, other people on that VPN must also be using Mullvad Browser for this "crowd" to exist, something which is more likely on Mullvad VPN compared to other providers. Mullvad Browser does not have built-in VPN connectivity, nor does it check whether you are using a VPN before browsing; your VPN connection has to be configured and managed separately. @@ -329,6 +329,7 @@ Brave's Web3 features can potentially add to your browser fingerprint and attack - Select **Extensions (no fallback)** under *Default Ethereum wallet* - Select **Extensions (no fallback)** under *Default Solana wallet* +- Select **Extensions (no fallback)** under *Default Cardano wallet* #### Extensions diff --git a/docs/dns.md b/docs/dns.md index 8f81e771..0b73d4a3 100644 --- a/docs/dns.md +++ b/docs/dns.md @@ -23,8 +23,7 @@ These are our favorite public DNS resolvers based on their privacy and security | [**AdGuard Public DNS**](https://adguard-dns.io/en/public-dns.html) | Cleartext
DoH/3
DoT
DoQ
DNSCrypt | Anonymized[^1] | Anonymized | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/AdguardTeam/AdGuardSDNSFilter) | Yes [:octicons-link-external-24:](https://adguard-dns.io/en/blog/encrypted-dns-ios-14.html) | | [**Cloudflare**](https://developers.cloudflare.com/1.1.1.1/setup) | Cleartext
DoH/3
DoT | Anonymized[^2] | No | Based on server choice. | No [:octicons-link-external-24:](https://community.cloudflare.com/t/requesting-1-1-1-1-signed-profiles-for-apple/571846) | | [**Control D Free DNS**](https://controld.com/free-dns) | Cleartext
DoH/3
DoT
DoQ | No[^3] | No | Based on server choice. | Yes
[:simple-apple: iOS](https://docs.controld.com/docs/ios-platform)
[:material-apple-finder: macOS](https://docs.controld.com/docs/macos-platform#manual-setup-profile) | -| [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^4] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | -| [**Quad9**](https://quad9.net) | Cleartext
DoH/3
DoT
DoQ
DNSCrypt | Anonymized[^5] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | +| [**Quad9**](https://quad9.net) | Cleartext
DoH/3
DoT
DoQ
DNSCrypt | Anonymized[^4] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | [^1]: AdGuard stores aggregated performance metrics of their DNS servers, namely the number of complete requests to a particular server, the number of blocked requests, and the speed of processing requests. They also keep and store the database of domains requested within the last 24 hours. @@ -41,10 +40,6 @@ These are our favorite public DNS resolvers based on their privacy and security Control D: [*Privacy Policy*](https://controld.com/privacy) [^4]: - Mullvad's DNS service is available to both subscribers and non-subscribers of Mullvad VPN. Their privacy policy explicitly claims they do not log DNS requests in any way. - - Mullvad: [*No-logging of user activity policy*](https://mullvad.net/en/help/no-logging-data-policy) -[^5]: Quad9 collects some data for the purposes of threat monitoring and response. That data may then be remixed and shared for purposes like furthering their security research. Quad9 does not collect or record IP addresses or other data they deem personally identifiable. Quad9: [*Data and Privacy Policy*](https://quad9.net/privacy/policy) diff --git a/docs/email-aliasing.md b/docs/email-aliasing.md index 5e027f63..998ec32d 100644 --- a/docs/email-aliasing.md +++ b/docs/email-aliasing.md @@ -4,6 +4,7 @@ icon: material/email-lock description: An email aliasing service allows you to easily generate a new email address for every website you register for. cover: email-aliasing.webp --- + Protects against the following threat(s): - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } @@ -119,9 +120,9 @@ If you cancel your subscription, you will still enjoy the features of your paid
