WIQUAYA

Why and how to remove them?

Why?

I am on a community support site for queer / lgbti+ people. It is possible that someone close to me, who does not know my queer / lgbti+ identity, could harm me if they found out that I was browsing this site. Then it is necessary for me to remove certain traces of navigation.

ADVICES

1. If the computer is shared or there is a risk of intrusion into it: delete my “recent” or “from the beginning” browsing history even if the latter option is more suspicious
2. Ideally, delete cookies and cache (cached web content)
   1. Cookies are small, often encrypted text files located in browser directories. They indicate my browsing preferences
   2. The cache is an intermediate memory system that makes it possible to display recently loaded web pages in the browser more quickly.
3. Delete my downloads

How do I sort and select the people who can write to me?

ADVICES

1. Restrict access to the “contact” option to my friends
   1. On Facebook restrict the option “who can send you invitations” to “friends and their friends”
   2. On Instagram, switch your account to private mode
   3. On Twitter uncheck the option “Allow message requests from everyone”
2. For Twitter, install the SafeDM application which sorts explicit content
3. Block an unwanted contact on different social networks
4. Install and use the red block add-on which allows you to block several users at once

What are the advantages and limits of private browsing?

AVANTAGES ?

Private browsing allows you to browse without saving history and cookies

LIMITS ?

1. Be aware that it does not prevent leaving traces on social networks and on other sites
2. Realize that if it is an office computer, the employer can collect information on the sites that I visit
3. Realize that my Internet Service Provider (ISP) can too
4. If I download a file, it stays on my computer and in my download history.

ADVICES

Click on the logo to open a new private browsing window

What does the management of these parameters consist of?

ADVICES

Who can see my content ? Who can react to it? How will it be shared? Which of my profile information is visible and by whom?

1. Set my account private and set the audience for my posts in private
2. Put the audience for my personal information in “me only”

Who can find my profile on a social network in a search engine?

Possibility to use a nickname and not my civil identity

Who owns my data?

Consult the pribot.org/polisis website for a summary of the Terms of Service (TOS) of most sites

Retrieve my archives from the various social networks that I frequent to have visibility on what is collected about me

What is a threat model?

DEFINITION

The threat model is a process by which potential threats can be identified, listed and prioritized, from the perspective of the hypothetical attacker.

ADVICES

1. Realize that we do not all have the same threat models
2. ex : Paprika34 is Tunisian, survivor of domestic violence, they can protect themself from racist people, them ex-boyfriend, ...
   Diva_glam is dragqueen, homosexual, fat and trans, he can protect himself from homophobics, fatphobics, transphobics, ...
   Anon1m@ is an anti-authoritarian and Lebanese activist, she can protect herself from people who advocate authoritarianism, racists, ...
3. I ask myself what do I want to protect and who do I need to protect myself from? This leads to different ways of frequenting the web and different protection solutions.
4. “A chain has the strength of its weakest link. “

Who owns my data?

CONTEXT

Depending on my threat model, sometimes using an encrypted email service is not enough. It’s crypted, great! But do I trust the company that stores my data and offers this service?

ADVICES

1. Evaluate my threat model: I ask myself what I want to protect and against whom I want to protect myself?
2. Evaluate who or what company I trust to use an encrypted messaging service.
   • ex : Protonmail may be fine for me, but I don’t forget that they collaborated with Interpol to give out activists’ private information.
   • Whatsapp may be suitable for me, but I keep in mind that this service is owned by the Facebook company and therefore my data can be managed by them.
3. PPrefer services by co-optation, companies outside GAFAM (Google, Amazon, Facebook, Apple, Microsoft)

How do I protect my privacy by sending encrypted emails?

DEFINITION

Encrypting your emails is to ensure the confidentiality of the email I send to my sender. The message is therefore not in the clear (unencrypted).

Key system

Each person who sends an encrypted email has a set of two keys:

1. PUBLIC : it is used by my recipients to send me encrypted emails
2. PRIVATE : I do not give it to anyone, it is used to decipher the encrypted emails sent to me

ADVICES

1. I import my email account to Thunderbird
2. I generate my OpenPGP key in: account settings -> end-to-end encryption -> add a key
3. I must have the public key of my recipient
4. Once the set of keys has been generated, I compose my email: I compose my body of the email and I put the email of my recipient
5. I encrypt my email:
   I click on the “security” tab
   SIf this is the first time I am addressing this recipient, I can check the option “attach my public key”
   I check on “require encryption”
6. I send my email.

