Schizo level security

I was thinking about how I would go about becoming untraceable online (assuming I am incredibly paranoid, but don’t want to just be sitting in public places all the time to get anonymous connections). Tor is a good start, but I’m willing to bet most nodes are malicious, and that the NSA has a couple vulnerabilities up their sleeve. A VPN is probably not the best option, but if you could trust the VPN provider completely, and trust the software you are using, it would be even better than Tor, right? If I can’t find a VPN provider I trust, I could set up my own proxy. I could find some random hidden spot at any place with free Internet access, or maybe buy a SIM card anonymously and use that (if that’s even possible). As long as it isn’t in a place associated with myself, it should be ok. Of course, I would wear a mask while doing all this, and avoid security cameras. So I have the proxy, set up WireGuard and Tor or something on it, and then connect, from my home. My connection goes through the proxy and then Tor. It would be slow as hell, but would definitely be private. If I wanted it to be slightly faster, I would probably exchange the Tor part of this for a VPN. That would have the added benefit of mixing my traffic in with others, right? The reason I would go through either another VPN or Tor after the proxy is because, even though having the location of my proxy be discovered wouldn’t be the end of the world, getting the site discovered by the people I’m hiding from would not be good, especially if it’s somewhat close to me, I left traces of my identity there, or they can crack open the server and get information about me. The proxy is just a “last resort”. It would be the last layer of security. And having a somewhat trustworthy VPN, or Tor, would probably increase my security, as it would give them something else to break through. Would it be possible for a government, working with my ISP, to observe my home computer, and see it connecting to the proxy I set up? If they can make that connection, it kind of defeats the purpose of having the proxy, because they can just associate my identity with the IP address used by it. Also, would using a proxy only used by myself prevent me from blending in with other Internet users? Anyway, the home computer would be an old Thinkpad, or a newer computer that can use open source boot firmware and doesn’t contain soykaf like the IME/PSP. I would also be concerned about the firmware of my hard drives. We know the NSA has tools that allow them to compromise hard drives. If anyone knows more about that, or knows how to mitigate this issue, I would be very interested. It would run OpenBSD and only be used for Internet activity. It would have all unnecessary software removed, and contain nothing but a web browser (On a side note, which web browser should I use? I don’t want to use Chromium browsers because I want to support alternatives to Google’s garbage, but Mozilla kind of is like kicking dead whales down the beach as well, and Firefox is a less modern browser, with fewer new security features. Does it even matter? Could I just run the browser in a virtual machine (Xen?) to prevent my computer being compromised?) I would have a second computer, inside an actual Faraday cage, completely airgapped. I would do anything that didn’t require Internet on that. I might run Slackware (apparently it’s good for running offline, but idk). I don’t think it matters as much for this computer. I would only use a USB stick to move files from my Internet connected OpenBSD computer to my airgapped computer, and vice versa, to ensure that only the files I want to take away from the airgapped computer leave it. Could the USB stick itself be compromised? If so, how would I mitigate this? I would also have to take general security measures, make sure that I never download any sketchy files, and continually monitor my devices. I haven’t thought this through too carefully (it’s just a rough draft), and I have no idea what I’m talking about. Can someone with actual knowledge about cybersecurity give me some recommendations on how to improve this system, or point out any major flaws / unnecessary parts?

Ok, I don't know much more than you, but I had a schizo idea as well. What if you did your internet browsing in a VM running something like Tails or Whonix? I like the idea of BSD as a host OS but I don't know if that would interfere with this next part: What if you bought a VPN subscription with Monero from somewhere like Mullvad for your host OS that's running the VM? That way, if the Tor connections get compromised (which I think is likely these days), your VPN IP will be what they get. But that may not be enough... Obviously Mullvad in this scenario can still get your IP because you're making the connection to their servers on your home IP. So WHAT IF, you used an application-level firewall program, like OpenSnitch (which is what I use - recommended), to buy ANOTHER VPN service and stack it on top of Mullvad? Pay with Monero, and figure out the rules needed to only let that software communicate on top of Mullvad's software. That way you have a Tor VM > VPN#1 connection > VPN#2 connection > a secure host OS with your home connection But if you really want to be paranoid, you would do this all on a laptop and only use it in public places - or at least away from your home.

