Meta tags:
description=OK Digital Warriors, this lesson is Secure Browsing Part 2. We’ve already covered Part 1 – Installing Firefox, HTTPS Everywhere, and what HTTPS/SSL is. In this short lesson, we are going to cover the risks you face. In the next lesson, we’ll talk about how to combat the risks with settings, add-ons and OPSEC. Why…;

Headings (most frequently used words):

secure, browsing, part, risks, comment, malicious, code, cookies, menu, leave, cancel, reply, browser, settings, website, tracking, profiling, executables, ok, digital, warriors, this, lesson, is, flash, document, image, information, adobe, exploit, security, flaws, dangerous, links, one, on,

Text of the page (most frequently used words):
the (58), you (52), and (46), your (36), are (30), that (27), #browser (26), this (20), #secure (18), can (16), tor (14), information (14), part (13), flash (13), cookies (13), with (12), there (12), lesson (12), security (12), browsing (12), from (12), code (12), level (11), risks (11), will (11), these (11), com (10), they (10), got (10), sites (9), data (9), tracking (9), like (8), email (8), darknet (8), how (8), for (8), all (8), settings (8), get (7), have (7), tools (7), linux (7), computer (7), don (7), executable (7), use (7), what (7), http (7), adobe (7), malicious (7), them (7), more (7), image (7), out (6), encryption (6), not (6), opsec (6), using (6), things (6), know (6), www (6), isn (5), dark (5), enough (5), black (5), stupid (5), other (5), https (5), test (5), start (5), 2014 (5), open (5), some (5), great (5), need (5), help (5), one (5), here (5), but (5), office (5), about (5), threats (5), add (5), canvas (5), fingerprinting (5), next (5), comment (4), privacy (4), tool (4), surveillance (4), self (4), studies (4), hunt (4), hidden (4), vpn (4), freefor (4), 101 (4), point (4), read (4), 2015 (4), may (4), page (4), intel (4), version (4), ways (4), pdf (4), flaws (4), programs (4), keep (4), web (4), documents (4), risk (4), executables (4), types (4), javascript (4), program (4), called (4), online (4), each (4), cookie (4), see (4), fingerprint (4), ccleaner (4), below (4), persistent (4), party (4), session (4), wordpress (3), website (3), already (3), now (3), join (3), system (3), tests (3), ssl (3), behavior (3), metadata (3), find (3), over (3), tails (3), pgp (3), end (3), anon (3), anonymous (3), tenets (3), coursework (3), info (3), follow (3), new (3), gbppr (3), make (3), group (3), patriot (3), culper (3), versions (3), possible (3), microsoft (3), nsa (3), important (3), common (3), link (3), device (3), links (3), any (3), why (3), even (3), itself (3), lsos (3), contain (3), macros (3), well (3), most (3), including (3), else (3), firefox (3), which (3), often (3), terms (3), key (3), files (3), probably (3), document (3), show (3), just (3), fingerprints (3), ons (3), habits (3), track (3), websites (3), remember (3), protect (3), started (2), required (2), manage (2), reader (2), report (2), content (2), log (2), sign (2), subscribed (2), subscribe (2), subscribers (2), tracker (2), visualizers (2), dns (2), leak (2), kit (2), eff (2), defense (2), jacob (2), appelbaum (2), study (2), silk (2), road (2), case (2), parallel (2), construction (2), paul (2), revere (2), lizard (2), farmer (2), hamops (2), operation (2), turnkey (2), i2p (2), freenet (2), onion (2), whonix (2), virtual (2), machines (2), cascading (2), vpns (2), mask (2), unmask (2), haystack (2), distros (2), encrypting (2), gpg (2), android (2), orb (2), organize (2), spoofing (2), mac (2), anonymity (2), concepts (2), internet (2), search (2), engines (2), emails (2), rules (2), contact (2), address (2), then (2), red (2), team (2), project (2), radio (2), come (2), lastbox (2), ivy (2), mike (2), cafe (2), free (2), defensive (2), max (2), velocity (2), mosby (2), force (2), combat (2), dialtone (2), comms (2), guerrillamerica (2), primer (2), today (2), community (2), latest (2), looking (2), leave (2), reply (2), away (2), mageia (2), lots (2), source (2), software (2), should (2), article (2), endpoint (2), local (2), want (2), against (2), trojan (2), snowden (2), unfortunately (2), works (2), few (2), hackers (2), click (2), something (2), own (2), because (2), their (2), dangerous (2), also (2), going (2), legitimate (2), java (2), acrobat (2), first (2), needed (2), separate (2), exploit (2), 2013 (2), technology (2), shockwave (2), actually (2), interested (2), necessary (2), might (2), scripts (2), videos (2), makes (2), alternative (2), private (2), taking (2), without (2), many (2), threat (2), excel (2), into (2), smaller (2), bits (2), macro (2), runs (2), when (2), user (2), scrub (2), docs (2), simple (2), text (2), block (2), number (2), unique (2), ultimately (2), collect (2), companies (2), hard (2), counter (2), 0018 (2), again (2), those (2), prevent (2), object (2), lso (2), let (2), way (2), while (2), others (2), profiling (2), repeat (2), sync (2), become (2), could (2), home (2), design, site, name, write, loading, comments, collapse, bar, subscriptions, view, post, copy, shortlink, account, blog, 2026, august, september, october, february, march, april, archives, suggest, real, krypt3ia, grugq, hacker, b3rn3d, staying, darkness, hack, crow, psywar, global, guerrillas, silicon, graybeard, warfare, mil, espionage, homebrew, main, green, bay, professional, packet, tech, wirecutter, lonely, libertarian, frontiersmen, steel, beam, sipsey, street, irregulars, pennsylvania, light, foot, ohio, valley, minutemen, renegade, only, militia, charles, carroll, society, alamance, county, rangers, south, carolina, sierra12, mason, dixon, tactical, john, training, spartan, specops, medic, hogwart, grid, down, medicine, medics, sparks, radiomaster, reports, tradecraft, danmorgan76, amrron, rightful, liberty, warfighter, sppt, forward, observer, magazine, institute, drives, fight, western, rifle, shooters, essentials, bruce, schneier, psyops, 9jul14, psyop, 27jun14, wrong, scouts, disappear, sigint, sparks31, covert, rural, mission, clearing, confusion, crowdsourcing, osint, jungle, telegraph, featured, posts, gpg4win, beta, glass, current, cancel, recommend, folks, asap, several, desktop, however, feel, users, switching, products, virus, worries, back, door, big, brother, features, found, windoze, instruction, has, wonderful, transition, believe, worth, effort, ffio, thank, says, bowman, was, 0021, means, network, remain, best, ensure, operate, unimpeded, modify, algorithm, cryptography, world, doesn, matter, drop, sentence, equally, terrifically, weak, frequently, around, said, properly, implemented, strong, crypto, systems, rely, lastly, technique, state, agencies, subsequently, downloads, spyware, attackers, download, downloading, crack, put, control, fbi, does, lump, idea, quicktime, flashplayer, exploited, date, patches, compartmentalize, activities, computers, tenet, welivesecurity, 2010, spy, money, cnn, krebsonsecurity, ditch, deserves, category, due, promiscuous, historically, plagued, additional, reading, dangers, youtube, html5, inspecting, sending, someone, knowing, right, biggest, ballistics, calculator, photoshop, written, programming, languages, sets, instructions, running, same, thing, executing, bump, example, bit, spreadsheet, webpage, dozen, loads, pages, creative, useful, script, before, section, discuss, identity, pictures, jpeg, varying, degrees, geolocation, thoroughly, exif, better, yet, upload, distribute, editors, careful, pre, populated, trick, both, boring, everyone, techniques, cool, future, lessons, propublica, org, meet, virtually, impossible, instructing, visitor, draw, draws, slightly, differently, images, used, assign, uniquely, identifies, forbes, adamtanner, dying, heres, creepier, comes, takes, advantage, fact, configuration, customizations, fonts, etc, considered, signature, take, look, our, panopticlick, trackers, designed, specifically, correlate, collection, constantly, devising, complex, detect, profile, two, scene, emerging, recommended, piriform, cleaning, wired, 2009, deleted, think, reputation, reputationwatch, articles, browse, give, greater, detail, introduced, bleachbit, time, run, goal, delete, aggressively, creation, leakage, association, newer, generated, players, commonly, referred, insidious, than, regular, controls, won, details, different, objects, remove, shared, lightbeam, tensmiths, calling, couple, weeks, ago, visualizer, depth, connected, triangles, during, recent, advertisers, attempt, placing, really, small, file, holds, desired, function, storing, shopping, maintain, long, term, login, visiting, convenient, yahoo, logins, summarize, after, patriots, clouds, although, recently, saws, nude, celebrity, photos, iphones, hacked, icloud, based, wants, experience, easier, include, auto, fills, password, history, syncing, searching, preferences, stored, made, potentially, uploaded, synchronized, central, servers, exposed, compromised, categorize, trojans, exploiting, brief, familiarization, faith, press, lot, provided, little, type, collectively, neutralize, needing, guru, result, anything, points, seem, daunting, trying, least, nearly, countered, discipline, aren, protecting, laws, good, place, sage, advice, sam, stated, largest, daily, exposure, phone, collected, correlated, associated, patterns, analyzed, furthermore, penetrate, through, aware, eliminate, space, covered, installing, everywhere, short, cover, face, talk, digital, warriors, faqs, desk, suggestion, box, ops, skip, menu, 177, hits, lookingglass, fame,

Text of the page (random words):