How do I protect my privacy by sending signed emails?

DEFINITION

Signing emails means guaranteeing the authenticity of the email I send to my sender-ice. The message is in the clear, but it is attested that it came from me and that it was not altered between me and the recipient.

Key system

Each person who sends a signed email has a set of two keys:

1. PUBLIC : it is used by people to verify that it is me who is sending the encrypted email
2. PRIVATE : I don’t give it to anyone, I use it to sign my emails

ADVICES

1. I import my email account to Thunderbird
2. I generate my OpenPGP key in: account settings -> end-to-end encryption -> add a key
3. Once the set of keys has been generated, I compose my email: I compose my body of the email and I put the email of my recipient
4. I sign my email:
   I click on the “security” tab
   I check “digitally sign”
5. I send my email.

How to prevent revenge porn? How do I try to have my intimate photos / videos removed from the web and obtain redress?

What do i need to protect?

My privacy and my civil identity.

Who do I need to protect myself from?

People for whom the intimate photo / video was not intended.

ADVICES

1. Keep proof of publication with my photo / video: take a screenshot with username + photo visible
   • If I want to speak out against the assault, I might find this evidence useful
2. Report the published content without my consent to the concerned platform in order to remove it
3. Report the profile of the author of this content to the platform concerned so that he is excluded
4. Use the right to be forgotten of a search engine
5. Surround myself with people I trust to discuss and help me
6. As a precautionary measure, follow the advice in the sheet “I post / send nudes on social media or privately”

How can I protect myself from this kind of photos?

What do i need to protect?

The reception of my private messages, my mental integrity.

Who do I need to protect myself from?

People who send me photos of a sexual nature without my consent.

ADVICES

1. Manage the access settings for my Private Messages (PM) on the social network
2. Keep proof: take a screenshot with username + photo visible
   • If I want to speak out against the assault, I might find this evidence useful
3. Block contact
4. Report the profile of the author of this content to the platform concerned so that he is excluded

What should I be vigilant about?

What do i need to protect?

he information given during my coming out.

Who do I need to protect myself from?

People not affected by my coming out. People who harass me after coming out.

ADVICES

1. Evaluate who I trust to come out
2. Evaluate the platform / social network on which to do it
3. Configure and control the privacy settings of my publication on this platform
4. If cyber-harassment: follow the advice in the sheet “I am subject to occasional cyber-harassment because of my identity / my convictions”

How can I protect the people with whom I have identity and political affinities?

What do i need to protect?

The physical and mental integrity of my peers

Who do I need to protect myself from?

Generally, anyone who is unaware of our queer / lgbti+ identities and / or who could harm us.

ADVICES

1. Check the visibility settings of a publication before sharing it
2. Evaluate to whom I send and on which platform I relay a publication from a comrade
3. Do not tag your friends under certain engaging posts, it might get them out.
4. Use a secure email from an ethical host to protect my contacts, individually or on a mailing list
*
5. Realize that we do not all have the same threat models

How can I organize “secure” activist events?

What do i need to protect?

The identity and safety of people who attend my events.

Who do I need to protect myself from?

People who disagree with the event and people who do not know the queer / lgbti+ identity of the participants

ADVICES

1. Confidentialize the list of participants on the web
   • ex : I create an event on Facebook, I manage the visibility parameter of the participants
2. Always ask before taking a picture of the public
3. Focus on wide shots, not close-up and from the back
4. Always blur the faces of the people present when I post photos / videos on the internet: blur the face, shoes and other distinctive signs (tattoos, ...) with a cluster of dark color

What is the risk of my data when I use the public wi-fi on the train (or elsewhere)?

CONTEXT

Having a train ticket and being there sometimes means being able to access the open and “free” Wi-Fi service for the duration of the journey.

ADVICES

1. Realize that anyone using the same Wi-Fi as me (therefore the network offered by the railway company but also the town hall, the fast food restaurant) can see what I am doing there.
   • ex : Without protection, everyone can see the sites I visit, my identifiers, ...
2. Disable automatic Wi-Fi connection
3. avoid carrying out banking transactions on this open network
4. Connect to secure networks when possible
5. Use a VPN to encrypt the data I send and receive.

BONUS : I turn off my bluetooth and pay attention to who is looking at my screen.