Security Policies and Resources

A list of resources for the security conscious tech-users. Operation security, incident response and help guides. Just right click on any link and open in a new tab. Make sure to bookmark this site for reference.

Info-Sharing Classification

Red Alert List (Don’t Share)

  • Passwords
  • Real, full (family) name
  • Spouse name
  • Child/Children’s name’s
  • Address of your home, workplace, or school
  • National ID number
  • Driver’s license number and passport number
  • Date and place of birth
  • Biometric information (fingerprints, facial recognition, voice recognition)
  • Computer’s IP address (a unique number that identifies your computer on the Internet)
  • Specific location (geolocation numbers, like from your phone or in tagged photos
  • Credit and debit card numbers, security codes, and expiration date
  • Bank account numbers
  • Answers to common security questions

Yellow Alert List

  • Name you use day to day, if different from your legal name
  • Email address (if it’s not public)
  • Primary screen name(s)
  • Telephone number
  • Pet of choice
  • Phone Make
  • Android Version
  • Favorite Color(s)
  • Height
  • Political Preference
  • Nicknames
  • Race, sexual orientation, and gender
  • Mailing address (if it’s different from your residence; otherwise it’s red)
  • Country, state, and city of residence
  • ZIP code (or postal code)
  • Google Voice number(s)

Green List

  • Mailing address or P.O. Box
  • Digital, online phone number, such as a Skype numbers
  • Email addresses that are not linked to a vital service, such as your bank account
  • Photos and videos that don’t embarrass you or reveal private information
  • Social media profiles on sites where you’re confident you understand the privacy settings
  • Favorite Drink
  • General likes, favorites, and things you enjoy sharing on social media sites
  • Single-use or gift credit cards

Communication and Security

Security Oriented Search Engines

DuckDuckGo: https://duckduckgo.com/

StartPage: https://www.startpage.com/

SearX: https://searx.me/

Quant: https://www.qwant.com/

Swisscows: https://swisscows.ch/

Google Info:

Google Custom Alerts: http://google.com/alerts/

Google Reverse Image Search Instructions: https://support.google.com/websearch/answer/1325808?hl=en

Temporary Mail Sites

These sites will help you avoid those peaky mail filling newsletters, with this you can create an account to those sites that request an email address to read articles. With them you can create fake identities online, instead of providing your real email address.

MailDrop: https://maildrop.cc/

Mailinator: https://www.mailinator.com/

Fake Mail Generator: http://www.fakemailgenerator.com/

10 Minute Mail: https://10minutemail.com/

myTemp.email: https://mytemp.email/

TrashMail: https://trashmail.com/

Password Managers

1Password: http://www.agilebits.com/onepassword/

KeePass: http://www.keepass.info/

LastPass: https://lastpass.com/

Searching Your Name

Pipl: https://pipl.com/

Spokeo: http://www.spokeo.com/

USSearch: http://www.ussearch.com/

Intelius: http://www.intelius.com/

Breaches

FTC data breach complaint report: https://www.ftccomplaintassistant•.gov/

Hack checker: https://haveibeenpwned.com/

Hard drive recovery Drive Savers: http://www.drivesaversdatarecovery•.com/

Account Recovery

AppleCare: https://www.apple.com/support/applecare/

Facebook: https://www.facebook.com/hacked/

Google: http://www.google.com/accounts/recovery/

Microsoft – Outlook, Xbox, Hotmail, and so on: https://account.live•.com/acsr/

Twitter: https://support.twitter.com/forms/hacked/

Yahoo!: https://help.yahoo.com/kb/helpcentral/

Windows Antivirus Ranking

This site, ranks anti-viruses after thoroughly testing them using real world viruses, Trojans, and malicious code to see how they detect them. Select your operating system, then analyze and choose which suits you. Note that this site usually reruns these tests with new types of viruses, so keep an eye on them.

