If you want to fund security tool development, consider contributing directly to that. For instance, the effort to audit Truecrypt is still raising funds:
The security of Truecrypt is incredibly important to privacy efforts.
If you're looking to provide legal support to people, consider donating to ACLU. By the numbers, ACLU appears to be a much more effective way of converting donations to legal support for civil liberties cases. I have some reservations about EFF but unreservedly support ACLU.
As a security researcher working in encryption, I'm not sure what #3 is about. I'm more likely to have the government offer me money (I won't work for the government, haven't in the past, or even accept DARPA grants) than harass me.
EFF is indeed not alone in needing support. For development, The Truecrypt audit is a good example, as well is the tor project. Freedom box is a good third.
ACLU and EFF has joined their forces on several issues. EFF legal support is about Internet civil liberties cases, while ACLU has the broader scope of "the Constitution and laws of the United States". For example, ACLU domain covers anti-war protesters. When one is considering where to send donation money, a larger or small scope has both benefits and drawbacks.
One could argue that that was the past and do not reflect today. Hotz might disagree a bit on that subject, as well as each time someone has had "anti-drm circumvention laws" being thrown at them for doing security research. I personally have not forgotten ACTA as a recent example where today's government still want to create laws that hinders security researcher in their job.
Likewise. I have some reservations about the ACLU (but nonetheless support many areas of their work) but wholeheartedly support the ACLU.
Because I know folks will ask me, I think that antidiscrimination law and things like first amendment rights so frequently conflict that I think there is a real conflict of interest when an organization takes on both. The ACLU does take on both, or they claim to, but this usually means pushing antidiscrimination law over first amendment issues, which I think is a real problem.
The ACLU's position in a lot of issues like Hosana Tabor v. EEOC was wrong (so wrong that all 9 justices disagreed with the ACLU and stood up instead for civil liberties), and they are for corporate free speech on political issues (Citizens United) unless that is discriminatory (Willock Photography). And so forth.
> If you're looking to provide legal support to people, consider donating to ACLU.
The ACLU is doing some important work, particularly in the areas of drones and areas outside the EFF's focus.
I am not that enthusiastic about the ACLU because I think their defence of first amendment issues is rather tepid and has been for decades. In the 1950s they kicked my mother's uncle out for defending the rights of the Communist Party USA to peaceably assemble, and today I am really not happy with the way they look at religious liberty.
The problem with religious liberty and the ACLU is that they seem to look at it entirely as if it is just a piece of anti-discrimination law and nothing more. For this reason they came down 100% on the wrong side of Hosana Tabor v. EEOC, and have generally opposed religious liberty when it conflicts with other anti-discrimination agendas they push. But the First Amendment is not just another piece of anti-discrimination law, and it must have more force than the Americans with Disabilities Act or the Civil Rights Act. The unwillingness to really defend religious freedom outside of the antidiscrimination context is one reason I can't back the ACLU over the EFF.
I COMPLETELY agree that in the realm of timely causes that the TrueCrypt audit is a very crucial short-term need. Even if you don't use it (and I can't think of may reasons not to!) someone or some project that you like or use probably depends on it. And not being able to say with certainty that it has not been corrupted this needs to be answered.
As far as the EFF and ACLU meh...neither particularly excite me there are distinct differences to be sure. But it is the similarities that make me feel nonplussed about support. The way I think of these orgs if there is something specific you think they do well and more importantly if it makes you "feel good", then give. As for practical results there are other places your money could be better spent.
http://istruecryptauditedyet.com/
The security of Truecrypt is incredibly important to privacy efforts.
If you're looking to provide legal support to people, consider donating to ACLU. By the numbers, ACLU appears to be a much more effective way of converting donations to legal support for civil liberties cases. I have some reservations about EFF but unreservedly support ACLU.
As a security researcher working in encryption, I'm not sure what #3 is about. I'm more likely to have the government offer me money (I won't work for the government, haven't in the past, or even accept DARPA grants) than harass me.