Ask HN: My country may be in the midst of a coup – how should I get prepared?
I'm sure some of your heard about what's happening in my country, Tunisia. (tldr: the president made some 'unconstitutional' moves to thwart rampant corruption. Five days later, everything seems fine ... for now).
Even though it seems the president is keeping his promise on freedom of speech, I don't think it would be extravagant to get prepared for the worse.
So, what should I do to keep myself safe online?
Edit: I'm not worried about my physical safety, I'm just asking about protecting my privacy online if the government decides to go full on Big Brother.
P.S.: I tried to submit this question with a throwaway account, for obvious reasons, was told to "please slow down".
197 comments
[ 3.9 ms ] story [ 201 ms ] threadAlso, we're in the middle of pandemic lock-down and leaving is not an option.
You might have to leave fast, so create a 'leave the country' go away backpack (aka go bag) and bring it with you everywhere, in case you can't actually go home. Install online cameras to see the state of your house before getting close to it in case you are raided or setup for an ambush. Turn off the cell phone when your close to where you live by a few km, use wifi where all your internet connection is piped through a VPN. Be prepared to abandon everything in your house if it comes to that, maybe distribute your important sentimental objects elsewhere with trusted friends or family or other secret storage spots. When you begin to stash such things, turn off all electronic devices with radios (wifi, bluetooth, cellphone, etc) or just do not bring them going there and coming back. Use cash for in person transactions from now on, maybe change your habits up.
You may not be worried about general physical safety, but you might be targeted specifically.
Michael Bazzel's book is pretty good if you want to further go down the rabbit hole: https://inteltechniques.com/book7.html . It is US focused, but many of the principles still apply.
You should.
> there's no way this can devolve into a full on war
Ghannouchi might be bluffing but no one really knows for sure. This can devolve into a full on war, although it'll unlikely touch the coastal cities.
> I just need to protect my online privacy
You don't really need to do much unless you are looking to do full-on work on activist journalism. Dictatorships only target the most famous or those who make a lot of noise. It's very hard to follow everyone, and Tunisia kind of lacks in the tech department.
> Also, we're in the middle of pandemic lock-down and leaving is not an option.
Most Embassies have re-opened. It is harder, granted; and if you are young it is hard to get the vaccine.
I know nothing of your particular situation, but I bet there is usually a long chain of impossibilities that occur when things really start to go bad:
No doubt it is still a really low probability of really bad things happening. But 1% is not never. Thinking that something could happen is one step to ensuring that it doesn't actually happen. Stay safe.Of course, it could be the case that the OP already lives near his family or maybe doesn't have one. In which case, it might help but only a little.
If things went crazy in the US, Washington DC would be dangerous, even from the viewpoint of getting caught in the crossfire.
In France, Paris would be dangerous but some little town will probably miss the action.
This is much more the case in a developing country where geographical inequality is even worse and you are more likely to have family in the country.
Deleting things off the net isn't reliable; but if you've said things you might worry about later you can go delete them now and at least you'll be able to point to that as a disavowal if need be. If you're really worried about something you've said, maybe update it with a retraction an/or publish such separately.
And of course VPNs etc etc... act like you're selling horse porn and keep some in stock, just for cover.
So, on that front, I think my options are limited.
But, yeah, setting up a vpn and alternate accounts is a great idea to avoid spying and all that kind of stuff. Thanks!
I wouldn't worry about it much at this particular point. Said is a textbook dictator but they only have enough manpower and everyone is still everywhere when it comes to publishing stuff. Only those who are very visible will be targeted at first.
> So, on that front, I think my options are limited.
I'll start contacting embassies on Monday. Many people do this as a scam (for homosexuality) and for many of them it works. Start building a profile with these embassies.
You'll unlikely be subjected to torture (or killing) but maybe arrested for a few days or messed with lightly. Keep that as evidence for your asylum application.
> Harlo Holmes is the Chief Information Security Officer (CISO) and Director of Digital Security at Freedom of the Press Foundation. She strives to help individual journalists in various media organizations become confident and effective in securing their communications within their newsrooms, with their sources, and with the public at large. She is a media scholar, software programmer, and activist; and was a regular contributor to the open source mobile security collective The Guardian Project. Harlo is also an adjunct professor at New York University.
> Conor Schaefer is the Chief Technology Officer at Freedom of the Press Foundation, overseeing automation and deployment for the SecureDrop platform, and managing backend infrastructure for technical projects. He has previously worked as a Linux sysadmin and developer for academic researchers, and taught computer literacy and IT certification courses for the underprivileged.
