[Security Discussion] CHEF-KOCH:
This is a quick overview and some background information. It's not complete, and it wasn't designed to show all stuff and attacks but it's worth reading them and of course understanding them.

I hope this clears some widely known myths.

To all guys which saying " have nothing to hide":

* 3 Reasons the ‘Nothing to Hide’ Crowd Should Be Worried About Government Surveillance

* The Phoenix - Debunking 'nothing to hide' - 'No secrets' doesn't mean 'no problem'

* Why privacy matters

* TechRepublic - Why 'Nothing to Hide' misrepresents online privacy

* Wired.com - Why 'I Have Nothing to Hide' Is the Wrong Way to Think About Surveillance

How Cell Phone tracking works:

* Signaling System Number 7 Protocol (SS7)

* -> Washington post article about surveillance technology which shows how users anywhere in the world can be tracked

* Statement by Bruce Schneier about IMSI catcher/StringRays

US Gov related:

* The US Gov Can Download the Entire Contents of Your Computer at Border Crossings

http://berlin.ccc.de/~tobias/25c3-locating-mobile-phones.pdf

Facebook related:

* Facebook admits it tracks non-users, but denies claims it breaches EU privacy law

Google related:

* Google Is Not What It Seems by Julian Assange

China and his firewall (called 'Great Cannon'):

* China's 'Great Cannon' can intercept and redirect web traffic

Protocol security: - Imho the real problem !

* RFC 2401 - Security Architecture for the Internet Protocol

* RFC 4303 - IP Encapsulating Security Payload (ESP)

* IP Insecurity | Computerworld

* Security Problems in the TCP/IP Protocol Suite - Insecure.Org

* Internet security - Wikipedia

* VPN SECURITY by InfoSec Institute (.pdf)

* INTERNET INSECURITY - Prof. Ravi Sandhu (.pdf)

* Network Security Protocols: A Tutorial by ieft

* hacking 802.11 protocol insecurities - SecNiche Security Lab (.pdf)

* Why is the internet so insecure? | Stuff.co.nz

* Securing Your Network - MSDN - Microsoft

* Understanding the Internet's insecure routing infrastructure

* Domain Name System (DNS) Security - compsec101

* IPv6 insecurity is a clear and present danger - The Inquirer

* Network Infrastructure Insecurity - Black Hat

* The Science of Insecurity - LangSec (.pdf)

* FG Urged to Invest in intelligent Surveillance Solution to address insecurity

* Intercepting Mobile Communications: The Insecurity of 802.11 (.pdf)

* DNSSEC: An Introduction - CloudFlare

* Secure Communications over Insecure Networks - George Hams (.pdf)

* Catching authTokens in the wild - Universität Ulm (.pdf) - good to see how Google's Client Login works

http://arstechnica.com/tech-policy/...he-internets-insecure-routing-infrastructure/

What Privacy is:

* Privacy is a human right

NSA mass-surveillance background:

* All the major web companies (Facebook, Google, Apple, Microsoft, et al) are secretly paid by the US government to spy on their users via PRISM.

* The US government also pays major US telecommunications providers (AT&T, Verizon, et al) between $278,000,000-$394,000,000 annually to provide secret access to all US fiber and cellular networks in violation of the 4th amendment.

* The NSA intentionally weakened the encryption standards we rely on, put backdoors into critical software, and breaks the crypto on our private communications

* In an official statement on 30 August 2013, an NSA spokesman told the Washington Post that they never perform economic espionage

* The NSA made over fifteen thousand false certifications to the secret FISA court, leading a judge to rule that they "frequently and systemically violated" court orders in a manner "directly contrary to the sworn attestations of several executive branch officials," that 90% of their searches were unlawful, and that they "repeatedly misled the court."

* The FBI has taken over web hosting companies and subverted their sites in order to serve malware that infects visitors using anonymity tools like TorMail.

* The US government spends $52,600,000,000 (Non-military) - $75,000,000,000 (Including military)

* The NSA warrantlessly accesses records of every phone call that routes through the US thousands of times a day.