-SimpleLogin was [acquired by Proton AG](https://proton.me/news/proton-and-simplelogin-join-forces) as of April 8, 2022. If you use Proton Mail for your primary mailbox, SimpleLogin is a great choice. As both products are now owned by the same company you now only have to trust a single entity. We also expect that SimpleLogin will be more tightly integrated with Proton's offerings in the future. SimpleLogin continues to support forwarding to any email provider of your choosing. +SimpleLogin was [acquired by Proton AG](https://proton.me/news/proton-and-simplelogin-join-forces) on April 8, 2022, making it an excellent option for users of [Proton Mail](email.md#proton-mail) as their primary mailbox. With this acquisition, you only need to trust a single entity for your email services. SimpleLogin still allows forwarding to any email provider of your choice. -You can link your SimpleLogin account in the settings with your Proton account. If you have Proton Pass Plus, Proton Unlimited, or any multi-user Proton plan, you will have SimpleLogin Premium for free. You can also purchase a voucher code for SimpleLogin Premium anonymously via their official reseller [ProxyStore](https://simplelogin.io/faq). +You can link your SimpleLogin account in the settings with your Proton account. If you have Proton Pass Plus, Proton Unlimited, or any multi-user Proton plan, you will have SimpleLogin Premium for free. Likewise both the [Free and Premium tiers](https://simplelogin.io/pricing/) of SimpleLogin now include Proton Pass subscriptions. You can also purchase a voucher code for SimpleLogin Premium anonymously via their official reseller [ProxyStore](https://simplelogin.io/faq). Securitum [audited](https://simplelogin.io/blog/security-audit) SimpleLogin in early 2022 and all issues [were addressed](https://simplelogin.io/audit2022/web.pdf). diff --git a/docs/email.md b/docs/email.md index a11af7c4..8b91a4d0 100644 --- a/docs/email.md +++ b/docs/email.md @@ -92,7 +92,7 @@ Proton Mail has internal crash reports that are **not** shared with third partie From your inbox, select :gear: → **All Settings** → **Account** → **Security and privacy** → **Privacy and data collection**. - - [ ] Disable **Collect usage dignostics** + - [ ] Disable **Collect usage diagnostics** - [ ] Disable **Send crash reports** === "Mobile" @@ -100,7 +100,7 @@ Proton Mail has internal crash reports that are **not** shared with third partie From your inbox, select :material-menu: → :gear: **Settings** → select your username. - [ ] Disable **Send crash reports** - - [ ] Disable **Collect usage dignostics** + - [ ] Disable **Collect usage diagnostics** #### :material-check:{ .pg-green } Custom Domains and Aliases @@ -277,7 +277,6 @@ We regard these features as important in order to provide a safe and optimal ser - Must encrypt email account data at rest with asymmetric encryption, where only the user has the private keys needed to decrypt it. - Must be capable of exporting emails as [Mbox](https://en.wikipedia.org/wiki/Mbox) or individual .EML with [RFC5322](https://datatracker.ietf.org/doc/rfc5322) standard. -- Allow users to use their own [domain name](https://en.wikipedia.org/wiki/Domain_name). Custom domain names are important to users because it allows them to maintain their agency from the service, should it turn bad or be acquired by another company which doesn't prioritize privacy. - Must operate on owned infrastructure, i.e. not built upon third-party email service providers. **Best Case:** diff --git a/docs/health-and-wellness.md b/docs/health-and-wellness.md index 6886682c..6e2561c6 100644 --- a/docs/health-and-wellness.md +++ b/docs/health-and-wellness.md @@ -2,7 +2,7 @@ meta_title: "Privacy-Respecting Health and Wellness apps for Android and iOS - Privacy Guides" title: "Health and Wellness" icon: material/heart-pulse -description: These applications are what we currently recommend for all health- and fitness-related activites on your phone. +description: These applications are what we currently recommend for all health- and fitness-related activities on your phone. cover: health.webp --- Protects against the following threat(s): diff --git a/docs/os/linux-overview.md b/docs/os/linux-overview.md index aa362f29..582b18dc 100644 --- a/docs/os/linux-overview.md +++ b/docs/os/linux-overview.md @@ -1,7 +1,7 @@ --- title: Linux Overview icon: simple/linux -description: Linux is an open-source, privacy-focused desktop operating system alternative, but not all distribitions are created equal. +description: Linux is an open-source, privacy-focused desktop operating system alternative, but not all distributions are created equal. --- **Linux** is an open-source, privacy-focused desktop operating system