Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat!: Add threat model labels (continues #2605) #2689

Merged
merged 1 commit into from
Aug 10, 2024
Merged

Conversation

redoomed1
Copy link
Member

@redoomed1 redoomed1 commented Aug 2, 2024

Changes proposed in this PR:

  • Add threat model labels

Closes #2605

If you have any feedback or suggestions about anything regarding to this feature, feel free to leave a comment on this pull request or on the forum post linked above!

There is also a readable list of the tool categories and the threat model labels added to each of them here. If you have any questions or suggestions about the list in general or about specific categories, feel free to chime in using the same methods stated above!

To Do

All done!
  • Port labels from feat: Add threat model labels #2605
  • Add signpost on tools.md ("You may see these icons on tools pages...")
  • Add extra explanations for tools which protect against an additional/different threat than the others on the same page
    • uBlock Origin Lite
    • Peergos
    • Mullvad Browser
    • iVerify Basic
    • ? dnscrypt-proxy
    • Multi-platform encryption tools
    • ? Send, OnionShare, and Syncthing
    • ? Secure Camera
    • ? PhotoPrism
    • ? Nextcloud and CryptPad
    • SimpleX Chat and Briar
  • Add captions to labels so that they are more useful for readers on mobile devices
  • Create comment on this PR that presents each tool category and the ported labels in a readable format so that we can discuss whether the added labels accurately apply to each tool category
  • Create forum post in the existing Site Development thread above to invite community members to preview this feature and provide feedback

  • I agree to the terms listed below:
    Contribution terms (click to expand) 1) I am the sole author of this work. 2) I agree to grant Privacy Guides a perpetual, worldwide, non-exclusive, transferable, royalty-free, irrevocable license with the right to sublicense such rights through multiple tiers of sublicensees, to reproduce, modify, display, perform, relicense, and distribute my contribution as part of this project. 3) I have disclosed any relevant conflicts of interest in my post. 4) I agree to the Community Code of Conduct.

Copy link

github-actions bot commented Aug 2, 2024

Your preview is ready!

Name Link
🔨 Latest commit 745f0d1
😎 Preview https://2689--glowing-salamander-8d7127.netlify.app/

@redoomed1 redoomed1 force-pushed the threat-model-labels branch from 8af6982 to 9dce420 Compare August 3, 2024 01:12
@redoomed1 redoomed1 added the c:enhancements new features or other enhancements to the website itself label Aug 4, 2024
@redoomed1 redoomed1 force-pushed the threat-model-labels branch from 26c3ad1 to 9114eff Compare August 4, 2024 03:49
@redoomed1
Copy link
Member Author

redoomed1 commented Aug 4, 2024

Note: +[Threat] indicates that a tool defends against this threat in addition to the other threats in the same tool category. For example, Peergos protects against censorship in addition to passive attacks and service providers.

Unified list of tool categories and appended threat model labels

Alternative Networks

  • Anonymity, Service Providers, Mass Surveillance, Surveillance Capitalism

Alternative Android Distributions

  • Targeted Attacks, Passive Attacks

Browser Extensions

  • Surveillance Capitalism
  • uBlock Origin Lite
    • +Passive Attacks

Calendars

  • Passive Attacks, Service Providers

Cloud Storage

  • Passive Attacks, Service Providers
  • Peergos
    • +Censorship

Cryptocurrency

  • Anonymity, Mass Surveillance, Censorship

Desktop Browsers

  • Surveillance Capitalism
  • Mullvad Browser
    • +Mass Surveillance

Device Integrity

  • Targeted Attacks
  • On-Device Verification
    • +Passive Attacks
  • iVerify Basic
    • +Passive Attacks

DNS Resolvers

  • Surveillance Capitalism

Document Collaboration

  • CryptPad
    • Passive Attacks, Service Providers

Email Aliasing

  • Surveillance Capitalism, Public Exposure

Encryption

  • Cryptomator
    • Passive Attacks + Service Providers
  • Picocrypt, Veracrypt
    • Targeted Attacks
  • OS Full Disk Encryption, Command-Line Tools
    • Targeted Attacks
  • OpenPGP
    • Targeted Attacks, Passive Attacks, Service Providers

File Sharing

  • Service Providers
  • OnionShare
    • +Anonymity, Mass Surveillance, Censorship

General Android Apps

  • Secure PDF Viewer
    • Targeted Attacks, Passive Attacks

Language Tools

  • Service Providers, Mass Surveillance, Surveillance Capitalism, Censorship

Mobile Browsers

  • Surveillance Capitalism

Mobile Phones

  • Targeted Attacks, Passive Attacks

Multi-Factor Authentication

  • Targeted Attacks

Notebooks

  • Service Providers

Passwords

  • Targeted Attacks, Passive Attacks, Service Providers

Photo Management

  • Passive Attacks, Service Providers

Real-Time Communication

  • Passive Attacks, Service Providers, Mass Surveillance, Surveillance Capitalism
  • SimpleX Chat and Briar
    • +Censorship

Security Keys

  • Targeted Attacks, Passive Attacks

Tor Browser

  • Anonymity, Mass Surveillance, Surveillance Capitalism, Censorship

VPN Services

  • Surveillance Capitalism

@redoomed1 redoomed1 changed the title feat: Add threat model labels (continuing from #2605) feat!: Add threat model labels (continues #https://github.com/privacyguides/privacyguides.org/pull/2605) Aug 4, 2024
@redoomed1 redoomed1 changed the title feat!: Add threat model labels (continues #https://github.com/privacyguides/privacyguides.org/pull/2605) feat!: Add threat model labels (continues https://github.com/privacyguides/privacyguides.org/pull/2605) Aug 4, 2024
@redoomed1 redoomed1 changed the title feat!: Add threat model labels (continues https://github.com/privacyguides/privacyguides.org/pull/2605) feat!: Add threat model labels (continues 2605) Aug 4, 2024
@redoomed1 redoomed1 changed the title feat!: Add threat model labels (continues 2605) feat!: Add threat model labels (continues #2605) Aug 4, 2024
@redoomed1 redoomed1 force-pushed the threat-model-labels branch from 18942eb to a933da0 Compare August 5, 2024 03:21
@privacyguides-bot
Copy link
Collaborator

This pull request has been mentioned on Privacy Guides. There might be relevant details there:

https://discuss.privacyguides.net/t/implement-threat-model-labels/18659/6

@redoomed1 redoomed1 marked this pull request as ready for review August 5, 2024 16:50
@dngray dngray force-pushed the threat-model-labels branch from 0f80837 to 745f0d1 Compare August 9, 2024 10:01
Signed-off-by: kimg45 <138676274+kimg45@users.noreply.github.com>
Signed-off-by: blacklight447 <niek@privacyguides.org>
Signed-off-by: Daniel Gray <dngray@privacyguides.org>
@dngray dngray force-pushed the threat-model-labels branch from 745f0d1 to 95d6ec9 Compare August 10, 2024 04:39
@dngray dngray merged commit 95d6ec9 into main Aug 10, 2024
10 checks passed
@dngray dngray deleted the threat-model-labels branch August 10, 2024 04:40
@privacyguides-bot
Copy link
Collaborator

This pull request has been mentioned on Privacy Guides. There might be relevant details there:

https://discuss.privacyguides.net/t/2024-08-19/20197/1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c:enhancements new features or other enhancements to the website itself
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

5 participants