Full Guide to Online Privacy 2020 - (Browser, Email, OS, & Compartmentalization)

[@imnguyen6658]

I feel like such a normie when watching your videos, but I like it.. TY for the enlightenment

[@laserslime]

So I'm not alone...

[@caleb22lr]

you are one

[@AgentFortySeven47]

you will always be a normie until you watch this video in a temple os vm inside arch inside gentoo inside slackware inside LFS.

[@jt4369]

I feel the same way. I've always wanted to learn this stuff, but it gets overwhelming "Where do you even begin..."

[@potentwater2260]

Yep same

[@adamz1977]

Email is about as outdated as the internet. The thing is, like the internet, email is an open system that can and has been upgraded many times. There are some services that add many modern chat features to email while maintaining compatibility with sending to all other email servers. All we need to do is implement more upgrades in a standard open way.

[@adamz1977]

@Navee SeaLion Do you not know what it means? Email is the most widely used messaging protocol with almost 5 billion (and growing) users. That's more than any other messaging system, and it has the advantage of being 100% open and decentralized for high sustainability.

[@adamz1977]

@Navee SeaLion Modern email (with IMAP, DANE, DNSSEC, DMARC, DKIM, SPF, TLS 1.3, Autocrypt, etc.) doesn't have to transfer exposed metadata in plain text anymore. If you're on the same server within the same domain, you can secure message transfer even more. Yes, there are lots of different email protocols & extensions, so you have to be very specific about what you say. If you had said some parts of email are outdated, then that would be true, but like I said, it has been upgraded many times over the years and the old criticisms aren't necessarily valid anymore.

[@olkekaja6289]

@Navee SeaLion @Adam Lein I genuinely enjoyed reading your little discussion here. Very informative ^^

[@wrockd]

@@adamz1977 With the introduction of DANE and DNSSEC over TLS email definitely has became more secure(while it still remains a fact that most public email providers only offer this in their premium suites). But, it only prevents you from a possible MITM downgrades, tampering and redirection attacks, other than that if your public mail provider were to get a subpoena they could/will reveal the all the contents, and the metadata is still there(i don't know who told you that DANE over TLS helps conceal the Metadata) that's why Emailing is considered deprecated for usages in "Privacy" and "Opsec" crucial operations. Which I believe is the scope of this video itself. And if your answer to that is "To setup your own email server", then let's not forget that in order for it to truly be secure your recipient also needs to setup their own private email server, and in that case I can't see why they are unable to use a much secure messaging protocol/service like Matrix or XMPP. As setting up and managing an email server is truly quite a chore.

[@pcgamingmasterrace1360]

I really appreciate this channel I’m sorry you don’t have 10k views per video but there isn’t many people in the world understand most of this. They just think computers are magical machines. And the ones that do haven’t yet found your channel

[@Scaramouche122]

Tell me how computer is not a magical machine, or you build your gpu/CPU yourself?

[@weaktor_ass]

I like your funny programs, magic machine

[@ebouwman034]

@@Scaramouche122 I’ve gotta agree, you can’t understand it all. My mom tells the story of when my grandfather got his first PC... she went to visit and he had opened up the tower and took things apart and was totally bothered by it. He couldn’t figure out how it worked and couldn’t wrap his head around using something that he couldn’t understand. My mom said something like “I have no idea what’s under the hood of my car, I press one pedal and it goes, I press the other pedal and it stops. Don’t worry about how the computer works, just use it.” Since then computers have become way easier to use while the things they do become more and more complex.

[@Scaramouche122]

@@ebouwman034 so do i need 7 nm ryzen or 12 nm is still fine?

[@ebouwman034]

@@Scaramouche122 I’m no processor-ologist, but bigger is always better right? /s

[@thedarthvader2061]

Mental Outlaw: Privacy guide... Intel ME: Hold my Beer!

[@abhrasrepository1173]

System76: Hold my Thelio

[@Watrmeln]

AMD: Check out my PSP!

[@очковыйревун]

gentoo kernel is the solution

[@fossforever512]

This is why you use a librebooted thinkpad

[@OggerFN]

I'm disappointed that you didn't recommend people to root their phones and use a different OS than the one came with the manufacturer. If you're gonna be paranoid use a secure OS that does stuff like allowing you to actually disable GPS completely.

