How to use Secure SHell (SSH)

SSH (Secure SHell) is used in order to use one computer to control another computer. This can be done over insecure networks (like the Internet) because of the cryptography used to protect the data transferred between the computers involved.

In this example, I use Parrot Security OS (a hacking-oriented operating system based on Debian Linux) as the computer that I physically touch and interact with. The other computer (which I remotely control) is my Raspberry Pi single-board computer (SBC), which I have already installed Ubuntu Server on. Ubuntu Server is another Debian-based Linux distro, but the “Server” part of its name means that it only comes with the command-line interface (CLI) and not a graphical user interface (GUI) which most people are used to. By the way, none of these links are affiliates. Feel free to try out substitutes (like a cloud server instead of a Raspberry Pi, Linux Mint instead of Parrot Security, etc.)

Having a CLI means that you do not have the same experience of navigating your computer like the 2-D world of the GUI, but it does reduce the storage footprint of your OS (Graphics take up a lot of space.) Using a CLI can speed up your computer’s processes, and (once you get the hang of it) can also speed up your own processes of navigating your computer. Plus, when you use a CLI, it makes you look like a total badass in front of your friends and family!

Open terminal in Parrot Security OS

To start, you need to make sure that you have SSH already on both computers. From what I recall, both of my computers in this situation included SSH capability automatically when I installed each OS.

In this example, I assume:

  1. You already have an account with the server that you are trying to SSH into,
  2. You know your username, password, and IP address for the host that you want to SSH into.

How to SSH

Open a terminal and type the following command. Replace “USERNAME” with your actual username and “IP_ADDRESS” with your actual IP address. Keep in mind, these credentials are for the target computer, not the computer you are already using.

ssh USERNAME@IP_ADDRESS

Press the “Enter” key.

The server will prompt you to enter your passphrase (again, for the target computer).

After typing your passphrase, press “Enter”.

If you are prompted whether you are sure or not that you want to connect, select in the affirmative (unless you don’t want to connect. I’m not the boss of you).

You should now be connected to the target computer. Congratulations!

Notice how the username and hostname of your command prompt has changed. Here is a picture of my original terminal (left) for my Parrot Security computer, and my SSH terminal (right) for my remote server.

While normally you are only capable of controlling only the computer that is physically present where you are, SSH-ing into another machine enables you to choose which machine you use to perform tasks.

“jonathan@parrot” means that I am interacting as the user “jonathan” on the machine named “parrot”.

Likewise, “flossboss@smartsauce” means that I am interacting as the user “flossboss” on the machine named “smartsauce”. However, if you use a similar arrangement to what I have set up here, your remote server terminal will probably look more like “ubuntu@ubuntu”, since that is the default for Ubuntu Server. I have already changed both my username and hostname for this server, so that is why it looks unique.

Once you are finished with what you wanted to do through your remote server, you can close the connection by typing the following simple command in your remote terminal.

logout

There. That wasn’t so bad, now was it?

⌨️

Notes

Music by aldermansweden from Pixabay

Terminal vector graphic by OpenClipart-Vectors from Pixabay

Keyboard vector graphic by OpenClipart-Vectors from Pixabay

All OBB content is subject to our Terms of Service.

How to become a citizen of Liberland

I became a Liberland citizen this month! Let me share some information for those of you who are considering doing likewise.

First, what is Liberland?

Liberland flag

Founding

Liberland (officially the “Free Republic of Liberland”) is a tiny, libertarian country in Europe nestled between Serbia and Croatia. The territory was claimed by Liberland since it was previously a “no man’s land” after the breakup of the former Yugoslavia.

Src: https://liberland.org/en/about

The Danube River serves as a border mark between Serbia and Croatia. However, since all rivers tend to evolve over time, a dispute arose between the two countries over which version of the border was valid: the old river path, or the new river path. The old river path gave Croatia a net increase in territory, while the new river path gave Serbia a net increase. Since every country wants to have the maximum possible claim to territory, each side asserted that the border was on the opposite river path from what the other claimed. Since each side wanted to not undermine their own claim to their own version of the map, there ended up being pieces of land that were claimed by NEITHER country. The biggest of those unclaimed pieces was eventually claimed as the newly formed Free Republic of Liberland by President Vít Jedlička, First Lady Jana Markovicova, and Jaromír Miškovský on 13 April, 2015. That day is also the birthday of the American Revolutionary icon Thomas Jefferson.

Liberland founding document

Principles

Liberland is aspiring to become the most libertarian nation on earth.

