HACKER Q&A
📣 ahmedfromtunis

My country may be in the midst of a coup – how should I get prepared?


I'm sure some of your heard about what's happening in my country, Tunisia. (tldr: the president made some 'unconstitutional' moves to thwart rampant corruption. Five days later, everything seems fine ... for now).

Even though it seems the president is keeping his promise on freedom of speech, I don't think it would be extravagant to get prepared for the worse.

So, what should I do to keep myself safe online?

Edit: I'm not worried about my physical safety, I'm just asking about protecting my privacy online if the government decides to go full on Big Brother.

P.S.: I tried to submit this question with a throwaway account, for obvious reasons, was told to "please slow down".


  👤 slim Accepted Answer ✓
Hey Ahmed I live in Tunisia too. You seem to be young enough to not remember how it was to live under the dictatorship 10 years ago. I'm a political activist from the Pirate Party, and I've been arrested twice under the dictatorship and I'm not as worried as you are. Send me an email if you want to chat. I'm slim@pirate.tn

👤 floxy
Download and start using the Tor browser as soon as possible, for as much as you can.

https://www.torproject.org/download/

Disable javascript whenever possible. Check your browser fingerprint.

https://coveryourtracks.eff.org/

Practice grey man tactics in your online and real life situations.

https://duckduckgo.com/?q=grey+man

Download the U.S. Army survival guide, and others. Download other books, audiobooks, movies, games, and other entertainments to your physical devices in case the internet goes down, or certain services start to get blocked in your country/city/neighborhood. Get at least a small battery backup solution to keep your devices running if the power goes out. Augment with solar charging if possible.


👤 P-ala-din
What's kinda creepy in the Tunisian situation, is the amount of false information being spread on social media, especially Facebook.

For example, there are several posts of a screenshot of an aljazeera post, next to a not fully loaded screenshot of Blinken's twitter claiming that aljazeera mistranslated the tweet.

The narrative they are trying to push is that aljazeera is biased and therefore the president was justified in ordering its office raided.

Had the tweet's page been allowed to fully load, it would have shown that Blinken's tweet was part of a thread where the second tweet matches what Aljazeera said.

src: https://old.reddit.com/r/Tunisia/comments/out08w/influencers...

Even creepier, I saw that one of my acquaintances had shared one such post. I commented to inform them of the situation and linking the official tweet thread.

My comment got removed for "spam" (I only posted exactly one comment, once) and there was no option to appeal the removal. I contacted her through private channels and she claims she didn't even see the comment. (I presume the automated systems saw that tweet's link was being posted a lot??)

So not only is the false information kept up but attempts to correct it through discussion are automatically removed.


👤 toast0
> So, what should I do to keep myself safe online?

You may not be able to keep yourself online at all. Turning off the internet is part of the script for dealing with unrest.

If you can, try to setup a way to dial-up a foreign ISP with a modem. xs4all used to be a goto provider for this, but other comments say they're shutting down their dial-up service October 1. Might be useful as an available target to test with though.

Sometimes it's less expensive for outside countries to call you than for you to call out, but a quick look shows rates to Tunisia to be quite high, so probably figure out where is the least expensive to call, and then see if you can find a dial-up ISP there, and see it you can get a connection. Landline is obviously preferred here, but expense might be too great.

POP3 + TLS email with GPG if you can make it happen and a contact outside the country to help would work the best. International calling could get cut off too, of course, but it might be done later. And calling internationally might get you put on a list, so there's that, too.

Good luck and stay safe.


👤 icey
Download https://tails.boum.org/ and put it on a thumb drive. Keep the drive somewhere safe.

If you use any cryptocurrencies, put them in a cold wallet and encrypt + hide your keyphrase (not on the usb drive, somewhere that's safe and away from where you are).

After that... keep your head down and don't make yourself a target!