* other academic publications (good luck reading them all, took me 4 months of my life)

Known "trusted" search engines:

* DuckDuckGo

* Ixquick

* StartPage

* Yacy

"Trusted" VPN talk:

* Torrentfreak discussion

* OpenVPN (open source)

* Disable/Change Firefox DNS proxy settings

-> Remember that VPN's aren't the all-in-one solutions. WebRTC and other problems affect them too.

Internet "Anonymization":

* Tor Browser Bundle - how to use it + Documentation

* I2P

* There are a lot of other services (depeing which you trust/distrust) like Freenet,...

About securing the phone:

* RTOS

* Rootkits

* Hardware tracking like in IOS

* About RedPhone

.. list of open source Android software

* Run Debian on Android

Browser related:

* Connections established on Startup

* HTTPS Everywhere

* uBlock

* DisconnectMe

* RefControl

* Smart Referer

* NoScriptNSA (for mobile Browsers) + NoScript

* Certificate Patrol

* Request Policy

On Chromium:

* ScriptSafe or uMatrix

Android only specific:

* How security works in Android + see the OS depending changes which was made to secure the phone + implementation

* Another guide/overview

* What's making your Android insecure? Blame those free apps you never asked for

* Research says Android users at high risk of installing apps

* Android Application Security Part 10 (there are a lot but 8-10 are most important ones)

* Google leaves users on older versions of Android insecure by ending support

* Insecure Internal Storage in Android | hitcoin (.pdf)

* How does content that isn't secure affect my safety on Android

* Lollipop PSA: New lock screen and insecure hotspot

* OASAM-CRYPT-002: Insecure Data Storage

* Android Device Security and Rooting - Tresys Technology

* Fragmentation Leads To Android Insecurities - Slashdot

* Android root and insecure adb boot image explained

* Android Security Vulnerability - Bitcoin

* Android OS In-App Advertisements Are Insecure | InAuth

Difference between FOSS, GNU, closed source:

Libre -> free or free software, the term libre is normally used to show or refer to freedom

GNU -> Operation system (often show as GNU/Kernel) but's distributions based

FOSS -> Free and open source software

Closed source -> Source isn't public available

Facebook alternatives:

* Diaspora

* Identica

* Friendica

"Anonymously" filesharing:

* I2P

* Freenet

About encryption:

* One time pad + read this + programs

* Air gap tip by Bruce Schneier (well known expert)

* Making sure crypto stays insecure Daniel J. Bernstein (.pdf)

* An NP decision procedure for protocol insecurity with XOR

* Wired Equivalent Privacy - Wikipedia

* Deciding the Security of Protocols with Commuting (.pdf)

* Why Textbook ElGamal and RSA Encryption Are Insecure

* Data Insecurity: A Perspective on Data Encryption (.pdf)

* Top 10 2010-A7-Insecure Cryptographic Storage - OWASP

* The Order of Encryption and Authentication for Protecting (.pdf)

* GSM Insecurity - GSMK - Cryptphone

https://www.owasp.org/index.php/Top_10_2010-A7-Insecure_Cryptographic_Storage

"Trusted" DNS servers which care about data:

* Censurfri

* OpenNIC

Erase / delete your data "secure":

* DBAN

* SecureErease

Make sure you accounts are deleted correct:

* JustDelete.Me

Some discussion rooms I'm in (for technically peoples):

* Privacy.org

* ACLU

* Privacy International

"Secure" distributions:

* Quebes

* Liberte Linux

* Tails

Decentralized IM/File Txfer/VOIP:

* Retroshare

Additional Info:

* Big-data

* Off-the-Record + example usage via Pidgin

* Protect your email

* Cory Doctorow on the upcoming privacy wars

Petitions against the NSA

* Here

* Here

* Here

* Here

General info about social media and his weakness:

* Read this

There are much more tricks and tips, about network security

-> Fantastic articles about how spying really works is given over here with a lot of papers.