[clug-talk] Online Privacy

[simon at mungewell.org]

Simple measures
   Cookie deletion
   Campaigning against things like Phorm.
   Not posting everything you do on twitter.....


As the trend is to store more information on the web and use the local PC
purely as a view device you ought to consider how that might effect
privacy too.
   JungleDisk
   various other encrypted FuSE filesystems

One thing you left off is making sure that the local PC can not be
exploited or compromised. So firewalls and robust OS'es should be on the
list.

Local storage (and swap space?) should be encrypted:
   Ubuntu has encrypted folder
   EncFS
   TrueCrypt

There are other 'concealment' applications which hide a small amount of
data in a lot of noise. These can provide a certain amount of plausible
denialability, such as:
   http://www.winstonsmith.info/julia/elettra/
   http://iq.org/~proff/rubberhose.org/

Ultimately anything that leaves the network that you control can be
intercepted/monitored, even if encrypted. Given the determination and
enough (CPU) time any encryption can be broken.

There are also legal methods for encouraging people to surrender
plain-text and/or keys.

Local hardware protection ranging from biometric authenication, IronKey
USB drives, Ubikeys, etc. You can implement no-end of 'machine protection'
schemes.

Well that's enough rambling for now,
Simon