[@alouisschafer7212]

or go full rogue and buy a linux phone I have a spare phone and an old worthless tablet it would be pretty cool if I manage to successfully install a linux based os on my old phone.

[@NatetheNintendofan]

Well I can't vote mine low I was until I found all that freaking Verizon permanently locked in the bootloader

[@Gurj101]

there is literally only one OS that does that /e/

[@Military_Boi]

@@alouisschafer7212 technicly android is a linux distro/is based on linux kernel

[@tonivoul1971]

Or you can degoogle the phone

[@coldbrew6104]

Bitwarden is a FANTASTIC mention!

[@Ryan-xq3kl]

Can you never show me HD Tim Cook again thanks

[@RoboticParanoia]

Freaking amazing content. I wish it had Portuguese subtitles so I could wake more people up here in Brazil.

[@1996Pinocchio]

I think google now allows you to auto translate the subtitles. Works for me at least :)

[@KlMJONG-UN]

you need to make a new privacy guide 2022 this year for companies like Clearview AI and the government of Canada and USA for stay protected against data brokers sending these informations to the government. My phone provider gave the government my locations data for years to 'protect against covid 19' including all other phone carriers in my country. So please, make a updated privacy guide for 2022, because it is very crucial nowadays especially since everything is online and i don't feel safe in my country.

[@hubee2407]

True

[@Jess-hj8vu]

I feel like using only FSF approved software is kinda extreme in a lot of cases but hey if want a completely free system all power to you. Great video and some really helpful little tips I've never thought of like setting up browser profiles. Although it would probably take some reading up and time setting up a network firewall with freebsd's pfsense or openbsd's pf with dns encryption is a good move.

[@juzujuzu4555]

Perhaps do a video on installing GentooLTO overlay, and how that affects memory usage/performance.

[@tolgagamer6139]

firefox with lto use flag is 2x faster than firefox-bin

[@dawaxd]

For a search engine didnt startpage get sold to system1, a company that collects a lot of data?

[@gwenstacy3770]

Yup

[@blackninja9400]

Update: duckduckgo compromised and startpage too

[@zewm]

Wasn't the Brave browser found to have been redirecting all URLS through advertisement referrals? I don't know if I would trust it for security tbh.

[@RosalioRedPanda]

That’s fair. It wasn’t a security issue but definitely a user trust issue and that should really be enough to dissuade. But he said it’s the recommendation for normies. If we have too high a bar then they shouldn’t use Firefox either. And if we tell them to go use GNU IceCat they’re gonna hop back on chrome. But it’s still good to note and not let anyone forget that Brave is not the best measure. It’s just a very good one for normies.

[@nick_the_greek]

The ultimate howtodiewithoutanyonenoticing guide

[@stephenkamenar]

4:45 ... come on. if you compile all of your packages yourself you're not going to be sure of anything. you will never find malicious code if they put any effort into hiding it unless you spend years reading and testing all of the code

[@ME0WMERE]

that's the beauty of open-source you may not find malicious code, but someone else will and it only takes a single person to find it for everyone to know

[@AfroJd]

Well... That first recommendation didn't age well hahaha

[@bob80808]

Nice awareness vid! One neatpick: phones do not send data TO the GPS satellites, they only receive radio signals to triangulate the position

[@paulwalker5225]

@@trtrhr in short: game over, man. Game over! Unironically.

[@RedVRCC]

Very true. This is also why we can't use our phones as makeshift satellite phones. If it was a two way connection, someone would have probably already released a service to do this.

[@super-hn5jl]

Dont use startpage it was sold to an advertising company

[@unpaintedcanvas]

Startpage is unfortunately still the best alternative to duckduckgo imo. DDG results can sometimes be absolute trash, especially when it comes to niche searches such as coding. So in those instances, Startpage can fill in those gaps.

[@ThylineTheGay]

HerebyOrdinary ehh DuckDuckGo is good enough for me

[@user-hi8jf1hu4p]

really wish there was a phone that didn't glow brighter than the chernobyl meltdown

[@Bagginsess]

>pigeons >telepathy Are you even trying?

[@FieldMarshalFeels]

Your best bet is a satphone, because all you have to do is block the antenna and it will be useless at tracking you.

