Looking for related links

hey everybody! I've been lurking lainchan.org for a long time now. imo its much better than some of the cancer ridden image boards out there. anyway, i used to have a list of websites that i would visit from time to time, all related to privacy and security and such. the ones I remember are: prism-break.org digdeeper.club ddosecrets.com i ended up losing the file because i was trying to change my OS and i deleted the active partition by accident or smth like that. forgive me, im stupid. If you guys have any other suggestions, it would be greatly appreciated!

please make a better thread next time. cryptome.org - online library and nonprofit dedicated to free expression, privacy, intelligence riseup.net - digital collective hosting a variety of privacy-oriented services, webrings with other collectives https://www.privacyguides.org/en/ - guides to privacy https://www.sproutdistro.com/catalog/zines/security/ a number of zines about opsec, security culture, etc https://www.openprivacy.org/ - developers of privacy technology https://exposingtheinvisible.org/en/guides/security-in-a-box/ series of 11 guides to cybersecurity. hosted on a site dedicated to modern investigative journalism.

thank you so much. i'll try my best not to lose it all this time. also, i don't know what makes a thread good. i just typed out what i was thinking

>>45955 I think my issue was that the pure concept of a massive "awesome list" of links is a bit lacking in substance. having reread your OP I think it's not as bad as the other threads asking for it, though. I think my preference would be a shorter appendix or annotated bibliography that is curated with care rather than a huge list of everything tech related - include a little bit of information about every link you post, basically.

>>45960 Yeah and such lists can be harmful. You need to be up to date to keep good Opsec and a huge catalog of redundant, potentially outdated, or incorrect information is counterproductive. Otherwise it's not clear exactly what you're looking for, OP. There is already a thread in /sec/ for OSINT

i'm still relatively new to these concepts. a few years ago i was all over mainstream social media and such. so far all i did was remove myself from those spaces, use OpenBSD (i used Debian for a while), install as few packages as possible as well as read the documentation for those, use good random passwords, password managers, and have a firewall so I can redirect most of my traffic through torsocks. i want to keep going but honestly it gets a little overwhelming sometimes to stay on top of everything. i guess i was hoping that there'll be websites that publish updated information on this stuff from time to time so i'd have some of my work cut out for me. thanks for the suggestions though these are great reads. some of this stuff i knew about already but it doesn't hurt to revisit.

>>45964 OSINT is entirely dependent on your threat model and what you want to do. if your goal is just to prevent sites from building ad profiles of you then you only really need to handle the obvious stuff - replace every aspect of your web stack that would give information to advertisers with FOSS alternatives. then check in on what data has been collected on you through google and instagram/facebook information requests and opt out of their information sharing and targeted ad policies. https://www.lainchan.org/sec/res/24269.html is the /sec/ thread.

>>45964 >it gets a little overwhelming sometimes What gets overwhelming? It still isn't clear what you want. >OpenBSD (i used Debian for a while), install as few packages as possible as well as read the documentation for those, use good random passwords, password managers, and have a firewall so I can redirect most of my traffic through torsocks What exactly are you trying to accomplish? What is your threat model? Don't run before you can walk. > i guess i was hoping that there'll be websites that publish updated information on this stuff If you want a beginner friendly guide to improving the privacy and security of your personal devices then I'd recommend privacyguides, as that other lainon linked. Click on "Start Your Privacy Journey" and read through that. It's up to date and includes a discussion forum. >>45965 OSINT != Opsec >if your goal is just to prevent sites from building ad profiles of you How about if OP just tells us what they want, yk, with a threat model

to be honest i haven't thought about it very constructively. i just started throwing things at the wall and seeing what works so far. my personal threat model is relatively simple imo. i imagine if state level threat actors wanted to collect my information there isn't much i can do to stop them. i just don't want advertisers and companies to collect data on me and build behavioural models that they can later use to predict and influence my purchasing decisions. that being said being able to push back against state level threat actors is on the list as i am essentially a part of an underground lgbtq community in my country. i'm straight and all but solidarity and such. in the country i live in it's heavily frowned upon to be anything other than what is considered "normal" and i have seen a lot of people getting found out and then dissapearing. i have an extremely long and painful journey ahead i imagine and educating people in the community isn't easy until someone they know gets caught. they don't seem to cooperate until they find out that their lives might be in danger too. the government here has had a long history of somehow getting their hands on facebook or whatsapp group messages and from there tracking people down. i think the more i write down the more confusing it gets and the fewer things that are being clarified by me here. hopefully this answers a few questions!

>>45967 >i just don't want advertisers and companies to collect data on me and build behavioural models that they can later use to predict and influence my purchasing decisions > push back against state level threat actors [...] people getting found out and then dissapearing There is quite a big gap between these two in terms of risk to personal safety, type of surveillance, amount of resources, etcetera. Without a solid understand of what you're protecting against, no wonder you're overwhelmed! >to be honest i haven't thought about it very constructively. i just started throwing things at the wall and seeing what works so far. Indeed. It would be a good idea for you to take an afternoon or two to develop a threat model and then go from there. In your case I'd still suggest looking at privacyguides, but also advice published by *reputable* NGOs and activist groups specifically for persecuted citizens/groups/journalists in oppressive nations (maybe even your nation or one in a similar situation). >they don't seem to cooperate until they find out that their lives might be in danger too Be wary that if you yourself are not an expert, simply regurgitating random information you found on the internet may be ineffective or dangerous. Best of luck!