> Olivia Martin is the Deputy Director of Digital Security at Freedom of the Press Foundation. A graduate of NYU's Gallatin School of Individualized Study, her professional work focuses on researching and delivering digital security trainings to journalists, activists, and human rights defenders. She has spent years in newsrooms as a designer and editor with new media and student publications, and uses this experience to aid in assessing the evolving needs of journalists in today's media landscape.
Also, this guide is a good starting point. [0]
[0]https://cltc.berkeley.edu/2021/01/20/cltc-report-an-evaluati...
Berkeley has a report "An Evaluation of Online Security Guides for Journalists" which may prove helpful here: https://cltc.berkeley.edu/wp-content/uploads/2021/01/Online_... .
I also remember University of Toronto had software tools to help journalists and political dissidents communicate securely online, however I don't have links at the moment.
You probably want to purchase multiple VPN services, from smaller providers, as the bigger ones will likely be blocked entirely. You also want to limit ad tracking as much as possible.
Your phone will likely leak your location and provide excellent means for tracking you. I am not an expert on this subject. Use an iphone, update to the latest ios, limit ad tracking in the settings, and disable background app communication (cut off internet access for most apps entirely). Use a VPN on your phone. See this article for an idea of how pervasive the tracking might be: https://www.nytimes.com/interactive/2019/12/19/opinion/locat...
Guides may recommend privacy plugins for chrome: uBlock Origin, Privacy Badger, Decentraleyes, PixelBlock, etc... However, these plugins may also make your browser easier to fingerprint.
Technology for browser fingerprinting and linking your identity across devices is probably quite sophisticated. Perversely, there's a guy ordering lunch right now, in San Francisco or New York City, who wrote the code to track you. The bill for the meal over Uber Eats tallied to $45, delivered to his multi million dollar condo. He read your headline and decided to stay silent. Good luck!
I assume cryptocurrency exchanges won't mail you a wad of cash. Maybe they'd mail you a check, though, that you could cash at a local bank? Though many banks will not take checks unless you have an account with them. And the local check-cashing places will take a cut of the proceeds (though that might be acceptable given the situation). Even if that does work, you might be stuck without money for days or more while the check gets to you. Hopefully whatever you managed to bring with you will hold you for that long.
I also get "Unfortunately we are not serving customers located in your current location." from a California IP so it's really funny considering it's supposed to be nothing more than a craigslist for BTC ads.
However in do keep in mind, especially when running from bad things (like a dictatorship) - absolutely nothing some cold hard money on hand for fares/bribes of whatever kind.
That said, if you were going to go with a exchanges physical card option, you would want to order that... like, now.
Also, if you are a singular person without a family... I would be looking to get on a smuggler/refugee boat towards Italy or something. If you're stuck in the country for family or whatever other reasons, I wish you the best, try to have some supplies in backpacks to run into the jungles/slums if shit starts to hit the fan.
You want some money in cash, certainly. But crossing borders with over $10k is a legal problem. You're also liable to be robbed. It would make sense to convert most of your money to USDC.
If you end up anywhere in Europe, and probably many places in the world, you can find cryptocurrency ATM machines where you can withdraw your crypto without identification for nominal fees. As others have pointed out, there are cryptocurrency debit/atm cards via services that require formal registration (ie, they obey KYC laws). There are services you can transfer crypto to through circuitous routes that will dump currency in a bank account you specify -- you'd have to dig to figure that path out as it is not quite legal. And you can always barter with humans directly -- which shouldn't be too difficult. You'll have to do some creative thinking...
Stablecoins are ideal for this situation. How else would you move $50k when you're illegally ("undocumented") crossing borders, your government is corrupt, and your banks have shut down?
https://www.torproject.org/download/
Disable javascript whenever possible. Check your browser fingerprint.
https://coveryourtracks.eff.org/
Practice grey man tactics in your online and real life situations.
https://duckduckgo.com/?q=grey+man
Download the U.S. Army survival guide, and others. Download other books, audiobooks, movies, games, and other entertainments to your physical devices in case the internet goes down, or certain services start to get blocked in your country/city/neighborhood. Get at least a small battery backup solution to keep your devices running if the power goes out. Augment with solar charging if possible.
