Skip to content

Commit

Permalink
20241116
Browse files Browse the repository at this point in the history
- Better organized the About page disclaimers for easier direct linking
- Fixed name of JMP (and added a link)
- Updated Nitrokey affiliate link on Mobile Habits page
- Tested a definition format thingy on the WiFi guide page
- Added Black Friday shortcut for feature blog posts
  • Loading branch information
tnonate committed Nov 16, 2024
1 parent b84acf0 commit b1fb19e
Show file tree
Hide file tree
Showing 6 changed files with 34 additions and 6 deletions.
10 changes: 10 additions & 0 deletions src/assets/data/BlogPages.json
Original file line number Diff line number Diff line change
@@ -1,5 +1,15 @@
[
{
"slug": "black-friday-2024-privacy-deals",
"created": "2024-11-16T19:21:56Z",
"title": "Black Friday 2024 Privacy Deals"
},
{
"slug": "five-privacy-respecting-gift-ideas-0dc8",
"created": "2024-11-11T00:04:40Z",
"title": "Five Privacy Respecting Gift Ideas"
},
{
"slug": "2024-guide-to-safe-online-shopping",
"created": "2024-11-02T17:40:30Z",
"title": "2024 Guide to Safe Online Shopping"
Expand Down
6 changes: 6 additions & 0 deletions src/pages/black-friday.astro
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
<html lang="en">
<head>
<title>Redirecting to Black Friday deals...</title>
<meta http-equiv="refresh" content="0; URL=https://blog.thenewoil.org/black-friday-2024-privacy-deals" />
</head>
</html>
14 changes: 13 additions & 1 deletion src/pages/en/about.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -27,15 +27,27 @@ Some people argue that ranking certain concepts is wrong. Indeed, everything on

## Disclaimers

### The Privacy Spectrum

Privacy and security are not binary concepts, but rather a spectrum. For example, one can have some privacy while keeping a Facebook account if they remove the app from their phone and only lurk without ever liking or posting content, but not as much as if they deleted their account altogether and took steps to block Meta's trackers around the web. The goal of this site is not to teach readers to drop off the grid and live in a cabin in the woods with no risks whatsoever. Rather, this site aims at helping readers learn about [surveillance](/guides/prologue/surveillance) and tracking, how it works, how to opt out of it, and how to determine what the right level of privacy and security is for their own unique situation. Not everything here will apply to everyone. Even taking some of the steps that moves a reader further along the scale is better then nothing. No single tool is right for everyone's situation, that's why we offer several recommendations and let readers decide what's best for them.

### Scope

This site is not designed to be a comprehensive resource. This site is designed to be a beginner's guide. It is our hope that people will use this site to get up to speed and move on to more advanced topics as they continue to grow.

### Endorsement

Please note that just because a product or service is not listed on this site does not necessarily make it bad. Remember that this site is not meant to be comprehensive. The services and products we list on this site are what we believe are some of the top choices for the vast majority of readers and use-cases. If you have a specific need that another product or service fills - and you have appropriately researched and vetted the service - more power to you. If you think that product or service does deserve to be listed here, please check out [criteria](/criteria) and feel free to open an [issue](/links#source-code-suggestions-and-issues) if it qualifies.

### Good Faith

We have made this site in good faith. We will never recommend a product or service on this site that we do not have confidence in. We may not use each and every product or service ourselves, but everything listed here is something that, if a loved one told us they were using it, we would respond with "cool, that works." If our response would be a hesistant groan suggesting the service is problematic, we don't list it here. That said, we have [criteria](/criteria) specifically so that we can have objective requirements and not just gut feelings or "vibes." All services listed here must meet the objective criteria, regardless if we like them or not.

On the [final page](/links) readers will find a number of resources we recommend to help them continue learning more, as well as ways to contact the editor and find other work from The New Oil such as blogs, news feeds, and videos that we are working on. We are not claiming to be cybersecurity experts of any kind, but we have invested thousands of hours into these topics on this site. We spend much of our time reading books, articles, blog posts, and more from credible sources and experts. We spend a lot of time listening to interviews and podcasts, and reading the ongoing discussions in the communities we are a part of and trust to stay on top of everything, and we deeply investigate each claim before suggesting it to our audience. We are always willing to openly own up to our mistakes and correct information when we are informed of it, so if they are an expert and see any mistakes, please [submit a correction](/links#source-code-suggestions-and-issues).