[@juxuanu]

I'd appreciate a list of the software. You only mention it without it written

[@Bagginsess]

just install all suckless software and never go online, then you're based

[@Lusidan]

*okay*

[@Lusidan]

**okay**

[@Lusidan]

*_okay_*

[@Lusidan]

_okay_

[@ThecatThecat-hq1op]

You should also make some accounts for your important email accounts to be like "admin accounts" that you don't ever login to. They would have privilege's like being only able to delete the accounts through the admin accounts, so in the case you are hacked you will be able to prevent them from deleting important email accounts.

[@sebbes333]

*@Mental Outlaw* 14:47 What about LastPass password manager? (Should I change to KeepPassXC?) (I'm not a "normie") (LastPass have some quite nice tools built in).

[@someonehere4380]

if lastpass is synced with the cloud then yes. your passwords should be stored locally

[@r4s3]

For new users watching this video, 3:09 is no longer the case.

[@ItzGoldfish1]

wdym?

[@Aaron-mg3zw]

@@ItzGoldfish1 duckduckgo started filtering results based on what it deems as misinformation

[@ItzGoldfish1]

@@Aaron-mg3zw Yeah, i just recently seen that. i stopped using it because i couldnt stand the lay out of it.

[@reallauradee]

Isn't all this bypasses by IME? I heard like even if you encrypted everything that IME gets the keys.

[@gettriggered_ian3269]

SYSTEM76.

[@adriansiska4612]

How do you counter the intel management engine

[@johnnycochicken]

possibly me_cleaner or coreboot

[@adriansiska4612]

@@johnnycochicken this was meant as a more rethorical question, since it is a full privacy guide and i hadn't yet seen his me video, i thought he forgot to mention it

[@glkk5273]

I’d suggest adding SimpleLogin to the video as it’s a better way to protect your email address than using temp-mail. It’s also open source and available on Android.

[@Moped_Mike]

Lol DuckDuckGo hasn’t aged well

[@Yelloween]

what went wrong?

[@jackbrown6503]

Trustworthiness is paramount, and the Utopia P2P web proxy has established a solid reputation in this regard. Its open-source nature fosters transparency and community audits, instilling confidence that there are no hidden vulnerabilities or backdoors.

[@SmedleyButler1]

Could you PLEASE detail checksuming F droid before installing? Also, how to verify many code gurus have reviewed a given program. GitHub tells me nothing about how many users and code reviewers have vetted a given program.

[@Tarik360]

12:40 That's tutanota for anyone who doesn't know how to spell it.

[@arjunprs]

We need a 2021 version of this...

[@hibernian87]

How safe is TOR these days? Some people would say its a honeypot, and to be fair, it must be monitored to some degree.

[@MentalOutlaw]

Depends on who/what you're trying to secure against. Alot of Tor servers are undoubtedly backdoored or fully run by the alphabet boys, so if you get 3 servers run by them then that traffic will probably be compromised.

[@circuitlover853]

Starting from search engines to a whole OS for privacy recommendation, then asking we don't need privacy in hardware level, don't we? Then my mind hits me by saying Yes ( 🤷‍♂️Eg: Intel's ME trap)

[@INKILU]

Step 1 : Throw out your PC and Internet access. Step 2: Done.

[@someonehere4380]

the easiest route

[@thesteaksaignant]

@@someonehere4380 and phone

[@vitalbuggy6907]

You might want to make a video about setting up VirtualBox Guest additions on Gentoo

[@john4845]

Seconded, there’s some kernel configuration options that need to be checked.

[@widevader]

3:08 this didnt age well

[@20quid]

DuckDuckGo is hosted on AWS.

[@wildflower2812]

This video is excellent

[@holohearthfire7138]

need a 2021 updated video.

[@TheJonathanMMM]

As far as I know using GPS is not in any way giving away your location, only if software on the phone then sends your GPS location. A phone uses GPS like a radio is receiving radio waves, they just receive the signals of satelites. Most phones are not capable of sending anything back to a satelite.

[@Rahu37]

Use bromite, wirh encrypted dns maybe libre Use net guard Change os Use f droid apps instead of play store

[@GamingWizard666]

3:09 foreshadowing

[@deezwhatsir3316]

Wouldn't writing your passwords down be better than using a manager

[@berkan7662]

@@trtrhr Use punctuation and practice grammar.

