Privacy



Why care about privacy?

Google, Microsoft and co. collect a huge amount of data about you everyday. It uses and even sells this information for marketing purposes. Other companies can simply buy your data and use it however they want.
But that's not the biggest problem.

Google is based in America. This means that the NSA can, according to US law, get access to all of your emails, files, etc. whenever they want.
This happened to LavaBit, the email provider of Snowden. The owner of LavaBit was forced to hand over the SSH Keys so that the NSA can decrypt the Emails of snowden (and everyone else) because they wanted Snowdens information. This means that the NSA can, if the service you are using is based in the USA, read and collect everything you do with that service, without you even knowing about it. (Read More)

This is why people try to leave Google and Microsoft for better alternatives. Data is very valuable in this day of age, and it could fall into the hands of even the most evil businesses very easily.

Assess your threats

Before you create any plans for your new life without google: Think about what information needs to be secured.
For example: My search history about "samoyed dog pictures" is not important, but my passwords and confidental documents (like passport pictures) are very important.

Not everything you have has to be protected with the best security. Perfect, untracable Security is also near impossible these days, so don't implement every little security feature you see. Think about and select what Information you want to be secure and from whom you want them to be secure - then take the necessary steps to achieve that goal.

An easy example of Thread Modeling:

Passwords

Yes, passwords have to be long and complicated to remember, but this is useless if you write them on a post-it on your monitor or save them in a plain text document on your desktop.
It is not recommended to use 1Password and Lastpass. They are bad alternatives to the above because they do not save your passwords securely enough.

Before you try and download a password manager think about the risks this opens up. If someone has your master password they could have ALL your passwords. Even if you use applications like Keepass, it could help someone take over your whole internet life with one single password or file.

If you really need to save your passwords somewhere use KeepassXC. It is the most recommended version of Keepass, written in C++ and with a nice User Interface. It is also recommended that you enable 2-Factor-Authentication for extra security.

Password Tips
A personal tip for creating secure and memorable passwords: Create a very random one and then simply recall it twice a day. After a while you have it memorized and can start with the next one, slowly and steadily changing your "ILoveNatasha39" passwords to something like "6fab35e7!a8b6A". (I remembered and used randomly generated Cisco Router passwords for myself back in the day.)

Operating System

Windows 10 spies on you. It spies a lot. This makes the biggest - but best - hurdle the most obvious one: Switching to Linux.

Linux has improved a lot over the past few years and is now a very good competitor to Microsoft's Windows.
Manjaro, Debian (MX Linux) and Fedora are 3 very good desktop systems that are free, open source and value your privacy. The only major drawback that Linux has: Gaming is difficult. That's it.

If you only want to sometimes use Linux for specific online services you can install Tails on an USB stick. Tails is a security-focused portable Linux Operating System that routes all network through the Tor Network. It leaves no trails on the PC and can be quickly booted to via an USB stick.

Secure Services

The main problem of privacy: What services can you trust?
Short answer: Everything that is not based in America, UK or similar countries.

The best security would be self-hosting your services. This would make it quite difficult for non-tech people, because not everyone has the time and knowledge to setup a Linux Server.

That's why sites like disroot.org exist. They let you use privacy-focused services for free. From a private cloud to a private pastebin, everything you use daily can be done over this website.

If you want a really private email you can also look into protonmail or other swiss mail companies. They have - thanks to their neutrality - very strict data privacy laws. Paired with their email encryption that only the user can decrypt they are a very good alternative for complete control of your data.

If you want a really secure filehosting cloud like google drive you can look into services like crypt.ee. They offer the same type of service like protonmail: Complete control of your data and privacy. No one can access or decrypt your files except you yourself.
Crypt.ee even offers "ultimate deniability", which secures your data even if authorities force you to hand over the login.

Encrypting Files

Veracrypt is the best program for encrypting files. It creates a container that you can only open (mount like a drive) if you have the password.

With veracrypt you can either create a file that acts as the container for your files or you can also encrypt your whole disk. It takes a while to encrypt a large hard drive, but is really quick for an USB stick.

Veracrypt also supports Plausible Deniability. You can create 2 different volumes on (for example) one USB stick: a normal volume and a hidden volume. If you decrypt your USB you can use 2 different passwords: The normal one for the normal volume or your "hidden" password for the hidden volume. There is literally no way to prove that a hidden volume exists.

This means that, if an Authority forces you to hand over the password, you can give them the normal one and simply deny that a hidden volume exists. No one can prove it, which means it doesn't exist.

I recommend to read the documentation of veracrypt closely. For Example: A hidden volume, if mounted, is logged in your windows 10 log, which means that, if Authorities take all your electronic devices, it could be proven that it exists. This, according to the veracrypt website, isn't true if you encrypt your whole hard drive where windows is running though.

