Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/securityfirst/Umbrella_android

Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with a kidnap. Umbrella has best practice guides in over 40 topics in multiple languages. Used daily by people working in high risk countries - journalists, activists, diplomats, business travelers etc.
https://github.com/securityfirst/Umbrella_android

activism advice crypto encryption hacking human-rights-defenders infosec journalism lessons opensource protest risk security snowden travel umbrella

Last synced: 22 days ago
JSON representation

Host: GitHub
URL: https://github.com/securityfirst/Umbrella_android
Owner: securityfirst
License: gpl-3.0
Created: 2014-11-20T09:39:45.000Z (about 10 years ago)
Default Branch: master
Last Pushed: 2024-05-27T15:40:30.000Z (7 months ago)
Last Synced: 2024-08-05T17:39:07.079Z (4 months ago)
Topics: activism, advice, crypto, encryption, hacking, human-rights-defenders, infosec, journalism, lessons, opensource, protest, risk, security, snowden, travel, umbrella
Language: Kotlin
Homepage: http://www.secfirst.org
Size: 84 MB
Stars: 261
Watchers: 19
Forks: 61
Open Issues: 14
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: code_of_conduct.md

Awesome Lists containing this project

awesome-hacking-lists - securityfirst/Umbrella_android - Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with a kidnap. Umbrella has best practice guides in ove (Kotlin)

README

# Umbrella

![](/howtouse.gif?raw=true)

Umbrella is an Android mobile app developed by [Security First](https://www.secfirst.org) that provides human rights defenders with the information on what to do in any given security situation and the tools to do it. It allows the user to choose what they want to do, such as: protect data; securely make a call/email; securely access the internet; plan secure travel; protect their office/home; conduct counter-surveillance; or deal with kidnapping, arrest or evacuation. Once a situation is chosen, the app outlines what to do and what tools to use given your circumstances. This is followed by a simple checklist of recommended actions that can be customised, saved and shared securely. Umbrella’s Feed also provides users with an up-to-the-minute account of potential risks in their chosen location.

## Installation on Android

F-Droid fingerprint: 39EB57052F8D684514176819D1645F6A0A7BD943DBC31AB101949006AC0BC228

## Available on iOS

[Umbrella is available on iOS](https://github.com/securityfirst/Umbrella_iOS) devices too.

## Example Usage
Umbrella is designed for everyone (people looking to increase their security, folks living in high-risk areas, regular travellers, business people, techies, journalists, NGO staff, aid workers, human rights defenders, social workers, environmental activists, etc).

However, when we built Umbrella we tried to keep in mind the story of Glen Greenwald and Edward Snowden. Greenwald couldn't communicate with Snowden at the start because he found it cumbersome to set up encryption (he nearly missed one of the biggest stories of the decade because of this!). Also, when he (and Laura Poitras) travelled to Hong Kong - they didn't have much knowledge about how to meet securely with Snowden and detect surveillance. This is a common problem for journalists and activists. Umbrella is designed to solve this problem (and others) by having nearly everything they would have needed to know in one place - in their pocket.

## Main Parts of Umbrella

**Introduction:**
This is the part the user sees first. It explains briefly how the app works and the basic terms and conditions.

**Menu:** The bottom navigation menu is the main way for a user to navigate. It lists the feed, forms, lessons (with tool guides), checklists and account.

**Feed:**
The feed contains security feeds from places like the UN Relief Web and the US Centers for Disease Control. You enter your location (and how often you want to be updated). Everytime a new update is released (e.g a disease outbreak in your location), the information comes up on the dashboard.

**Lessons:**
Lessons are where users can learn about topics and things that they can do to improve their security. Some of the lessons have different levels (Beginner, Advanced, Expert) depending on your needs, ability, and risk. Each module is broken down into sections. At the end of each module is a list of other resources and further reading.

**Tool Guides:**
These are detailed guides about how to use the software and apps mentioned in the lessons.

**Checklists:**
Checklists are quick and easy references to help users implement the advice in the lessons. You can tick them off as you complete each item. Items can be edited. You may also create custom checklists. If you start ticking a checklist, you will then see it on the Checklists page. Checklists can also be shared through other apps such as your email.

**Forms:**
Forms allow a user to quickly fill out and share important information about issues such as their travel plan in a high-risk location or report on a digital/physical security incident.

## Lessons

The general flow of lessons is presented in order to replicate the typical way that a user works. Protecting their information -> Communicating with other people -> Arranging and travelling to a location -> Doing their operations and work -> Dealing with personal issues that may arise-> Seeking support if something goes wrong.

