Giter VIP home page Giter VIP logo

dfak's Introduction

Introduction

The Digital First Aid Kit aims to provide preliminary support for people facing the most common types of digital threats. The Kit offers a set of self-diagnostic tools for human rights defenders, bloggers, activists and journalists facing attacks themselves, as well as providing guidelines for digital first responders to assist a person under threat.

The Kit begins with ways to establish secure communication when you or a contact are facing a digital threat and want to reach out for support. The Kit then moves on to sections on account hijacking, seizure of devices, malware infections and DDoS attacks. Each section begins with a series of questions about you, your devices and your situation. These questions will guide you through a self-assessment or help a first responder better understand the challenges you are facing. It then lays out initial steps to understand and potentially fix the problems. The steps should also help you or a first responder to recognize when to request help from a specialist.

The Digital First Aid Kit is not meant to serve as the ultimate solution to all your digital emergencies. It strives to give you tools that can help you make a first assessment of what is happening and determine if you can mitigate the problem on your own. If at any moment you feel uncomfortable or unsure about implementing any of the solutions outlined here, ask for help from trained professionals.

The Digital First Aid Kit came about when a number of organizations working in the digital emergency field observed that once a person is targeted digitally, he or she often does not know what to do or where to turn for assistance. It was inspired by the belief that everyone has the ability to take preventative measures to avoid emergencies and responsive steps when they are in trouble. Further, everyone has the ability to help out a colleague facing trouble. The self-diagnostic quality of the Kit should also enable journalists, bloggers, activists and human rights defenders to understand what is happening to their digital assets, to be able to determine more rapidly when they should reach out for help, what kind of help they need, and improve individual digital safety. In addition, the Kit serves as a first responder checklist for individuals who a person under possible digital attack reaches out to first.

The Digital First Aid Kit is a collaborative effort of EFF, Global Voices, Hivos & the Digital Defenders Partnership, Front Line Defenders, Internews, Freedom House, Access, Virtual Road, CIRCL, IWPR, Open Technology Fund and individual security experts who are working in the field of digital security and rapid response. It is a work in progress and if there are things that need to be added, comments or questions regarding any of the sections please open a bug or do a pull request.

See also:

dfak's People

Contributors

adulau avatar andrewthelott avatar dgfscr avatar joncamfield avatar mfc avatar rafiot avatar rommelfs avatar vitolink avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

dfak's Issues

Notes on malware

(sent in via private email)

- First sentence, "citizen" -> "citizens"

- In "Don't stop there", after reinstalling the OS they really need
  to install updates to the OS before doing anything else.

- In "what is next" there looks to be some missing formatting or
  text between the title (maybe?) of the step and description.

- ‘Detach from Attachments' seems to be unavailable
  at the URL listed. It is now at
  https://www.cybersuperhero.net/detach-from-attachments/

Notes on Secure communications

(sent in via private email)

- First sentence, "citizen" -> "citizens"

- Update for Signal

- Is it worth making the distinction between transport and
  end-to-end crypto and say that you can use both, e.g. PGP over
  gmail/https?

- Also in the overview, is it worth making the distinction that
  while email bodies might be encrypted, the source/destination and
  subject are unencrypted?

- For this point, which I think is good: "If possible, do not rely
  on unknown people you find online" is might be worth adding
  "untrusted websites" to avoid googling and finding bad advice.

Add a "Hopefully not Frequently Asked Questions" Section

I was reading through Cases.lu's Need Help section and I realized that we have somewhat of an "expert level" index. If there was a list of questions that were written from the perspective of a non-expert person (A rapid response FAQ) that would lead them to the right section it might be an easier entry point for some users.

It might be something to explore during the next time we meet up.

Notes on Lost devices

(sent in via private email)

- First sentence, "citizen" -> "citizens"

- s/ incidences / incidents /

- In "What happened" is it worth trying to assess whether or not the
  theft/seizure was targeted?

- I think I would update "Do you have remote access to the device?"
  to include "Do you have the ability to remotely wipe the device?"

- In First steps to mitigate, in some cases, it might be appropriate
  to notify their contacts of the event. Both so that they can
  evaluate meeting requests, emails, etc with extra caution and so
  they can assess their risk to loss of control of any
  correspondence that may have been on the device.

- If an account already has 2FA turned on with the loss occurs, are
  there special steps that need to be taken to remove that device?

- The formatting and text in the resources section needs updating.

add a Contributor guide

to help new contributors re: style, audience, authorship, etc. It could be a section of the README.

improve landing page

  • one needs to click on a language in order to get to the content but that is not communicated to the user
  • quite difficult for a new user to navigate (lot of text that is probably not necessary, such as the second paragraph. the fourth paragraph could go into an about page)
    • actually most of the content is a repeat of the introduction section, so maybe the landing page is just:
      • language selection
      • very brief description

https://github.com/RaReNet/DFAK/blob/gh-pages/index.html

Add basic ad-ware removal to malware section

Enable users to walk through checking "Add/Remove Programs", MalwareBytes and Spybot (with directive download links) to clean ad-ware style "malware" before continuing to more complex steps (also add questions to guide towards this - new browser "tool bars" and advertisements / "publicity" / pop-ups / pop-unders?)

Notes on account hijacking

(Sent in via private email)

  • First sentence, "citizen" -> "citizens"
    • Should we call out cases where an account password is demanded by
      authorities?

    • Recommend a password manager? I think this is useful as an
      "inventory" of accounts too, especially when performing proactive
      checks of accounts.

    • The formatting and text in the resources section needs updating.

    • For this part:

      If these steps do not work and your account is being abused,
      contact one of the organizations listed above for possible
      support in shutting the account down.

      It isn't clear what "organizations listed above" means. I
      think I would say "contact us using the links in the red box
      above" or something like that.

Notes on DDoS mitigation

(sent in via private email)

- First sentence, "citizen" -> "citizens"

- I think making the point that the time to document contacts at
  hosters, service providers, registrars, etc. is before an attack
  starts, not after.

- Looking at "change DNS TTL to 1 hour," I think this is something
  that could be done now in preparation for an attack. How would be
  the best way to get this prep/not-reactive advice out? Perhaps add
  a "preparing for attack" section at the top of the DFAK?

- DDoS and site takedowns and defacements don't feel like the same
  issue to me and I wouldn't have clicked into DDoS mitigation to
  find docs on the latter two. Maybe split this up or rename the
  topic?

- This text "It is very important to keep payments for your domain
  name in order." is another statement that would be useful in a
  "preparing for attack" section.

- For DDos Mitigation services, Con #3 says SSL will be decrypted
  briefly, which means that the provider must have a copy of your
  SSL private key which is itself a con. That said, this isn't the
  case for NSP-type DDoS mitigation services that work at the TCP
  level instead.

- The link for "Go straight to the Responding to a Denial of Service
  Attack section" takes the reader to the github page, which doesn't
  feel intended.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.