>>23183 consider banishing the devil machines from your private ownership altogether. use library computers for welfare, and ban silicone from your home. eat lots of carrots, keep your ears clean and eat some more carrots. the only way they can spy on you now is video cameras and their own eyes. listen close, and you can hear electronic hum of satan himself witnessing your every sin that he will use to wrestle your soul back into his fold, and you can hear the beating of his minion's wicked hearts pumping black pitch through their wretched veins.

>>23183 Do you really believe that there's a group of monkeys siting behind a monitor watching your every click

>>23182 How come every time I come to this website, there's a post exactly like this one? Meanwhile my quality posts are often deleted. To op, if not an ai - follow the popular guides, and forget about being unhackable, you just cant. Accept it or disconnect

>>23186 Perhaps the reason people ask about security on this website is because it is one of the only places on the Internet (other than /g/, and maybe r/Privacy, but I don’t want to use Reddit) where people who really care about privacy can be found. I know that I can’t be unhackable. That was never my goal, I just want to improve my privacy as much as possible, and am willing to go to greater lengths than most people to do so. Why don’t you help us by sharing some information or advice, rather than just complaining?

practical non-larp answer: use Qubes OS and follow the Qubes forums. Buy 2 devices with wireless stuff physically removed (eg nitrokey) and use PS/2 input devices if it's a desktop )or integrated laptop trackpad/keyboard) so you can isolated USB drivers. set up all different types of disposable browser including mullvad browser. Compartmentalise and be wary of your fingerprint. set up some chained network qubes and pass through Tor/whonix and VPNs bought through tor with monero. Replace your router firmware with something open source and more secure. With one of the devices use it as somewhat amnesic and/or offline qubes installation by reinstalling qubes regularly or each time you do something important. COuld have separate installations on external SSDs but be aware that your bootloader on the internal SSD may be exposed when you do that. Read books and do courses on security, administration and networking, because nothing that you'll read on some succinct guide and replace for that. I think the above (which i do) is practical, usable and covers most of what you say >Could the USB stick itself be compromised? Yes this is always a problem. Use QR codes or manually typing when possible. You will have a cold start problem when you first install - how do you know your Qubes installation isnt compromised by the dirty OS you use to make the bootable USB? You could buy a device with qubes preinstalled but then you have to trust the seller instead. Difficult decision to make and no solid solution. You'll never truly feel safe if you understand the state of the world, it is somewhat futile

>>23186 Something tells me your "quality" posts not unlike your reply in this thread are not on topic, not as quality as you suspect, and contribute little to the board or site at large and that leads to their removal. I don't understand your gripe with this thread anyway. It clearly isnt AI, and you just come across as a chan tourist in your reply. Bring forth some substantial rebuttal or recommendation aside from "read the guides" which doesn't even specify which guide to refer to. Not all guides are created equal, not all guides are up to date, you cannot ask a guide questions, there is no mutual exchange of information like open discussion provides. You can read guides AND make a thread on a forum, it doesnt have to be one or the other. You could even discuss said guides here. You could do so much and you choose to just soykaf up the thread for no good reason. Not very based imo. And when you said accept it or disconnect you started glowing. No one here has implied the desire to be unhackable. Let me rephrase your statement, "Hey guys, how can I reduce my risk of dying while doing X activity?" "You inevitably will die, accept it or kill yourself." What a pointless contribution isn't it? We are discussing how to reduce or obfuscate the surface of attack so that it is harder to be pwnd and the amount of effort becomes disproportional to the payload.