Former U.S. Congressman Ron Paul, Bitcoin.com Founder Roger “Bitcoin Jesus” Ver, and Nomad Capitalist Founder Andrew Henderson are among the many notable people in libertarianism who are counted among Liberland’s citizens.

While the details of the Liberland Constitution are still being worked-out, some of the key features that are proposed include:

  • Zero taxes (with the possible exception of a “land fee”).
  • All government operations funded with voluntary crowdfunding.
  • Blockchain-powered political systems.
  • Merit system where those who contribute more to the country are rewarded with more influence in the political process.
  • No restrictions on civilian ownership of “small arms” as defined internationally.
  • No standing army, but rather a “territorial defense force” which only defends the defined borders of Liberland in the event of invasion.
  • No regulations on marriage.
  • Freedom of speech, the press, religion, etc.
  • No government involvement in education.
  • A legislative, an executive, and a judicial branch.
  • No government debt obligations.

Status

Since Liberland claimed its territory before any other country, it has rightful claim to it.

However, since the border dispute between Croatia and Serbia is ongoing, the Croatian police have been occupying Liberland’s territory (despite not claiming it as their own), refusing to allow Liberlandians to enter Liberland. However, that fact has not stopped Liberland from making progress with arranging a free trade zone with Serbia and encouraging settlement communities on the Serbian side of the Danube.

Within the first few years, there were Liberlandians who attempted to enter Liberland, but were stopped and arrested by the Croatian police. However, that seems to be happening less now.

In the meantime, President Jedlička and the many Liberland representatives in countries around the world have been working to achieve recognition and support of Liberland’s right to exist.

The Liberland Aid Foundation has also been doing humanitarian work around the globe to help show that Liberlandians are willing to help make the world around them a better place.

While Liberland has diplomatic passports, there are not yet “normal” passports for everyday Liberlandians. However, that is something that is being worked on. In the meantime, citizens can receive a certificate of citizenship.

Who should apply for Liberland citizenship?

Liberland citizenship is for people who are willing “To Live and Let Live” as the Liberland national motto goes.

This includes, but is not limited to, libertarians, capitalists, minarchists, anarchists, and classical liberals. Liberlandians come from a diverse range of professions, nations, religions, ethnicities, etc. The unifying theme, however, is that of a global community of people who want to help build the freest, most innovative nation on earth.

Who should NOT apply for Liberland citizenship?

Given the libertarian nature of Liberland, there are a number of people who should probably stay away from it. Take the following conversation I had with someone on Facebook, for example.

JM: “I am now a US-Liberland dual citizen!”
DWV: “You’re just greedy. You already have great citizenship. I’m stuck in South Africa. …So how do I get it?”
JM: “[M]y first tip for you is to be nice and not call people ‘greedy’ for wanting to become global citizens. …Besides, if you can’t help but complain out of envy at the success of others, then you probably would hate life in Liberland. Liberland is for people who are willing to tolerate unequal success among legally equal individuals.”

Simply put, collectivists would not enjoy life in Liberland. The intolerant would not enjoy life in Liberland. The envious would not enjoy life in Liberland. There are naturally going to be some individuals who are more successful than others. There are also inevitably going to be a diverse range of people who are successful. Therefore, the aforementioned groups (collectivists, intolerant, and envious) should all stay out of Liberland for their own sakes.

In addition to that, Liberland explicitly denies citizenship to Nazis and Communists.

Prerequisites for citizenship

E-residency

People who are interested in Liberland citizenship can start by registering an account on the official Liberland website at liberland.org and completing the application form for e-residency.

Liberland e-residency card

My advice here is to BE HONEST. Regardless of your net worth or income right now, you still have a shot at being accepted.

Just like how Dale Carnegie’s iconic bestselling book “How to Win Friends and Influence People” says, you must “Talk in terms of the other person’s interests.”* Therefore, when you answer the questions on the form, focus on how you will help Liberland. While it is fine to mention what you are looking to gain from Liberland, do NOT focus on your own wants or needs. There are literally hundreds of thousands of applicants for Liberland citizenship worldwide. I am sure that many of them also “want” or “need” to get citizenship. However, Liberland is unable to accept all applicants. Can you really blame them when their territory is just seven square kilometres?

That is why you need to make your application stand-out by saying how you will help make Liberland better. You can be a software developer, an architect, a lawyer, a physician, a mechanic, a welder, an entrepreneur, a libertarian activist, a journalist, a songwriter, and more. Whatever career you have, you can be a contributor to the Liberland economy. If you are an investor, Liberland is also ready to welcome you by offering a business-friendly regulatory environment, starting with the Apatin Free Trade Zone in Serbia.

