Question

I think one time when I was in a certain country when using Gotomypc.com I was the victim of a redirect from a secure site to a non-secure site and they probably intercepted my login information. So I think these things happen in various ways and I'm wondering how best to avoid it.

Answer 1

I've set up an ssh server running on port 443 and port 80 at home. This means I can create a regular ssh -D socks proxy when I'm in remote parts of the world. A lot of countries will block ssh ports, so it's a good idea to go through a different well-known port.

It may be a good idea to consider if this kind of setup is breaking local laws, so you don't get thrown into jail for simply using cryptography.

Answer 2

There are a few things you need to do.

First: Use TrueCrypt and set up a partition for your 'real' stuff and one for a profile you use when overseas.

The 'real' stuff can be whatever you do on a daily basis: Bank, shopping, etc. The profile for overseas travel is just in case your computer is picked up for inspection by customs. You want to them to see the computer and see that it works and give them access without raising any flags.

This doesn't mean you have anything to hide -- but if you're an American, it's safe to say that you have a good sense of privacy.

Second: Change your passwords BEFORE and AFTER going overseas.

Third: Use Tor for browsing overseas, and don't check your banking information. Use a phone or an ATM to check your balance.

Fourth: Don't do anything on an internet connection that you do not trust that you wouldn't want to share with everyone in the world. Pretend you're posting to the town-square bulletin board for the universe.

Obviously if your work offers SSH or a VPN mechanism for accessing your company's email, that'd be the best way to do it.

Answer 3

If you are traveling to China, CLEAN YOUR COMPUTER before you leave. They do take a full copy of many people's drives. Encryption software is illegal, so it's best to not have anything that's just for encryption installed or otherwise sitting around on it. Many just bring a computer with an empty (or no) hard drive and an official Ubuntu CD. They don't seem to care about that.

In truth, they likely won't inspect your physical computer. Use Ubuntu to tunnel your remote desktop or browser sessions to your home/office computer, and don't carry anything around with you. Don't download or upload anything, even photographs of public buildings, in the clear.

Answer 4

Instead of the ssh route mentioned in the first response, spend a few extra minutes and install openVPN. That way you can run all your traffic, including DNS lookups, UDP stuff, email, etc., over the secure path.

Answer 5

If a government wants to spy your computer while on their country, there is nothing to prevent it. Among the ways to proceed:

• luggage control, including laptop, when entering or leaving the country
• discrete visit to your hotel room

You may even not notice that your laptop content has been copied.

The only protection is to avoid carrying sensible data when travelling.

Answer 6

Go take a look at the IronKey. I heard about this a year back on the CyberSpeak Podcast. I purchased it a little bit for the security factor and a lot for the cool factor. It has come in handy. If you're in a place of concern, you run everything through the apps on the encrypted thumb drive. They even provide a secure routing network to anonimize where you are coming from so you can't be tracked by a web site. Plus it's SSL encrypted. The device is hardware encrypted and tamper proof. It will even self destruct on repeated bad password tries. Impervious to scanning by electron microscope.

Answer 7

I can't believe how many insane people answered this question. Like the one claiming that China takes a copy of the whole hard disk for MANY people. How many times have you been to China, sweetheart? Did it ever happen to you, or are you just spreading FUD like the rest of the idiots who answered this question. The same idiot actually claimed that people go travel with formatted PCs. Huh.

If you're not doing anything illegal in the US you shouldn't be afraid of anything, hell many countries have much more relaxed rules when it comes to accessing the Internet.

And no, you're not posting to the town-square bulletin board for the universe.

You're not James Bond, and from your idiotic question I think you never will be, stop kidding yourself, nobody's spying on you. Governments have much more important stuff to do than spying on crazy people such as yourself.