>>23191 I'm having this exact crisis right now, it's hard to not drive yourself insane. Recently I had a bit of a catastrophe and lost a device and all my drives, so I had to start new with another device of mine. I fear this new one's firmware has been compromised, maybe some low level crypto-miner was planted in the gpu years ago. I had to download images off someone else's soykafty bloated Windows computer. Eventually I'll physically isolate it and examine all of the connections it makes so I can determine if the firmware was altered, I really hope to hell it wasn't.

You're going to want Qubes like another anon suggested and start setting up your own host of residential proxies through botnets to begin with, start by scanning for vulns in cities close by and using free WiFi for the initial setup. But realistically speaking if you just want to somewhat anonymize your online behavior Tor is probably enough unless you have actual glowniggers on your ass. In which case using the internet as little as possible and avoiding most electronics is the best course of action.

lol, lmao even! I'll add a couple notes. High gain antennas, these enable you to connect to a wifi from far away. This gives you more hiding options via not having to be so close to the free services you're gonna be leeching off of. Volunteer work also will help you get into a lot of interesting situations. Especially if you're a youth in a church enviroment. As for VPNs, tor hopping, etc? Once you get enough devices you can host your own vpn, and then from that device use tor or even i2p to help mask your location overall. Though there might be better ways still.

Tor comes with new issues that you need to take into account. Remember Tor Bomb Threat Guy. sauce: https://www.theverge.com/2013/12/18/5224130/fbi-agents-tracked-harvard-bomb-threats-across-tor

>>23291 I need reference forum, group, communitiy that discuss illegal activities related to technology and an active talks could you kindly tell me about that?

>>23182 hey buddy. i have thought about this a lot. here is a small amount of what i have learned: use hacked wifi as your initial access point. the best option is connecting to an AP that is as far away from your residence as possible. but you still want it comfortable to use. who the hell likes sitting at cafes or using TOR, which is slow as hell. use a long range wireless antenna to connect to the network AFTER you get the password. hacking wifi is easy. there are freely available tools, many of which come packed in the kali distro. i'll give the game up a little, my favorite wifi hacking script is called airgeddon. that being said, by no means settle for being a script kiddy. you need to learn about this technology if you want to progress as a hacker. but we all have to start somewhere! learn about network infrastructure, the 4 way handshake, and how wpa2 authentication works, cryptography. the basic premise is this: the password is encrypted, and is turned into a hash. this hash is passed over the router when a client attempts to join a wireless network. that has can be intercepted in transit, and since the encryption algorithm is publicly available, it is trivial to then run your guess attempts through the encryption algorithm and see if it matches that hash... AFTER you break into the network, feel free to fuarrrk around with qubes, tails, VMs, etc. I am too lazy for all of that. your point of a VPN is correct. try to buy a subscription with a crypto currency that is NON-public ledger, ie. monero. and NEVER NEVER cross contaminate your VPN with your other activities. that sort of OPSEC oversights and OPSEC fails is what leads to people getting caught. it's just one fuarrrk up and its over. good luck