KYC

New applicants must go through KYC (Know Your Client) vetting to make sure they have a reasonably clean criminal record. After all, nobody wants to live next door to a convicted terrorist.

The Liberland KYC-Chain interface

Contribute value to Liberland

Once you become a Liberland e-resident, you need to contribute value to the country in order to achieve citizenship.

Donate and/or volunteer for Liberland

This is the way I personally became a citizen. I wrote articles for Liberland Press and received Merits based on how much I wrote.

The Merit is Liberland’s official (crypto)currency, which is still being developed, but nonetheless is being used to quantify the contributions an individual has made. You need 5,000 Merits to become a citizen. I also made a few USD and BTC donations to Liberland, and was rewarded Merits for those as well.

As of the time of this writing, you can purchase 1 Liberland Merit for 1 USD. So, a $5,000 USD donation would be enough for citizenship. As far as citizenship by investment countries go, that is SUPER affordable. If you don’t believe me, watch some videos by Nomad Capitalist. The numbers for more widely recognized countries sell at around $100,000 USD and up.

Eventually, Merits will probably be used as a governance token for secure and verifiable elections. Therefore, you are incentivized to keep paying voluntary taxes in order to grow your Merit holdings and thus your voting power.

Invest in Liberland waterfront property

Alternatively, you can buy a property in the Liberlandian community on the Danube River through floating.ll.land and receive citizenship as part of the deal. Here are the three property types that are currently on the site.

Bitcoin Freedom cabin: €50k

Bitcoin Freedom is being renovated and has cabin(s) for sale.

Bitcoin Freedom src: https://www.floating.ll.land/
Cunami houseboat: €80k

A relatively large houseboat.

Cunami houseboat src: https://www.floating.ll.land/houseboat
Katamaran houseboat: €45k

A relatively small houseboat.

Katamaran houseboat src: https://www.floating.ll.land/katamaran

Follow up

If you have done everything that you are supposed to do according to the forms on the official sites and you still have not heard back regarding your application within a week or two, then send a (respectful) follow-up email. Explain how you want to help Liberland succeed and what you are already doing to help.

Conclusion

Best of luck to you!

Stay free, everyone!🕊️

Notes

*Carnegie, Dale. How to Win Friends and Influence People. P. 93.

Everything here is subject to OBB’s Terms of Service, including the disclaimer section.

Create a basic website with HTML, CSS, and JS

Here I walk you through the process of creating a very basic web page, including my process of debugging and searching for solutions. We will use Hypertext Markup Language (HTML), Cascading Style Sheets (CSS), and just a touch of JavaScript (JS) to build a beginner-level web page document.

This video is designed for beginners.

Hopefully I will go over the process of actually making your website live on a server in a future video. Please let me know in the comments if you would find that helpful. 🙂

Find the code used in this lesson on GitHub here: https://github.com/Outsmart-Big-Brother/create-a-basic-web-page-using-html-css-and-js

For legal stuff, check out OBB’s Terms of Service.

If the Bitchute embed does not work, you can try the copy on YouTube here:

What is Bitcoin? Why is it special?

Bitcoin is the OG cryptocurrency.

But what is a cryptocurrency and why should I care?

Find out in this episode.


What is a cryptocurrency?

A cryptocurrency is a type of digital money, especially one that uses cryptography and decentralization to make sure that you can only spend each unit once and that you can only create new units after performing some service to the community.

You might ask, “But if I use digital US dollars already, what benefits do I gain by using crypto?”

There are many problems with the US dollar, which crypto can solve. Since this episode is an introduction, I will focus on Bitcoin—the “original gangsta”—and the solutions and limitations which it offers.

First, let’s analyze fiat currencies, like the US dollar, the euro, and the Chinese yuan.

Fiat

  1. Centrally controlled.
  2. Potentially unlimited quantity (think: inflation).
  3. Total quantity is tied to arbitrary decisions by the central authority.
  4. Can potentially be anonymous if dealt in cash. Not private if dealt digitally.
  5. Requires trust in people and institutions with whom you do business, along with intermediaries.
  6. (If deposited in a bank) Can be easily confiscated by authorities.
  7. Can be difficult to make cross-border payments.
  8. Transactions tend to be reversible.
  9. Transactions can be censored by governments, banks, and other institutions.