One additional note, even though you said you're not worried about your physical safety -- set up meeting points with your loved ones away from your home in case something should happen and you can't get back there. If someone runs into trouble and can't communicate, it can be helpful to know where to meet up (same suggestion I'd give to someone moving somewhere with lots of natural disasters, fwiw)


👤 h2odragon
Start you some alternate, backup accounts on sites that you might want to keep using. have email accounts at several providers and scatter the other accounts among them. Premade throwaways, if you will, to prevent what just happened to you repeating.

Deleting things off the net isn't reliable; but if you've said things you might worry about later you can go delete them now and at least you'll be able to point to that as a disavowal if need be. If you're really worried about something you've said, maybe update it with a retraction an/or publish such separately.

And of course VPNs etc etc... act like you're selling horse porn and keep some in stock, just for cover.


👤 Aachen
Might offline maps be helpful? For getting around when Internet access is pulled, convenience but also if you actually want to see how to get to another town or country without taking the obvious roads. Downloading relevant maps from osmand.net/download.php onto a hard drive and knowing how to load it on your phone might be a way to do that. Or just keep it on your phone if you have the space.

What about power, do you think they'd pull power from regions so you don't have mobile phones to communicate anymore? Phones are efficient enough that hand charging should be pretty doable, so you can charge whenever you need to access any info (be it a map, or other offline info that you downloaded).


👤 nickthemagicman
I would make sure I have all of my documents straight.

Those institutions may crumble and you'll be hard pressed to get replacements if you don't already have. Passport, Id's, etc.

Would move out of the capitol city if possible.

Basically prepare for the equivalent of a natural disaster. Food, water, gasoline, radios. You can google that kind of thing.

Get as much cash as possible.

I don't know what gun laws are like but you could proabaly get ammo and guns and hide them somewhere. Those are always valuable during crisis.

Other people had great ideas for the digital life.


👤 jrexilius
One thing you need to do is establish a set of pre-shared keys or passpharses with someone you trust outside of the country. Take a look at https://www.openkeychain.org/. You can take a look at a guide I wrote for people travelling into hostile network areas and adapt some of it to your perosnal circumstance: https://www.anomie.tech/craft/secure-tunnel/ Get yourself a good high gain directional wifi antenna to support physically distant network connections. Make friends with any HAM radio operators in your country. Maybe buy your close friends some out-of-band communications tools such as https://gotenna.com/ If you'd like more advice feel free to reach out to me. [EDIT] forgot to add, it is very much worth having a satellite channel for basic communications. The cheapest, most consumer friendly is the Garmin https://discover.garmin.com/en-US/inreach/personal/

👤 batuhanicoz
I’m from Turkey and I’ve been wandering for a while now what can I do to still have internet access if the government decides to shut everything down.

I’ll use thread to ask: what would be the cheapest way to have an emergency internet access? I guess Starlink kinda solves this problem but paying 100USD/m is a lot for a backup connection.


👤 IfOnlyYouKnew
Make low key contact with a journalist you trust from one of the big agencies or papers, i. e. Reuters/AP/NYT/CNN, maybe Spiegel.

When the shit hits the fan, they'll be interested in even mundane are-the-shops-still-stocked / what-do-people-think etc. information. After it's over, they'll come and need "stringers", driving them around, translating, arranging interview partners, etc.

They have no trouble paying a few hundred $ per day (for the full-time role), and it can lead to something more permanent, abroad, whatever.

But, of course, be absolutely sure you're safe. The risk isn't so much zero-day exploits used to get into your phone, but your good friend selling you out, or someone fining some notes you threw away.

That's only if any of the parties actually object to the international press, which is relatively rare–domestic news is dangerous, international is PR. For 35 years, every time the US has bombed some country, there were CNN journalist on the ground. And while it has on occasion gone wrong, STDs have been more of a risk than the host countries.

Edit: just saw that you are a journalist, so this fits. I'd probably tend to prefer to appear to be as boring as possible. So unless you're already known anyway, driving a taxi may be preferable to running around with a notepad. And while encryption is better than plain text for anything that matters, having no data whatsoever is preferable to having encrypted data.

