Main Page: Difference between revisions

From aangat.lahat
Line 35: Line 35:


=== Summary ===
=== Summary ===
A lot of attention has been put towards minimizing the amount of data collected on this server. Event and access logs are never logged even in memory. You're also very much welcome to access this website over Tor or a VPN whenever you use the services on this website.
A lot of attention has been put towards minimizing the amount of data collected on this server. Event and access logs are never logged even in memory. You're also very much welcome to access this website over Tor or a VPN as well.


Note, however, that a lot of things are not encrypted on this server right now so I (and, if seized, the US government) have access to the unencrypted data like sent emails and chats and attachments. Make sure to use encryption as much as you can when you use email (get people to use [https://mailvelope.com/en/ Mailvelope], [https://delta.chat/en/ Delta Chat], [https://gpgtools.org/ GPGTools], or [https://support.mozilla.org/en-US/kb/introduction-to-e2e-encryption#w_how-to-use-openpgp-end-to-end-encryption-with-thunderbird Thunderbird] ) or when using Jabber (clients like [https://conversations.im/ Conversations], [https://chatsecure.org/ ChatSecure], [https://dino.im/ Dino], or [https://gajim.org/ Gajim] come with encryption) or when uploading files (check out [https://hat.sh/ Hat.sh] or [https://github.com/HACKERALERT/Picocrypt Picocrypt]) so that nobody can access your data. Your information will of course never be viewed unless I'm investigating severe abuse or spam or if it gets into the hands of law enforcement.
Note, however, that a lot of things are not encrypted on this server right now so I (and, if seized, the US government) have access to the unencrypted data like sent emails and chats and attachments. Make sure to use encryption as much as you can when you use email (get people to use [https://mailvelope.com/en/ Mailvelope], [https://delta.chat/en/ Delta Chat], [https://gpgtools.org/ GPGTools], or [https://support.mozilla.org/en-US/kb/introduction-to-e2e-encryption#w_how-to-use-openpgp-end-to-end-encryption-with-thunderbird Thunderbird] ) or when using Jabber (clients like [https://conversations.im/ Conversations], [https://chatsecure.org/ ChatSecure], [https://dino.im/ Dino], or [https://gajim.org/ Gajim] come with encryption) or when uploading files (check out [https://hat.sh/ Hat.sh] or [https://github.com/HACKERALERT/Picocrypt Picocrypt]) so that nobody can access your data. Your information will of course never be viewed unless I'm investigating severe abuse or spam or if it gets into the hands of law enforcement.

Revision as of 11:43, 19 July 2024

What is Aangat Lahat?

Kamusta! Welcome to Aangat Lahat. In Tagalog, Aangat means "to lift up" or "to rise up" and lahat means "all" so aangat lahat to me can mean either "we should lift each other up" as in mutual aid or "we should all rise up" as in to rebel against oppressive systems like capitalism and governments.

So the services under Aangat Lahat is my way of offering some sort of digital mutual aid for online communications for people within my affinity. The amount of time and resources that I can dedicate to support and dealing with abuse is limited, so getting access is reserved for people I know.

Let me know if you're interested in an account by sending me a message at jag@aangat.lahat.computer.

For Current Members

If you have an account, you can find the dashboard in this page. From there, you can log in and manage the services that are available to you. If you run into any issues, check out the status page to see if the services are running or contact me on:

Services running

Communications

Members have access to various communications and productivity tools. These are running on FreedomBox and Debian under the hood.

  • 📮 Email
    • Your own email address with unlimited aliases.
  • 🗨️ Jabber
    • Instant messaging with audio/video calls.
  • 💽 File sharing
    • Share files like images and videos.
  • 📅 Calendar, journals, contacts, and to-do lists
    • You can use it for productivity stuff, too!
  • 🗞️ RSS reader
    • Follow blogs, podcasts, etc.

Delta Chat

I also provide an email service that's meant to be used with the Delta Chat instant messenger. Unlike the other services, however, anyone can use this anonymously. That means you don't have to contact me to create an account! Just download Delta Chat and tap or scan the QR code on the page. It gives you unlimited, random email addresses and it will only allow you to send encrypted emails. Check it out on chika.aangat.lahat.computer.

Privacy and security

Summary

A lot of attention has been put towards minimizing the amount of data collected on this server. Event and access logs are never logged even in memory. You're also very much welcome to access this website over Tor or a VPN as well.

Note, however, that a lot of things are not encrypted on this server right now so I (and, if seized, the US government) have access to the unencrypted data like sent emails and chats and attachments. Make sure to use encryption as much as you can when you use email (get people to use Mailvelope, Delta Chat, GPGTools, or Thunderbird ) or when using Jabber (clients like Conversations, ChatSecure, Dino, or Gajim come with encryption) or when uploading files (check out Hat.sh or Picocrypt) so that nobody can access your data. Your information will of course never be viewed unless I'm investigating severe abuse or spam or if it gets into the hands of law enforcement.

Also, consider deleting old data that you no longer need as well if possible.

Information collected

Email messages

Email messages that are sent and received can be accessed by the administrator. They are not encrypted automatically at rest so the contacts of the email including who it was sent to can be read. I will never look into your emails, but I encourage you to check out tools like Mailvelope, Delta Chat, GPGTools, or Thunderbird with your contacts to encrypt them. Alternatively, I provide a Delta Chat specific server that only allows encrypted connections.

Jabber

Similarly to email, Jabber and IRC messages are also unencrypted. I encourage you to look into Conversations, ChatSecure, Dino, or Gajim when using Jabber with your contacts to encrypt your messages.

Files uploaded

Files uploaded on Nextcloud are encrypted, but the keys can be accessed by the administrator. I encourage you to use Hat.sh or Picocrypt before uploading any sensitive files.

CalDAV (calendar) and CardDAV (contacts) entries

Calendar events, contacts, to-do lists, and journals that you store on Radicale are not encrypted and can be accessed by the administrator.

RSS feeds being followed

The blogs and podcasts that you follow on Tiny Tiny RSS are not encrypted and can be accessed by the administrator.

Information not collected

IP addresses

IP addresses are not logged to memory or to the disk. You're also very much welcome to access this website over Tor or a VPN!

Event logs when using the service

The various events created by a member (time and date of login, page visits, number of logins, etc.) are not logged.

Name, phone number, address, or financial information

Real names, phone numbers, addresses, or financial information is not requested when a member signs up. Only a username is necessary for any member.

Member's system details

There's no browser fingerprinting or logging of operating system information on the various systems.

Operated by a human

I'm doing my best to limit the amount of data stored on the server, and I'm continuously vigilant about protecting people's data. That said, I can make mistakes so some data or metadata may find its way into log files or backups and may not be properly expunged. Please also do your best to delete your data frequently (Thunderbird lets you do this and Delta Chat, too) and also encrypt them as much as you can. Thank you!

Donations

If you find this service useful, please consider making a donation at Ko-fi. Servers are not cheap, and it takes time to maintain it so help me out if you're able to!