#privacy #security #activism #workshop > [!info] Navigation > > - [[#Why This Matters NOW]] > - [[#Know Your Threats]] > - [[#Start Here - 3 Essential Steps]] > - [[#The WhatsApp Problem]] > - [[#Essential Privacy Tools]] > - [[#Immediate Safety Practices]] > - [[#Local Surveillance Reality]] > - [[#For Healing Communities]] > - [[#Privacy as Harm Reduction]] > - [[#Your Action Plan]] > - [[#Resources & Support]] --- ## 🎯 Workshop Overview **For:** Activists, Healers & Vulnerable Communities **Goal:** Building Right Relationship with Technology **Presented by:** [Crystal Street](https://cstreetyogi.xyz/) > [!quote] "Privacy is the power to selectively reveal oneself to the world." — Cypherpunk Manifesto Full [Cypherpunk Manifesto here](https://nakamotoinstitute.org/library/cypherpunk-manifesto/) --- ## Why This Matters NOW > [!warning] Critical Context > > - Your activism and healing work are being tracked > - Digital surveillance has real-world consequences > - Privacy is community care and collective liberation > - We can choose tools that align with our values ### The Reality Check - 📱 Your phone = tracking device - 💻 Your browser = data collector - 💬 Your messages = permanent record - 📍 Your location = always monitored #surveillance #digitalrights --- ## Know Your Threats ### 🎯 Threat Modeling Exercise > [!tip] Ask Yourself > > 1. **What** do I need to protect? > 2. **From whom** do I need to protect it? > 3. **How likely** is it that I will need to protect it? > 4. **What happens** if I fail to protect it? ### For Activists - [ ] Government surveillance - [ ] Doxxing & harassment - [ ] Infiltration of groups - [ ] Location tracking - [ ] Social media monitoring ### For Healing Communities - [ ] Law enforcement monitoring - [ ] Client confidentiality breaches - [ ] Digital evidence risks - [ ] Community safety threats - [ ] Sacred space violations #threatmodeling #opsec --- ## Start Here - 3 Essential Steps > [!success] Do These TODAY These three steps will dramatically improve your security ### 1️⃣ [Switch to Signal](https://signal.org/download/) - Download Signal on all devices - Verify safety numbers with contacts - Enable disappearing messages - Turn on registration lock ### 2️⃣ Use a Password Manager - **Recommended:** Bitwarden (free tier available), ProtonPass and 1Password -- cloud based. If risk is very high, explore more complex, open source hardware keepers like[ Keepass](https://keepass.info/) - Generate unique 20+ character passwords - Never reuse passwords - Enable 2FA on the password manager itself ### 3️⃣ Enable 2FA Everywhere - Use authenticator apps ([Authy.com](https://www.authy.com/) ) - NEVER use SMS for 2FA - Keep backup codes secure - Consider hardware keys for high-risk accounts ([Yubikey](https://www.yubico.com/)) > [!example] Workshop Activity **RIGHT NOW:** Everyone take out your phone and download Signal. We'll set it up together. #signal #passwords #2fa --- ## The WhatsApp Problem > [!danger] WhatsApp is NOT Safe Despite "end-to-end encryption" claims, WhatsApp is dangerous for sensitive work ### ❌ Major Problems: - **Owned by Meta/Facebook** - shares metadata extensively - **Metadata collection** - who, when, how long, how often - **Law enforcement access** - regularly complies with subpoenas - **Cloud backups** - often unencrypted - **Phone number required** - links to your identity ### ✅ Secure Alternatives: 1. **Signal** - Gold standard for security 2. **[Element/Matrix](https://element.io/)** - Decentralized, no phone number 3. **[Session](https://getsession.org/)** - Anonymous, onion-routed 4. [Briar](https://briarproject.org/) - top security, android only > [!quote] From Recent Analysis "WhatsApp collects your entire contact list, tracks your location when 'off', and shares data with Facebook for ad targeting" #whatsapp #messaging #e2ee --- ## Essential Privacy Tools > [!tip] Tool Selection Guide Choose tools based on your threat model and technical comfort ### 🌐 Browsers |Browser|Security|Privacy|Ease of Use| |---|---|---|---| |**Tor**|⭐⭐⭐⭐⭐|⭐⭐⭐⭐⭐|⭐⭐| |**Firefox + Extensions**|⭐⭐⭐⭐|⭐⭐⭐⭐|⭐⭐⭐⭐| |**Brave**|⭐⭐⭐⭐|⭐⭐⭐⭐|⭐⭐⭐⭐⭐| **Essential Extensions:** - uBlock Origin - Privacy Badger - HTTPS Everywhere - Decentraleyes ### 🔍 Search Engines - **DuckDuckGo** - No tracking, good results - **Startpage** - Google results, no tracking - **Searx** - Self-hosted option - ❌ **Avoid:** Google, Bing ### 💬 Messaging ``` Everyday: Signal Anonymous: Session Groups: Element/Matrix Maximum Security: Briar ``` ### 📧 Email - [**ProtonMail**](https://proton.me/) - Swiss privacy laws -- Email, VPN, Drive, Password Vault, etc - **[Tutanota](https://tuta.com/)** - Full encryption - Use aliases and burner emails! ### VPN - **[ProtonVPN](https://protonvpn.com/)** - easy to use on all devices - **[OpenVPN](https://openvpn.net/)** - Intermediate user skills ### ☁️ Cloud Storage - **Cryptomator** + Any cloud - **Nextcloud** - Self-hosted - ***[Proton Drive](https://proton.me/drive)** - Encrypted* - ❌ **Avoid:** Google Drive, Dropbox #tools #privacy #opensource --- ## Immediate Safety Practices > [!caution] Implement These NOW ### 🚨 Daily Habits - [ ] Turn OFF WiFi & Bluetooth when not needed - [ ] Use airplane mode in sensitive locations - [ ] Never enter real data in forms (use fake info) - [ ] Always use VPN on public WiFi - [ ] Cover cameras when not in use ### 📱 Phone Security ```bash Settings to change: - Location Services → OFF - Ad Tracking → OFF - Siri/Assistant → OFF - Analytics Sharing → OFF - Background App Refresh → OFF ``` ### 🎭 Identity Separation 1. **Personal identity** - family, friends 2. **Professional identity** - work, career 3. **Activist identity** - organizing, protests 4. **Healing work identity** - clients, ceremonies > [!warning] Critical NEVER cross-contaminate identities. Use different devices/accounts for each. #opsec #mobilesecurity #identitymanagement --- ## Local Surveillance Reality > [!danger] Boulder County 2025 Stats Surveillance has exploded in our community ### 📊 Current Infrastructure: - **38** Body-worn Cameras - **22** License Plate Readers (ALPRs) - **50** Third-Party Platforms - **9** Drones - **Growing** Facial Recognition - including new ICE facial rec app - **Multiple** Fusion Centers ### 🗺️ What This Means: 1. **Movement Tracking** - ALPRs create location histories 2. **Protest Monitoring** - All demonstrations are filmed 3. **Data Sharing** - Between agencies and corporations 4. **AI Analysis** - Pattern recognition of activities 5. **Predictive Policing** - Pre-crime interventions > *Musk's version of AI is now integrated across the government and Palantir is also connected to all government systems and we can assume syncing with Musk's govt AI. The collective data from ALL government agencies is not designed to be integrated this way, so there's still a window where systems are not fully connected. This includes IRS, SSA, Dept of ED, etc.* ### 🛡️ Counter-Surveillance: - Leave phones at home for actions - Use cash only - Wear masks and nondescript clothing - Travel in groups - Change routes regularly - Use public transportation > [!example] Local Example During 2020 protests, Boulder PD used [Clearview AI to identify](https://www.eff.org/deeplinks/2020/01/clearview-ai-yet-another-example-why-we-need-ban-law-enforcement-use-face) and track activists from social media photos #surveillance #bouldercounty #alpr --- ## For Healing Communities > [!heart] Special Considerations Sacred work requires sacred digital practices ### 🌿 Core Principles: 1. **Client confidentiality is sacred** - use only encrypted tools 2. **Ceremony space is offline space** - phones in Faraday bags 3. **Consent before content** - no photos without permission 4. **Indigenous data sovereignty** - communities own their data ### 🔒 Practical Protocols: #### Before Gatherings: - [ ] Send location via Signal only - [ ] Use code words for substances/practices - [ ] Create temporary group chats - [ ] Share safety protocols in advance #### During Ceremonies: - [ ] Phones in airplane mode or OFF - [ ] No recording devices - [ ] Designated "tech guardian" - [ ] Emergency