Small steps towards privacy

You don't have to install Linux now and delete all google accounts immediatly.
The way to a secure and private internet life are very difficult and need a lot of adjustments in your daily life.
But small steps in the right direction can start this process slowly but steadily.

Start with, for example, switching to Firefox instead of Google Chrome. Or installing Libreoffice instead of Microsoft Word & co.
These steps won't make you more secure or private as soon as you complete them, but it's a step in the right direction, and every step counts.

Next you could switch from a cloud-based password manager to a local one like KeepassXC (or simply remembering them).

Alternative Software

Finding alternatives for commonly used software is not difficult these days.
The following list will show what software is recommended and which software should be avoided. This may be a bit subjective and consists of mainly Windows Software.

OS

Preferably Fedora, Debian (MX Linux) or Manjaro. If forced to use Windows: Windows 7 is preferred over Windows 10 (with security enhancements).

Voice over IP

Mumble is the best choice here. Teamspeak is proprietary, same with Discord.

Zipping Tool

7zip is the best choice here. It works faster and is more simple than Winrar, not to mention it's completely free.

Text Editor / Programming IDE

Notepad++ for text editing and light programming.
For programming use vscodium , a fully open source build of visual studio code without telemetry or tracking.

Office Suite

LibreOffice is the best replacement for Microsoft Word, Powerpoint and others.

Antivirus

You don't need an antivirus if you don't install suspicious applications. Common sense should you get you through nearly everything (plus some browser addons like noscript)

SSH / FTP

Putty for SSH, and WinSCP for FTP. I recommended WinSCP to friends and everyone loved it way more than Filezilla.

PDF Reader

Sumatra PDF. Simple, Lightweight and really fast. Adobe Reader is proprietary.

Browser

Currently Firefox is the best choice. Avoid google chrome and derivates that are not focused on security.
Another recommendation that slowly rises in popularity is Midori, a simple and electron based chromium browser without any google services.

Firefox Browser Addons

These are all "must haves" in my opinion. NoScript disables all javascript, which makes websites not able to load anything except HTML and CSS. From malicious code to cookie scripts, nothing runs without your allowance.
ublock Origin is the better, non-biased version of adblock plus and thus preferred.
ClearURLs makes amazon links way smaller and disables amazon from tracking you to your family. Same with Decentraleyes, which disables CDNs from tracking you.
If you need multiple identities in one browser then use Firefox Multi-Account Containers, which let's you (for example) have multiple twitter accounts logged-in in the same browser window.

File Hosting (Cloud Drive)

The best solution to google drive, dropbox and co. is self-hosting a Nextcloud instance. It can run on a dedicated Linux Server or a raspberry pi.
If you don't, won't or can't host your own a public instance can be found on https://disroot.org/de/services/nextcloud

File deleting

To safely delete files (so that no one can recover them) use BleachBit on windows or the "shred" command on Linux.
Warning: The "shred" command doesn't fully delete the file from the hard drive if (for example) swap files have been created of it from editors like vim or nano, because the .swap file could be somewhere else on the hard drive and thus still be retrievable.

Instant Messaging

Signal is the best instant messaging application out right now. Forget Telegram and WhatsApp. For PC instant messaging IRC or Matrix are good choices.

Emails

Thunderbird is the best choice here. Simple, easy to use and a lot of features.
It is highly recommended to not use google's mail (gmail) for your mailing provider. Google tracks everything you do and has a "contract" with the NSA to hand over any data they have of you, including ALL your emails. Instead it is recommended to take an email provider of a country that is not considered a part of the "fourteen-eyes" countries (https://privacyguides.org/providers/#ukusa) or atleast using encryption for your mails if inside these countries.
An example would be: disroot.org (which needs a manual registration for an email account, but is free forever) - disroot uses disk encryption and is working on an end-2-end inbox encryption.
All providers:

If you are really paranoid you can also use a "mail alias" service. An oftne recommended one is https://simplelogin.io. It lets you create new email addresses which forward incoming emails to your real one, which means you can use a new email for every service you sign up for without creating a lot of email accounts.

Multimedia

For watching videos and listening to music use VLC.
For ripping and converting DVDs use MakeMKV and Handbrake.
For cutting videos use Shotcut.
For graphic related work use either Gimp or InkScape.
For 3D Modeling use Blender.

Comic Reader

Ahoviewer is free and open source.

Data Recovery

TestDisk and Recuva are recommended. A friend of mine recently tried Recuva and was successfull in recovering old data.

Torrent

Use Halite. It's small, fast and has neither advertisement nor other cancerous features.

Others

For other recommendations you can use https://wiki.installgentoo.com/wiki/List_of_recommended_Windows_software or simply duckduckgo' on your own for Free and Open Source Software Alternatives.

Sources & Further reading