Bitcoin

  1. Decentralized. No single entity has power over the Bitcoin network. This is due to the fact that Bitcoin uses blockchain technology as its foundation.
  2. Total quantity limited at 21 million.
  3. Quantity of new bitcoins created is determined by an exponential decay function.
  4. Pseudonymous. Instead of using your real name, you use your public key. But beware: as soon as someone is able to link your public key to your real identity, your entire transaction history for that wallet is revealed.
  5. If you can understand the code, it is trustless. However, those who cannot read code must trust the code itself. However, they still do not need to trust any third party.
  6. If private keys are well-hidden, Bitcoin can be extremely difficult to be confiscated by authorities.
  7. Easy to send Bitcoin to anyone’s wallet, regardless of where they are in the world.
  8. Transactions are irreversible.
  9. Transactions can be completed despite what governments, banks, and other institutions think.

At the end of the day, no, Bitcoin the protocol can’t be regulated. Obviously, men with guns wearing costumes are scary, but a gun can’t change the mathematics behind Bitcoin.”

Roger Ver aka “Bitcoin Jesus”

Keep in mind, Bitcoin is the first cryptocurrency as we know it. Obviously, there are a TON of improvements that have been made to the concept. That’s why you see many different types of cryptocurrencies, from Bitcoin, to Bitcoin Cash, to Ethereum, to Litecoin, to Dogecoin, to Marscoin. Each of these cryptos has its own set of pros and cons, which I hope to address in future episodes.

My challenge to you all this week is to do a self-assessment of your own financial situation.

“If the dollar were to go into hyperinflation, would my family be prepared?”

“Is crypto a viable alternative to cash and card payments?”

“What if the government were to seize my entire bank account tomorrow through civil asset forfeiture? Would my entire net worth be down the tubes?”

Then decide what you should do NOW to prepare yourself for when trouble comes.

Special thanks to Jenni Thee Libertarian for giving myself, Outsmart Big Brother, and the Mars Initiative a shout-out on Twitter.

Jennifer works for Young Americans for Liberty. Her persistence is the reason I went ahead and submitted my application for YAL’s Revolution 2021 event this coming August.

By the way, did you know that the Mars Initiative (a nonprofit dedicated to funding humanity’s first trip to Mars) accepts (and HODLs) crypto donations? I volunteer for them and think that is really cool.

What topics would you like me to cover in future videos? Let me know in the comments.

Please like, follow, and share if you enjoy this content.

Stay free, everyone!

⚛️


Description:

Links for all outside content:

BTC image by xresch from Pixabay.

Music by Twisterium from Pixabay. Sped up by Jonathan McCormick.

Mars Initiative website.

For further study:

On civil asset forfeiture:

https://www.charleskochinstitute.org/issue-areas/criminal-justice-policing-reform/civil-asset-forfeiture/

https://www.aclu.org/issues/criminal-law-reform/reforming-police/asset-forfeiture-abuse

https://www.law.cornell.edu/wex/civil_forfeiture

Legal inquiries:

See OBB’s Terms of Service page: https://outsmartbigbrother.com/terms-of-service/

Cybersecurity for startup political organizations and news outlets

It is easy to underestimate your vulnerability…until it’s too late.

The problem

Websites get hack attacked.

Websites that are political or journalistic in nature are at an increased risk of being hacked, since not only do they attract the “regular” attackers, but they are a more likely target for ideologically-driven attackers as well. Hackers can be literally anyone.

Organizations on all sides of the political spectrum can be targeted.

Gab, a social media platform dominated by the Right and Alt-Right, was targeted, and so was Liker, which appears to be a more Leftist social media platform, especially when they characterized their own hack incident as being a politically-motivated attack by “Trumpers“.

A thought experiment:

Let’s assume, for the sake of argument, that you are a startup political activism organization that relies heavily on your resources connected to the Internet (like a website, databases, communication channels, social media, banking, etc.).

Let’s also assume you ideologically align with position “A”.

There are bound to be computer-savvy individuals somewhere who align with other positions that conflict with position “A”. If those individuals also are willing to hack attack you based on that difference of beliefs, then you are a natural target.

These attackers could be citizens of your own country, or another country. They could be private individuals acting out of their own animosity, or they could be government officials attacking to achieve some political goal.

