Been awhile since I've had one of these posts part deus: but I figure with all that's going on in the world it's time to make another one and get some stuff out there for people. A lot of the information I'm going to go over you can find here:

https://www.privacyguides.org/en/tools/

So if you'd like to just click the link and ignore the rest of the post that's fine, I strongly recommend checking out the Privacy Guides. Browsers: There's a number to go with but for this post going forward I'm going to recommend Firefox. I know that the Privacy Guides lists Brave and Safari as possible options but Brave is Chrome based now and Safari has ties to Apple. Mullvad is also an option but that's for your more experienced users so I'll leave that up to them to work out. Browser Extensions:

uBlock Origin: content blocker that blocks ads, trackers, and fingerprinting scripts. Notable for being the only ad blocker that still works on Youtube.

Privacy Badger: Content blocker that specifically blocks trackers and fingerprinting scripts. This one will catch things that uBlock doesn't catch but does not work for ads.

Facebook Container: "but I don't have facebook" you might say. Doesn't matter, Meta/Facebook still has trackers out there in EVERYTHING and this containerizes them off away from everything else.

Bitwarden: Password vaulting software, don't trust the password saving features of your browsers, this has multiple layers of security to prevent your passwords from being stolen.

ClearURLs: Allows you to copy and paste URL's without any trackers attached to them.

VPN: Note: VPN software doesn't make you anonymous, no matter what your favorite youtuber tells you, but it does make it harder for your data to be tracked and it makes it less open for whatever public network you're presently connected to.

Mozilla VPN: If you get the annual subscription it's ~$60/year and it comes with an extension that you can install into Firefox.

Mullvad VPN: Is a fast and inexpensive VPN with a serious focus on transparency and security. They have been in operation since 2009. Mullvad is based in Sweden and offers a 30-day money-back guarantee for payment methods that allow it.

Email Provider: Note: By now you've probably realized that Gmail, Outlook, and basically all of the major "free" e-mail service providers are scraping your e-mail data to use for ad data. There are more secure services that can get you away from that but if you'd like the same storage levels you have on Gmail/Ol utlook.com you'll need to pay.

Tuta: Secure, end-to-end encrypted, been around a very long time, and offers a free option up to 1gb.

Mailbox.org: Is an email service with a focus on being secure, ad-free, and privately powered by 100% eco-friendly energy. They have been in operation since 2014. Mailbox.org is based in Berlin, Germany. Accounts start with up to 2GB storage, which can be upgraded as needed.

Email Client:

Thunderbird: a free, open-source, cross-platform email, newsgroup, news feed, and chat (XMPP, IRC, Matrix) client developed by the Thunderbird community, and previously by the Mozilla Foundation.

FairMail (Android Only): minimal, open-source email app which uses open standards (IMAP, SMTP, OpenPGP), has several out of the box privacy features, and minimizes data and battery usage.

Cloud Storage:

Tresorit: Encrypted cloud storage owned by the national postal service of Switzerland. Received MULTIPLE awards for their security stats.

Peergos: decentralized and open-source, allows for you to set up your own cloud storage, but will require a certain level of expertise.

Microsoft Office Replacements:

LibreOffice: free and open-source, updates regularly, and has the majority of the same functions as base level Microsoft Office.

OnlyOffice: cloud-based, free

FreeOffice: Personal licenses are free, probably the closest to a fully office suite replacement.

Chat Clients: Note: As you've heard SMS and even WhatsApp and some other popular chat clients are basically open season right now. These are a couple of options to replace those. Note2: Signal has had some reports of security flaws, the service it was built on was originally built for the US Government, and it is based within the CONUS thus is susceptible to US subpoenas. Take that as you will.

Signal: Provides IM and calling securely and encrypted, has multiple layers of data hardening to prevent intrusion and exfil of data.

Molly (Android OS only): Alternative client to Signal. Routes communications through the TOR Network.