***These are the lessons currently in Umbrella.***

### Access your risk

- Security Planning

### Information

These lessons mostly cover the security of information that is stored on your computers.

- Managing information
- Malware
- Passwords
- Protecting Files
- Safely Deleting
- Backing Up
- Protect your workplace
- Workplace raids

### Communications

These lessons mostly cover the security of information when it is sent or received.

- Mobile Phones
- Making a call
- Sending a message
- Email
- Censorship
- Online Privacy
- Phishing
- Radios and satellite phones
- Online abuse

### Travel

These lessons cover the security of travelling in high-risk areas.

- Preparation
- Borders
- Vehicles
- Checkpoints
- Protective Equipment

### Work

These lessons include topics that may affect you in your work.

- Meetings
- Being followed
- Protests
- Dangerous Assignments
- Public Assignments
- Public Communications
- Whistleblowers

### Incident Response

These lessons cover how to respond to events.

- Arrests
- Evacuation
- Kidnapping
- Sexual Assault
- Terrorism

### Stress
- Stress

### Emergency Support

Explains places to get extra help if you have a problem.

- Physical
- Digital

### Tools

These are detailed guides about how to use software and apps mentioned in the lessons. These are the tools currently covered in the tool guide.

- Messaging
* Mailvelope
* ObscuraCam
* Pidgin
* Psiphon
* Signal for Android
* Signal for iOS
- Encryption
* Encrypt your iPhone
* k9 & Open Keychain
* KeePasXC
- PGP
* PGP for Linux
* PGP for MacOS
* PGP for Windows
- Tor
* Orbot & Orfox
* Tor for MacOS
* Tor for Linux
* Tor for Windows
- Files
* Cobian Backup
* Recuva
* VeraCrypt
- Other
* Android
* Facebook
## Glossary
Contains explanations of the various terms used in the app.

## About
Explains the licences that we use for and by Umbrella. Also says a big THANKYOU to everyone whose work we built on to make it happen.

## Dashboard Feed Sources
![](/DASHBOARDLOGOS.png?raw=true)

These are the sources that we currently include for real-time updated security Feeds. For privacy reasons, users never connect directly to these services. We are always looking for more useful sources that will help users keep updated on the move.
* [ReliefWeb / UN](http://reliefweb.int): excellent physical security updates that amalgamate information from the UN and various NGOs - though not available in every country
* [Foreign and Commonwealth Office](https://www.gov.uk/government/organisations/foreign-commonwealth-office): foreign travel advice, consular help and services abroad and document legislation
* [Centers for Disease Control](https://www.cdc.gov): updates on disease and health warnings
* [Global Disaster Alert and Coordination System](http://www.gdacs.org): updates on natural disaster issues such as floods, earthquakes and tsunamis
* [US State Department Country Warnings](https://www.state.gov/travel/): updates mainly focused on the security situation for travellers and internationals - available for every country

## Account
Navigate to the "Account" from the bottom menu. Here you can:

* Modify settings (feed interval, feed location, feed sources, notifications, connections, import data, export data)
* Enable Mask
* Set a password
* Log out

## Requirements

You need an Android phone with a minimum version of 4.0.3 (SDK 15 - ICE_CREAM_SANDWICH_MR1)

## Contributing to Umbrella

Thank you for your interest in contributing to Umbrella. See our [contributing guide](CONTRIBUTING.md).

---

### Contributors

Thanks to [everyone who has contributed](https://github.com/securityfirst/Umbrella_android/graphs/contributors) code to Umbrella. It wouldn’t
have happened without you.

* [Rok Biderman – Security First Lead Developer](https://github.com/Coccodrillo)

* [Vesna Planko – Security First Lead UI/UX Designer](https://github.com/VesnaPlanko)

* [Alex Guerrieri – Security First Developer](https://github.com/klaidliadon)

* [Adam Hani Schakaki – Security First Developer](https://github.com/krzd)

**Cryptography Notice**

This distribution includes cryptographic software. The country in which
you currently reside may have restrictions on the import, possession,
use, and/or re-export to another country, of encryption software. BEFORE
using any encryption software, please check your country's laws,
regulations and policies concerning the import, possession, or use, and
re-export of encryption software, to see if this is permitted.

See [*http://www.wassenaar.org/*](http://www.wassenaar.org/) for more
information.

**License**

Licensed under the
GPLv3: [*http://www.gnu.org/licenses/gpl-3.0.html*](http://www.gnu.org/licenses/gpl-3.0.html)