• Come join us as we welcome Horticulture Lighting Group to the Autoflower Network!

    We have an official representative from HLG that will be active on the forum to answer your questions, several units that are coming for our official product testing (grow and show's,) and we'll be working together to provide better information on lighting in general!

    Come say hello!
  • Do you LOVE AFN?? bighug We do too!! But we need your help to keep the servers running!

    If you feel like AFN has been useful in your journey and would like to help us pay some of the bills, we have a gofundme page setup for donations.
    Any amount that you can spare will be gratefully received

    Click [HERE] to donate to AFN

Maximize online Security and Minimize your Digital Footprint

Boradan

We don't need no stinking Badges!
Joined
Oct 27, 2017
Messages
1,924
Reputation
0
Reaction score
7,332
Points
0
Currently Smoking
Dinafem Critical+ 2.0, Seedstockers BCN Critical XXL

Mike20132

Lies can become truths, if we let them.
Joined
Oct 29, 2017
Messages
6,457
Reputation
130
Reaction score
22,161
Points
0
Age
54
Currently Smoking
Wedding Cake, Colorado Cookies, Forum Stomper
Guide: Maximizing your Personal Online Security

Even in areas where the growing of Cannabis is legal, online security is paramount for people posting in public forums.
  1. Cannabis itself is still valuable to undesirable elements in society.
  2. Grow room stuff can be EXPENSIVE.
  3. LOTS of companies are trying to collect as much data on peoples browsing history in order to throw adverts in your direction. This data collected is vulnerable to outside third parties (Equifax anyone?).

There are several things you can do in order to minimize your digital footprint when Surfing/Posting.
These vary from 'extremely easy' to 'IT Gurus only'
This guide will concentrate on the 'easy' ways to strengthen your security and protect your identity.

1. Antivirus/Antimalware/Web Security Software

*I am not affiliated in any way with any of the Software I will link to/discuss here. All links are direct to the item pages without any affiliate links - these are just my personal opinions regarding the software*

There are numerous antivirus, antimalware and Web Security software companies out there for you to choose from.
What you pick will be a matter of personal choice. I will go through just a FEW of your options here - I recommend further reading before making a decision.

Web Security Packages

These offer the most complete protection for your online habits and will generally incorporate Antivirus, antimalware, safe browsing, a configurable firewall and a few other odds and ends.
There is a good review of the best currently (2018) available Security packages HERE

Personally, I use ESET Smart Security and have done so for about 10 years. I like it's ease of use and what it provides at a decent price. I have never been caught with a Virus, not had my computer hacked and I do a LOT of browsing.
Most of the companies in the linked review also have standalone Antivirus programs if you wish to go that route instead.

Anti-Malware software

A lot of (most) Antivirus Software also contains defenses against Malware/Ransomware - Malware is the annoying software that can take over your home page and search engine, can throw up a load of adverts and various other annoying things.

A lot of malware is installed by people installing other (usually free) software ant either checking or NOT checking the box that trys to install other additional software once the main item has been installed. You need to be careful when installing free software as sometimes the working wants you to TICK the box in order to NOT INSTALL the extra stuff. Other times you need to UNTICK the box to get the same result. READ CAREFULLY anything that is asking permission to install other programs to ensure you do the right thing.

HERE is a review of 2018 Anti Malware software.
Personally, I use Malwarebytes Premium for this. Its VERY good.

Cost

You don't HAVE to pay any money in order to get at least SOME modicum of protection.
Windows has built-in Antivirus and Firewall software (Windows Defender). This was rubbish when first released, but has gradually gotten much better. It will definitely offer some protection, but just not as good as standalone products (even the free ones).
Most routers also have a built in firewall to help prevent remote access to your computers.
AVG Free Antivirus does a great job.
Malwarebytes Free is very good (without realtime protection like the paid version).

2. Anonymity

One of your best protections can be to simply hide who/where you are when surfing the web.