rk level 1 io o l1 0 read tenets start o l1 1 anonymous emails o l1 2 anon search engines o p1 3 internet 101 o l1 4 privacy anonymity concepts o l1 5 end point security o l1 5 1 secure pc o l1 5 2 spoofing your mac x l1 6 secure organize data o l1 6 encryption 101 o l1 7 secure browsing o l1 7 1 secure browser part 1 o l1 7 2 secure browsing part 2 risks level 2 io x l2 1 tor x l2 2 android tor orb x l2 4 encrypting email pgp gpg x l2 5 tails linux distros x p2 x freefor haystack x p2 x mask unmask level 3 io x l3 1 vpns x l3 1 cascading vpn s x l3 2 tor over vpn level 4 io x l4 1 virtual machines vm s x l4 2 whonix level 5 io x l5 1 tor hidden sites onion x l5 2 darknet i2p freenet x l5 3 operation turnkey x l5 4 hamops how they hunt o lizard farmer s how they hunt o metadata to find paul revere o parallel construction case studies o silk road tor self study o s1 1 tor s jacob appelbaum o s1 2 eff surveillance self defense tool kit o behavior tools o security tools o test tools o ip test sites o dns leak sites o https ssl o system tests o visualizers lesson tracker home secure browsing part 2 risks secure browsing part 2 risks 1 comment ok digital warriors this lesson is secure browsing part 2 we ve already covered part 1 installing firefox https everywhere and what https ssl is in this short lesson we are going to cover the risks you face in the next lesson we ll talk about how to combat the risks with settings add ons and opsec why is this important as stated in part 1 your browsing is probably your largest daily online exposure next to your phone your data is collected correlated associated with others and your patterns are analyzed culper s space again furthermore there are ways to use malicious code to penetrate your end point security through the browser you need to be aware these threats so you can eliminate or counter them this is probably a good place to repeat this sage advice from sam culper 3 laws of opsec 1 if you don t know the threat you don t know what information to protect 2 if you don t know what information to protect you can t know how to protect it 3 if you aren t protecting it they re taking it the information below may seem daunting at first we are trying to keep this as simple as possible but you do need to at least see what you are up against ultimately nearly all of this can be countered with discipline opsec and some browser add ons if you don t come away with anything else remember these 2 points browser risks are the result of browser settings tracking and executable code we will show you tools and behavior that will collectively neutralize threats without you needing to become an it guru keep the faith and press on there are a lot of links below these are not necessary to read but we provided them for those of you that want to read a little more about each type of risk this will be a brief familiarization of each of these risks browser settings cookies session persistent 3 rd party tracking flash cookies browser fingerprint canvas fingerprint document image hidden information malicious code javascript macros on websites and in documents adobe exploiting security flaws dangerous links trojans let s get started one way to categorize the risks could be browser settings website tracking and profiling executables malicious code browser settings browser based settings are things your browser wants to do for you to help your browsing experience become easier these include things like auto fills remember password remember history syncing and searching the risk here is that your preferences and information are stored and made persistent and potentially even uploaded sync d or synchronized to central servers the data could then be exposed by your browser and or compromised by malicious code although not a browser exploit we recently saws nude celebrity photos sync d from iphones get hacked from icloud repeat after me patriots don t do clouds website tracking profiling key terms cookies lso fingerprinting cookies websites and their advertisers attempt to track your browsing habits in a number of ways the most common way is by placing a cookie on your computer which is really just a small text file that holds some information about you a cookie can have a legitimate desired function like storing data needed for your session session cookies while shopping online some maintain a long term login for you to make visiting sites more convenient yahoo logins while others are just to track your habits to summarize there are actually 3 types of common cookies session persistent and 3 rd party tracking lightbeam h t to tensmiths for calling this out a couple weeks ago is a great firefox add in visualizer that will let you see the depth of 3 rd party tracking as you can see below these are the 3 rd party sites that my browser connected to the triangles during a recent test flash cookies there is a newer more persistent tracking object that is generated by adobe flash players called a local shared object or lso it is commonly referred to as a flash cookie flash cookies are more insidious than regular cookies there are no browser controls to prevent