Tor and VPNs can be de-anonymized by people like Team Cymru (who do that as a service). It's an issue with using low latency mix networks, not with Tor itself. I2P's short lived unidirectional tunnels make this kind of tracing more difficult, but not impossible. Enough data will still give them a source for the flow. If you are going to do something that will make people come after you, DO NOT do it from home. Using multiple computers is a good tactic. Qubes is certainly the most secure operating system (and worth using), but advanced exploits to exploit common X86_64 hardware exist as closely guarded secrets. I have no firsthand knowledge, but it's publicly known that nation state hacking teams have some very expensive exploits that they go through extreme measures to safeguard. What else could it be, really? At the same time, governments still rely on mandatory access controls and virtualization to create security barriers. Think about why this could be. One thing to keep in mind is that your layers of security protect you from different layers of threats. Your basic threat is internet advertisers, your ISP and data miners. They don't use any advanced exploits or ndays. Simple measures like VPN (shared IP) and a privacy respecting browser (Brave, Firefox) make this kind of low cost data collection difficult. The subsequent threats mentioned can all buy or steal this kind of data, so reducing your footprint has value even if you aren't concerned about the advertiser itself. Type 2 threat would be anyone with a "normal" amount of resources willing to spy on you specifically. This could be to steal money, privileged information, etc. It could also be just a botnet herder. Qubes and Tor/VPN help you here. Javascript is a risk, but one you can accept if you have other security controls in place. Type 3 threats are willing to to the above, but will also do soykaf like break into your house. If you're particularly wealthy or safeguard valuable secrets this is a real concern. Cops will also fit into this category if they think you're up to fraud or whatever. Do a little thinking about how you can mitigate physical breach of security. Remember that knowing whether or not your hardware is tampered with is more important than preventing the tampering. This is the stage where letting untrusted code execute on your machine (javascript) is a no-go. Type 4 is national security type soykaf. Think about the level of skill that a group that can pay contractors 1 mil a year can collect. Consider why an exploit could be worth 20 million dollars. Even if you're targeted by a group with a smaller budget than this, they're still willing to do soykaf like laser mic your windows to listen to your keyboard. This isn't "game over", but you need to accept that some of your security will be broken. Any life or death secrets need to be treated differently than the various other levels of secrets you have on your computers. IME being a security threat is a real thing and it's this level of attacker that will have access to it. As an earlier anon said, financial surveillance is a huge one, and it's incredibly leaky. Don't be a moron.

>>23263 Lol this is some next level schizo soykaf ..... but also based as fuarrrk, please report back with your findings lainon! I'm kinda hoping you're right about the firmware being compromised. I mean, that would suck for you but at least your autism would be validated.

>>23417 No your firmware is not compromised you just don't know what the fuarrrk you're doing.

>>23419 >have old computer running winblows you download random files onto from suspicious places and open freely, no fuarrrks given, could very well have crypto miner on gpu >dont use for years, instead use other computer >other computer is fuarrrked, must return to old computer >download an iso and flash it to usb using someone else's soykafty malware ridden laptop >install to old computer which might itself be compromised maybe this simplifies it for you

>>23183 >That way you have a Tor VM > VPN#1 connection > VPN#2 connection > a secure host OS with your home connection cpus have backdoors built into them at the hardware level. So the machine that makes the connection to the first VPN needs to be run on rather old and obscure hardware. I suppose you could then relay traffic to your actual machine on which you browse the web. This machine probably needs to be as generic as possible to help you avoid getting a clear fingerprint. I would personally opt for Brave because afaik it's the only browser that will randomise fingerprint information each time you visit a site in a different session. Just don't use any of their services. And sandbox it because you can. Brave is also a somewhat normal person tier browser. So rather than using something super customised it would actually make more sense to use something generic. Don't install browser extensions either. Keep your browser literally at default settings. Keep a low profile.

>>23842 Don't use Brave browser, it is proprietary spyware. The web browser you use is only moderately important, so long as it isn't spyware, it's fine. When you have javascript disabled, and your IP address hidden, your web browser will reveal little more than a user agent which can be changed. Someone can still deduce which browser you are using, but they won't have any device information so they won't know who you are. If you use Tor Browser then this is less of a problem because of the fact that Tor Browser is designed to have a uniform fingerprint across all clients, and it is popular. The rest of the advice is silly as well, Mullvad is based in Sweden which is part of the 14 eyes. A VPS could be a little bit better but VPSes have no accountability, it's better to have as many middlemen handling your traffic as is necessary, which isn't any more than Tor, using an unaccountable VPN/VPS that can be trivially bypassed and handles all of your traffic before it enters the network is dumb. Connect directly to Tor on a foreign network if you're concerned.

