The following article from LifeHacker.com is targeted to travelers, not African activists or organizations, but still contains a wealth of essential tips for everyone working in countries "where privacy isn't respected". This includes tactics as well as specific references to tools that we should all be using. If you are not thinking about privacy yet, now is a good time to tackle it.
Ed. note: On Tuesday, Google responded to cyber attacks aimed at Chinese human-rights activists by ending search-result censorship in China. An anonymous reader with experience living where privacy isn't respected writes in with tips for keeping your data safe in these situations.
The author asked to remain anonymous and preferred to skip mentioning any countries by name—again, for privacy reasons. What follows is how the author keeps a tight leash on privacy when traveling in a country where the government actively monitors online communication.
The above image is a composite of photos by hemmob and nolifebeforecofee
Two things have really changed the face of independent backpacker travel in the last decade: digital cameras and—even more so—the internet. While some people can afford the luxury of traveling with a laptop or even a netbook, a real backpacker doesn't want to have to carry the extra weight nor the responsibility of carrying expensive equipment that would be difficult to lug around, relatively easy to steal, and expensive to replace.
Internet cafes proliferate all throughout Asia and other remote countries, which makes getting online very easy and cheap. That said, as much as I love "the cloud," keeping data online comes with security concerns, especially in places where internet restrictions and heavy government monitoring are commonplace.
Here are a list of items from my arsenal—many from Lifehacker—which made my own backpacker travels much easier when in remote places:
Gmail / Google Apps
Lifehacker has already sung the praises of Gmail, and it's impossible to understate it. With Google's recent announcement that accounts will connect using the more secure https by default, Gmail reigns supreme as the best possible email app for travelers logging in on dicey computers in strange places. On top of that, Google Docs, Google Calendar, and now Google Wave are a wonderful and secure set of cloud based apps to really allow you to do what you need to do from practically anywhere.
Two USB Sticks
Online options are getting better every day, but we can't quite always access everything we need on a computer straight from the cloud. Choosing the right USB stick to accompany you on your travels is in itself a chore. The secure Ironykey thumb drive is certainly very impressive, but it is also quite costly. It's definitely out of range for most backpackers, myself included. Corsair makes a padlock drive which is far from completely secure, but it has a more reasonable price and assures you that if you lose it, someone can't simply just plug it in and start using it immediately.
I keep one USB stick around my neck, the other in a zipped pouch under my pants next to my passport, emergency cash, etc. Both sticks have exactly the same files on them, and core files can easily be synced using DropboxPortable.
PortableApps
On your USB drives, you want to carry software that you need, and for that thePortableApps Suite really is outstanding. It's almost like carrying your own computer with you, without the hassle of actually doing so. Login to any strange machine, and you are armed and ready with all of your favorite software available to you.
Keepass
If I had to choose one single PortableApp that was most important to me, it would be KeePass. Lifehacker has already gone over the tremendous security advantages to using KeePass, and protecting your passwords in general. This is even more true and relevant when traveling in remote places.
I keep two KeePass databases with me at all times: my primary database with all of my passwords which I use constantly, and another that only contains scanned PDFs of all of my most important travel documents, including:
- Passport
- Birth Certificate
- Travel Visas (if I have them),
- Health/Travel Insurance info
- A list of vaccinations I've had and when I had them
- Medical Records
- My U.S. Driver's License
In that they are in a KeePass database, they are all stored encrypted while on the USB. Truth be told, no digital copies of those documents will stand up legally in place of hard copies, but sometimes the information on them is all you need and enough to cover you while a hard copy replacement is sent overnight from home.
Skype
With the possible exception of Google Wave (which I'm excited for but not quite ready to switch to), Skype is still the best way to chat and talk securely (but of course don't let the app permanently store your login and password or history).
Travelers in China should beware of "Tom-Skype", a legitimate Chinese version of Skype which was developed in conjunction with one of China's phone companies. That version is not secure, but other versions, such as the one you can get from PortableApps, are.
If you have a Google Voice Account, you can even mashup Skype (or Gizmo5) with Google Voice to place and receive free calls back home and or receive incoming phone calls on a local cell phone wherever you are.
uTorrent
Hardcore backpacking is a wonderful adventure, but it isn't always restful. Sometimes you want to kick back and relax and catch up with the latest TV shows and movies. uTorrent now also exists as a PortableApp, so depending on the friendliness of the staff of the internet cafe where you are logging in, you could—in theory—download things for your listening or viewing pleasure to watch the next day on your Portable version of VLC.