Android Antivirus Test Link For July 2018: https://www.av-test.org/en/antivirus/mobile-devices/android/july-2018/

Mac OS Antivirus Test Link For June 2018: https://www.av-test.org/en/antivirus/home-macos/macos-high-sierra/june-2018/

Windows Antivirus Test Link For June 2018: https://www.av-test.org/en/antivirus/home-windows/windows-10/june-2018/

Second Option Anti-Malware

Second option anti-malware usually helps protect your system further. It helps when you primary anti-malware missed a few. Please note that Windows Defender(for Windows 8 and 10) is good enough, it has been shown to catch many malware just like other anti-virus software. But you need an second option anti-malware(Not anti-virus, anti-malware)

Malwarebytes: http://www.malwarebytes.org/

Hitman Pro: http://www.surfright.nl/en/hitmanpro

Kaspersky Anti-Rootkit Utility: http://support.kaspersky.com/faq/?qid=208283363

Backup Services and Products

Amazon Cloud Services: http://aws.amazon.com/backup-recovery/

Box: https://www.box.com/personal/file-sync/

CrashPlan: http://www.code42.com/crashplan/

iCloud: https://www.apple.com/icloud/

DropBox: https://www.dropbox.com/

Google Drive: https://drive.google.com/

Mega: https://mega.com/

Create an Account with a New Email Provider

Protonmail(Secure with end to end encryption: https://protonmail.com/

Gmail: https://accounts.google.com/signup

Tutanota: https://tutanota.com/

Mail.com: https://www.mail.com/int/

Hushmail: https://www.hushmail.com/signup/

ICloud: https://support.apple.com/kb/ph2620?locale=en_US

Microsoft Outlook: http://www.microsoft.com/en-us/outlook-com/

Yahoo! Mail: https://overview.mail.yahoo.com/

Zoho Mail: https://mail.zoho.com/biz/createAcc.do

Encryption Products

VeraCrypt: https://veracrypt.codeplex.com/

CipherShed: https://ciphershed.org/

AxCrypt: http://www.axantum.com/AxCrypt/

Encryption Programs

BitLocker for Windows: https://technet.microsoft.com/en-us/library/cc732774.aspx

FileVault for Mac: https://support.apple.com/en-us/HT204837

DMCA Takedown Request Services

DMCA Defender: http://dmcadefender.com/

Outsourcing

Kuhustle: http://kuhustle.com

Amazon’s Mechanical Turk: http://www.mturk.com/

Elance: http://elance.com

Remote Staff: http://remoteStaff.com.au

Your Man In India: http://yourmaninindia.com

Reputation Services and Image Removal

Abine: https://www.abine.com/

DMCA Defender: http://www.dmcadefender.com/

Reputation: http://reputation.com/

Antitheft and Tracking Apps

Cerberus: https://www.cerberusapp.com/home/en

AVG: http://www.avg.com/us-en/for-android

Kaspersky: http://www.kaspersky.com/mobile_security

Lookout: https://www.lookout.com/

McAfee: http://home.mcafee.com/store?CategoryId=Mobile/

Prey: https://preyproject.com/

Where’s My Droid: http://wheresmydroid.com/

Find My Device/Google: https://google.com/android/find/

Norton: https://us.norton.com/internetsecurity-mobile-protecting-your-phone-and-tablet-from-loss-theft-and-attacks.html

Place a Security Freeze on Your Credit

Equifax: https://www.freeze.equifax.com/

Experian: https://www.experian.com/freeze/center.html/

TransUnion: http://www.transunion.com/securityfreeze

Social Media Privacy Settings

Facebook: http://www.facebook.com/settings/?tab=privacy/

Google: http://www.google.com/dashboard/

Google+: https://plus.google.com/settings/

Google Safety: https://www.google.com/safetycenter/

Google Account: http://myaccount.google.com/

Twitter: http://www.twitter.com/settings/security/

Photo Sharing Site Privacy Settings

Flickr: https://www.flickr.com/account/privacy/

Imgur: https://help.imgur.com/hc/en-us/articles/201746817-Image•-and•-album-privacy-explained/

