Privacy Engineering: Tails, Whonix and Secure Communications

This intermediate course teaches the practical engineering behind digital privacy for people who use Tor and privacy tools for legitimate reasons: journalists protecting sources, researchers studying sensitive topics, activists working under pressure, and anyone who wants real control over their information. You will learn to think like a privacy engineer, starting from a clear threat model rather than a list of trendy apps.

Across sixteen lessons you will work hands-on with Tails, Whonix and Qubes OS, compare live systems with virtual machines, encrypt devices and VeraCrypt containers, harden Signal, use PGP correctly, strip metadata from files, open untrusted documents safely, and understand how SecureDrop protects whistleblowers. You will also examine what blockchains reveal and how browser fingerprinting works.

Every lesson ends with a safe, legal exercise. The emphasis is on accuracy and honesty about limits: what each tool protects, what it does not, and how everyday habits matter as much as software. By the end you will have a written, personal OPSEC plan you can actually follow.

Create a personal OPSEC plan for a real or realistic scenario, such as an investigative story, a research project or a sensitive advocacy campaign. Keep it to three pages and base every decision on your own threat model.

• A threat model listing assets, adversaries, capabilities and rated risks.
• A compartment map assigning each identity a device, environment and accounts.
• A checklist for receiving untrusted files and one for publishing documents without metadata.
• An incident plan for a lost device or compromised account.
• A short note on one practice drill you ran and what you changed afterward.