My recommendation for privacy/safety for any interactions/topics/etc. that would be questionable by anyone, any time in the future, is to do those in person with all possible listening devices (including cell phones) OFF, or via an end-to-end encrypted app (eg, Signal, maybe Whatsap).
*************
6/26 Update: Summary on Top Browsing/Search Suggestions - in order of priority:
(see RECOMMENDATIONS below for details/additions)
Brave browser with Aggressive setting at least (also on phones/pads!)
Search Engine AI Off - better for the Earth, safer/more accurate for you
(https://search.brave.com/ -> gear icon -> "Answer with AI" OFF)
(https://search.brave.com/ -> gear icon -> "Answer with AI" OFF)
Qwant search engine (Brave Preferences -> Search engine -> Change -> Qwant)
(Sets Qwant as your default search engine: see pros/cons in SEARCH section below before deciding to do this. In short, Qwant provides the search results while moving your query data out of U.S. jurisdictional control, but can miss local info as a result.)
~~
If Qwant fails or doesn't give good local results, next best is a manual Brave search:
If Qwant fails or doesn't give good local results, next best is a manual Brave search:
Type "!br <search query>" in the address bar (don't include the quotes)
Example: "!br what time does costco in novato close today?"
ProtonVPN desktop VPN on all the time
(except maybe for heavy lifting where you want highest speed; Examples: big downloads, video chatting)
(except maybe for heavy lifting where you want highest speed; Examples: big downloads, video chatting)
For Highly Sensitive/Truly Private Searches: Use Tor
(via Brave’s Private Window with Tor: Opt+Cmd+N or File -> New Private Window with Tor)
(via Brave’s Private Window with Tor: Opt+Cmd+N or File -> New Private Window with Tor)
= slow, but a bit higher security level than regular VPN
*************
Hope your holidays were cozy and nourishing…with harmonious, balanced connection with your dear ones…and that the transition into the season of ever-lengthening days and the New Year is a gentle and auspicious one…. :-) Warmly, Rich
BACKGROUND (skip to RECOMMENDATIONS if you don't need the why?'s for them :)
* Privacy/Tracking/Hacking Dangers:
- Hackers/Thieves/Scammers/AI - identity theft + personal data mining
[ I have a tech-savvy friend who's identity was stolen - it was a nightmare for him, almost cost him tens of thou$ands, and he barely got himself out of it after months of hell! ]
- Big Tech - influencing us without our knowledge/consent
- Big Brother/Govt - control
- Anyone - who decides to harm/discredit/evaluate/harass or discriminate against you for whatever reason -- or similarly target any friend/loved one/colleague/etc. with whom you've interacted over a non-encrypted medium. Or, Anyone for whom you or any of your contacts are under even a false suspicion...
[ They - and/or their hired guns or AI - can use the system to go back in time and scrutinize all your logged activity, either online or via your phone or other smart devices (eg, anything using Amazon Alexa, Google Home, Apple Siri, Microsoft Cortana, etc). Ie, every person you ever discuss anything questionable with by phone/email/text, every social media post you make or "like", everywhere you go, everything you buy, anything you ever do online, anything you say to Alexa or Siri or Google Voice, every lifestyle decision you make, etc. is being recorded and stored - likely permanently. We are being increasingly profiled in an increasingly judgmental and polarized society!
There are many ways this can come back to haunt us -- or anyone with whom we've interacted via and unencrypted medium -- some not even imagined yet. There have already been proposals to include our online history in our credit ratings. (IMF has been pushing for something similar to the social credit system in China, which will restrict not just credit but where you're allowed to go, what you're allowed to do, buy, etc. To cite just one recent example in this country: Don't use our vaccine, then you can't enter these establishments, work at this company, travel to these places, attend this school, engage with this group, etc.)
But, we don't even need to have those systems in place: Eg, let's say you're applying for anything (job, loan, apartment/home/vacation rental, credit card, school or vocational program, volunteer position, health/life/home/auto insurance, etc) and whomever buys a log of your history on the dark web and sees any possible indication of something they consider illegal, immoral, or "disagreeable" from a prejudiced perspective of your lifestyle/identity/beliefs/choices/political or sexual or religious or ethnic or social orientation, etc. And, poof you're out! (Especially if there are other applicants that they don't see that same thing for.)
