slides.com/cypurr/relaxrebootrecover/

cypurr.nyc

cypurr@protonmail.com

Recover

Relax

• Introduction
• Rules n’ Such
• Current Events
• Your Digital Shadow
• Best Practices
• Mini Workshops
  • Backup Backup!
  • Data Detox
• Thank You/Resources

Outline:

• We are…
  • The Cypurr Collective
  • In bk/nyc
  • Cat enthusiasts
  • Tech unenthusiasts
  • Coming from a queer/feminist/anti-capitalist lens
  • Members of the Electronic Frontier Alliance
  • Here to learn from you as well

Who are we?

• You're welcome to pass on intro Qs!
  • Name
  • Pronouns (she/her,he/him, they/them, etc)
  • What brings you here today?

Who are you?

• Keep it constructive!

• Share the space!

  • Stack!  Raise your hand, we'll queue speakers

• Photo/Video- Ask for approval!

• Identify yourself if you are a...

  • reporter, researcher, or law enforcement

Ground Rules

• Saf(er) Space

  • We DO NOT tolerate demeaning/harmful language or behavior

  • Don't pressure or question someone discussing their experience/threat model/situation

  • Consent: Ask before helping someone out! From unsolicited advice to grabbing someones phone.

Current Events

https://myshadow.org/

Digital Shadow

myshadow.org/tracking-data-traces

Digital Shadow

myshadow.org/tracking-data-traces

Trace your shadow

1) Make a list of usernames and accounts

2) In a private/incognito browser, search each account

3) What can you find out about yourself?

"Best" Practices

• Inspired by CryptoHarlem Presentation (@geminiimatt)
• Best =  Best for you
• Quick recommendations that should work for most NYers
• Focus today is on "fresh start" over "recover"

~New Laptop~

Antivirus

New Phone

(who dis?)

New Email

Easy:

• Encryption only works (by default) within the services
• Both support PGP
• PM is more popular

Encrypting files

With Online services:

Locally

(e.g. a flash drive):

Sending files

OnionShare

(encrypt first)

or

Firefox Send

(under 2.5gb)

New Browser

Or

With

cookies autodelete

New Collaboration

New Passwords

 Use a a manager!

Key to good passwords is length and complexity

For your brain, use *passphrases*

6+ random words

2FA gives your a new second p/w with every login, use an authenticator app or yubikey!

New Passwordsx2

2FA gives your a new second p/w for your most important accounts

Authenticator app

Or

Yubikey!

FreeOTP

Mini Workshops

Backup! Backup!

2. Data detox

Backing up

Threat #1: You

Defend yourself from yourself: maintain good backup practices

Common Examples:

• Saving a file while you are working on it
• Saving copies for different versions
  • realFINAL-FINALcopy(2).docx
• Saving to external HDD or Flash
• Printing a copy
• Emailing to self
• Uploading Dropbox/Gdrive/OneDrive for Business

Designing a backup strategy

1. Prioritize/Threat Model: What do you need?
2. Standardize: Find a naming/saving style that works
   • eg. Title_2018-11-12.doc
   • eg. Embrace the desktop clutter
3. Minimum of "3 - 2 -1 Backup"
   • 3 copies of a file
   • 2 forms of storage
   • 1 off-site location
4. Automate as much as possible

$ bash

Levels of backup

• File/Folder auto-backup
  • On a PC:
    • Duplicati
    • rsync/borg
  • On a Network:
    • Syncthing
  • Across the web:
    • Duplicati
    • rClone/Cryptomator
    • IFTTT
    • NextCloud

Online storage

Public or Private?

Continue to edit?

Know your Rights

• Access
  • Passwords are protected by 5th amendment
  • biometrics (i.e. fingerprint) are NOT.
  • Forced access: 0days, GrayKey, etc
  • 4th amendment, but not on the border
    • Border includes 100 mi from international airport
• Collaboration
  • Tools like TOR now = probable cause
• Subpoena-proof Standard
  • Includes Signal Messenger, Private Internet Access VPN

• CyPurr Collective- cypurr.nyc and cypurr@protonmail.com

• NYC CryptoParty and Meetup.com for other events

• Tactical Tech Collective- tacticaltech.org
• EFF- Surveillance Self Defense (ssd.eff.org) Security Edu Companion (sec.eff.org)

• Freedom of the Press Foundation (Freedom.press)

• Tool Recommendations
  • privacytools.io
  • prism-break.org
• Self defense- Pop Gym (@popgymbk)

Resources

Upcoming

• Open Meeting Tuesday! Jan 7, 6pm
• Movie Night! Jan 9, 7pm
• securiTEA time Jan 15st, 1pm
• Here again every first sunday
• Find more on Facebook/Twitter/cypurr.nyc

Thank You!