Technitium DNS Server is an open source authoritative as well as recursive DNS server that can be used for self hosting a DNS server for privacy & security. It works out-of-the-box with no or minimal configuration and provides a user friendly web console accessible using any modern web browser.

Nobody really bothers about domain name resolution since it works automatically behind the scenes and is complex to understand. Most computer software use the operating system's DNS resolver that usually query the configured ISP's DNS server using UDP protocol. This way works well for most people but, your ISP can see and control what website you can visit even when the website employ HTTPS security. Not only that, some ISPs can redirect, block or inject content into websites you visit even when you use a different DNS provider like Google DNS or Cloudflare DNS. Having Technitium DNS Server configured to use DNS-over-TLS, DNS-over-HTTPS, or DNS-over-QUIC encrypted DNS protocols with forwarders, these privacy & security issues can be mitigated very effectively.

Be it a home network or an organization's network, having a locally running DNS server gives you more insights into your network and helps to understand it better using the DNS logs and stats. It improves overall performance since most queries are served from the DNS cache making web sites load faster by not having to wait for frequent DNS resolutions. It also gives you an additional control over your network allowing you to block domain names network wide and also allows you to route your DNS traffic securely using encrypted DNS protocols.

GnuPG is a tool for secure communication. This chapter is a quick-start guide that covers the core functionality of GnuPG. This includes keypair creation, exchanging and verifying keys, encrypting and decrypting documents, and authenticating documents with digital signatures. It does not explain in detail the concepts behind public-key cryptography, encryption, and digital signatures. This is covered in Chapter 2. It also does not explain how to use GnuPG wisely. This is covered in Chapters 3 and 4.

GnuPG uses public-key cryptography so that users may communicate securely. In a public-key system, each user has a pair of keys consisting of a private key and a public key. A user's private key is kept secret; it need never be revealed. The public key may be given to anyone with whom the user wants to communicate. GnuPG uses a somewhat more sophisticated scheme in which a user has a primary keypair and then zero or more additional subordinate keypairs. The primary and subordinate keypairs are bundled to facilitate key management and the bundle can often be considered simply as one keypair.

Smartphones, Apps, Streaming-Dienste, Betriebssysteme. Technologien, die wir täglich nutzen, spionieren uns täglich aus. Ist es da möglich noch Kontrolle über die eigenen Daten zu haben? Ein Paar hat es ein Jahr lang versucht.
Auf Facebook teilen Auf Twitter teilen

Katharina Larisch hat die Plattform NetDoktor.de aufgebaut und Gesundheitsvorhersagemodelle entwickelt. Volker Wittpahl hat Bücher über Künstliche Intelligenz herausgegeben und leitet das Berliner Institut für Innovation und Technik. Gemeinsam hat das Paar ein Jahr lang versucht, digital selbstbestimmt zu leben und die Kontrolle über alle eigenen Daten zurückzugewinnen.

This is the code that powers https://webbkoll.dataskydd.net – an online tool that checks how a webpage is doing with regards to privacy.

It attempts to simulate what happens when a user visits a specified page with a typical browser without clicking on anything, with the browser having no particular extensions installed, and with Do Not Track (DNT) disabled (as this is the default setting in most browsers).

In short: this tool, which runs the user-facing web service (built with Elixir and Phoenix), asks a simple Node.js backend to visit a page with Chromium. The backend uses Puppeteer to control Chromium; it visits and renders the page, collects various data (requests made, cookies, response headers, etc.), and sends it back as JSON to this tool which then analyzes the data and presents the results on a webpage along with explanations and advice.

Webbkoll is multilingual and currently supports English and Swedish. If you want to help us translate Webbkoll into more languages, see TRANSLATIONS.md.

Jumbo is used for job processing, and some basic rate limiting is done with ex_rated. Multiple backends can be configured. ConCache is used to store results in an in-memory ETS table for a limited time. Other than the Node.js backend, there are no external dependencies, and nothing is saved to disk.

Please note that this is still a work in progress. Expect bugs and messy code in places. Only a few basic tests are in place.

Also note that this tool is mainly meant to be used as a starting point for web developers. For more rigorous and systematic testing we recommend that you check out OpenWPM, which we used to analyze the websites of Sweden's municipalities (site, code). You might also want to have a look at PrivacyScore, which is a bit more comprehensive than Webbkoll (additionally checks e.g. email and TLS/SSL configuration) and also lets you compare/rank lists of sites.

This is a project by Dataskydd.net. See Webbkoll's About page for more information.

Webbkoll hilft Dir festzustellen, welche datenschutzrechtlichen Maßnahmen eine Website ergriffen hat, um Dir die Kontrolle über Deine Privatsphäre zu geben.

Bitte beachte:

1. Dieses Tool simuliert einen normalen Browser mit ausgeschalteter "Do Not Track" Funktion (ist bei den meisten die Standardeinstellung) und ohne Erweiterungen.
2. Auch wenn Du https:// eingibst, prüfen wir http:// und ob es automatisch auf eine https:// Seite weiter leitet (Weiterleitungen wird gefolgt).
3. Im Allgemeinen sollte alles funktionieren, manchmal kann es jedoch vorkommen, dass einzelne Seiten aus den verschiedensten Gründen nicht funktionieren.
4. Das Back-End läuft derzeit auf einem einzelnen Server mit begrenzten Ressourcen. In Spitzenzeiten kann ein Durchlauf daher etwas dauern. (Wenn Du willst, kannst Du Webbkoll in einer eigenen Instanz betreiben!)
5. Feedback ist willkommen: Sende uns eine Email oder berichte einen Fehler.

Die Empfehlungsecke beinhaltet meine aktuellen Empfehlungen zu unterschiedlichen Themenbereichen – also bspw. Messenger, Browser-Add-ons und Suchmaschinen. Das Ziel ist, die Empfehlungsecke möglichst aktuell zu halten, damit ihr euch bei Bedarf daran orientieren könnt. Die Empfehlungen sind von kurzen Texten begleitet, auf eine ausführliche Darstellung verzichte ich allerdings bzw. verlinke dann bei Bedarf.

But there is a major issue with both Signal and WhatsApp: Your account is tied to your phone number.

When I started this blog, I embraced some free services, like Disqus or Google Analytics. These services are quite invasive for users’ privacy. Over the years, I have tried to correct this to reach a point where I do not rely on any “privacy-hostile” services.

Analytics
Fonts
Videos
Comments
Search engine
Newsletter
Less Java­Script
Memento: CSP

Flock is a replacement for the default contact and calendar synchronization services provided by Google. Flock provides end-to-end encryption between multiple Android devices putting the privacy of your contacts and calendars back under your control.

A secure calling app for Android.

TextSecure is a free and open-source encrypted messaging application for Android. TextSecure can be used to send and receive SMS, MMS, and instant messages. The application uses end-to-end encryption to secure all messages that are sent to other TextSecure users.

TextSecure is developed by Open Whisper Systems and is released under the GPLv3 license.

The server that handles message routing for the TextSecure data channel. Communication is handled by a REST API and Push messaging (both GCM and APN).

A secure text messaging application for Android.

I2P is an anonymous overlay network - a network within a network. It is intended to protect communication from dragnet surveillance and monitoring by third parties such as ISPs.

Replicant is a fully free Android distribution running on several devices,
a free software mobile operating system putting the emphasis on freedom and privacy/security