lainchan / sec

Privacy/Security Guides

Fred Nurk · 2020-06-18 20:35
This is a thread for people to post links to or submit their own privacy/security guides, and to discuss about them. If you plan to link to a guide, please check this thread to see if someone else already posted it. I'll start off with some: >The Paranoid’s Bible OPSEC: https://paranoidsbible.tumblr.com/post/156023846549/opsec Anti Dox Guide: https://paranoidsbible.tumblr.com/post/160173700334/the-paranoids-bible-20 Home Security & You: https://paranoidsbible.tumblr.com/post/156566985089/home-security-and-you Home Phone & Landline Security: https://paranoidsbible.tumblr.com/post/156125286605/home-phone-and-landline-security I recently found a guide for keeping some privacy on Discord from a small neocities site called Ayla Tech: https://aylatech.neocities.org/PrivacyGuideCatalog/Discord.txt
Faye Valentine · 2020-06-21 02:30
> https://paranoidsbible.tumblr.com/post/156023846549/opsec pretty lack luster guide to be honest, it doesn't really give full enough information on a good way to establish opsec. Online OPSEC 1-8 are pretty self explanatory and are decent but pretty vague 9-11 are good, but a better idea would to show a good way to keep them separate, separate vm's or tor. Or explain what "cross contamination is, ( when you leak info that only one identity would know on a different identity. 12-15 are not really good advice, say you may need to do some OSINT or gather data or something, it should include a. how to say safe and anonymous also some tools to generate false data easy would be a good idea to include https://www.fakenamegenerator.com/ https://thispersondoesnotexist.com/ 16-20 can be summed up by saying stfu really loud. If it isn't necessary for the "mission" don't say it. another good idea is to include some case studies on how people got caught, by the tid bits of data that was linked together to track them 21 don't have catch phrases in general is good life advice... 22-23 same as 21 good life advice, or worse case sandbox if absolutely have too. 24-25 like I said before, sandbox segregate data/aliases and keep your "activities" and hobbies on different vm's/machines all together. 26 when in down stfu, most people are soykaf at lying
Unnamed · 2020-06-21 08:47
https://forums.whonix.org/t/the-problem-with-security-guides-and-how-we-can-fix-it/8563 https://forums.whonix.org/t/fixing-the-desktop-linux-security-model/9172
Masami Eiri · 2020-07-03 22:19
>>11253 Archived the guide for discord https://web.archive.org/web/20200703221809/https://aylatech.neocities.org/PrivacyGuideCatalog/Discord.txt
Cutter · 2020-07-03 23:07
>>11387 Do you happen to have the link in there: https://aylatech.neocities.org/PrivacyGuideCatalog/opsec.txt ? It wasn't on wayback machine.
Hiro Protagonist · 2020-07-03 23:10
>>11387 No, but there is a link to the original one on the tumblr page.
Haruyoshi · 2020-07-05 12:36
>>11253 Haven't heard of the PB in awhile. Surprised they're still around and didn't get derezzed in the last wave of anti-privacy blog purge that Tumblr did. They're alright but five main people do the actual work while the rest just keep the blog running and answer emails. Most of them, last time I talked to the guy from there, are MIA due to life or their own country's drama. Bunch of their Chinese and Venezuelan contacts went missing causing the blog to get disrupted. They were working heavily on making Windows 7 somewhat legacy and running off of backups and HD copies to allow gaming (to be used in a dual boot with an open source OS) before one of the main five got hit with a medical emergency. They also had Tumblr delist a lot of their posts from search after some other group spammed their tag with CP. >>11289 The OPSEC guide is a supplemental guide meant to be used alongside their anti dox guide.
Arisu Mizuki · 2020-07-05 18:55
What happened with Ayla Tech?
Spike Spiegel · 2020-07-07 09:56
>>11399 Probably got too popular too fast thus the owner decided to purge accounts? That or they felt threatened? Way too many people get paranoid who're activists or hobbyists in security and privacy communities. Wouldn't worry too much about and focus more on finding a backup or archive of the info.