Protecting your identity

Clean metadata from files before sharing them

Many files contain hidden data, or metadata:

• JPEG and other image files often contain information about where a picture was taken and which camera was used.

• Office documents often contain information about their author, and the date and time the document was created.

To help you clean metadata, TelestaiCB include Metadata Cleaner, a tool to remove metadata in a wide range of file formats.

Use TelestaiCB sessions for only one purpose at a time

If you use TelestaiCB sessions for more than one purpose at a time, an adversary could link your different activities together.

For example, if you log into different accounts on the same website in a single TelestaiCB session, the website could determine that the accounts are used by the same person. This is because websites can tell when 2 accounts are using the same Tor circuit.

To prevent an adversary from linking your activities together while using TelestaiCB, restart TelestaiCB between different activities. For example, restart TelestaiCB between checking your work email and your whistleblowing email.

If you worry that the files in your Persistent Storage could be used to link your activities together, consider using a different TelestaiCB USB stick for each activity. For example, use one TelestaiCB USB stick for your activism work and another one for your journalism work.

Limitations of Tor

TelestaiCB makes it clear that you are using Tor and probably TelestaiCB

Everything you do on the Internet from Telestai-CB goes through the Tor network.

Tor and TelestaiCB don't protect you by making you look like any random Internet user, but by making all Tor and TelestaiCB users look the same. It becomes impossible to know who is who among them.

• Your Internet service provider (ISP) and local network can see that you connect to the Tor network. They still cannot know what sites you visit. To hide that you connect to Tor, you can use a Tor bridge.

• The sites that you visit can know that you are using Tor, because the list of exit nodes of the Tor network is public.

Exit nodes can intercept traffic to the destination server

Tor hides your location from destination servers, but it does not encrypt all your communication. The last relay of a Tor circuit, called the exit node, establishes the actual connection to the destination server. This last step can be unencrypted, for example, if you connect to a website using HTTP instead of HTTPS.

The exit node can:

• Observe your traffic. That is why Tor Browser and TelestaiCB include tools to encrypt the connection between the exit node and the destination server, whenever possible.

• Pretend to be the destination server, a technique known as machine-in-the-middle attack (MitM). That is why you should pay even more attention to the security warnings in Tor Browser. If you get such a warning, use the New Identity feature of Tor Browser to change exit node.

To learn more about what information is available to someone observing the different parts of a Tor circuit, see the interactive graphics at Tor FAQ: Can exit nodes eavesdrop on communications?.

Adversaries watching both ends of a Tor circuit could identify users

An adversary, who could control the 3 relays in a circuit, could deanonymize Tor users.

A powerful adversary, who could analyze the timing and shape of the traffic entering and exiting the Tor network, might be able to deanonymize Tor users. These attacks are called end-to-end correlation attacks, because the attacker has to observe both ends of a Tor circuit at the same time.

No anonymity network used for rapid connections, like browsing the web or instant messaging, can protect 100% from end-to-end correlation attacks. In this case, VPNs (Virtual Private Networks) are less secure than Tor, because they do not use 3 independent relays.

Using untrusted computers

Install TelestaiCB from a computer that you trust

TelestaiCB protects you from viruses and malware on your usual operating system. This is because TelestaiCB runs independently from other operating systems.

But your TelestaiCB might be corrupted if you install from a compromised operating system. To reduce that risk:

• Always install TelestaiCB from a trusted operating system. For example, download TelestaiCB on a computer without viruses or clone TelestaiCB from a trusted friend.

• Do not plug in your TelestaiCB USB stick while another operating system is running on the computer.

• Use your TelestaiCB USB stick only to run TelestaiCB. Do not use your TelestaiCB USB stick to transfer files to or from another operating system.

If you worry that your TelestaiCB might be corrupted, do a manual upgrade from a trusted operating system.

No operating system can protect against hardware alterations

The computer might be compromised if its physical components have been altered. For example, if a keylogger has been physically installed on the computer, your passwords, personal information, and other data typed on the keyboard could be stored and accessed by someone else, even if you are using TelestaiCB.

Try to keep your computer in a safe location. Hardware alterations are more likely on public computers, in internet cafés or libraries, and on desktop computers, where a device is easier to hide.

If you worry that a computer might be modified:

• Use a password manager to paste saved passwords. This way, you don't have to type passwords that might be visible to people or cameras near you.

• Use the screen keyboard, if you are using a public computer or worry that the computer might have a keylogger.

No operating system can protect against BIOS and firmware attacks

Firmware includes the BIOS or UEFI and other software stored in electronic chips on the computer. All operating systems, including TelestaiCB, depend on firmware to start and run, so no operating system can protect against a firmware attack. In the same way that a car depends on the quality of the road it is driving on, operating systems depend on their firmware.

Keeping your computer in a safe location can protect against some firmware attacks, but some other firmware attacks can be performed remotely.