Instagram: https://help.instagram.com/116024195217477/

People-Finder Sites

BeenVerified: http://www.beenverified.com/

DOBSearch: https://www.dobsearch.com

Intelius: http://www.intelius.com/

LexisNexis: http://www.lexisnexis.com/

Spokeo: http://www.spokeo.com/WhitePages/

WhitePages: http://www.whitepages.com/

Opt Out of Data Mining

There isn’t one single clearinghouse where you can put yourself on a “do not track” list, but you can opt out of data mining by all members of industry associations:

Self-Regulatory Program for Online Behavioral Advertising: http://www.aboutads.info/choices/

Do Not Track: http://www.donottrack.us/

Mobile App Tracking: http://www.optoutmobile.com/optout/index.html/

Network Advertising Initiative: http://www.networkadvertising.org/choices/

Browser Plug-ins and Extensions

Ublock Origin – A Fast and Efficient AD Blocker that is easy on the CPU: https://www.ublock.org/

Adblock Plus – Blocks ads and tracking for most advertisers: https://adblockplus.org/

Avira Browser Safety – A free security add-on that helps block some phishing, malicious site and trackers: https://www.avira.com/en/avira-browser-safety

AVG PrivacyFix – Manages all social media privacy settings: https://www.privacyfix.com/start/install

Blur – Blocks tracking, password management, disposable email addresses, and much more: https://dnt.abine.com/#register/

BugMeNot – Bypasses the sign-in on websites that require your info to simply read a page: http://bugmenot.com/

Cocoon – Blocks tracking, offers disposable email addresses: https://getcocoon.com/

Disconnect – Blocks Facebook tracking: https://disconnect.me/

Do Not Track: http://donottrack.us/

DuckDuckGo – A non-tracking search engine: https://duckduckgo.com/

Ghostery – Alerts you to bugs, tracking, and ad networks on sites you: https://www.ghostery.com/

HTTPS Everywhere – Enables encryption automatically on sites that support it: https://www.eff.org/HTTPS-EVERYWHERE

PrivacySuite: https://addons.mozilla.org/en-US/firefox/addon/privacysuite/

Privacy Badger: https://www.eff.org/privacybadger

Paranoid

Find your current IP address: http://www.whatismyip.com/

PO Box Application: https://poboxes.usps.com/poboxonline/search/landingPage.do/

VPN, reliable reviews: http://www.torrentfreak.com/?s=VPN/

Credit Freezes and Fraud Alerts

Experian: http://experian.com/freeze/center.html

TransUnion: http://fraud•.transunion.com/

Equifax: https://www.freeze.equifax.com/

Prepaid Credit Cards/Gift Cards

Amex: http://www.americanexpress.com/gift-cards/

Discover: http://www.discover.com/gift-cards/index.shtml

MasterCard: http://www.mastercard.us/prepaid-gift-card.html

Visa: http://usa.visa.com/personal/personal-cards/gift-cards/

Masked cards unique, disposable credit cards – MaskMe: http://www•.abine.com/maskme/

OpenPGP Encryption

How it works: http://www.explainthatstuff.com/encryption.html

Cryptology links: http://cryptography.org

PGP Installation and Use for Dummies: http://www.qdog.com/pgp/pgp_faq.html

Browser Extension – Mailvelope: https://www.mailvelope.com/

Open source alternative: https://www.gnupg.org/

OTR

How OTR works 1: http://www.pressfreedomfoundation.org/encryption•-works#otr

How OTR works 2: http://otr.cypherpunks.ca

Chat/IM software clients that come with OTR

Adium: https://adium•.im/

Xabber: http://www.xabber.com/

TextSecure: https://whispersystems.org/

ChatSecure: https://chatsecure.org/

Pidgin: https://pidgin.im/

Recommended Privacy Apps

Signal: https://www.signal.org/

Orbot: https://guardianproject.info/apps/orbot/

Orfox: https://guardianproject.info/apps/orfox/

Wickr Me: https://wickr.com/products/personal/

AppLock: https://play.google.com/store/apps/details?id=com.domobile•.applock

ChatSecure: https://chatsecure.org/

Silent Circle: https://www.silentcircle.com/

RedPhone and Text Secure: https://whispersystems.org/

Thunderbird(for windows users): https://www.thunderbird.net/

Tor Bundle/Browser(windows users): https://www.torproject.org/

Tor (The Onion Router)