Or, if someone doesn't like you and wants to dig up dirt on you, or maybe wants to get you fired or evicted from where you live or knock you out of the running for something, they might also attack you on that basis... taking facts out of context to derive suspicion from an innocent life... and paint anyone as "a wrong-doer." This could be quite difficult and costly to reverse - not just in monetary terms, but also jobs, relationships, other opportunities, etc. Even more so if it's a government, corporate, bank, or other large entity doing the digging/profiling/smearing. ]
Or, if someone doesn't like you and wants to dig up dirt on you, or maybe wants to get you fired or evicted from where you live or knock you out of the running for something, they might also attack you on that basis... taking facts out of context to derive suspicion from an innocent life... and paint anyone as "a wrong-doer." This could be quite difficult and costly to reverse - not just in monetary terms, but also jobs, relationships, other opportunities, etc. Even more so if it's a government, corporate, bank, or other large entity doing the digging/profiling/smearing. ]
How far down the rabbit hole do you want to go, Alice...?
This is a very scaled down post, so as not to overwhelm. And, there are many more things you can do to protect your rights, privacy, and future from the Privacy/Tracking/Hacking Dangers I've managed to think of and write down above (and probably several I haven't). But, don't too far down the rabbit hole too quickly... or, you're likely to get or go quite mad (or both ;). My suggestion: Titrate by just taking a bite of one piece at a time, digesting/acting on that to your satisfaction, then take a break... and come back for the next bite, later....
That said, for more background (eg, from Edward Snowden, former CIA/NSA Intelligence Analyst)... and other protective actions you can take that may still be valid (eg, avoiding illegal location tracking on your phone, Public Wi-Fi Dos/Donts, safe apps for private encrypted texts/calls, controlling personally-customized advertising, Google Privacy Settings, "Democracy", etc)... see these topics and the "WHY DOES THIS MATTER?" section in my earlier post: https://richraffals.blogspot.com/2019/11/protect-your-privacy-take-back-your.html
RECOMMENDATIONS
My recommendation for privacy/safety for any interactions/topics/etc. that would be questionable by anyone, any time in the future, is to do those in person with all possible listening devices (including cell phones) OFF, or via an end-to-end encrypted app (eg, Signal, maybe Whatsap).
~~
My recommendation for privacy/safety for all internet browsing/searching (including on phones and pads), and to wipe out ads, is to use the Brave browser exclusively, with this setting:
* Brave -> Preferences -> Shields -> Trackers & ads blocking -> Aggressive
("Trackers & ads blocking" set to "Aggressive" will block trackers, ads, malware, phishing, etc)
* https://search.brave.com/ -> gear icon (upper R corner) -> "Answer with AI" OFF
(Search engine AI Off to honor the Earth, and the well-being of all life + better privacy/safety/accuracy of results)
If that's all you do, you're in FAR better shape than with almost anything else. Use Brave's built in search (not Google!) and you're done!
(To read about the many benefits this net you, scroll down on brave.com or ask an AI. Or, click here to specifically compare it with your current browser.)
If you want more Brave web surfing protection, and have 5 more min, read on at Even Better Brave….
If you don't want to use Brave, skip down to "2nd Best Browser Option"….
Even Better Brave
Type brave://settings as the website address (URL) and adjust these:
* Shields -> Block fingerprinting set to On
* Shields -> Block cookies set to "Block third-party cookies"
(blocks even more trackers, bots and AIs from figuring out who/where you are, what you're up to, etc)
* Search engine -> Normal Window -> Change -> Qwant -> Set As Default
* Search engine -> Private Window -> Change -> Qwant -> Set As Default
(Sets Qwant as your default search engine: See pros/cons in SEARCH section below before deciding to do this. In short, Qwant provides the search results while moving your query data out of U.S. jurisdictional control, but can miss local info as a result.)
* Privacy and security -> WebRTC IP Handling Policy set to "Default public interface only"
(for IP leak protection)
(for IP leak protection)
WebRTC is a browser tool that lets people video-call, voice-chat, or share files directly and quickly—like a built-in walkie-talkie. This setting tells the browser to restrict the information WebRTC can gather, but it keeps WebRTC enabled so that video/audio chat services can still function.
Reason: This hides your private internal IP while keeping the necessary functionality alive by only exposing your public (VPN) IP. (See VPN section for why hiding your IP is prudent.) This is good to have enabled even if you're not using a VPN.
[ This is better than the "Disable Non-Proxied UDP" option in case you DO need web-based video/voice calls in Brave: It allows services like Google Meet, Zoom, and WebTorrent to function normally. But, you probably have zoom launch its own app from the browser so it's not actually running in Brave — if so, for you maybe this applies only for non-zoom web-based voice or video calls/conferencing like the others - if so, see ADVANCED below at your own risk. ]
ADVANCED:
* Privacy and security -> WebRTC IP Handling Policy set to "Disable Non-Proxied UDP" (for IP leak protection)
(Better If you DO NOT need services like Zoom, Google Meet, or WebTorrent in Brave)
Reason: This provides the most robust protection against any potential WebRTC leak of your IP by functionally disabling the feature.