Regardless of where the attacker comes from, they can deal a whole lot of damage to your organization if they are both motivated and able to find a way to do so. Imagine an attacker hacking into your one of your employees’ poorly-passworded email accounts and sending fraudulent emails to all your donors, asking them for money, when in reality it is a scam. When your donors read the emails, they will see that it comes from a legitimate email address. So the donors click on the link in the email, which takes them to a page that looks practically identical to your own fundraising site. The attacker’s fraudulent site accepts your donors’ payment information, withdraws money from their accounts, and makes them think that it was all legitimate.

Imagine that the attacker also hacks into your admin account for the website, and puts malware into your website so that when visitors think they are getting one thing, they end up with their computer becoming useless and acting as a carrier of self-replicating malware that tries to spread itself like a disease to other computers.

Imagine the attacker not only wants to plunder you, but also wants to shame you as well. They hack into your (again) poorly-passworded official social media accounts and change all the email and phone number settings, then start posting propaganda that goes directly against what your organization stands for. Your followers start “unfollowing” you en masse and comment how disappointed they are with your organization. It’s a public relations mess!

Finally, the attackers encrypt all your organization’s data and demand a ransom for it, but never actually decrypt it for you, even if you pay up.

You want to hire a security firm to “clean things up” for you, but you don’t have enough funds and your donors have just been milked for all they have to spare.

Needless to say, that would be a mess.

It would also be a preventable mess. While there is no way to guarantee that all cyberattacks will fail, you can stack the deck in your favor by following some basic cybersecurity best-practices.

The solutions

Here are some of the things that I consider most important:

Passwords Passphrases

“Shift your thinking from passwords to passphrases.”

Edward Snowden

While all elements of cybersecurity can be important, passphrases are probably the single most important category. Keep your password only to yourself. If you have a collaborator, add an account for them, but never share your passwords.

Brute forcing a password (using a computer to guess it), and/or guessing a password based on a user’s personal life, can be extremely easy for those hackers who know what they are doing.

Before you read the following passphrase tips, please understand that there are plenty of password managers to help you out. Most modern browsers like Brave already have a password manager built-in.

Use math to your advantage

In order to beat the attackers at the password-guessing-game, you must recognize the power of almighty math.

If you were to pick a single lowercase letter (and I knew it was a single lowercase letter), then it would take me a maximum of 26 attempts before I would correctly guess it. This is because there is only one character and it is limited to only one type of character–the lowercase English alphabet. The probability of me guessing your letter correctly the first time (assuming I eliminate each possibility after it proves to be incorrect), can be represented mathematically as 1/26.

However, if you were to now pick two lowercase letters (and I knew they were two lowercase letters), then I would not have 1/26 chance of guessing it the first time, but rather 1/(26*26), which equals 1/676.

Likewise, if you were to pick two characters, but this time were to have the characters be either lowercase letters OR digits OR a combination of them, I would be forced to assume that either character could be either type. Thus, my likelihood of guessing on the first try would not be 1/(26*26) or 1/676, but rather 1/(36*36), which equals 1/1296.

Do you notice what is happening? As the quantity and diversity of the characters INCREASES, the likelihood of me guessing correctly DECREASES. With each additional character, the added security is not simply linear, but exponential.

However, since hackers can use computers to automate their guessing, our passphrases must be longer than what we would reasonably expect them AND their computers to be able to guess.

The longer your passwords, the better. Go for around 17+ characters, but understand that–as technology progresses–it will become easier for attackers to overcome longer passwords.

Use a diverse range of character types, including lowercase letters (“abcd”), uppercase letters (“ABCD”), digits (“1234”), and special characters (“!@#$”).

Do not use the same password across multiple platforms. This prevents an attacker from gaining instant access to multiple areas of your online life in the event they are able to successfully crack one of your passwords. When you get attacked, you want the damage to be as limited as humanly possible.

Do not use words that you associate yourself with. Do not use your pet’s name, your favorite political slogan, or your mother’s maiden name in your password. Hackers can easily do reconnaissance on your social media profiles and figure out a TON of info about you. If you mention something to your friends and followers online, a hacker recognizes that you just might be using that thing in your password. Therefore, try to go for a passphrase along the lines of these:

NewbieJokerzR3picly(ool

H@tsOff2DodoTheCl0wn

EatYour404ErrorsWith$33

4BoxingBatsFight2,000FatRats

WikipediaBoomersAre30%NewAge

YoMamaTakesFiftyD@yzToFind1Gym

!!_({{symmetry|||yrtemmys}})_!!

000kn0wledge\\|\\is\\|\\flwr\\|\\pwr000

Only38.2Boulders&StonesCrushThrones

<#42>IsNEVERdaAnswr2YaProblumz

@theistPengu1nsWantPhi$h

Password examples: the longer and more complicated, the better!