them we won t go into details on all these different types of tracking objects but we will show you what to do in the next lesson to remove them or block them in lesson 0018 we already introduced you to bleachbit and ccleaner which will scrub all cookies including lsos any time you run the programs the goal here is to prevent or delete them aggressively your opsec will help contain creation leakage and association as well the websites below will give you greater detail for those interested cookies http www reputation com reputationwatch articles how companies collect manage and use your private information when you browse online flash lsos http www wired com 2009 08 you deleted your cookies think again this is the ccleaner tool we recommended in lesson 0018 https www piriform com docs ccleaner ccleaner settings cleaning flash cookies fingerprinting emerging threats ultimately most of these types of trackers are designed specifically to collect and correlate data about you and your habits data collection companies are constantly devising more complex hard to detect and hard to counter ways to track and profile you and the next two threats are new on the scene browser fingerprints and canvas fingerprints a browser fingerprint takes advantage of the fact that your browser and pc configuration have so many customizations fonts add ons etc that it often can be considered a unique signature take a look at the panopticlick tool on our system tests page to see how unique your browser fingerprint may be browser fingerprinting http www forbes com sites adamtanner 2013 06 17 the web cookie is dying heres the creepier technology that comes next canvas fingerprints canvas fingerprinting works by instructing the visitor s web browser to draw a hidden image because each computer draws the image slightly differently the images can be used to assign each user s device a number that uniquely identifies it canvas fingerprinting http www propublica org article meet the online tracking device that is virtually impossible to block the trick with both of these will be to keep your browser boring anonymous and looking like everyone else s we ll show you some techniques and one cool add on that will do just that in future lessons document image information before we leave this section we ll discuss one other identity risk document information microsoft office documents pdf s and image files pictures like jpeg all contain varying degrees of user information including your geolocation you need to thoroughly scrub information from documents and image files called exif data in image files better yet don t use upload or distribute ms office docs at all use simple text editors we ll probably do a separate lesson on this open office is an open source alternative to ms office but even here be careful with pre populated information executables malicious code key terms program executable macro script flash malicious code programs are things like microsoft excel a ballistics calculator or photoshop programs are written in programming languages code which are sets of instructions running a program is the same thing as executing a program and the program itself is often called an executable you ll bump into these terms so you might as well know them smaller bits of executable code are things like scripts or macros a macro in excel is an example of a smaller bit of executable code that runs in the spreadsheet itself a webpage often runs a dozen or more bits of code called javascript when the page loads javascript makes web pages creative and more useful unfortunately these executables can also do malicious things including inspecting your private data taking over your computer or sending information about you to someone else without you knowing it there are many types of executables that are threats in a browser and you are using firefox now right the biggest threat is javascript and java other web dangers are pdf s or ms office documents you might open they can contain macros or scripts as well as any videos that use flash this makes youtube a risk if it is using flash and most videos do html5 is an alternative to flash adobe adobe flash shockwave acrobat pdf actually deserves a category all by itself due to lsos security flaws and promiscuous settings that have historically plagued it here is additional reading if you are interested but not necessary for this lesson http krebsonsecurity com 2014 05 why you should ditch adobe shockwave http money cnn com 2013 10 08 technology security adobe security http www welivesecurity com 2010 10 06 adobe flash the spy in your computer part 1 exploit security flaws we are also going to lump in the idea that any legitimate executable like a browser java quicktime flashplayer or acrobat pdf reader can have security flaws in it that can be exploited this is why it is important to first use as few programs as needed and keep what you do