How do

You get away from the eyes of [3/4 Letter Agency] and/or [Corporation]? >Linux w/ minimal software >Wired connections when possible >Thinking before speaking >TOR with Noscript/HTTPS on regular browser

I use [INSERT GENERIC VPN] and [INSERT FOUR SHIT TIER ANTIVIRUS SOFTWARE]. I'm invincible. (j)

>>18519 DNS over HTTPS, Libreboot + FDE, LibreWRT router, Disabling JS except when it's absolutely necessary. Those are going to be the biggest ones. NSA has hard drive firmware viruses that can phone home so perhaps a chink SD card with Tails would be the best way to go assuming Tails isn't bundled with proprietary drivers.

>>18519 IMO you don't need to go overboard, just tor on Linux and a VPN. FDE if you want. Should be fine if all you want is to browse anonymously.

>>18529 >DoH Staight to cloudflare >Libreboot Unpatched x64 firmware succeptible to meltdown/spectre >LibreWRT Haven't heard of this one >disable js absolutely

Never log in to anything, ever Use a separate browser instance for whatever you're trying to hide Only access the internet using TOR or a VPN (or both) paid for anonymously, and only then through public hotspots Disable JS Tape over your webcam Only communicate via smoke signals

This all sounds good, but have you all ever thought about how dangerous it is to not have a normal internet footprint? If you think about it, being completely blank with no footprint can be just as bad as being completely open on the internet. The only difference would be that it would take specific targeting to find out exactly what you do. Yet, they could still just as easily place you in a system of people with low footprints and people that should be monitored. So in a way it would seem important to maintain two lives on the internet, making sure to keep up your appearances as a "normal" citizen.

I've been slowly separating my computing across physical machines, mostly to prevent any single one failing from inconveniencing me, but it also has privacy benefits. One of my machines I use rather exclusively for WWW browsing with the Tor Browser. Most of the traffic across all of my machines goes through Tor. I don't currently have a machine I regularly keep disconnected from the Internet, but this would be a good further step to take. I've forgotten encryption passwords before, so I don't currently employ any full-disk encryption. I've read before that it would be better in some instances to only encrypt what needs to be encrypted, but that also has obvious downsides. I don't currently encrypt anything, though, and I don't have anything that needs encrypting; I don't leave my machines much. Further, I host my own email and other things on a server I rent; it's easy enough. In general, I don't have accounts on services and, while I've considered running a GNU Social node, I don't currently participate in the Fediverse either. >>18529 >DNS over HTTPS If you want real privacy, have your DNS resolved through Tor; see: >>7246 >Libreboot + FDE Perhaps collecting non-x86(_64) hardware would be better. This is the only really compelling aspect of RISC-V, so we'll see how that goes. >LibreWRT router This would be good, but Internet traffic is collected and stored anyway, so you should always use the Internet in a way that doesn't trust your access point. >Disabling JS except when it's absolutely necessary I completely agree and the Tor Browser lets you enable JavaScript without enabling optimizations, making it less likely there's an exploit. >Those are going to be the biggest ones. Avoiding mainstream social media and running your own email or other services, as I mentioned, would be good to add. Nothing else currently comes to mind. >NSA has hard drive firmware viruses that can phone home so perhaps a chink SD card with Tails would be the best way to go assuming Tails isn't bundled with proprietary drivers. If you're doing anything potentially illegal over Tor, you shouldn't just be trusting Tor or your hardware. You should layer it, at that point. Don't do anything illegal over Tor from your main Internet connection. >>18543 >Never log in to anything, ever >Use a separate browser instance for whatever you're trying to hide Running multiple Tor Browser instances isn't supported, I don't think, so I just selectively enable and disable cookies. I'm not doing anything illegal, though, so I'm not working against a government or corporate adversary here. >>18548 >This all sounds good, but have you all ever thought about how dangerous it is to not have a normal internet footprint? If you think about it, being completely blank with no footprint can be just as bad as being completely open on the internet. I don't have a cellphone or other things, either, and I buy everything I can with cash instead of electronic currency. If it reaches that point, I'll go into the woods. >The only difference would be that it would take specific targeting to find out exactly what you do. Yet, they could still just as easily place you in a system of people with low footprints and people that should be monitored. Ideally, even the government shouldn't be able to figure out what you do. I've read before if they already have vans outside your house, then you've lost, but that's a far-cry from having your Internet connection monitored more closely, since you could simply use a different one for certain activities. >So in a way it would seem important to maintain two lives on the internet, making sure to keep up your appearances as a "normal" citizen. I live in the land of the free, so I don't think it's quite this bad yet. You can't help but reveal personal information if you maintain the appearance of normality, so I'd rather not bother.