Obviously, you want to be creative and come up with original passphrases. These are just some examples to hopefully inspire you.

2FA

Two-factor authentication (2FA) is basically when you are required to use not only your username and passphrase to login, but also another means of showing that the person logging-in is really you, like sending a login approval notification to your phone. This is basically a fail-safe for users having weak passwords, in my opinion, and can be very useful for preventing the impact of some human errors.

I personally have a bias against 2FA because very often 2FA systems are extremely inflexible. For example, suppose a user is required to use their phone to perform 2FA. What is that user supposed to do if they lose or break their phone? What if they change their number and forget to update their account information ahead of time? While I was in college at Andrews University, I literally resigned from my job as a writer for Student Movement (in part) because of their arbitrary 2FA requirement for all employees.

Use secure connections to the Internet

This is where a VPN can come in handy.

Also, if you are typing or receiving sensitive information (like login info, for example) make sure to always use https. The “s” means that your connection between you and the site is encrypted.

[RELATED: What is encryption and why do I need it?]

Use antivirus software

Use software to recognize and stop malware.

I personally use ClamAV, which is a free and open-source option.

Have email filters to prevent your employees’ inboxes becoming filled with spam

While no filter is bulletproof, having one in place can certainly help. Many email providers have a separate “spam” folder as the default, but check to make sure.

Having a filter helps limit the amount of phishing emails that you get.

Also, never click on email links that you just randomly see in your inbox. If you see an email from Company X that says you must log in now, open a new tab and manually type-in Company X’s domain name. See if it is legit. If anything seems phishy, talk with your IT person.

Limit permissions to only the essentials for each user

You wouldn’t give your personal credit card to a random 16-year-old. Why would you give administrator-level control over your entire website to someone who is new to the field of technology?

Don’t get me wrong: young professionals DO NEED opportunities to prove themselves, to fail, to succeed, but you don’t have to put your whole business at risk in order to achieve that opportunity for them. Give them more permissions gradually as they become more and more competent and prove themselves worthy of more of your trust.

Update/upgrade your software regularly

Often, companies update their software because they discovered a vulnerability and have now made a patch for it. If you don’t update it for your team, then you still have that vulnerability, which makes it easier for attackers to beat you.

Never reveal sensitive information

If some random person calls you asking for your date of birth, bank account info, login credentials, or anything else, DO NOT GIVE IT TO THEM, even if they seem “nice” or “legitimate.”

Back up and encrypt your data

Backing up your data helps shield you from permanent loss if something happens to your primary store of data.

Encrypting your own data helps shield you from the attackers understanding your data in the event they find it.

The human element

Hackers don’t play by the wider society’s preconceptions about what the “rules” are. Hackers try to figure out how to play by what the rules of reality are. Hacking is the guerrilla warfare of the Internet.

As humans, we often like to think of our fellow humans as being trustworthy and of goodwill. However, it is often this tendency to trust that can do the most damage to your organization.

When a hacker manipulates your employees in order to gain unauthorized access to your organization’s information, that is called social engineering. Twitter said last year that social engineering of Twitter’s employees is what led to the famous Twitter hack where several high-profile accounts appeared to post a Bitcoin scam which took an estimated $120,000 USD worth of BTC from users.

This goes to show that training your employees is super important if you care about the cybersecurity health of your organization. At the end of the day, your IT people can be stellar, but if your other employees are untrained, they remain a liability. Talk to a technical/cybersecurity professional about the possibility of them speaking to your team about this issue. Don’t just bury your head in the sand and hope you never get targeted.

If there is any context in which you should be paranoid, THIS IS IT. Cybersecurity can make or break your organization, so take it seriously.

⚛️

Description:

Link to GitHub for that mini-project:

https://github.com/Outsmart-Big-Brother/content-themes/blob/main/CyberSec4PoliticalOrgs.py

Links for all outside content:

Video by Life-Of-Vids from Pixabay.

Music by ASHUTOSH-MUSIC from Pixabay.

Image by Pete Linforth from Pixabay

For further study:

https://www.campusreform.org/article?id=14941

https://www.wired.com/2015/04/snowden-sexy-margaret-thatcher-password-isnt-so-sexy/

https://techjury.net/blog/what-is-brute-force/

https://brave.com/

https://www.clamav.net/

https://www.msn.com/en-us/news/technology/twitter-says-social-engineering-led-to-the-massive-hack-that-targeted-high-profile-accounts-like-barack-obama-and-jeff-bezos-here-s-what-the-technique-involves-and-how-to-avoid-it/ar-BB16PrrV

Legal inquiries:

See OBB’s Terms of Service page: https://outsmartbigbrother.com/terms-of-service/

What is encryption and why do I need it?