>>23843 disabling javascript renders most websites useless. The good thing about Brave is that it strikes a good balance between privacy and usability. If you want to be completely invisible on the internet, you probably shouldn't use it in the first place. As for Tor vs VPN/VPS: I personally have more trust in a company rather than rely on a myriad of unknown 'volunteer' relay providers. For general use, one decent VPN service is most likely sufficient to hide your IP from most websites. And as long as you're not doing extreme illegal activities online, no one is likely going to bother to serve your VPN service a warrant for their logs, if there even are logs to begin with. People often claim Brave is spyware, but I am not so sure about that. Do you have any evidence other than their software being proprietary?

>>23843 In the end, it's probably wise to invoke the Pareto principle when it comes to opsec. Getting it perfect isn't worth the cost. And besides, if you don't give intelligence agencies a reason to come after you, then they won't waste resources on you because why would they? And to be honest, most of their resources going into psyops anyway... and so the question becomes: "how useful would it be to go down the rabbit hole of perfecting your opsec when the more imminent threat is covert propaganda?" And I'm pretty sure we all underestimate the effectiveness of said propaganda. You can have perfect, impenetrable opsec and yet still fall for the psyop. So in the end... who are you protecting yourself from? From them? Or from yourself?

sorry, forgot to add this, of course you could've looked on your own and i suggest you do otherwise you won't learn anything https://spyware.neocities.org/articles/brave >>23844 Anything can be illegal, if you cause enough of a stir online then the government can demand logs from your VPN/VPS, the law is subjective and is bent all the time by the authorities so that they can do what they wish. When a company, a business, is providing you with privacy, and that business is governed by lawmakers and corporations wanting of your data, your data is not in good hands. VPNs based in 14 eye countries by law are required to keep logs, to not do so is a crime. Tor is flawed as well, but its flaws are lesser than those of VPNs and VPSes, and it has a proven track record, you don't hear of people getting backtraced through it like you do with VPN users. Tor still won't protect you from an entity tapping internet cables that also has access to all of Big Tech's data -if you are using Big Tech websites- like the NSA. >>23845 It isn't even about getting it perfect, it is about not being enslaved to Big Tech. Both of you mention websites being useless without javascript. That's a problem with the way the internet is becoming, it is only worsening, enabling javascript only enables this problem. Executing code from a random person on your machine is insane in my opinion, you probably don't go opening random files you downloaded from strangers. Virtually all browser exploits depend upon javascript, for example, take a look at Firefox's reported bugs over the years, I did myself, and the majority relate to javascript, particularly the vulnerabilities that people crafted exploits for. Javascript itself is a major threat, beyond fingerprinting, I mean it literally is the very web browser element that makes browser fingerprinting as fine grained as it is, but it also is a major threat for the spread of malware. You don't need to deal with specific individuals coming after you, this is rare, what is much more widespread is automated systems for surveillance, these litter the internet, it's practically impossible to visit a website without a javascript dependency and Cloudflare nowadays. If you enable javascript in your browser, you almost certainly cannot be anonymous on any level, your browser fingerprint has all of your website activities associated with it.

>>23847 >your browser fingerprint has all of your website activities associated with it. Simply untrue: fingerprints are only useful to individual sites/businesses. They can track your movements across their site/property. Whatever you do elsewhere, they don't know about unless you visit other websites/businesses who use the same fingerprinting service. Hence why I prefer Brave for general use: each time you visit a site, Brave generates a unique fingerprint. So for your normal, day-to-day activities, Brave is the way to go because you can't use the web to do business without javascript. For any other kind of activity online, perhaps different methodologies are more appropriate but it depends on your specific needs. For me personally, I do not want big tech to have a meaningful profile about my online activity. I don't want to be another data point to them which they can use to potentially psyop me/us. And again: as long as you do not give intelligence agencies a reason to come after you, they won't waste their time on you. Technically, sure they can obtain the logs if they want to, but before that happens they actually need to have good reason to go through the effort. In principle though, I agree with javascript being extremely problematic. But in a pragmatic sense, without it you can't do business online. And frankly, doing just that is mostly the only good use I have for using the internet. If I refrained from doing business online, I might as well unplug altogether.