>>18519 I work for a network security company that sells products to one of those 3 letter agencies (we are also trying to get in the door with every major ISP with a different product). You basically can't hide from them. It is so easy to track and record your traffic if someone wants to. The trick is to make it so people don't want to track you, which might as well be impossible in this day and age. I think the best solution is to minimize the amount of sites you give your data to, but you are ultimately the slave of your ISP, or mobile provider, as they basically have free reign to do whatever they want with your data.

>>18558 Dread Pirate Roberts got v& at his local library. Though you're vulnerable on your home wifi you aren't invincible on public internet either. So long as your requests are encrypted thoroughly and you go through the effort of obfuscating everything you should be fine realistically unless you've got a really big target on your back. Only the biggest fish will be getting this much attention to begin with but better an ounce of prevention than a lifetime behind bars.

>>18562 Ugh so sad. If only he'd been able to slam shut his laptop. Would've iced the whole drive. Hope that guy gets out of prison someday, but probably not. I've read his writings from prison, pretty heartbreaking.

>>18562 Need to remember that the USGov was pouring many thousands possibly millions into countering the silk road operation. They likely locked down on multiple people, cutting out potential suspects until they found the person they were looking for. These peoples jobs are to find and prosecute you. The 40 hours a week that kid at walmart is spending stocking shelves? They are spending it compiling evidence and socially engineering key individuals. >18560 They spliced into one of Googles undersea fiber optic cables (Because they were plaintext AKA unencrypted), so how much data they stole from Google is a mystery. They have a transfer rate of several terabytes a second I believe, so they definitely could have got a large part of Googles userbase in their hands. >Free to do whatever they want "If you don't like what we're doing, then leave! You agreed to our TOS! Present Day, Present Time! AHAHAHAHAHA!". People complain about facebook and google with their data collection, but they agreed to the TOS so it is their fault in the end. >I've read before if they already have vans outside your house, then you've lost, but that's a far-cry from having your Internet connection monitored more closely, since you could simply use a different one for certain activities. They probably won't use vans. Not unless they plan on raiding your house or believe that you intend to permanently leave. A GPS tracker under your car would do the job much better, or a small outlet-connected camera in a tree sending data down a chain of nodes to a secure router. >Small camera mounted in shelf of your living room. >Tiny, so transmission strength is at a minimum, and battery life must also be maximized. >Signal reaches in wall to a larger transmitter that amplifies the signal to a transmitter outside >This wall transmitter is spliced to your homes electric system, so on forever. >The transmitter outside links to a router a few houses away and sends the data off to the NSA bay.

my problem is the accounts i've created before i was 16-17, i've got most of them tracked down but i still have mails i've forgotten about which are attached to my name. how would one go about tracking all the available info about themselves online? this is the main factor that kinda kills my hopes for going botnet-free as much as i could.

>>18567 >my problem is the accounts i've created before i was 16-17 I'm in a similar boat. I've tracked down and deleted many of them, or the forums died. >i've got most of them tracked down but i still have mails i've forgotten about which are attached to my name. how would one go about tracking all the available info about themselves online? That's a catch-22, in that these organizations already know it if you can find it and if they don't know you can't find it through them, but you'd also alert them that you're looking. >this is the main factor that kinda kills my hopes for going botnet-free as much as i could. I can empathize with you there. My best advice is to delete what you can and just try not to worry about the rest. If it helps you feel better, the next generation is even worse off, having facebook accounts from the womb, being used by their parents in viral marketing or influencer schemes, and other disgusting things.

>>18564 If your doing something like adminstrating a hidden marketplace over tor at a public location, you should have your tor usb stick on a bracelet with some lead. That why if they come busting down doors n soykaf you don't even have to think about closing your laptop. You reflexivly retract your arms, yanking out the tails usb stick hosting the computer.

>>18590 Is it possible to go RAMless? As in, you could just load the boot sector of a HDD/SDD/Etc. into another partition of the drive to act as RAM, so the removal of the drive (In this case, the USB) would instantly shutdown the computer. Of course, the "RAM" would be non-volatile and unencrypted, so you would have to find a workaround for that.

>>18592 Even if this were possible: attacks on RAM have to do with its not-perfectly-volatile nature; however, it's still pretty much the most volatile thing you'll be able to get your hands on What is your threat model that going from "cryonics required" to "can't be wiped for really really sure" is an improvement? >oh but I'll just encrypt it and it's possible to encrypt RAM, too, so that e.g., the Panic Button can prioritize its efforts on the unencrypted bits of RAM (key and currently active pages); the point is, in what universe is anything solved by going from extremely fast extremely volatile RAM to less fast much less volatile RAM?