135 lines
3.8 KiB
Markdown
135 lines
3.8 KiB
Markdown
# Privacy Toolkit - Session Notes
|
|
|
|
## 2025-11-12 - Initial Repository Setup
|
|
|
|
### 🎯 What We Built
|
|
|
|
Created a modular privacy toolkit with automated installation scripts for security-focused tools.
|
|
|
|
### ✅ Completed Tools (5)
|
|
|
|
1. **Dangerzone** - Document sanitization (Freedom of Press Foundation)
|
|
- Container-based PDF/Office sanitization
|
|
- Includes GPG keyring permission fix
|
|
- Full threat model documentation
|
|
|
|
2. **croc** - Secure P2P file transfer
|
|
- PAKE-based encryption
|
|
- Simple curl | bash installation
|
|
|
|
3. **age** - Modern file encryption
|
|
- Simpler than GPG
|
|
- Installed via apt
|
|
|
|
4. **VeraCrypt** - Full disk encryption
|
|
- Encrypted containers and full disk encryption
|
|
- Launchpad .deb download
|
|
- Version 1.26.7
|
|
|
|
5. **Cryptomator** - Cloud storage encryption
|
|
- Client-side encryption for cloud files
|
|
- Interactive .deb vs AppImage choice
|
|
- **Includes full verification guide** (GPG + SHA256)
|
|
|
|
### 📁 Repository Structure
|
|
|
|
```
|
|
privacy-toolkit/
|
|
├── README.md # Main documentation
|
|
├── TOOLS-LIST.md # Progress checklist
|
|
├── TOOLS-REFERENCE.md # Detailed tool descriptions
|
|
├── SESSION-NOTES.md # This file
|
|
└── tools/
|
|
├── age/
|
|
│ └── install.sh
|
|
├── croc/
|
|
│ └── install.sh
|
|
├── cryptomator/
|
|
│ ├── install.sh
|
|
│ └── VERIFICATION.md # GPG verification guide
|
|
├── dangerzone/
|
|
│ ├── install.sh
|
|
│ └── README.md
|
|
└── veracrypt/
|
|
└── install.sh
|
|
```
|
|
|
|
### 🔐 Key Features
|
|
|
|
- **Modular Design**: Each tool is self-contained
|
|
- **Security-First**: GPG verification, checksums, official sources
|
|
- **Educational**: Threat models explain WHY you need each tool
|
|
- **Consistent**: Same script structure across all tools
|
|
- **Practical**: Real-world verification example for Cryptomator
|
|
|
|
### 🎓 Security Practices Documented
|
|
|
|
Example verification workflow (Cryptomator):
|
|
1. Download .deb + .asc signature
|
|
2. Import GPG key
|
|
3. Verify fingerprint: `5811 7AFA 1F85 B3EE C154 677D 615D 449F E6E6 A235`
|
|
4. Check SHA256 checksum
|
|
5. Verify GPG signature
|
|
6. Install if all checks pass
|
|
|
|
### 📊 Status
|
|
|
|
- **Tools Completed**: 5/30+
|
|
- **Priority Tools**: 1/6 (Dangerzone)
|
|
- **Documentation**: Comprehensive for completed tools
|
|
- **Git**: Not yet initialized (ready to be)
|
|
|
|
### 🎯 Next Steps
|
|
|
|
Potential additions:
|
|
- mat2 (metadata removal)
|
|
- Signal Desktop
|
|
- Tor Browser
|
|
- BleachBit
|
|
- firejail
|
|
- OnionShare
|
|
- ExifTool
|
|
|
|
### 💡 Design Decisions
|
|
|
|
1. **Cryptomator: .deb vs AppImage**
|
|
- Script offers choice
|
|
- Recommendation: .deb for better system integration
|
|
- AppImage for portability
|
|
|
|
2. **VeraCrypt: Version locking**
|
|
- Hardcoded 1.26.7 for stability
|
|
- Manual update recommended over auto-latest
|
|
|
|
3. **Dangerzone: GPG keyring fix**
|
|
- Includes chmod 644 fix for /etc/apt/keyrings/
|
|
- Solves permission denied error
|
|
|
|
### 🔗 Resources
|
|
|
|
- Official Cryptomator releases: https://github.com/cryptomator/cryptomator/releases
|
|
- Dangerzone: https://dangerzone.rocks/
|
|
- VeraCrypt: https://veracrypt.fr/
|
|
- Age: https://github.com/FiloSottile/age
|
|
- Croc: https://github.com/schollz/croc
|
|
|
|
---
|
|
|
|
**Created**: 2025-11-12
|
|
**Tools**: 5 complete, 25+ planned
|
|
**Focus**: Security, privacy, encryption, sanitization
|
|
|
|
## SimpleX Installation Discovery
|
|
|
|
**Issue**: SimpleX .deb packages have library compatibility issues across multiple distros.
|
|
|
|
**Confirmed broken:**
|
|
- Debian Trixie: Crashes with `SIGSEGV in libHSzstd`
|
|
- Pop!_OS: Required AppImage
|
|
|
|
**Solution**: Always use AppImage for SimpleX
|
|
- Script: `tools/simplex/install-appimage.sh`
|
|
- Location: `~/.local/bin/SimpleX.AppImage`
|
|
- Works universally across distros
|
|
|
|
**Lesson**: For complex cross-platform apps with many dependencies, prefer AppImage over distro-specific packages.
|