[ I've not had any problems using this setting. While I haven't tried Google Meet in Brave, Zoom in Brave opens its own app...so doesn't run in brave and works fine. ]
~~~~~
* 2nd Best Browser Option: FireFox + uBlockOrigin extension + (see SEARCH below)
* NO: Chrome, Safari, Edge
VPN (Virtual Private Network)
In addition to browsing recommendations above, you can also install ProtonVPN standalone app on your computer and have it running in the background.
A VPN hides your home/network IP address from the sites and services you visit, replacing it with the VPN server’s IP. That can improve privacy and network security—but it does not make you anonymous or erase tracking altogether by itself (so the above recommendations are still key).
(NOTE: I've vetted the VPN providers I've listed here for their tracking/privacy, and several other important variables. If you choose one not listed in the "ACCESSING REGION-RESTRICTED SITES IN FOREIGN COUNTRIES" section, please do your due diligence on reaching that VPN before you trust it. :)
Reasons to use one
Reduce IP-based tracking: Websites, ad networks, and data brokers can use an IP address to associate visits, infer an approximate location, and link activity from the same network. A VPN makes that association less direct. norton
Keep browsing less visible to your ISP: Without a VPN, your ISP can generally see the sites/services you connect to, even when HTTPS protects the exact content. With a VPN, it sees an encrypted connection to the VPN server instead; the VPN provider becomes the party you must trust with more of that visibility - so use one of those I've listed below or research your choice well! protonvpn
Protect yourself on untrusted Wi‑Fi: On hotel, airport, café, school, or shared-network Wi‑Fi, a VPN encrypts traffic between your device and the VPN server, reducing what local network operators or nearby attackers can inspect. HTTPS already protects most modern web content, but a VPN adds coverage for DNS and other traffic.
Avoid exposing your home IP: Your IP can reveal your ISP and approximate area. Masking it is useful when you do not want every website, game server, or unfamiliar service to see the IP associated with your home connection. windscribe
Use region-dependent services while traveling: A server in your home country may help you reach services that reject foreign IPs. Only do this consistently with the service’s rules and applicable law. norton
Reduce some ISP-based throttling or filtering: A VPN can make it harder for an ISP to classify traffic by destination, though it cannot guarantee better speed. nordvpn
What it does not do
A VPN does not stop tracking if you:
Log in to Google, Amazon, Facebook, or another identified account.
Accept tracking cookies or allow browser fingerprinting.
Share personal information, permit precise location access, or use an app tied to your identity.
Use a VPN provider that logs, sells, leaks, or poorly protects data.
Websites still see a VPN IP, and they can often recognize it as belonging to a VPN. Your VPN company can also see your IP and, depending on its setup and policies, potentially connection or traffic metadata. Thus, a VPN shifts trust from your ISP to the VPN provider; it does not eliminate the need for a privacy-focused browser, tracker blocking, HTTPS, software updates, and good account security. windscribe
Practical example
Without a VPN at a coffee shop, the Wi‑Fi operator sees that your device is connecting to many internet services, while the websites receive your normal public IP. With a VPN, the coffee shop primarily sees an encrypted connection to the VPN, and sites generally see the VPN server’s IP instead. If you then sign in to your personal account, however, that site still knows it is you.
When it is most useful
Use one regularly if you value reducing routine IP exposure or often use shared networks. It is especially worthwhile on public Wi‑Fi and when accessing sensitive work or personal services away from home. For ordinary home browsing, it is an optional privacy layer—not a complete safety solution.
~~~~~~~
You can also install/use the ProtonVPN browser extension to cover your tracks by masking your IP address. This is not as robust as the standalone ProtonVPN, and it only protects you while you're using that browser and have it enabled. A desktop VPN protects all internet traffic from your computer; a browser extension usually protects only that browser’s traffic—leaving apps, updates, other browsers, and background connections exposed.