Topic Intro

Imagine you and your friends are planning a protest, but you fear that if the local authorities find out ahead of time, they might try to stop you. How do you prevent the authorities from discovering what your plans are?

Your friends live too far away from each other for you to hold an in-person meeting, and the COVID-19 lockdowns also make such physical meetings illegal. You have to send messages to each other, but you suspect the police are monitoring your Internet connections and your phone conversations.

How can you and your friends communicate privately so that your protest is successful?

Find out how in this video.

Brief summary of subject matter and use cases.

In order to send private messages to your friends, you need to master the art of making the meaningful turn into the nonsensical and making the nonsensical turn back into the meaningful.

No, I’m not talking about philosophy.

I’m talking about cryptography.

When you encrypt a message, it means you take a message that looks like this…

Hey everyone,

Let’s have a protest in front of the Liberpolis capitol building at noon on Jefferson’s birthday.

Wear your uniforms and bring your signs.

Let’s make sure our lawmakers know that we care a lot about this issue!

— Jonathan

…and turn it into a message that looks like this!

947070d4a17a64f3e5222ee06ecfa3f38fe2c3c6488d5c5e7cfdb2dd1831eb52ef

4ab77de37a04f457fd4c60d381ed49d69c63b87e4e82b95a2909cba2bcb8e33

fcaeeb2ef0fca181f8c0daeaaf9f3f85dba29548e3f9f4c4b19a566045ddb21f688

41446749edf99b89aa978d548421225206e4652df5916aa13ffc2c2889c56e1c

c756c37cd25df4ed868f372d63548c5e6123dc307107a2f1b4fe1b6522acbc8d3

a5fd4742d3bab282fa711e8ff39f88ec11b74d90a736d7aac825276fce8aef132c2

23ff93361ab8459e6e5c2bf6b1617dd3fba0bd9a9588a4566bd148202d123a96

05fb19ef105fd0e52228982fc4e1c632a6beb5a372de177a11f54c1e

[cyphertext]

That encrypted message (cyphertext) can then be sent over the Internet to your friends.

If law enforcement were to intercept your message, they would then see the cyphertext, not your actual message. Depending on how complicated your encryption mechanism is, they could try to decrypt it by having their computers do a bunch of guessing (brute force), but to do so would probably be extremely hard for them, if not practically impossible, since there is an astronomical number of possible ways to decrypt it, with only one of them being correct.

So your message is now supposedly safe from being deciphered by the authorities, but how can your friends understand it?

Depending on the encryption scheme you are using, each of your friends could need a “key” sent from you in order to decrypt it, or they could be able to decrypt it with a “private key” which they and they alone already have. It gets kind of complicated, but from all indications, it works.

Therefore, because you and your friends used the power of encryption, you were able to keep your plans a secret and hold the protest as planned. Well done!

Why encryption is important

Encryption enables multiple parties to communicate without eavesdroppers understanding what they are saying to each other. It is almost like two people speaking to each other in a completely unique language in the presence of a crowd who is ignorant of that language.

This makes encryption extremely useful, especially for those who want to Outsmart Big Brother.

If you are an everyday citizen in a reasonably free country, encryption hopefully is used to keep your financial, medical, and other private information safe from malicious hackers (“crackers”). You could also use encryption for random stuff that you simply believe is “nobody else’s business,” like that ancient photo of 2-year-old you picking your nose.

On the other hand, if you are a whistleblower, activist, or a journalist living under an authoritarian regime, encryption could literally mean the difference between life and death.

Everyone who wants to defend freedom must understand at least a little bit of the importance of encryption and how to use it. Even if your country is relatively free and politically stable for now, you never know when the need for encryption could arise.

How to encrypt

Here are some examples of how to use encryption in your everyday life.

Use https:// to encrypt your usernames, passwords, and other info exchanged between you and a website. The “s” in “https” is especially important here. Often, when you are using https, your browser will let you know by showing a little lock icon near the address bar. One time I was trying to login to a WordPress-based website and realized that I had submitted my username and password into it while not being protected by https. I was in http. Since I knew that a hacker could have been monitoring my Internet traffic, I decided to immediately switch to https and change my password.

