search

brianlovin / security-checklist

A checklist for staying safe on the internet
https://brianlovin.com/security
MIT License
926 stars 76 forks source link

Organization and Prioritization could be better #70

Open jLouzado opened 5 years ago

jLouzado commented 5 years ago

Would recommend that there be sections, related to risk tolerance and user-needs, which will help organize the recommendations better.

For example, what might be relevant for a journalist hiding out covertly in a hostile country would be very different from the average internet user.

Would be open to contributing, but I think if the average user sees a long list they're more likely to just give up entirely rather than dip their toes in and start the journey.

mknepprath commented 5 years ago

I had a similar thought - I was imagining maybe 4-6 visible list items that everyone should do, and then the rest (that may be unnecessary for most folks or are more "paranoid") are unlocked or expanded once those beginner items are completed. Nice suggestion! Thoughts, @brianlovin?

brianlovin commented 5 years ago

Yeah, I agree the list is getting a bit long and certain topics are for more advanced/paranoid folks. That being said, this list definitely isn't intended for informing a journalist hiding in a hostile country; there are dramatically different measures for someone with those stakes.

Anyways: not sure how to design/approach this long list problem yet except to be diligent in things we add. Yesterday I made it so that sections with more than 3 apps truncate to only show the first 3 apps by default. Small things like this may help reduce the initial information overload for new people.

dmleong commented 5 years ago

Might it be helpful to define the target audience for this site? For more advanced folks, this checklist may not be useful, but for less privacy-aware folks, this is a great place to start and not be overwhelmed

joachimesque commented 5 years ago

This is a good point @dmleong, perhaps there could be one card per threat level at the end (minorities facing harrasment, journalists, activists…), with basic advice and links to more resources

jLouzado commented 5 years ago

If we have a clear idea of who exactly this page is targeting then the content can be organised around that. Do we have any traffic data on that? Or maybe, any survey of what the average level of protection the users of this site are at?

Also to be noted, technical people don't always have the best opsec. Like doctors who aren't always the healthiest people 😅

dmleong commented 5 years ago

Also to be noted, technical people don't always have the best opsec.

Maybe a slider for how paranoid you are :joy: Looks like this is being discussed here https://github.com/brianlovin/security-checklist/issues/88

mknepprath commented 5 years ago

A slider that goes from Beginner to Threat Level Midnight. I like it.

jgallias commented 5 years ago

I do agree in general with making it as easy, friendly, and accessible to the widest possible audience... techie people are generally already aware or able to find and consume these resources, it's friends and family we need to be able to have them go through this list as they are able or with the right push