The Whonix wiki has lots of good tips for digital hygiene in unfriendly environments. Same with the anon guide. --this comment posted via the wonderful community project named Tor
To the parent: Please don't do this. It is dangerous and irresponsible to advise someone at risk unless you know what you are talking about, and while I wouldn't comment in a casual conversation, in this case it's important to point out that your comment is ignorant and dangerously wrong. It is Internet misinformation that many seem to collect and repeat to each other, which on the Internet gives it a veneer of truth. You wouldn't give medical or legal advice to someone who faced serious health or legal risks unless you were a doctor or lawyer (I hope). What if the OP follows your advice and ends up tortured in prison?
My understanding from actual IT security experts:
Tor Browser might help with mass data collection by businesses like Google, but it's the worst choice for threats by government or by others who have extra-legal powers: First, it signals that you are hiding something; it attracts attention: not everyone using Tor Browser is a dissident, but the proportion of dissidents among the Tor Browser population is much higher than among the Chrome and Safari populations. Second, it is based on a relatively insecure browser, Firefox, and then it is modified by a team that simply lacks the resources to design and implement proper security. Again, security is complex, expensive, and difficult. The obvious tactic for the attacker is to infect every Tor Browser visiting dissident resources.
> Disable javascript whenever possible. Check your browser fingerprint.
If you are using Tor Browser with JavaScript disabled, you've already identified yourself as part of a tiny population. Narrow that to the subset that visits Tunisian dissident websites, and the authorities might know everyone in that population by name.
In what way is Firefox any more insecure than Chrome or Safari?
Except for yours I'm guessing?
If you need to secure files use the proton drive beta for example.
The proton suite of tools is actually quite good and better then DIY or several cheap as dirt providers.
I’ll use thread to ask: what would be the cheapest way to have an emergency internet access? I guess Starlink kinda solves this problem but paying 100USD/m is a lot for a backup connection.
No real solutions, just thoughts. Hope it helps a little anyhow.
How close do you live to the border?
[1] https://spectrum.ieee.org/build-a-longdistance-data-network-...
EDIT: The hackaday page (https://hackaday.io/project/164092-npr-new-packet-radio) is talking about 10{,0}Mbit as of 2020:
> Important firmware update about Ethenet mode configuration 10Mb/s or 100Mb/s, half or full duplex; it can solve a recurrent problem of packet loss and low datarate. Refer to the new version of the "advanced user guide". Many thanks to Kevin M0AHN who discovered the origin of the problem.
I wonder if it's possible to get that kind of bandwidth...
EDIT2: Apparently you can get up to 500kbps outside of the US (https://elekitsorparts.com/product/npr-70-modem-by-f4hdk-new...) but within the US, due to regulations, you can only get 65kbps:
> Note for USA : Due to CFR 47 Part 97.3 FCC regulations, for the 70cm amateur radio band (restriction to 100kHz and 56kBaud), only the setting “modulation 20” of NPR-70 seems to be legal in USA. Please always check your local amateur-radio regulation before buying and using NPR70. Modulation 20: Symbol Rate 50kS/s, bandwidth 100kHz, raw datarate 100kb/s raw, usable datarate 65kb/s.
Still, you can do a lot with 65kb/s. Hmm.
Of course, in the US, you probably have cell service. Neat hack though.
70cm is similar(ish) to 2 meter (which can propagate even over oceans):
https://en.wikipedia.org/wiki/2-meter_band#Communications_be...
Don't fool yourself.
The Stasi did the same thing analog fifty years ago. For the same reason.
There is no evidence in favor of presuming anything online is anonymous or private. Eve owns the wire. The US DoD created TOR. Patriotism is stronger motivation than individual interest in privacy.
Tor is great if you are in the US or Germany but in many places simply having it installed can land you in jail, having guides published by the US government and other organizations is also nice in theory but in practice this would again land you in hot water due to possession of subversive materials or w/e excuse the government or the group(s) in power would use.
If their goals are different than just survival than they need to know that they assume a high risk, not only in the times prior and during a revolution but quite often after it since the multitude of groups that tend to fight in a revolution end up fighting amongst themselves for control once the main regime is overcome.
It’s easy for people that lived all their life in a country that has a rule of law and that despite what Twitter would tell you actually respects human rights and civil liberties to give advice, unfortunately that advice can often get you arrested or even killed in the real world.
Their goal is pretty clearly stated in the original post. Please don't post contrarian trash like this
Likewise posting to HN is shit for operational security. It’s googleable 4fks sake.
Security theater is silly if the threat is serious. If it’s not serious then it’s not serious.
Citation needed.