Also, nobody here knows what they're talking about. If in doubt, trust your instincts.


👤 throwaway984393
Take the time to create a bunch of throwaway accounts; e-mail, social media, VPN, etc. Don't use them from your personal/work/mobile ISP, save them for VPNs/cafes/etc. Reserve any "questionable" online activity for those accounts on connections not linked to you. Basically, be a "normal" internet user in daily life, but if there is a crackdown, use those alt accounts from a non-standard connection.

👤 SEJeff
Please read through all of https://ssd.eff.org

Their Surveillance Self Defense project was literally created for people like yourself. Stay safe!


👤 zoomablemind
Hopefully the situation would stabilize soon.

Meanwhile, if you consider yourself more in a danger to become a 'collateral damage', so to speak, in a power struggle that 'others' do, then the most reasonable strategy could be just staying-low and having sufficient resources to live through such time.

Especially so if you have something that may make your position vulnerable (family, assets, business, prominence etc).

If you don't have an imminent need to flee (hopefully your assessment is sound), then not turning attention to yourself should let you weather this period of instability, just as for the most part of the populace.

Know your friends! Don't self-incriminate, know what you keep on your devices and storage. Be like everybody, just live your life, if you can afford not to choose a side.

Have a plan B (even C) about money, not just relying on the routine access way.

Freedom of speech _is_ important. However, if you don't consider yourself part of the struggle, then just wait it out.

Stay healthy!


👤 boulos
Have you / your journalist group considered using Outline [1]?

I think you can get by on either the GCP or AWS free tiers for hosting the server (and/or DO at $5/month for unlimited bandwidth). At that point, you’ve got your own, controllable VPN that looks like a major cloud provider. So only if we they decide to really clamp down on “block all GCP/AWS/DO IPs” do you lose access.

[1] https://getoutline.org/


👤 underseacables
I think it might be helpful to transfer information that you have online that is critical, such as contacts, to hard copy. A lot of folks have mentioned some very good ways of keeping yourself safe online, but in a coup, I think some of the first things to go we’re going to be Internet access and power. Having contact information and other important details that you usually keep online, could be very useful.

👤 supperburg
I often wonder what I’ll do when instability comes to the United States. The only solution seems to be having more than one citizenship. I think that people who are stuck in one country will be looked down upon like the way many people look down upon the uneducated. Both groups are in a sense transient. Global citizens will have a much higher standard of safety and stability.

👤 squarefoot
Disclaimer: I don't know about Tunisia, take this as general advice.

If you use encryption at any level, always do that in a way that offers plausible deniability. If "they" suspect you are carrying sensitive information of national security importance, and you can't or don't want to decrypt that information on request, you, or someone you love, will likely be tortured to extract from you that information.

I read suggestions about using Ham Radio gear for long distance communications or slow Internet connection. Keep in mind that encryption is forbidden for Ham radio operators; you would immediately draw the attention, and finding a rogue transmitter is extremely easy even in case you transmit for very short intervals. Keep Ham Radio gear at hand as it could become useful, but don't use it thinking of privacy and anonymity. If things really go south, its ideal use is on a vehicle, each time from a different place.

Trust no one.


👤 brudgers
Against the resources of a nation state, you are no match.

Don't fool yourself.


👤 ceilingcorner
Try to shift your income to something extremely apolitical.

If you are a programmer, go work for a company that makes billing software or manufactures pottery. If you aren’t, go be a chef, accountant, or taxi driver. Anything that doesn’t require you to share your opinions on sociopolitical issues.


👤 hereforphone
Get a VPS in America or Europe. Install OpenVPN and have it listen on port 80 or 443. Your VPN isn't on a blacklist, of known VPNs, so you're golden. Source: used my own VPN in Islamic dictatorships before.

👤 system2
You can simply prepare yourself by not doing anything online. Including asking. If they are looking for an excuse, don't stick out.