Project site: https://www.torproject.org/

How it works: https://www.eff.org/torchallenge/what-is-tor/

Apps that use Tor Orbot for Android: https://guardianproject.info/apps/orbot/

VoIP

Burner App: http://www.burnerapp.com/

Google Voice: https://www.google.com/googlevoice/about.html

Skype: http://www.skype.com/en/

Password Generators

LastPass: http://lastpass.com/generatepassword.php

Norton: http://identitysafe.norton.com/password-generator/

Password Managers

1Password: http://www.agilebits.com/onepassword/

KeePass: http://www.keepass.info/

LastPass: https://lastpass.com/

oneSafe: http://www.onesafe-apps.com/

Password Safe: http://www.passwordsafe.sourceforge.net/

Splash ID Safe: http://www.splashdata.com/

Privacy Websites with Guides and Tutorials

This can help you stay anonymous, it has tools, guides and very interesting information about the 5 eyes, 6 eyes etc.: https://www.privacytools.io/

Privacy Guides and Tutorials: https://theprivacyguide.org/tutorials.html

Another Beginner’s Guide to privacy: https://www.bestvpn.com/guides/the-ultimate-privacy-guide/

Another Privacy Tutorial: https://cyberogism.com/ultimate-online-privacy-guide/

Video discussing how to be anonymous online: https://www.youtube.com/watch?v=4Z7H5tXqMGo

Security checklist: https://drive.google.com/file/d/1SZvlUf5cbDpVHEGQPN37TzB5ENgkH2ua/view

Check how secure your password is(very far from accurate, but still): https://howsecureismypassword.net/

Windows and Android Security Hardening Tutorials and Guides

https://security.utexas.edu/handheld-hardening-checklists/android

https://www.securelaptop.org/harden-laptop-internet-security

https://wiki.mozilla.org/Security/Sandbox/Hardening

https://forums.majorgeeks.com/threads/hardening-firefox.318427/

https://www.infoworld.com/article/3121994/security/lockdown-harden-windows-10-for-maximum-security.html

https://www.hardenwindows10forsecurity.com/

https://techcommunity.microsoft.com/t5/Windows-10-security/Hardening-Windows-10-on-an-IT-Pro-s-laptop/td-p/180502

https://oit.colorado.edu/it-security/security-awareness/hardening-your-computer

https://www.tripwire.com/state-of-security/security-data-protection/automation-action-proactively-hardening-systems-intrusion/

https://www.nsaneforums.com/topic/317035-how-to-guide-hardening-mozilla-firefox-quantum-for-privacy-security-2018-edition/

http://www.malwarehelp.org/windows_hardening_tools_download.html

https://blog.torproject.org/mission-impossible-hardening-android-security-and-privacy

https://vikingvpn.com/cybersecurity-wiki/browser-security/guide-hardening-mozilla-firefox-for-privacy-and-security

Check these links out, and Note, this is not the guide I promised, I got sidetracked with other projects and this as well. But it’s coming, maybe next week, we shall see. Bookmark this blog, and stay tuned to more. And of course like, comment and share, if you have anything to add comment down below, and I will add it.

Aside from that I have to give credit where credit is due, this is not fully my work, I only modified it, added a few things and styled it. I got this from GitHub. It was forked by Triclorne (Bright Gameli) and I believe the author is https://github.com/Trietptm-on-Security/simple-opsec. So if you want the original go to https://github.com/triclorne/simple-opsec Since the author’s page is missing. For those who want to follow me in GitHub: https://github.com/4julu. Click this link README.md. You all have a wonderful days, stay sharp and talk geeky to me anytime.