[@prblyyusuf5895]

@@trtrhr Bro just use like 1% of your brain LOL. It's not hard to remember multiple passwords that will literally take the output power of the sun to crack.

[@meepisdispenser5651]

why are there so many posts about spouses and children being bad and getting caugh thanks to their emails what

[@Richard-ox4db]

What do you recommend for listening to music? Is there a service you can use or should I just download my Music?

[@ichaa3tech]

Download full discographies that'll never listen too like a chad

[@ashwinrawat9622]

Buying and owning an album is better than paying to listen to it without owning it.

[@wherebear]

Nice! Got everything but the OS and phone situation in place. Have any good recs for temporary phone numbers? Sometimes sites require those as well.

[@AlJolso12]

I am a normie but I'm becoming really interested in the issue of privacy and data tracking. I would like to ask a question. Why would be using Windows with an offline account be bad for privacy?

[@Lucas-mq2pd]

Using windows in general is bad for privacy, avoid that

[@Lucas-mq2pd]

@Łukasz Wiśniewski yeah... thats why i dual boot. Hope to someday dont even need to do that

[@Lucas-mq2pd]

@Łukasz Wiśniewski Thats really cool man! :D

[@MoopersYT]

Windows can track pretty much everything. I use windows on my gaming PC but Arch on my laptop. Would definitely recommend Linux for almost everything. Personally my online life is definitely not secure but I don't really care. But I do love to play around with things and try new stuff so I might get started on some of these email & password services.

[@khalilsworld8266]

@@MoopersYT unfortunately I can’t completely because a few reasons actually, first of all I actually have school work on windows, second of all using the terminal for everything is not really my thing, sure may be for a server but not for a desktop

[@in3rtia619]

Can you do a video for hardening mobile phones android and ios?

[@madocworks1147]

why not just make a usb stick with Tails OS and call it good? haha don't get me wrong alot of the tips here are good, like using duckduckgo, and a brave browser. but disabling java script? might as well disable the internet at that point, barely any site in the last 10 year would run. i guess if you like just surfing on 90's sites you be fine lol.

[@FIVEFIVEFIVE-v1p]

Is this still up-to-date in right now?

[@mamaeluigi2532]

Why is the comment section full of bots and shills?

[@jerrymartin7019]

The description has links to crypto wallets, so they probably saw the word "crypto" and assumed it was a bitcoin video.

[@blu3be4ry]

you should make an updated video of this

[@hacelocononda]

What is tour opinión on the dissenter browser?

[@rodrigosouto9502]

Nice tips. Thanks

[@simonmaersk]

Please do a updated 2024 version of this video!

[@your_new_sjw_waifu]

12:35 this didn't age well

[@virtualpunk448]

Nope

[@OozoraShuba]

Protonmail or the other one?

[@masterdoyen]

Could you make a video on how to secure oculus for the gamers out there? 😅

[@dannydogs4385]

Just sell it to be honest. I sold mine when Facebook acquired them. I guess an alternative could be Valve’s VR headset, but then you need to worry about that and I don’t know if any open source VR exists.

[@FieldMarshalFeels]

Firefox glows pretty hard these days desu. It's best to just use a firefox derivative these days.

[@alouisschafer7212]

or go for ungoogled chromium its a chromium fork and well the name says it all

[@abd-animation-22]

Or just use adblock No point in collecting my data and using it to give me targeted ads if i don't see ads at all Also i don't shop online

[@xapsus2221]

That's just not how it works...

[@someonehere4380]

ah yes you seem educated

[@pandapruitt2542]

To everyone in 2022 duck duck go has now admitted to censoring search results :/ I reccomend swiss cows or brave these days

[@alopeztywonek2401]

I use both browsers, firefox and brave. To be honest, i would use only firefox if it wasn't because i have trouble with some websites. In other words, there are some websites that wont fully work, or wont open certain windows on firefox. I don't know why is that, but if there is a way to fix it, i would be glad. P.S. I configured both browsers to get as much privacy as possible.

[@Anonymous4045]

Which websites? In the earlier days of the internet, many websites only worked well on some browsers, but nowadays there really shouldn't be any issues

[@zyansheep]

Collab with The Hated One?

[@surfingbilly9654]

warning: anyone who is subscribed to Mental Outlaw is definitely on a government watch-list.