ACCESSING REGION-RESTRICTED SITES IN FOREIGN COUNTRIES:
As mentioned above, certain VPNs can also allow you to view "region-restricted" content from other countries:
* Recommendation for in-country use: ProtonVPN
(NOTE: Free version no longer allows manual selection of country for server location)
* Recommendations for adding ability to access foreign country content:
- Free Brave browser extensions: CyberGhost (no login required, but only 4 country options), Windscribe (requires login, many country options)
- For an example, see "DETAILS FOR VIEWING FOREIGN CONTENT VIA CYBERGHOST" below
- Free Opera browser with its built-in VPN
(You need to enable it: Settings/Preferences -> Advanced -> Features -> VPN -> Enable VPN,
then you can supposedly set the region you want to browse in - haven't been able to find this myself but YMMV)
- Better/paid options: NordVPN, iVPN, Mulvad
***********************
SEARCH
* Best: Use the Brave browser + Qwant search
(NOT: Google Chrome, Apple Safari, Microsoft Edge for browsing - all specifically designed to steal your data, track your usage, etc)
(NOT: Google.com nor Bing.com for search - specifically designed to steal your data, track your usage, etc)
Why Qwant is "Better" for Your Goals
Jurisdiction: Qwant is headquartered in France. Being an EU-based company, it is subject to the General Data Protection Regulation (GDPR), which is among the most stringent privacy frameworks in the world. It is outside the direct legal reach of U.S. jurisdiction, meaning it is not subject to U.S.-specific orders like the CLOUD Act in the same way a California-based company (like Brave) is.
Privacy Commitment: Qwant’s core business model is built on not tracking users. Unlike search engines that may use a "fallback" to Google or Bing (which Brave does for better results), Qwant emphasizes its own indexing and does not build user profiles, nor does it use tracking cookies to follow you around the web.
No "AI Bloat" by Default: Qwant is a traditional index-based search engine. It avoids the aggressive integration of generative AI that has bloated the energy consumption of other search services.
The Trade-off (The "Search Quality" Gap)
It is important to be realistic about the trade-off. Because Qwant does not use the massive index/crawlers of Google or Bing (and restricts the fallback to keep your data private), the quality of search results may occasionally be less precise or geographically relevant compared to what you are used to with Brave or Google.
When to Use It: Qwant is excellent for general queries and information gathering.
When It Might Struggle: If you are searching for very niche, local Northern California trail conditions or specific neighborhood/town/city/state events, you might find that Qwant has less localized data than an index that leverages broader U.S.-centric crawling.
If Qwant fails or doesn't give good local results, next best is a manual Brave search:
- Type "!br <search query>" in the address bar (don't include the quotes)
- Example: "!br what time does costco in novato close today?" (don't include the quotes)
- Example: "!br what time does costco in novato close today?" (don't include the quotes)
* 2nd Best: Use the Brave browser + Brave's built-in search
(NOT: Google Chrome, Apple Safari, Microsoft Edge for browsing - all specifically designed to steal your data, track your usage, etc)
(NOT: Google.com nor Bing.com for search - specifically designed to steal your data, track your usage, etc)
* 3rd Best: Use the Firefox browser + a non-Google/non-tracking search engine
- Qwant, Brave search, SwissCows.com, PreSearch, StartPage
- Not as solid privacy, but plants trees: Ecosia
- NO: DuckDuckGo - now doing Censorship + Tracking + under US Jurisdiction
* Bonus/Absolute Best: Use the Brave browser + Qwant search + ProtonVPN
- Without using a VPN, your ISP can legally watch/record whatever you do and sell this data
- IMF is recommending that your private browsing history be put on your credit report!
(You can guess where that's going, esp if you've looked into China Social Credit Scoring)
- Get a VPN you can trust = they can see your data
- Recommendations: ProtonVPN, NordVPN, iVPN, or Mulvad
More info on non-tracking search engines:
IF YOU'VE DONE EVERYTHING DOWN TO HERE AND WANT MORE: This post is pretty old and may be somewhat out of date, but possibly useful for those who want to dig deeper and have even more protection:
**********************************************************
DETAILS FOR VIEWING FOREIGN CONTENT VIA CYBERGHOST
(this example is for if you’re outside the US and want to view a geo-protected site in the US)
INSTALL:
Install/use CyberGhost VPN extension on Brave browser:
Enable CyberGhost VPN extension at brave://extensions/ (move slider in bottom right corner to the right)
Click on Details -> Enable "Pin to toolbar" (if not already selected)
TURN ON VPN:
Click on grey (might be yellow) "ghost" icon in browser toolbar
Click on <country> under "Connected to", select "United States" (if not already selected)
Big "On" button should be highlighted and should say "Connected" (if not, click on it)
[ OPTIONAL: Can double check by going to https://www.whatismyip.com/ (Should list US as Country) ]
You should now be able to view any content in the US (eg, tubi.tv)
TURN OFF VPN:
Click on yellow "ghost" icon in browser toolbar
Click on big "On" button - should become unhighlighted and should say "Start a Connection"
Yellow ghost in toolbar should turn grey
When you're ready to use it again, go to TURN ON VPN
~~~
If don't want to use any more:
Disable CyberGhost VPN extension at brave://extensions/ (move slider in bottom right corner to the left)
*******************
Just for fun...
EXCLUSIVE: A whistleblower’s discovery reveals the hidden surveillance system embedded in every smartphone, and why you need to scan your area today