protocols clear #### After Events: - [ ] Delete temporary chats - [ ] Remove location data from photos - [ ] Check in about comfort levels - [ ] Update security as needed ### 💬 Safe Communication: ``` DON'T: "Coming to the ayahuasca ceremony Saturday?" DO: "Looking forward to our community gathering" DON'T: Text about illegal substances DO: Use Signal voice calls or meet in person ``` #psychedelic #healing #ceremony #indigenousdata --- ## Privacy as Harm Reduction > [!quote] "We must defend our own privacy if we expect to have any." — Cypherpunk Manifesto ### 🌱 Reframing Our Approach: This is **not about paranoia** - it's about: - ✊ **Preparation** - Being ready, not scared - 💚 **Community care** - Protecting each other - 🧘 **Mindful practice** - Conscious tech use - 🔄 **Harm reduction** - Progress, not perfection ### Balance Security with Wellness: 1. **Start small** - Don't overwhelm yourself 2. **Find your level** - Match security to actual risk 3. **Take breaks** - Digital detox is self-care 4. **Stay connected** - Security shouldn't isolate 5. **Celebrate wins** - Every step matters > [!tip] Mental Health Check -- If security practices are causing anxiety, scale back and find your sustainable level. Perfect security < consistent security. #harmreduction #mentalhealth #sustainability --- ## Your Action Plan > [!success] Let's Get Started! ### 📅 This Week: - [ ] Install Signal and verify contacts - [ ] Set up Bitwarden or other password manager - [ ] Enable 2FA on email and social media - [ ] Switch default search to DuckDuckGo - [ ] Install uBlock Origin on browsers ### 📆 This Month: - [ ] Migrate important comms to ProtonMail - [ ] Set up Firefox with privacy extensions - [ ] Audit and delete old accounts - [ ] Host a "Digital Liberation Party" - [ ] Create threat model with community ### 🎉 Community Actions: 1. **Weekly check-ins** - Security updates and support 2. **Monthly workshops** - Deep dive into tools 3. **Skill shares** - Teach what you learn 4. **Security buddies** - Pair up for accountability > [!example] Digital Liberation Party Ideas > > - Signal setup station > - Password manager training > - Phone settings audit > - Encrypted email migration > - Make it fun with food and music! #actionplan #community #mutualaid --- ## Resources & Support > [!bookmark] Essential References ### 📚 Core Guides: - **[EFF Surveillance Self-Defense](https://www.eff.org/pages/surveillance-self-defense)** - ssd.eff.org - **[IntelTechniques](https://inteltechniques.com/links.html)** - inteltechniques.com - **Riseup Security** - riseup.net/security (Their latest Github updates were 4 months ago, but I don't know how active this community is right now) ### 🛠️ Tool Resources: - **[Signal Support](https://support.signal.org/hc/en-us)** - support.signal.org - **[Tor Project](https://www.torproject.org/)** - torproject.org - **[ProtonMail Privacy Guides](https://proton.me/blog/privacy-guides)** -proton.me/blog/privacy-guides - **[Tails OS](https://tails.net/)** - tails.net ### 🌐 Communities: - **[r/privacy](https://www.reddit.com/r/privacy/)** - Reddit community - **[EFF Locals](https://efa.eff.org/pages/about)** - Local EFF chapters (closest is Colorado Springs) ### 📱 Quick References: ``` Emergency Digital Safety: 1. Enable airplane mode 2. Power off if possible 3. Remove SIM card if needed 4. Use Tails/Tor for comms 5. Contact legal support ``` > [!heart] Final Reminder **Privacy is not isolation - it's collective liberation** We keep each other safe 💚 > > Together we are stronger than surveillance #resources #community #support #solidarity --- https://apple.news/ApYvZJ9I0R66n2Wv9-9WBPA ## Notes Section - medical decices - delete instagram account deletion without access to old email. - 15-20 in group- good range of privacy. older age ranges invovled. - dfrom-- look up list and add it. - is there code to put in the account to call out bots. - can a download google docs put into a harddrive, are they still trackable. --- _Last updated: July 1, 2025 _Tags:_ #privacy #security #activism #workshop #community