alternative. In the face of pervasive telemetry and other privacy-encroaching technologies in mainstream operating systems, desktop Linux has remained the clear choice for people looking for total control over their computers from the ground up. @@ -67,16 +67,13 @@ Arch and Arch-based distributions are not recommended for those new to Linux (re For a secure system, you are also expected to have sufficient Linux knowledge to properly set up security for their system such as adopting a [mandatory access control](#mandatory-access-control) system, setting up [kernel module](https://en.wikipedia.org/wiki/Loadable_kernel_module#Security) blacklists, hardening boot parameters, manipulating [sysctl](https://en.wikipedia.org/wiki/Sysctl) parameters, and knowing what components they need such as [Polkit](https://en.wikipedia.org/wiki/Polkit). -Anyone using the [Arch User Repository (AUR)](https://wiki.archlinux.org/title/Arch_User_Repository) **must** be comfortable auditing PKGBUILDs that they download from that service. AUR packages are community-produced content and are not vetted in any way, and therefore are vulnerable to software [:material-package-variant-closed-remove: Supply Chain Attacks](../basics/common-threats.md#attacks-against-certain-organizations){ .pg-viridian }, which has in fact happened [in the past](https://bleepingcomputer.com/news/security/malware-found-in-arch-linux-aur-package-repository). +Arch-based derivatives designed to make Arch "easier to use" are not recommended, as they frequently encourage poor security practices while weakening the base system. These practices include bundling outdated packages in downstream repositories that are updated less frequently than Arch's official channels. Furthermore, these distributions usually fail to properly educate users on the risks associated with the Arch User Repository (AUR). + +Anyone using the [Arch User Repository (AUR)](https://wiki.archlinux.org/title/Arch_User_Repository) **must** be comfortable auditing PKGBUILDs (the recipes that build packages) that they download from that service. AUR packages are community-produced content and are not vetted in any way, and therefore are vulnerable to software [:material-package-variant-closed-remove: Supply Chain Attacks](../basics/common-threats.md#attacks-against-certain-organizations){ .pg-viridian }, which has in fact happened [in the past](https://bleepingcomputer.com/news/security/malware-found-in-arch-linux-aur-package-repository) and more recently when [1500 packages](https://discuss.privacyguides.net/t/around-1-500-aur-packages-compromised-with-rootkit-like-malware/38517) were compromised. The AUR should always be used sparingly, and often there is a lot of bad advice on various pages which direct people to blindly use [AUR helpers](https://wiki.archlinux.org/title/AUR_helpers) without sufficient warning. Similar warnings apply to the use of third-party Personal Package Archives (PPAs) on Debian-based distributions or Community Projects (COPR) on Fedora. -If you are experienced with Linux and wish to use an Arch-based distribution, we generally recommend mainline Arch Linux over any of its derivatives. - -Additionally, we recommend **against** these two Arch derivatives specifically: - -- **Manjaro**: This distribution holds packages back for 2 weeks to make sure that their own changes don’t break, not to make sure that upstream is stable. When AUR packages are used, they are often built against the latest [libraries](https://en.wikipedia.org/wiki/Library_(computing)) from Arch’s repositories. -- **Garuda**: They use [Chaotic-AUR](https://aur.chaotic.cx) which automatically and blindly compiles packages from the AUR. There is no verification process to make sure that the AUR packages don’t suffer from supply chain attacks. +If you are experienced with Linux and wish to use an Arch-based distribution, mainline Arch Linux is the **only** recommended option. ### Linux-libre kernel and “Libre” distributions diff --git a/docs/os/windows/group-policies.md b/docs/os/windows/group-policies.md index 56e1047b..48d4dd0a 100644 --- a/docs/os/windows/group-policies.md +++ b/docs/os/windows/group-policies.md @@ -127,6 +127,17 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Improve inking and typing recognition: **Disabled** +#### Windows AI + +