In fact, your average person in Tunisia is likely to outlast your average person in many US States:
https://www.cdc.gov/nchs/pressroom/sosmap/life_expectancy/li...
The p20 of wealth isn't great in the US
Don’t need to average very many “zeros” to bring down an average.
There is huge variability in how deaths are reported for newborns.
“Many countries, however, including certain European states (e.g. France) and Japan, only count as live births cases where an infant breathes at birth, which makes their reported IMR numbers somewhat lower and increases their rates of perinatal mortality.[111] In the Czech Republic and Bulgaria, for instance, requirements for live birth are even higher.”
It depends on your occupation (and probably on other factors too).
https://www.niussp.org/education-work-economy/france-male-ma...
The bad thing about Dictatorships is not the lack of freedom, it's the balancing act of resources and freedom. Wealthy dictatorships really are as chill as any rich democracy as long as you don't start poking the leadership with political ideas that don't benefit them.
However, a lack of resources in Democracy or dictatorship will 100% result in civil unrest.
Which is interesting because people always adapt to whatever situation they are in. I recall this lady being interviewed on Al Jezeera near the bombardment zone in the Gaza strip a few months ago. She was frustrated about little things like kids not going to school, a bus route being destroyed and what not. Nowhere in her statement did she mention that she and her family just had missles landing a few hundred meters away in the dead of night.
Humans are interesting.
Unless of course you are in the way of some of the powerclique and they decide to take over your buisness or land without compensation.
Or the spoiled son the of the dictator (or the dictator himself) wants to bang your daughter or your wife. And maybe kills her while doing so. And anyone witnessing or complaining. That means officially also in a dictatorship no one does that. People just go missing or have accidents. Or found guilty of some other "crime".
Exaggerating? Well, I just read a book about Trujillo, the former dictator of the dominican republic, it is quite interesting. But he did not invented power abuse. Anywhere where there is unchecked power, those things happen.
Whatever the case may be, bad apples abound. Thats just human nature. Just because democratic leaders dont do things publicly, I think you should disabuse yourself of the notion that they are incapable of depraved acts of violence. Sexual or otherwise. Amd while they might not inflict such violence on their constituents - people from poorer countries have no such luck.
By Mario Vargas Llosa.
I can recommend it, very well written and structured, but note, that it is a work of fiction based on historic events. (and some historic events gets changed)
edit: looks like my question hit a nerve with some people?
Life expectancy at birth (in years):
Alabama: 75.1
Mississippi: 74.6
Tunisia: 76.7
NB: I live in Louisiana and my brother works for an international NGO but had based himself in Tunisia. He was supposed to fly back there Monday but delayed his flight a week. My friend was supposed to visit Yassine Ayari and she ended up arriving at his house right after he was arrested.
Yeah that worked for Brazil and other countries.
> police is not racist
Sure they are. You are likely to get away without a ticket, an accident or even an arrest if you correlate with the guys. It just happens that the police has a bunch from everywhere. Let's not pretend that Tunisia's police is not as corrupt as it can be.
A tourist is very unlikely to be mugged in Tunisia (comparing to a Tunisian person) because the police is more reactive when it comes to tourists.
As a result you have a country of 11.5 million and 9.5 million tourists in 2019 despite all the crap that the country is going through.
In either way, I rather have a police treating all people with respect.
Hello from Australia, where guns are very restricted. It works well, thank you. In fact it works well in more counties than it doesn't.
[0] https://en.wikipedia.org/wiki/List_of_countries_by_intention...
These haven't been that safe for free speech for a while now. The current US administration has clearly demonstrated that it's willing to use the full weight of the state against dissent. It's partnered with shadowy NGOs to create a chilling effect against dissenting voices online under the guise of 'hate speech'.
If you live in America, (which I don't, and never plan to, thank goodness) I'd take notice of some of the posts here.
Do you have a citation for that? Here's the US Supreme Court accepting a pro se appeal in 2019:
https://www.abajournal.com/news/article/supreme-court-accept...
https://abovethelaw.com/2013/07/r-i-p-pro-se-litigants-befor...
https://newrepublic.com/article/158088/mr-sloan-went-washing...
And there is no secret police in Tunisia for now. The current plot is quite amateurish but given history (Cuba/Fidel) anything is possible.