op, you have a mental illness. take some meds. the gov isnt spying on u. ask for help pls

>>23847 >https://spyware.neocities.org/articles/brave Brave doesn't use Google as default SE anymore Safe browsing can be turned off. The only risk about it is that google can sometimes see your IP when your browser contacts their servers to check if a a site is safe or not. If you hide your IP, the risk is mitigated anyway. Brave doesn't auto-update. At least not on my devices. I have to update it manually. I don't use any of their other services and I don't send them diagnostic reports et al. I think that spyware report was made a few years ago; it seems a bit outdated. I personally like their approach when it comes to generating unique fingerprints every time you visit a site.

>>23291 They tracked this because he was using Tor over the college network without a VPN. The only person using tor in the entire college made it obvious. Its not like they backtraced him through the nodes, although if youre enough trouble they might try

I see a lot of parroting of the opinion that Tor is easily compromised, but I don't see any evidence of it. Can anyone give a link to a reliable source about an instance of a Tor user being deanonymized by some method that exploited a vulnerability in Tor? I'm not talking about opsec errors that have nothing to do with the Tor technology itself. I'd just like to see a verified case where Tor itself was exploited successfully. Anyone?

>>25273 I think the point is that Tor was created by feds so they can break law without being bothered, so most likely Tor either can't be compromised, or will only be exploited against existential threats, for example warfare etc, so it can be kept secret. So even if it can be compromised, it is unlikely there is any evidence. A bunch of whistleblowers or even serial murderers are simply not worth the risk of exposing the exploits, if any. Your lives don't really matter to feds.

>>25274 >the point is that Tor was created by feds so they can break law without being bothered, The government is not a monolith. The branches of government that created and fund Tor are interested in having agents in the field call home without getting caught and injecting subversive propaganda into countries that have strict internet controls. They have no overlap with government departments who care about all the drugs, guns, kiddy porn and hackers that are also on Tor. >most likely Tor either can't be compromised, or will only be exploited against existential threats If there is a backdoor it will have been carefully designed so that it can only be used by the US government. I'd go that far.

the first thing i'd do is run right out and tell everybody what i'm gonna do

>>23851 Yes brave is not that bad if you want a chromium browser that doesn't glow and is acutally easy to install and updated (unlike ungoogled chromium) https://github.com/brave/brave-browser/wiki/Deviations-from-Chromium-(features-we-disable-or-remove)#what-chromium-features-are-removed-for-privacysecurity-reasons

>>3182 >Could the USB stick itself be compromised? If so, how would I mitigate this? Use a sdcard instead.

>>23182 All web browsers suck in one way or another I would utilize browser compartmentalization (e.g use a different browser for different tasks). The three browsers I like to use are Tor Browser (TBB), Brave browser, and Mullvad-Browser due to being the only ones that are easy and also have decent or good settings out of the box. I used to say Librewolf but they now save browsing history and make connections out of the box, while brave does make connections (can be mitigated), I wasn't expecting this from a privacy focused firefox fork. https://librewolf.net/docs/faq/#does-librewolf-make-any-outgoing-connections You mention using a proxy or a VPN, if you need to be anonymouse with those methods here is what you can do. - Proxy You get a residential/dedicated HTTP proxy with anon crypto and never connect to it without Tor by either using proxychains to use socks5 before the http proxy or you use the addon-plugin "foxyproxy" in Tor browser or browser configured to Tor. Another way is to use i2p and configure the proxy as an outproxy so you can browse clearnetsites anony and the same method applies above in regards is you never set it up without connecting through i2p first. - VPN Similar to methods above you can configure openvpn to connect to through to Tor to the VPN or eaysier you use a torified AP (WiFi) or whonix gateway to connect to a workstation that has the VPN software installed on it. This way the VPN doesn't know your IP is connecting to it, noted the connection will be slower.