👤 mikebos
Get a protonvpn account and protonmail address. Make a linux desktop VM without credentials and keep that safe. When you wan to search for something make a copy, and nuke it afterwards. Obviously a live cd would work too.

If you need to secure files use the proton drive beta for example.

The proton suite of tools is actually quite good and better then DIY or several cheap as dirt providers.


👤 anonAndOn
Burner phone(s)? (cheap, throwaway, prepaid in cash)

Also, this guide is a good starting point. [0]

[0]https://cltc.berkeley.edu/2021/01/20/cltc-report-an-evaluati...


👤 yongjik
Disclaimer: I know nothing about Tunisia.

If we believe your assessment that you're not worried about your physical safety, there's little you should worry about your "online" safety. Realistically, a government can't go Big Brother online while people enjoy their freedom in the real world - how would that work?

The one thing I can think of is if you frequently write opinions that the majority of Tunisians disagree with - it doesn't matter whether they're pro- or anti-government, if things get heated, people will search for targets to fix their rage on. People, people can be the worst. So try not to post too many incendiary opinions and keep them far from your real identity.

Also (it should be obvious to you by now, but) don't put too much weight on the opinions of people who can't spell your ruling party's name. (Yes, that includes this comment!) If I had a dime every time someone said "Get out of South Korea ASAP because there's going to be a war!" ...


👤 markus_zhang
If the government really wants you it can always do so or purchase services to do so. The safest thing is to stay low. If you were told to "please slow down", you might as well already been monitored somehow by the government.

👤 PaulHoule
Get out of the capital city.

👤 aazaa
> Edit: I'm not worried about my physical safety, I'm just asking about protecting my privacy online if the government decides to go full on Big Brother.

What makes you think it hasn't already?


👤 chakhs
As someone from a neighboring country who witnessed at least 2 such episodes, I advise to just relax it's not that serious at the moment :)

👤 mardiyah
buy & store basic needs as much as possible

👤 arkitaip
You need to make plans to leave the country in an orderly way so you can move somewhere safe with job opportunities.

👤 guest159835
There is no privacy if you are a target (even offline). Delete all data, format your disks, delete every trace.

👤 bjourne
Why on earth are you asking HN readers for advice rather than your own countrymen and your friends!?

👤 orestk

👤 dkdk8283
Political asylum in a foreign country until the unrest works itself out.

👤 jbverschoor
There’s no privacy online

👤 jakupovic
Get outta there

👤 xxx-or-xxxx
> I tried to submit this question with a throwaway account, for obvious reasons, was told to "please slow down".

The algo is very aggressive in preventing you from posting too frequently... happens to me all the time (probably because the admins are required to review all comments and posts)


👤 jbverschoor
Get some hats and prepare to celebrate

👤 kaminar
For a moment, I was expecting a different country...not to worry, we'll get it back.

👤 908B64B197
Have you considered, as an able bodied young man, to do your part for the future of your country?

👤 lilsoso
Should you need to flee the country, you'll need access to money. You could deposit money into cryptocurrency 'stable coins', which are generally backed 1:1 by other currencies. The stablecoin called USDC would work for this purpose: backed 1:1 by the US Dollar. That way you will have access to money from any country.

Berkeley has a report "An Evaluation of Online Security Guides for Journalists" which may prove helpful here: https://cltc.berkeley.edu/wp-content/uploads/2021/01/Online_... .

I also remember University of Toronto had software tools to help journalists and political dissidents communicate securely online, however I don't have links at the moment.

You probably want to purchase multiple VPN services, from smaller providers, as the bigger ones will likely be blocked entirely. You also want to limit ad tracking as much as possible.

Your phone will likely leak your location and provide excellent means for tracking you. I am not an expert on this subject. Use an iphone, update to the latest ios, limit ad tracking in the settings, and disable background app communication (cut off internet access for most apps entirely). Use a VPN on your phone. See this article for an idea of how pervasive the tracking might be: https://www.nytimes.com/interactive/2019/12/19/opinion/locat...