TrueCrypt
As Lifehacker has covered, when it comes to encrypting your files, there is nothing better than TrueCrypt. It is possible to bring along with you a Portable version of TrueCrypt, but you can't mount TrueCrypt encrypted drives without admin privileges on the computer you are using. Ideally, I would love to use TrueCrypt to encrypt my USB drives in their entirety, but since having admin privileges is always hit or miss when traveling, it's a risk I can't afford to take. Any documents on my drive that I feel need to be encrypted, I can just store in a KeePass database. But I still carry TrueCrypt with me and it has come in very handy on occasion.
PortableTOR
Lifehacker has done an excellent job of explaining the anonymous internet tool, TOR, including what it is and how it works. Some people use TOR in the U.S., for example, to do things like access Facebook from work—which really should be strongly discouraged. As events of recent days have proven, some governments around the world censor websites from their citizens. You may be curious to see your friend's latest updates at work, but there are people in places whose lives—without exaggeration—might truly depend on TOR. TOR, and especially thePortable version, provides a way for travelers to those locations (and citizens who face privacy invasions every day) to be able to access whatever web sites they need to.
However, take note: It's very important to realize that TOR does not encrypt your data for you—it only allows you to access blocked sites anonymously.
MozyHome Backup
Lifehacker has covered a variety of great cloud based backup services. Mozy is the one which has served this traveler well. While my backpack and I are running around the world, my hard drive is still safely at home, turned off and under lock and key. Fortunately, I backed up my entire system (well over a 1TB these days), and if in a pinch I need a file that I don't have with me on my USB, in my Google Apps, nor even in my Dropbox, I can "restore" that file from my MozyHome account to whatever machine I'm on at the time. Mozy stores my data encrypted and downloads it encrypted as well.
Xubuntu Live CD
But what if you've covered all of the above and the only computers you have access to are all malware, spyware, and virus infected, but you need to get online as quickly, safely, and securely as possible?
Then there's the Xubuntu Live CD. I always carry a few Linux live CDs with me. In a durable plastic case, they fit well in the pockets of cargo pants. Ubuntu itself is great, but Xubuntu is even more streamlined, and runs smoothly and well even on computers with a minimum of memory and hardware. Go into the internet cafe, put your CD in the drive, and restart it. More often than not, the computer will then boot from the CD and automatically connect to the internet. You're running your own, safe Linux system on a compromised Windows PC.
Of course on the USB stick I also have Linux versions of my favorite Apps:KeePassX, Skype, and TrueCrypt. I don't carry a Linux version of TOR with me, but it downloads and installs just fine on Xubuntu. Flash doesn't come installed on Xubuntu either, but I carry Flash with me and wrote a little script to install it with one click off of the USB drive.
Truth be told, someone could probably compile a great "Traveler's Xubuntu" CD that would come with all of the necessary open source apps already installed, but I'll leave that to another forward thinking Lifehacker reader.
Traveler's should always be aware: no security system is ever going to be foolproof and 100% secure. Hardware and software keyloggers are great threats which are very difficult to avoid. Still, by taking proper precautions and arming yourself with the right tools, you can turn the odds in your favor and still accomplish whatever you set out to online, no matter where you are.
The author of this post can be contacted at tips@lifehacker.com
Source: http://lifehacker.com/5447560/internet-survival-guide-for-traveling-where-privacy-isnt-respected
Comments
Too many people have a file backup policy which is to start doing it after the files have been lost! Security is a bit the same ... people do not get serious about it until it is too late and something has been compromised. My personal lesson is that the issue may not be easily anticipated ... I was trying to do something that related to my long time interest in sustainable socio-economic development in Ghana, a country with a generally good reputation, but I was arrested and put in jail because, I later found out, one of the people from another country in West Africa who I thought was a "good guy" in fact was not, and was being observed by the local authorities. For several days, everything that I had in terms of data and knowledge was being interpreted in the most negative way ... and it took a quite long time before my bona fides were established and I was released. Be careful. Be prepared.
Peter Burgess
Hi Peter -
You wrote:
I agree with this statement - largely because it reflects my own personal experience. I have found that backups and basic security precautions can make life and work so much easier on a running basis. This is especially true for activists and development practitioners working in Africa who move about and often operate under uncertain and difficult conditions. Your anecdote is a good one - it would be useful to hear more cautionary tales like yours to inspire more people to take action.
I am practicing what I preach. I typically use the new year to change passwords on all the services I use regularly, especially email. I don't have anything to hide, but nonetheless my life would be disrupted if someone were to get into my accounts.
I also invested this month in a large 1 terabyte backup drive which I use to keep my laptop backed up regularly, in addition to the @mozy and @dropbox online services I use for backups and file sharing.
Peter, thanks for your active participation in the Kabissa blog. Your insights have been useful. Keep it up!
Cheers,
Tobias
Post new comment