Finally, we have made this site in good faith. We will never recommend a product or service on this site that we do not have confidence in. We may not use each and every product or service ourselves, but everything listed here is something that, if a loved one told us they were using it, we would respond with "cool, that works." If our response would be a hesistant groan suggesting the service is problematic, we don't list it here. We do not have any vested financial interests in any of of the services, products, or companies we have listed, nor do we receive any sort of financial compensation for our reviews, listings, etc. We do use affiliate/referral links for some services which will offer us a small sum of financial compensation or other benefits (ex, increased storage on our own accounts) if readers sign up using the links provided. They can all be viewed [here](/support#affiliate-links). We do not list products or services simply because they offer affiliate links, rather we sign up for affiliate links if they are offered on products or services that we believe in and have decided to list regardless. We also accept sponsors for certain content sometimes, and all such potential conflicts of interest are clearly disclosed. Readers can view our sponsorship guidelines [here](/sponsorships).
### Financial Interest

We do not have any vested financial interests in any of of the services, products, or companies we have listed (such as specific stock holdings, board seats, or investments), nor do we receive any sort of financial compensation for our reviews, listings, etc. We do use affiliate/referral links for some services which will offer us a small sum of financial compensation or other benefits (ex, increased storage on our own accounts) if readers sign up using the links provided. They can all be viewed [here](/support#affiliate-links). We do not list products or services simply because they offer affiliate links, rather we sign up for affiliate links if they are offered on products or services that we believe in and have decided to list regardless. We also accept sponsors for certain content sometimes, and all such potential conflicts of interest are clearly disclosed. Readers can view our sponsorship guidelines [here](/sponsorships).

## The Team

Expand Down
4 changes: 2 additions & 2 deletions src/pages/en/guides/less-important/voip.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -39,15 +39,15 @@ _Listed in alphabetical order, not order of recommendation_

**[Click here to see my criteria for selecting these services](/criteria#voip)**

## Honorable Mention: JMP.Chat
## Honorable Mention: JMP

<img
src="/images/logos/jmp.png"
alt="jmp.chat logo alt"
class="float-left mx-6 w-24"
/>

JMP.Chat is an [XMPP](https://xmpp.org/)-based Voice-over-IP solution that supports both voice calls and SMS/MMS texting. You may use any number of XMPP apps - like Conversations or Monal - and even self-host an XMPP server if you wish for maximum privacy and control. To put it another way: **JMP.Chat is a service that turns your XMPP account into a fully-functional phone number that can make/receive phone calls and text/picture messages to regular phone numbers** just like a regular phone number or one of the VoIP providers listed above, but it gives you even more control. JMP.Chat is currently only available in the US and Canada. It is listed here as an honorable mention because unlike the services above, JMP.Chat requires some additional technical setup on the user's end. Even if you choose to use an existing server rather than self-hosting, it's not as clear-cut as downloading the app and signing up like the services above, you will have to use third party apps and servers to configure the service. For additional information or help getting set up with JMP.Chat, please see their FAQ [here](https://jmp.chat/faq/).
[JMP](https://jmp.chat/) is an [XMPP](https://xmpp.org/)-based Voice-over-IP solution that supports both voice calls and SMS/MMS texting. You may use any number of XMPP apps - like Conversations or Monal - and even self-host an XMPP server if you wish for maximum privacy and control (though they do offer a default app for Android users - [Cheogram](https://cheogram.com/) - and a default server for all users - [ChatterboxTown](https://chatterboxtown.us/)). To put it another way: **JMP is a service that turns your XMPP account into a fully-functional phone number that can make/receive phone calls and text/picture messages to regular phone numbers** just like a regular phone number or one of the VoIP providers listed above, but it gives you even more control. JMP is currently only available in the US and Canada. It is listed here as an honorable mention because unlike the services above, JMP requires some additional technical setup on the user's end. Even if you choose to use an existing server rather than self-hosting, it's not as clear-cut as downloading the app and signing up like the services above, you will have to use third party apps and servers to configure the service. For additional information or help getting set up with JMP, please see their FAQ [here](https://jmp.chat/faq/).