Briar: Encrypted IM client that connects to other clients through the TOR Network, can also chat via wifi or bluetooth.

SimpleX: Truly anonymous account creation, fully encrypted end to end, available for Android and iOS.

Now for the last bit, I know that the majority of people are on Windows or macOS, but if you can get on Linux I would strongly recommend it. pop_OS, Ubuntu, and Mint are super easy distros to use and install. They all have very easy to follow instructions on how to install them on your PC and if you'd like to just test them out all you need is a thumb drive to boot off of to run in demo mode. For more secure distributions for the more advanced users the options are: Whonix, Tails (Live USB only), and Qubes OS.

On a personal note I use Arch Linux, but I WOULD NOT recommend this be anyone's first distro as it requires at least a base level understanding of Linux and liberal use of the Arch Linux Wiki. If you game through Steam their Proton emulator in compatibility mode works wonders, I'm presently playing a major studio game that released in 2024 with no Linux support on it and once I got my drivers installed it's looked great. There are some learning curves to get around, but the benefit of the Linux community is that there's always people out there willing to help. I hope some of this information helps you and look out for yourself, it's starting to look scarier than normal out there.

You know, the thing we were taught as children to never share, especially after we become adults.

YouTube and Google do, in fact, count as strangers on the internet. Do not succumb to their tricks. Their "age verification" AI is not to protect children. If you ever believed that, you're simply gullible. It is for money and power, for profit and control. It is a scam and a violation of your privacy and safety. They are only going to sell your information if you are willing to give it to them, as they've always done and always will, and your information will be somewhere on the internet where it can easily be hacked into and stolen.

Do not give YouTube or Google your personal information.

Update: This now applies to Discord too! Their asses just got caught red-handed selling personal information related to your face and ID to AI! They literally LIED TO YOUR FUCKING FACES and we found out about it immediately because their security is fucking ASS.

Parts of Alberta’s personal information protection legislation have been ruled unconstitutional. But the ruling from Court of King’s Bench Justice Colin Feasby also upheld an order to stop an American facial recognition company from collecting images of Albertans. Clearview AI scrapes the internet and social media for images of people and adds them to a database, which it markets to law enforcement agencies as a facial recognition tool.

Continue reading

Sincerely,

- a curious zoology student

I have a (mostly) unrelated jobjob - I’ve never actually been affiliated with a single facility, unless you count college internships before I started this blog. I freelance, working as a science media fact-checker and taking paid research contracts occasionally. I do work on a lot of animal / biology related fact-check content, but it’s not my entire scope of work. I also have the privilege of having family assistance, as I have chronic health issues that interfere with the normative 9-5 grind.

Everything I do in terms of blog writing/research, zoo industry research and publication, and photography is unpaid and pretty much a hobby at this point.

Prior to the pandemic I was trying to find funding for the intra-industry research and public-facing outreach I was doing, but there was never any money for it. (The industry is very used to expecting labor from young women for free. There was and is a lot of interest in the work I do, but the number of people/orgs that have ever provided compensation or financial support is in the single digits). The pandemic actually gave me the chance to pivot to focusing on professional fact-checking.

The only funding I get for any of this work is through a somewhat defunct Patreon I set up years ago when I was trying to make this blog / scicomm a full time gig. I’m terrible at updating it, and I’m conflicted enough about that to have been considering deleting it entirely. (For those of you who have stuck it out despite the radio silence, you’re incredible. You’ve facilitated the donation of my time to write a really cool paper with a zoo disaster response org, which will hopefully get through peer review soon).

To make something like this blog and everything else I do in the field actually financially sustainable, I’d need to fundraise and market more. The thing about a fact-checking career, though, is that it’s reinforced the need to make sure everything I write/say publicly is completely and 100% correct - because that level of rigor is what supports my professional reputation! Which means I’m slow to produce research and reticent to talk about it before it’s finished. My work comes out all the better for it, but it doesn’t fit into a content model that produces revenue.