Browsers

Most web browsers allow 'Private' windows or sessions. These will not store your browsing history and generally include tracking protection.
Here are some links to the relevant browser private sessions:
FIREFOX: https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history
CHROME: https://support.google.com/chrome/answer/95464?co=GENIE.Platform=Desktop&hl=en
EDGE: https://support.microsoft.com/en-ie/help/4026200/windows-browse-inprivate-in-microsoft-edge
OPERA: https://blogs.opera.com/news/2014/10/how-to-open-private-window-opera-for-computers/

Alternatively, you can use the TOR BROWSER
The TOR browser basically operates like an internal VPN - you can still use your other browsers to surf as normal, but using TOR masks your browsing and does not keep your History. (TOR can also be used to bypass browsing limits imposed by your ISP or employer (if you are on a work computer/network))
*NOTE* Your browsing WILL be slowed down when using TOR - how much it is slowed by depends on the route your connection takes.

3. VPN (Virtual Private Network)

The next step up is accessing the internet through a VPN.
Basically, a VPN encrypts all of your browsing AND masks your IP address. (An IP address is basically the location of your computer on the internet - like your house address, but for the internet).

Using a VPN makes your connection MUCH more secure (due to encryption). Your internet connection is routed through the VPN, so any websites ONLY see the IP address of the VPN and not your OWN IP address - think of it as a Private Mailbox/PO box. If someone sends a letter to a PO box, it is not going to your actuall address. In order to track you, the person would need to get into the Post Office and see WHO owns the PO Box. A VPN does the same thing with your internet connection.

In addition, your connection is also enctypted. This makes it GREAT for using on Public WiFi connections. The VPN encrypts everything between your computer/phone and the VPN itself, so even if the public WiFI is hacked and someone is tracing browsers, all the hacker can see is that you connected to a VPN. They cannot see ANY of the data being transferred, so have no idea whare you are borwsing. It also protects your passwords by encrypting THEM before sending them out to the VPN.

Popular VPNs include AIR VPN and NORD VPN .
Both have good pricing and offer protection for multiple devices - PC, Laptop, Phones etc.
There are also free VPNs available, but they tend to slow down your connection a LOT.
*I HIGHLY RECOMMEND using a VPN for ANY internet connection for security purposes.

For those of a more technical nature, you can rent a Digital Ocean droplet, install OpenVPN and run your own, personal VPN for $5 per month. And share it with your family/friends. A LOT cheaper than using a commercial VPN.

4. Anonymous Images

Pictures are a main component of this site.
Pictures can be a security hole.
Most digital cameras store some sort of Data inside a picture regarding when it was taken, camera make/model and some other information in its EXIF data.
Mobile Phones are even worse as they can actually store your GPS position!!
Before uploading any picture, right-click it and select 'Properties'.
Go to 'Details' and down the bottom click on 'Remove properties and Personal Information'
You then have a choice of either Creating a copy with all info removed, or removing the properties directly from the image.
You can now upload that to AFN safe in the knowledge that your personal data is not contained in the image.
You can also go one step further by uploading to imgur anonymously.
Go to : https://ctrlq.org/images/
Upload your picture.
Copy the FIRST link given (Direct Link (URL))and paste it into the box that pops up when you want to add an image to your post.

5. Password Security

Passwords - the bane of the IT guys life.
HERE is a nice list of the most commonly used passwords. DO NOT BE ON THIS LIST!!!
Since the dawn of the Internet, we have been advised about passwords and password security.
General advice until now has been to use a mixture of letters(both upper and lower case) along with numbers and symbols.
It is now becoming more common for the advice to be 'Use a PASSPHRASE instead of a password'. Something like a line or 2 from a song - NOT the chorus of your favorite song, please. Be creative.