My point was just that if you're worried about the consequences of your country slipping back into authoritarianism, obviously you'll want to 1) be more prudent about what you say, and 2) be more rigorous in practicing trust & verify--both regarding the trustworthiness of the person purporting to speak with you, and that they're actually that person, much like if a bank or journalist contacted me. (I always try to verify both, with varying degrees of rigor depending on consequences. And I'll never provide personal information, confidential or otherwise, over an incoming phone call; I always ask for a callback number that I can verify.)
Suffice it to say, even in robust democracies you can be interrogated by police for making innocuous statements online. A couple Muslim friends experienced exactly that (repeatedly) in the aftermath of 9/11. That was wrong and harmful, but there was never any threat or perceived threat of physical harm. I didn't mean to denigrate Tunisia by suggesting it would be so quick to descend into a thoroughly repressive and violent dictatorship. The world is much more complex than as portrayed in Hollywood and pulp history.
To the extent my comment made a caricature of Tunisia, I apologize.
If you knew about them they wouldn’t be secret now would they?
Best security results in his situation might be to * keep head down * move out of country * trust no one
https://en.m.wikipedia.org/wiki/Protectorate
"Le protectorat colonial se distingue de la colonie dans la mesure où un territoire colonisé est placé sous l’administration directe de la métropole dont il fait partie intégrante, tandis que le territoire sous protectorat conserve théoriquement une relative autonomie." https://bibliotheque-numerique.diplomatie.gouv.fr/MEAE/fr/pr...
1. Police answer a domestic case by kicking down the door and shooting the father of the (Asian) family without warning:
https://www.scmp.com/news/world/europe/article/2083188/more-...
2. Riot cops shoot a mother and her children at the outskirts of a Gillets Jaunes demo, one of the kids loses a hand:
https://www.theguardian.com/world/2019/jan/30/french-police-...
3. Police anally rape a young (black) man with an expandable baton during an identity check:
https://www.bbc.com/news/world-europe-38892302
4. Police assault a (black) musician in his studio, allege "smell of cannabis" emanated from within:
https://www.bbc.com/news/world-europe-55127815
And all this is happening in a democratic country at the heart of the EU. If the police in Tunisia are taking lessons from the French police, I'd be worried about the safety of anti-regime Tunisians.
Of note, I come from a European country that is ostensibly a democracy and I know well that all the democratic laws in the world are not enough to control a bunch of jumped-up brutes given the authority to beat up their fellow citizens.
What about power, do you think they'd pull power from regions so you don't have mobile phones to communicate anymore? Phones are efficient enough that hand charging should be pretty doable, so you can charge whenever you need to access any info (be it a map, or other offline info that you downloaded).
I'd honestly just use Signal or something like it.
Meanwhile, if you consider yourself more in a danger to become a 'collateral damage', so to speak, in a power struggle that 'others' do, then the most reasonable strategy could be just staying-low and having sufficient resources to live through such time.
Especially so if you have something that may make your position vulnerable (family, assets, business, prominence etc).
If you don't have an imminent need to flee (hopefully your assessment is sound), then not turning attention to yourself should let you weather this period of instability, just as for the most part of the populace.
Know your friends! Don't self-incriminate, know what you keep on your devices and storage. Be like everybody, just live your life, if you can afford not to choose a side.
Have a plan B (even C) about money, not just relying on the routine access way.
Freedom of speech _is_ important. However, if you don't consider yourself part of the struggle, then just wait it out.
Stay healthy!
Those institutions may crumble and you'll be hard pressed to get replacements if you don't already have. Passport, Id's, etc.
Would move out of the capitol city if possible.
Basically prepare for the equivalent of a natural disaster. Food, water, gasoline, radios. You can google that kind of thing.
Get as much cash as possible.
I don't know what gun laws are like but you could proabaly get ammo and guns and hide them somewhere. Those are always valuable during crisis.
Other people had great ideas for the digital life.
You may not be able to keep yourself online at all. Turning off the internet is part of the script for dealing with unrest.
If you can, try to setup a way to dial-up a foreign ISP with a modem. xs4all used to be a goto provider for this, but other comments say they're shutting down their dial-up service October 1. Might be useful as an available target to test with though.
Sometimes it's less expensive for outside countries to call you than for you to call out, but a quick look shows rates to Tunisia to be quite high, so probably figure out where is the least expensive to call, and then see if you can find a dial-up ISP there, and see it you can get a connection. Landline is obviously preferred here, but expense might be too great.
POP3 + TLS email with GPG if you can make it happen and a contact outside the country to help would work the best. International calling could get cut off too, of course, but it might be done later. And calling internationally might get you put on a list, so there's that, too.
Good luck and stay safe.