Seriously, how do I do that?
I'm not instructing anything in this post; I'm asking you a question. I'm asking because I frankly don't have the slightest clue about how can I do it anymore. I've tried convincing people with all arguments I could come up with, but they all shrug it off like it's superfluous or just some paranoia.
Let me provide a little background.
My friend told me a few days ago that she might have a stalker following her around in virtual life. She's the daughter of a mid-level executive of a famous company that's currently under a highly publicized media scandal, with the media screaming around every time it so much steps outside the line. Now, her father doesn't have anything to do with the issues being publicized, but to the eyes of the general public that matters little.
I already had advised her to start using encryption in her communications. Encrypted email was the first thing I recommended, but when she waved it off saying it was "too compicated" (which, in hindsight, might be for the complete beginner), I showed her the following:
- XMPP with OTR through the Xabber mobile app
- Encrypted SMS messages through SMSSecure
- P2P encrypted messaging and calling through Tox
I didn't even venture into the issue of proprietary social networks, and the tracking by corporations; I kept the focus only in her personal direct communication means. And yet it wasn't enough. She said this was not needed, as that nobody would be able to read her messages or emails anyway. When I objected that a determined attacker did have the means to intercept her communications, she answered this:
"Ah, but they can't do that. That would be illegal. Like, you need a judge's warrant for that."
After you have been assaulted, raped or murdered, does it matter if your attacker found where you live or work illegally?
When you're being held a hostage for a ransom of few grands from your family, does it matter if the kidnapper found your location from your whatsapp chats without asking a judge's permission?
When your bank account suddenly has a thousand dollars missing, does it matter if the thief read the number and password from your plaintext email to your partner without asking if you were ok with it?
Illegal doesn't imply impossible. Especially when you don't care or are aware of the law. There's a side much bigger to encryption than just having privacy or confidentiality. Depending on your situation, not using it may risk your own or someone else's life.
She wasn't even convinced by these examples, and after this I simply gave up. When will people realize that encrypted communications are not simply a thing of secrecy, but rather a necessity in today's highly electronic world?