## Tips & Tricks

Expand Down
2 changes: 1 addition & 1 deletion src/pages/en/guides/moderately-important/mobile-habits.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -26,4 +26,4 @@ If you must download an app, **on Android consider using [F-Droid](https://f-dro

Finally, **for those desiring maximum privacy, I encourage you to consider flashing a custom Android operating system (or ROM) onto your phone.** This is a more advanced technique that falls outside the scope of this website, but I can at least point you in a starting direction. Unarguably the most private and secure ROM is [GrapheneOS](https://grapheneos.org/), which places a heavy emphasis on security by hardening the Android kernel it's based on, sandboxing Google Play services for security and usability, and proxying many of the required connections through their servers to hide your data from Google. A common alternative to Graphene is [CalyxOS](https://calyxinstitute.org/projects/calyx-os), which focuses more heavily on incorporating open-source projects into the device but does not make any significant security improvements the way Graphene does. I do not recommend any other custom operating systems or Linux phones. Be aware that some apps may not work as expected on "degoogled" phones like these. I recommend visiting Techlore's [Plexus](https://plexus.techlore.tech/) project to see if the apps you need are compatible on custom ROMs.

If you do decide to use a custom Android OS, it is recommended that you install it yourself. This is the best way to ensure the device is secure and the software hasn't been tampered with between the developer and your device. If you are uncomfortable doing so and prefer to buy pre-flashed devices, [Nitrokey](https://shop.nitrokey.com/shop?aff_ref=14) sells phones pre-installed with Graphene ([non-affiliate link](https://shop.nitrokey.com)). You can buy a pre-installed version of Calyx by becoming a [member of the Calyx Institute](https://calyxos.org/get/), however be aware that at this time they are only offering the Pixel 7a model (the latest series is the 9/8a).
If you do decide to use a custom Android OS, it is recommended that you install it yourself. This is the best way to ensure the device is secure and the software hasn't been tampered with between the developer and your device. If you are uncomfortable doing so and prefer to buy pre-flashed devices, [Nitrokey](https://shop.nitrokey.com/shop?aff_ref=14) sells phones pre-installed with Graphene. You can buy a pre-installed version of Calyx by becoming a [member of the Calyx Institute](https://calyxos.org/get/), however be aware that at this time they are only offering the Pixel 7a model (the latest series is the 9/8a).
4 changes: 2 additions & 2 deletions src/pages/en/guides/quick-start/wifi-guide.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -58,8 +58,8 @@ I recommend putting a [VPN](/guides/less-important/vpns) on your router. This wi

If you are not using a VPN on your router - or if the VPN setup instructions did not specify a [DNS resolver](/guides/prologue/communication#dns) to use - I suggest adding an encrypted resolver of your choice. [Privacy Guides](https://www.privacyguides.org/en/dns/) offers an excellent list of choices.

Be sure to enable any <span title="A network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.">firewalls</span> if they are not enabled and to disable Universal Plug-and-Play (sometimes abbreviated "UPnP") as this setting is frequently abused by malicious actors to plant malware and compromise your network.
Be sure to enable any <dfn title="A network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.">firewalls</dfn> if they are not enabled and to disable Universal Plug-and-Play (sometimes abbreviated "UPnP") as this setting is frequently abused by malicious actors to plant malware and compromise your network.

Disable WPS (WiFi Protected Setup) if it's available. This is the feature where you push a button on the router and it adds new devices automatically. This feature may be tempting and easy to use, but it's also extremely easy to abuse. Disabling it will dramatically secure your network.

Disable the option for remote access, if such an option exists and is enabled.
Disable the option for remote access, if such an option exists and is enabled.

0 comments on commit b1fb19e

Please sign in to comment.