Privacy Toolkit - Session Notes

2025-11-12 - Initial Repository Setup

🎯 What We Built

Created a modular privacy toolkit with automated installation scripts for security-focused tools.

✅ Completed Tools (5)

Dangerzone - Document sanitization (Freedom of Press Foundation)
- Container-based PDF/Office sanitization
- Includes GPG keyring permission fix
- Full threat model documentation
croc - Secure P2P file transfer
- PAKE-based encryption
- Simple curl | bash installation
age - Modern file encryption
- Simpler than GPG
- Installed via apt
VeraCrypt - Full disk encryption
- Encrypted containers and full disk encryption
- Launchpad .deb download
- Version 1.26.7
Cryptomator - Cloud storage encryption
- Client-side encryption for cloud files
- Interactive .deb vs AppImage choice
- Includes full verification guide (GPG + SHA256)

📁 Repository Structure

privacy-toolkit/
├── README.md                      # Main documentation
├── TOOLS-LIST.md                  # Progress checklist
├── TOOLS-REFERENCE.md             # Detailed tool descriptions
├── SESSION-NOTES.md               # This file
└── tools/
    ├── age/
    │   └── install.sh
    ├── croc/
    │   └── install.sh
    ├── cryptomator/
    │   ├── install.sh
    │   └── VERIFICATION.md        # GPG verification guide
    ├── dangerzone/
    │   ├── install.sh
    │   └── README.md
    └── veracrypt/
        └── install.sh

🔐 Key Features

Modular Design: Each tool is self-contained
Security-First: GPG verification, checksums, official sources
Educational: Threat models explain WHY you need each tool
Consistent: Same script structure across all tools
Practical: Real-world verification example for Cryptomator

🎓 Security Practices Documented

Example verification workflow (Cryptomator):

Download .deb + .asc signature
Import GPG key
Verify fingerprint: 5811 7AFA 1F85 B3EE C154 677D 615D 449F E6E6 A235
Check SHA256 checksum
Verify GPG signature
Install if all checks pass

📊 Status

Tools Completed: 5/30+
Priority Tools: 1/6 (Dangerzone)
Documentation: Comprehensive for completed tools
Git: Not yet initialized (ready to be)

🎯 Next Steps

Potential additions:

mat2 (metadata removal)
Signal Desktop
Tor Browser
BleachBit
firejail
OnionShare
ExifTool

💡 Design Decisions

Cryptomator: .deb vs AppImage
- Script offers choice
- Recommendation: .deb for better system integration
- AppImage for portability
VeraCrypt: Version locking
- Hardcoded 1.26.7 for stability
- Manual update recommended over auto-latest
Dangerzone: GPG keyring fix
- Includes chmod 644 fix for /etc/apt/keyrings/
- Solves permission denied error

🔗 Resources

Official Cryptomator releases: https://github.com/cryptomator/cryptomator/releases
Dangerzone: https://dangerzone.rocks/
VeraCrypt: https://veracrypt.fr/
Age: https://github.com/FiloSottile/age
Croc: https://github.com/schollz/croc

Created: 2025-11-12 Tools: 5 complete, 25+ planned Focus: Security, privacy, encryption, sanitization

SimpleX Installation Discovery

Issue: SimpleX .deb packages have library compatibility issues across multiple distros.

Confirmed broken:

Debian Trixie: Crashes with SIGSEGV in libHSzstd
Pop!_OS: Required AppImage

Solution: Always use AppImage for SimpleX

Script: tools/simplex/install-appimage.sh
Location: ~/.local/bin/SimpleX.AppImage
Works universally across distros

Lesson: For complex cross-platform apps with many dependencies, prefer AppImage over distro-specific packages.

3.8 KiB Raw Blame History