>>45966 oh yeah, i made a typo >>45967 >>45969 is right you should research for a minute what your threat model is exactly. >the government here has had a long history of somehow getting their hands on facebook or whatsapp group messages and from there tracking people down group message leaks often occur because of individual members being weakest links. keep this in mind as you move forward

hey everyone, it took me a (long) while to read through privacyguides.org's suggestions. I also took the time to elaborate on what my threat model is. Here's what I got so far: what am i protecting? - personal data (IP, physical address, real id, etc) - private communications - behavioural data who am i protecting it from? - corporations who can use it to model behaviour to serve ads - government entities who have access to my ISP's logs how likely is it? - not very as i try to keep an extremely small footprint but not zero either consequences? - a lot of really nice people who trust me and depend on me to keep their information safe so that they can open up about their struggles will get hurt. not to mention myself. how much trouble am I willing to go through? - literally anything that may be deemed even remotely necessary. what i have done so far: - use a very minimal desktop setup and not installing too many packages. - setup pf.conf to only allow connections through tor - set up tor and use torsocks. need set up obfs4proxy and get a bridge to tunnel through. - only use simplex chat on throwaway devices. need to configure to delete chat logs daily. - only use burner SIM cards acquired from stealing random people's phones. (stolen by random people). only turn on phone when you need to make calls or recieve messages. use dumb phones and go for a walk outside my municipality so that i am not within the same towers range every time i turn it on please let me know what else i can do. all suggestions and criticisms are welcome. thank you all again for the help!

also, sidenote i don't know how you people do the specific reply thing so I just wrote a mass reply based on all the replies so far.

1st: i just needed stuff to get started. i am definitely not knowledgable on this stuff but i thought that there might be some basic rules of thumb when it comes to this. i understand why relying on the same list all the time is bad tho. 2nd: i just want to make sure that the poeple in my community is safe from prying eyes 3rd: when i talk about chat logs being leaked its a bit more malicious than an insider. i don't want to get into too much detail but i have a few friends (different group) who work for the police. apperently you can make a request to whatsapp to get your hands on the chat logs without the knowledge or consent of who those belong to. i understand that that also means these queries are supposed to go though the proper channels like a warrant issued by a judge but when every part of the system hates your kind, you don't need that many words to convince a judge to give you one. what i mean is, the judge will make up a bullshit reason for the warrant that whatsapp will look at as a legitimate query.

>>46032 A recommendation list of different privacy-respecting software, similar to prism-break https://an_g6.codeberg.page/ A pretty comprehensive guide to online anonymity https://anonymousplanet.org/ Tutorials on how to setup your own VPS server and various services (E-mail servers, online library, alternative frontends etc.). Not really a privacy-focused website but I especially like this one, since most privacy issues can be resolved if people setup their own platforms. https://landchad.net/ Also, mental outlaw made several videos about opsec like this one https://www.youtube.com/watch?v=jVao4UdOFHk I think the sites mentioned in his videos would be very useful as well if you can find them. BTW, to reply to a specific post just click on the post number or add >>post_number_you_want_to_reply_to to your post

>>46035 thats a lot of material. i'll check it out but it takes some time for me to finish reading stuff. anyway, i have a setup as mentioned above and i am prety happy with what i got so far but i have a few tiny issues i would like some solutions to. i have been looking all over the internet for solutions to this but there's only so much you can do with mojeek.com and anonymousoverflow and stuff. i know i should just post these questions to stackoverflow but i don't want to create an account. the first is, since i am using surf as my browser, if I open surf with torsocks, certain functionalities like modkey+g to search or modkey+f to find doesn't work. if i use those combos, it outputs abort trap in the terminal. i was wondering if there was any workaround to this. secondly, using the builtin package manager for openbsd like pkg_add, or pkg_info with the -aQ flag, if i launch it within torsocks, it does not do name resolution. the specific output is: <repo-link>: ftp: <repo-site>: no address associated with name. if i disable pf and then run it within torsocks, it works again. the output for tcpdump -i <interface> port 53 when running pkg_info or pkg_add shows that it makes connections for dns resolution, even within torsocks. are there any solutions or workarounds for this? any suggestions are welsome. i know this isn't very detailed but i am still a noob and i dont know what details are needed.

>>45943 where's this image from? it's awesome...

>>45938 my open tabs rn u may like nona digdeeper.club ddosecrets.com https://www.sproutdistro.com/catalog/zines/security/ https://lainzine.org/ https://strauh.al https://plaza.one https://letslovela.in/late https://threejs-journey.com/# https://docs.google.com/document/d/1WwsnJQstPq91_Yh-Ch2XRL8H_EpsnjrC1dwZXR37PC8/edit?tab=t.0#heading=h.o1fabsypqaet. exciting latent knowledge https://www.erowid.org/ https://geocities.restorativland.org/ https://desuarchive.org/mu/thread/127293015/ https://fauux.neocities.org/unorgz https://noahie.xyz/ https://alivetheory.net/ https://muse.jhu.edu/article/852390 https://start.me/p/L1rEYQ/osint4all https://soybooru.com/ https://allchans.org/ https://www.surfaces.cx/ https://lainchan.org/vis/res/10017.html https://neetpride.wordpress.com/2022/04/29/neetpride-magazine-volume-1/ https://leftypol.org/leftypol/catalog.html https://ifyouknewmewouldyoulove.me/ https://whenwe.love/ https://autopoies.is/manila-north/ https://everythingi.love/#world/dreaming/index.html https://chi.itch.io/gay-girl-prays-for-a-gun https://www.photocollage.com/ https://openfront.io/ https://archive.org/details/unus-annus-archive_202011 https://scio.icu/webrings.html https://scio.icu/lainring.html