[@justaweeb1884]

are you going to update this for 2024?

[@discordiangod]

I use searx like a based anon

[@mkano7434]

12:34 that didn't age well

[@mkano7434]

I meant proton mail, since later on Mental Outlaw made several critical videos about it.

[@mkano7434]

lol didn't notice the edit, cheers!

[@ducktape-3470]

@Insert_text_here thanks, i needed help with that

[@wrockd]

Any email provider on the face of the earth is not secure enough(as emails can't really be E2E encrypted, unless you use some sort of manual encryption like PGP yourself) and will need to respond to a legal subpoena, Protonmail is as secure as it gets. And even if you host your mail server, most likely you will be sending mails to a public mail provider(Google or MS) that your recipient uses, in which case they could acquire all the data from those public providers too. And if your recipient also hosts his own mail server, I can't see why they can't use Matrix or XMPP either, as those are way more secure and much easier to setup and maintain, even if you host your own instance of Matrix.

[@YuriShevchouk]

What about iridium instead of brave.

[@rysimaneq5504]

Make an 2023 edition!

[@thesoundoflife6973]

What password manager do you recommend?

[@nathanmannpiano5621]

Im pretty sure he recommends keepassxc

[@alouisschafer7212]

a piece of paper dude

[@skeyturr]

literary a piece of paper you can keep in your wallet

[@thesteaksaignant]

@@skeyturr paper is only safe as long as the hacker is not someone who knows you (like your angry ex or something)

[@grisu1934]

Can i be private without a degoogled os? if i reset my phone i lose acces to my bank account

[@prblyyusuf5895]

Nope.

[@junglized]

What about Vivaldi? I've been using it for some time already, made a switch from Opera, and I can't complain :)

[@someonehere4380]

propietary

[@sodaroka]

Its very unfortunate how inconvenient it is for consumers to have a secure and private phone. The world we live in :(

[@nootinator]

note: the technology of GPS does not share your location and the GPS satellites NEVER receive any data from you at any time.

[@somewhathappy5610]

Imagine giving advice when you don't even know that GPS satellites don't communicate with your phone. GPS works by having satellites constantly emit a timing signal and your phone using trigonometry to calculate the position. At no time does a cellular phone emit a signal intended for GPS satellites. The way phones are tracked is when communicating with cellphone towers to tell them what cell they are on so you can receive calls. The only way to prevent this is to shutdown the phone.

[@calonpetani9535]

*what's about utopia browser?*

[@Clicklord]

updated Vers?

[@MisterGeekin]

A 2024 version please.

[@maritoguionyo]

When protonmail

[@ThylineTheGay]

Firefox relay is a great option

[@johanneselectron3886]

The Google Algorithms recommend me Videos were Google will be replaced. Its a question of time there will be censored

[@StarOnCheek]

5:27 me, a Vue developer: 😯

[@mz-pd5hw]

about phones, take a look at www.wiphone.io/ is a diy phone based in the microcontroller ESP32, is not a "smartphone" tho, but has a lot of potential, even to manipulate physical devices

[@spb1179]

Love how I look this up and have vpn adds now

[@gwenstacy3770]

Classic Google

[@micosstar]

My stomach growls, an ad for probiotic gummies appears on KZbin. Classic Google.

[@evil_musclemuscled3814]

Is there a device to use that scrambles all info up while the nosey companies try getting in

[@SmedleyButler1]

Love your tips MO. What are your thoughts on these tips?: 1) use "G droid" instead of F droid? Its just modified Fdroid? It gives ratings, number of downloads etc like F droid should 2) use incognito to bypass email subscription requirements 3) removing Intel's "machine engine" backdoor in laptops since 2009 (a Canadian company sells them) 4) using a supposedly open source hardware FIDO2 like solokey and only key? Are they really "freeware"? I couldn't find anything about the people running them. 5) which dns recommendation from privacytools.io ? Obviously the website is questionable recommending cloudflare etc 6) why do you gloss over "blobs" of closed source code? One line of code is all that's needed to nullify any privacy.

[@oqocraft2661]

i had a stroke reading this

[@siebren005]

duck duck go allows microsoft trackers?

