Hacker News new | ask | show | jobs
by LinuxBender 2141 days ago
To get videos and articles to the media, put redundant copies on USB thumb drives and hide them in different places in the city. Tell different reporters different locations to pick up the drives. Do not tell any single news agency more than one location in the event they are compromised. Ensure you are not seen hiding them. Thumb USB drives are very cheap and disposable.

To stay connected to each other, set up your own self hosted email servers. Email is old but is well designed for this. It is also easier to set up than IRC and does not depend on real time communication. Mail servers will queue messages and retry periodically. Look for "HOW-TO: Dovecot Postfix". Set up self hosted mail servers inside your country and configure them to relay to external sites using HAM, Satellite, whatever you can get your hands on. Even better, see if you can find obscure forms of internet that have not been blocked. Dial-up for example. It isn't fast, but will relay emails and small attachments just fine. Mail servers will queue messages and retry periodically. Adjust attachment limits on your email servers and let your friends know what that limit is. Use your own domains. Ensure that you configure your mail servers to enforce TLS, or at least enforce it for domains that you know use TLS. Most important, increase the retention time of the mail spool so that the server will keep trying to send messages for a month instead of a week. Get multiple accounts on mail servers hosted in other countries that your mail server can authenticated and relay through. This eliminates the need for things like FCrDNS, DMARC, etc... on your server. A dial-up will do just fine. Read up on how to use postfix header checks to sanitized email headers so that your users IP addresses are not exposed.

One advantage of self hosted email servers is that anyone inside your country that can reach the server can communicate directly to each other through that server. Nothing has to leave the country and can not be censored. Be sure to encrypt the mail and spool folders.

For trusted circles of friends, especially those responsible for maintaining servers, ensure they create and share PGP keys. There are how-to's for this as well. Create code phrases that mean different things, so that you can tell others if you have been compromised.