  1. Use a UNIQUE password for each site
  2. DO NOT use a common word - mixtures of numbers, letters and symbols are strongest unless using a passphrase.
  3. Use a Password manager
  4. Use 2 Factor Authorization (2FA) if possible
Personally, I do the following:
Use KeePASS password Manager
Install DROPBOX

I move the database for Keepass (all of your passwords and links) to a dropbox folder.
I use a PassPhrase for BOTH my Dropbox login AND for my Keepass database.
I use a Keepass 2FA Plugin HERE to enable 2 Factor Authorization on any site that has it.
You can also use a Passphrase generator plugin if you wish all sites to use a phrase rather than a single password

Because of this software and plugin, I get maximum amount of password security for minimum risk.
My Keepass has a LONG passphrase to access the database of all of my passwords.
My Dropbox has a LONG passphrase to actually be able to even SEE the Database.
I use Keepass for 2FA.

This way, I only actually need to memorize TWO lengthy passphrases. Nothing else. EVER.
I can access all of my passwords from ANY device - laptop, phone, someone elses computer - simply by installing Keepass on that computer and logging in to dropbox.
Crucial information! Well assembled and organized.

I would suggest a few additions.. Feel free to edit/add/discard your post as you see fit :worship:

Dropbox - I would not trust a secure password alone, unless you trust Dropbox when they tell you they cannot decode your files. If you REALLY want to keep the files private, you need to encrypt them before they get sent to Dropbox. There are a bunch of ways to do this, but the simplest is to use BoxCryptor. It is free for personal use.

Secure Browsing / Reduction of local history - a great product for "cleaning" history is CCleaner. Worth checking out. Also free for personal use.
 

Son of Hobbes

High of the Tiger
Staff member
AFN Admin
AFN Global Moderator
Cultivators Club
Joined
Oct 8, 2012
Messages
21,777
Reputation
1,776
Reaction score
101,197
Points
0
Website
www.autoflower.net
Nice write up. I use the Air VPN on my pc, easy to use and install, have yet to figure out how to get it on my phone thou. I think it's $15 every 3 months
I also use AirVPN, it's pretty slick (and fast depending on where you connect.)
 

Joe Buden

50 Shades of Joe
Joined
Jul 8, 2017
Messages
14
Reputation
0
Reaction score
60
Points
0
Just a little addition to what has already been said:

Dropbox is great for the average consumer, but I wouldn’t suggest using it to store sensitive information whether it is encrypted or not. For establishing an online identity in or out of a legal state, I’d suggest a compact and disposable laptop, preferably something cheap with its camera and microphone removed if it even has those. No internal drives, a card reader if possible, and Tails (The Amnesic Incognito Live System) configured with a persistent volume on a micro SD card that you can easily swallow on the fly. Using Tor bridges in conjunction with this would also make it harder for your ISP to know that you are using Tor if you connect through your own network.

If you want to be extra, refrain from talking/typing as you do elsewhere and encourage PGP encryption for private comms. Encrypt your message with the receiver’s public key, and they will be the only ones that will be able decrypt your message unless one thing or another has been compromised.

Most of all, never let your external life bleed into this world. That includes but is not limited to sharing your general location (state and city), and other information that can give even the slightest hint as to who you might be in the real world.

That said, I’m not an expert and this will only minimize your attack surface. It is not a golden ticket.

Enjoy, and stay safe.
 

Jonny Sparksalot

Auto Warrior
Joined
May 25, 2018
Messages
65
Reputation
0
Reaction score
155
Points
0
Currently Smoking
Gorilla Glue and Forum Stomper
Great guide! Thanks. If I post pics to AFN using the IMGUR app , it hides my location/gps/ip from my pic?

"one step further by uploading to imgur anonymously."

Is there certain steps to uploading anonymously on imgur or is everything uploaded anonymously on imgur?
 

Boradan

We don't need no stinking Badges!
Joined
Oct 27, 2017
Messages
1,924
Reputation
0
Reaction score
7,332
Points
0
Currently Smoking
Dinafem Critical+ 2.0, Seedstockers BCN Critical XXL
Everything is uploaded anonymously.
They remove all meta data from any uploaded pictures too.
HERE is the privacy settings
 

hecno

Worm Hunter .
Staff member
AFN Global Moderator
Joined
Aug 9, 2014
Messages
5,807
Reputation
654
Reaction score
27,145
Points
0
Thank you . :thumbsup:
 
Top