[@equation1321]

the video is old. i guess ddg isnt very good nowadays which is a bummer. im using startpage atm but idk if its the best alternative

[@Anonymous4045]

@@equation1321 There's also searx, and you can even host your own instance

[@equation1321]

@@Anonymous4045 ik but it’s been slightly whack for me so far. Always some engine that’s getting blocked

[@sergey_a]

3:18 This is no longer the case.

[@frankmerker630]

whats up with all the fake review bots in the comments?

[@infotruther]

you did not mention fairmail

[@just-mees]

Proton mail. Ironic

[@willy7789]

What if a password manger is hacked?

[@prblyyusuf5895]

It's offline

[@prblyyusuf5895]

Well KeepassXC atleast

[@wrockd]

Even if you use an online one like Bitwarden, your password database is locally encrypted on your device and then sent to the server(it's open source so that's verifiable) and also doesn't keeps the key anywhere neither on your device nor on the server. So even if let's say that their servers get compromised the only thing they will be able to get is *encrypted* databases, which they will need to decrypt, which in turn is not possible without your key(master password). Unless it's something very short and simple that could be brute forced.

[@s9209122222]

Is Firefox Lockwise reliable? They said that the data are encrypted, so they don't know what my passwords are, I'm relying it to sync my passwords on different devices.

[@MentalOutlaw]

i typically don't trust any type of "cloud storage" with my passwords, unless its a password database that I've encrypted myself.

[@Everythingzof]

why would you recommend Android over Librem 5 phone for privacy?

[@f23anone82]

How about PinePhone?

[@TheToniz4]

it not cheap, and android is more common.

[@MentalOutlaw]

There's a few reasons. 1. Because the cellular and GPS infrastructure are already compromised for all cellphones, which is the most important thing unless you only use your phone like an ipod. 2. You can unlock the bootloader of most android phones and then root them, de-google them, or use a custom rom that's already de-googled which effectively gives you control over your phones software like a Librem 5 would give you. 3. The specs of librem 5 phones are not very good (at least for now), they might be suitable for someone who purchases low end phones anyway, but if you're used to flagship devices then a Librem 5 is a big downgrade.

[@TheJackiMonster]

@@MentalOutlaw You could also just remove the cellular modem completely from the Librem 5 if the kill-switch isn't secure enough. I'm not sure about the GPS being modular too but GPS isn't actually an infrastructure known to send signals from phone anywhere rather than triangulating signals received from satellites. So after that the only problem I could think of being software (applications or firmware) which could put GPS data into packages and send them via Wifi. However Wifi can be disabled or even removed too... I know they mention the kill switches for marketing very much but designing the whole device modular makes it way more secure for those purposes if you want to make sure for real.

[@GiorgioCamozzi]

Tobias Frisch why do you then even need a phone if you're going to remove pretty much everything that makes up a phone? Just leave it at home if you don't want to be tracked...

[@itssohardtomakeaname]

@3:18 oof DDG hasnt aged well

[@farfaraway2006]

1:21 in 2040 Jeff will have the conversation your having inside your head

[@GooogleGoglee]

Best mail app: K9Mail (from F-Droid)

[@nico1337]

I like FireEmail better

[@Sharp931]

It was good when i used android eclair.

[@fernandomota7193]

wait but oneplus is chinese!

[@kyu9649]

Don't use brave browser. There was a big outrage recently, where brave automatically puts their referral links when you visit certain websites.

[@qwertyuiop711]

can i use a dynatac lol

[@weathercontrol0]

I don't see how keepass is more secure than bitwarden, of course, bitwarden is cloud based and keepass is not, but that makes bitwarden a lot more convenient, and doesn't make it less secure, because bitwarden can't see your passwords, your passwords database is encrypted and decrypted locally with your master password

[@weathercontrol0]

The best security and privacy tools is the most convenient ones I'd rather use google's password manager than keepass, because syncing database file between devices is a pain in the ass Bitwarden is best solution if you use more than one device (if you use only one device it all doesn't matter)

[@someonehere4380]

but what if there was a data breach?

[@Gurj101]

@@weathercontrol0 better yet remember your passwords and practice them every week lmao

[@florshureyeahdrsheshk4802]

@@weathercontrol0 I would say that the best secure and private tools are the most secure and private ones though...

[@weathercontrol0]

@@florshureyeahdrsheshk4802 there's no point in best security tool if nobody's going to use it because it's not convenient