+

Windows Recall

+ +Windows 11 recently introduced a feature called **Recall**, which records all your activity and creates a searchable archive of that activity history. This is a massive privacy vulnerability, because those archives can potentially store highly sensitive information (essentially anything displayed on your screen), and malware without any special permissions or admin access can trivially [access](https://github.com/xaitax/TotalRecall) the full Recall database anytime after it is unlocked. + +
+ +- Turn off saving snapshots for use with Recall: **Enabled** + #### Windows Error Reporting - Do not send additional data: **Enabled** diff --git a/docs/real-time-communication.md b/docs/real-time-communication.md index 72a9c399..6e2c7bbd 100644 --- a/docs/real-time-communication.md +++ b/docs/real-time-communication.md @@ -73,7 +73,7 @@ If you use Android and your threat model requires protecting against [:material- ![Molly logo](assets/img/messengers/molly.svg){ align=right } -**Molly** is an alternative Signal client for Android which allows you to encrypt the local database with a passphrase at rest, to have unused RAM data securely shredded, to route your connection via Tor, and [more](https://blog.privacyguides.org/2022/07/07/signal-configuration-and-hardening#privacy-and-security-features). It also has usability improvements including scheduled backups, automatic locking, and the ability to use your Android phone as a linked device instead of the primary device for a Signal account. +**Molly** is an alternative Signal client for Android which allows you to encrypt the local database with a passphrase at rest, to have unused RAM data securely shredded, to route your connection via Tor, and [more](https://www.privacyguides.org/articles/2022/07/07/signal-configuration-and-hardening#privacy-and-security-features). It also has usability improvements including scheduled backups, automatic locking, and the ability to use your Android phone as a linked device instead of the primary device for a Signal account. [:octicons-home-16: Homepage](https://molly.im){ .md-button .md-button--primary } [:octicons-eye-16:](https://signal.org/legal/#privacy-policy){ .card-link title="Privacy Policy" } @@ -92,13 +92,9 @@ If you use Android and your threat model requires protecting against [:material- -Molly is updated every two weeks to include the latest features and bug fixes from Signal. The exception is security issues, which are patched as soon as possible. That said, you should be aware that there might be a slight delay compared to upstream, which may affect actions such as [migrating from Signal to Molly](https://github.com/mollyim/mollyim-android/wiki/Migrating-From-Signal#migrating-from-signal). - Note that you are trusting multiple parties by using Molly, as you now need to trust the Signal team *and* the Molly team to deliver safe and timely updates. -**Molly-FOSS** is a version of Molly which removes proprietary code like the Google services used by both Signal and Molly at the expense of some features (like battery-saving push notifications via Google Play Services). You can set up push notifications without Google Play Services in either version of Molly with [UnifiedPush](https://unifiedpush.org). Using this notification delivery method requires access to a [MollySocket](https://github.com/mollyim/mollysocket) server, but you can choose a public MollySocket instance for this.[^3] - -Both versions of Molly provide the same security improvements and support [reproducible builds](https://github.com/mollyim/mollyim-android/tree/main/reproducible-builds), meaning it's possible to confirm that the compiled APKs match the source code. +Molly provides support for [reproducible builds](https://github.com/mollyim/mollyim-android/tree/main/reproducible-builds), meaning it's possible to confirm that the compiled APKs match the source code. ## SimpleX Chat diff --git a/docs/social-networks.md b/docs/social-networks.md index af23e269..ecc845b5 100644 --- a/docs/social-networks.md +++ b/docs/social-networks.md @@ -179,7 +179,7 @@ As an end user on a public homeserver, you can consider unchecking the **Enable - [ ] (Optional) Uncheck **Record the client name, version, and url to recognize sessions for easily in session manager** -Unchecking this option may make it more diffcult to discern your active sessions if you logged in to your Matrix account on multiple devices. +Unchecking this option may make it more difficult to discern your active sessions if you logged in to your Matrix account on multiple devices. #### Encryption diff --git a/docs/tools.md b/docs/tools.md index db1c2db5..ffffaa51 100644 --- a/docs/tools.md +++ b/docs/tools.md @@ -276,7 +276,7 @@ If you're looking for added **security**, you should always ensure you're connec #### DNS Providers -We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers based on a variety of criteria, such as [Mullvad](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) and [Quad9](https://quad9.net) amongst others. We recommend for you to read our pages on DNS before choosing a provider. In many cases, using an alternative DNS provider is not recommended. +We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers based on a variety of criteria, such as [Quad9](https://quad9.net) amongst others. We recommend for you to read our pages on DNS before choosing a provider. In many cases, using an alternative DNS provider is not recommended. [Learn more :material-arrow-right-drop-circle:](dns.md) diff --git a/docs/vpn.md b/docs/vpn.md index 67a49388..d8749bfc 100644 --- a/docs/vpn.md +++ b/docs/vpn.md @@ -76,7 +76,7 @@ We also think it's better for the security of the VPN provider's private keys if #### :material-check:{ .pg-green } Independently Audited -Independent security researcher Ruben Santamarta conducted audits for Proton VPN's [browser extensions](https://drive.proton.me/urls/RWDD2SHT98#v7ZrwNcafkG8) and [apps](https://drive.proton.me/urls/RVW8TXG484#uTXX5Fc9GADo) in September 2024 and January 2025, respectively. Proton VPN's infrastrcture has undergone [annual audits](https://protonvpn.com/blog/no-logs-audit) by Securitum since 2022. +Independent security researcher Ruben Santamarta conducted audits for Proton VPN's [browser extensions](https://drive.proton.me/urls/RWDD2SHT98#v7ZrwNcafkG8) and [apps](https://drive.proton.me/urls/RVW8TXG484#uTXX5Fc9GADo) in September 2024 and January 2025, respectively. Proton VPN's infrastructure has undergone [annual audits](https://protonvpn.com/blog/no-logs-audit) by Securitum since 2022. Previously, Proton VPN underwent an independent audit by SEC Consult in January 2020. SEC Consult found some medium and low risk vulnerabilities in Proton VPN's Windows, Android, and iOS applications, all of which were "properly fixed" by Proton VPN before the reports were published. None of the issues identified would have provided an attacker remote access to your device or traffic. You can view individual reports for each platform in their dedicated [blog post](https://web.archive.org/web/20250307041036/https://protonvpn.com/blog/open-source) on the audit. diff --git a/includes/abbreviations.en.txt b/includes/abbreviations.en.txt index fa7cc368..3cf553d4 100644 --- a/includes/abbreviations.en.txt +++ b/includes/abbreviations.en.txt @@ -5,6 +5,7 @@ *[attack surface]: The total number of possible entry points for unauthorized access to a system *[AVB]: Android Verified Boot *[cgroups]: Control Groups +*[C2PA]: Coalition for Content Provenance and Authenticity *[CLI]: Command Line Interface *[CSV]: Comma-Separated Values *[CVE]: Common Vulnerabilities and Exposures @@ -48,6 +49,7 @@ *[IPv6]: Internet Protocol version 6 *[ISP]: Internet Service Provider *[ISPs]: Internet Service Providers +*[IPTC]: International Press Telecommunications Council *[JNI]: Java Native Interface *[KYC]: Know Your Customer *[LLaVA]: Large Language and Vision Assistant (multimodal AI model) @@ -107,6 +109,7 @@ *[VLAN]: Virtual Local Area Network *[VoIP]: Voice over IP (Internet Protocol) *[W3C]: World Wide Web Consortium +*[XMP]: Extensible Metadata Platform *[XMPP]: Extensible Messaging and Presence Protocol *[PWA]: Progressive Web App *[PWAs]: Progressive Web Apps diff --git a/theme/assets/img/donors/cape.webp b/theme/assets/img/donors/cape.webp new file mode 100644 index 00000000..0119302e Binary files /dev/null and b/theme/assets/img/donors/cape.webp differ