Use a Virtual Private Network (VPN) to mask your IP address. A VPN basically means that another computer that is far away from you interacts with the Internet on your computer’s behalf and sends encrypted data back and forth. It can help make you anonymous online. But beware, many traditional institutions (like banks) will assume you are a malicious hacker if you try to login while connected using a VPN. You will also be required to complete more annoying CAPTCHAs, since many sites care more about protecting themselves against DDoS attacks (a type of hack attack using many computers to overwhelm a website with requests) than about being privacy-friendly.

Switch to an end-to-end encrypted (E2EE) email provider. I personally use both ProtonMail and Tutanota and I consider them both to be excellent choices. ProtonMail is based in Switzerland; Tutanota is based in Germany. Both offer a free version and premium features (like custom domains) for those who are willing to pay. Both are encrypted. Both are outside the U.S. (LavaBit was a similar encrypted email service that failed because it was a U.S. business in the Snowden Era). If you are looking for an alternative to the Google G-Suite, then I would go with ProtonMail since they seem to have a more developed “Proton”-Suite that they are in the process of expanding, including ProtonVPN, ProtonCalendar, ProtonDrive, etc.

Use an E2EE chat app like Signal or Threema. I use both. While Signal requires a phone number to use, Threema does not, which could be a deal-breaker for those who value absolute anonymity. While WhatsApp does claim to be E2EE, the fact that it is owned by Facebook means that you are letting a “fox” of privacy violations guard your “henhouse” of private communication. Why worry about Facebook sneaking into your chat? Just use one of the other options.

If you are configuring a Linux distro, choose the option to encrypt your hard drive. This will mean using two passwords every time you login to your computer, but it will make it much harder for somebody to physically access your data after you shut down your computer. If you can barely handle keeping track of one password, then ignore that last part about encrypting your own hard drive.

How encryption could be used against you

Just like how encrypting your own data makes it harder for attackers to access it, the tables could also be turned against you when the attacker is the one who encrypts your data, like with WannaCry.

WannaCry is a type of ransomware that caused a lot of problems for its victims. It encrypted the data on their computers and demanded a ransom of Bitcoin in exchange for the user (supposedly) getting their data decrypted. Of course, with criminals you can never really know whether they are telling the truth, since they could theoretically keep demanding more and more money even after the victim sends the original ransom.

Why governments generally do not like widespread encryption

For all its benefits to people who want to remain private, encryption also can stand in the way of governments performing surveillance on them. Since the state is responsible for enforcing laws against things like terrorism, money laundering, and other shady activities, the mass-adoption of encryption makes their job harder. However, when the government takes action to oppose encryption (like requiring backdoors for law enforcement), it often violates the right to privacy of the individuals whose data is no longer private.

For those more interested, check out the story of when the NSA tried to create a hardware backdoor to encryption called the “Clipper Chip.”

Answer fan questions.

Special thanks to NanaRepublic on ThinkSpot for their questions to me last week regarding several of these encryption-related things. https://www.thinkspot.com/discourse/6mueMn/post/outsmartbigbrother/sneak-peak-at-the-thumbnail-for-my-first-episode/BetQBap

There is still a TON of stuff that I need to learn about the details of how public key cryptography is able to actually work. We’ve barely scratched the surface here but hopefully this video helps you to be able to use encryption more in your own life.

My challenge to you all this week is…

Find something that you need to encrypt and DO IT. Let me know in the comments what things you are starting to encrypt.


Stay free, everyone!

⚛️

Description:

Link to GitHub for the encryption theme project

https://github.com/Outsmart-Big-Brother/content-themes/blob/main/encryptionTheme.py

Credits

Music by TimMoor from Pixabay — https://pixabay.com/music/

Intro video by Thomas Breher from Pixabay — https://pixabay.com/videos/security-data-security-data-backup-2176/

WannaCry image— https://www.wired.it/internet/web/2019/05/13/wannacry-download-virus/?refresh_ce=

Clipper Chip image — https://cryptomuseum.com/crypto/usa/img/301216/020/full.jpg

For further study

ProtonMail — https://protonmail.com/

Tutanota — https://tutanota.com/

LavaBit —https://www.eff.org/cases/lavabithttps://lavabit.com/

Encrypted chat apps — https://protonmail.com/blog/whatsapp-alternatives/

Clipper Chip government backdoor to encryption —https://cryptomuseum.com/crypto/usa/clipper.htm

WannaCry ransomware — https://www.cnet.com/news/wannacry-wannacrypt-uiwix-ransomware-everything-you-need-to-know/