use as up to date with patches and latest versions as possible compartmentalize your activities even to the point of separate computers tenet 5 dangerous links lastly a common technique by hackers and state level agencies is to get you to click on a link that subsequently downloads a trojan or other spyware if attackers can get you to click a link and or download something and you may not know a link is downloading something they don t have to crack your encryption they now own your computer because they put their own executable code on your device that they control the fbi does this and so do hackers snowden said encryption works properly implemented strong crypto systems are one of the few things that you can rely on snowden s follow on sentence is equally important unfortunately endpoint security is so terrifically weak that nsa can frequently find ways around it endpoint means the software you re using the computer you re using it on and the local network you re using it in if the nsa can modify the encryption algorithm or drop a trojan on your computer all the cryptography in the world doesn t matter at all if you want to remain secure against the nsa you need to do your best to ensure that the encryption can operate unimpeded this was lesson id 0021 one comment on secure browsing part 2 risks bowman says 09 29 2014 at 13 03 if possible i recommend folks get away from microsoft os m and start using linux os asap linux mageia is a great os with lots of open source software there are several desktop versions of linux however i feel that mageia is great for new users switching from m products with linux you have no virus worries no back door s to big brother and lots of great privacy features not found with m windoze should you need instruction or help linux has a wonderful community that will help you make the transition believe me it s worth the effort great article ffio we thank you reply leave a comment cancel reply δ current versions looking glass secure email version latest beta tor browser 04 09 15 version 4 0 8 tails 03 31 15 version 1 3 2 gpg4win 03 18 15 version 2 2 4 featured io posts from dialtone community jungle telegraph part 1 from guerrillamerica crowdsourcing intel osint project clearing up opsec confusion start your intel mission today from ivy mike cafe covert rural surveillance from sparks31 got sigint do it wrong scouts disappear from mosby patriot psyop primer pt i 27jun14 patriot psyops primer pt ii 9jul14 from bruce schneier metadata surveillance essentials got hq western rifle shooters intel drives the fight got some culper institute forward observer magazine guerrillamerica max velocity warfighter intel sppt rightful liberty report got comms amrron patriot radio danmorgan76 dialtone comms tradecraft radiomaster reports sparks 31 got medics hogwart s grid down medicine specops medic got spartan combat studies group defensive training group ga force on force john mosby mason dixon tactical max velocity sierra12 defensive studies group got freefor south carolina free alamance county rangers charles carroll society free nc ivy mike cafe ga militia lastbox s freefor darknet tor only nc renegade ohio valley minutemen pennsylvania light foot sipsey street irregulars steel i beam the frontiersmen the lonely libertarian wirecutter got tech come and make it green bay professional packet radio gbppr main page gbppr mil espionage homebrew gbppr project page open warfare the silicon graybeard got red team global guerrillas psywar red team us crow got hack b3rn3d staying in the darkness the grugq hacker opsec krypt3ia we suggest you do not follow us with your real email address do lesson 2 get a new anon email then follow us email address secure your info join us join 48 other subscribers archives may 2015 4 april 2015 4 march 2015 5 february 2015 2 october 2014 4 september 2014 8 august 2014 8 contact info rules coursework coursework level 1 io o l1 0 read tenets start o l1 1 anonymous emails o l1 2 anon search engines o p1 3 internet 101 o l1 4 privacy anonymity concepts o l1 5 end point security o l1 5 1 secure pc o l1 5 2 spoofing your mac x l1 6 secure organize data o l1 6 encryption 101 o l1 7 secure browsing o l1 7 1 secure browser part 1 o l1 7 2 secure browsing part 2 risks level 2 io x l2 1 tor x l2 2 android tor orb x l2 4 encrypting email pgp gpg x l2 5 tails linux distros x p2 x freefor haystack x p2 x mask unmask level 3 io x l3 1 vpns x l3 1 cascading vpn s x l3 2 tor over vpn level 4 io x l4 1 virtual machines vm s x l4 2 whonix level 5 io x l5 1 tor hidden sites onion x l5 2 darknet i2p freenet x l5 3 operation turnkey x l5 4 hamops how they hunt o lizard farmer s how they hunt o metadata to find paul revere o parallel construction case studies o silk road tor self study o s1 1 tor s jacob appelbaum o s1 2 eff surveillance self defense tool kit o behavior tools o security tools o test tools o ip t...