Friendly reminder that chromium is a piece of soykaf. It only works well on whatever is not linux. On linux, interface size is atrocious. Half the font sizes are not configurable. I have to make the UI scale factor > 3 to make it readable, but then there is only about 10% of the whole window left to actually display web pages. Google developers are genetically retarded and should kill themselves asap

>>25278 I'm going to kill Starmer. Just kidding. He's going to suicide himself by shooting himself in the back of the head.

>>25277 >They have no overlap with government departments That isn't true. A cursory glance at fusion abilities and capacity building initiatives from DHS domestically to CIA, DoD all the way to US AID and many other front companies abroad (SIGNATURE REDUCTION), one doesn't need to be a Premier Guardian Investigation Journalist to figure out that a hotel staff member whose brother is a cop in east Timbuktu, that bro can ask his girlfriend's cousin who works as secretary in Immigration who tight with with the Head of that immigration department, who goes to luncheons with embassy staff workers of multiple countries, many of them who are signature reduction assets or just straight up spooks, can take a cursory glance on SIPRNet, get the scoop on a target, then pass that info all the way back to the hotel staff concerned about a suspicious individual who simply is having a rough go. Albeit that info finally received would be sanitized to supposedly "protect sources and methods". Point is you either actually don't know what you're talking about or are just poisoning the well in typical Bolshevist fashion, and you're just going to get yourself liquidated with these types of ignorance or duplicitous meanderings.

>>25343 >They have no overlap with government departments Quote the whole line retard. >They have no overlap with government departments who care about all the drugs, guns, kiddy porn and hackers that are also on Tor. Someone might think you're not posting in good faith.

>>25277 >>23847 >Executing code from a random person on your machine is insane in my opinion I agree but a browser is a sandbox; there isn't much they can do unless you download and execute a script outside of the browser sandbox. The problem is that there is still is a lot of useful information on the internet through google about all sorts of things. A lot of reddit tier sites with interesting referrals to books and actual resources of good knowledge. Lots of hidden youtube gems from over a decade back and such. Without javascript enabled, there's no access to those resources. In the end, if your browser has good fingerprinting projection, the javascript doesn't really matter. Yes they can access your system resources, but that's it. There's no way to get to your personal data. At most they can make your fans spin. That's it. I don't believe there is a way you can get into user space through javascript in the browser. No way. Never seen any evidence of that. It's just used to pringerprint you. Keep in mind, your IP alone is pretty soykaf in terms of ID. IP's are not accurate and many ISP have one IP for many clients. Fingerprinting is much more accurate: once they have your language, they know your country. Once they fingerprinted your device, they cross reference it with mining databases from all over the internet to make a complete psychological profile attached to your device fingerprint. Perhaps they don't actually go as far as trying to ID you, but they don't have to: to them you're just a customer, just another number. Or a slave: also a number. They don't even need to ID you. Of course everything changes if you're a targeted individual. I'm not sure if you can do anything meaningful about that. Journalists reporting on corruption cannot guarantee their source's anonymity anymore. Because all digital communication is fooked. No wonder there's no more whistleblowers coming forth these days.

>>25357 >Posting in bad faith It's not about the specificity or severity of the crimes or lack thereof. Point is it's fusion. An information sharing system. It's all connected. So this bullshit premise that a lowly cop won't or cannot get information about a target that originated from a prior national security investigation, in which the premise says the spooks wouldn't care because they found the target is only running an illegal lemonade stand and not paying taxes and perhaps smokes ganja, that somehow the lowly cop won't ever know and that this info will be buried in some special access compartment on SIPRNet? You really just don't know what the fuarrrk you're talking about so you should probably shut up and stop pretending like you do. Or maybe you're poisoning the well in typical glowie fashion in bad faith? Really enjoying your selective messaging campaigns on your cute little Lainchan Honeypot. It's clear as day there are glowies here, contractors, then the occasional schizo coming here for help who are clearly being harassed for whatever reason, and then people like you come in say "no no no bro, you're just a sktizo, reduce your security, take risks, it'll all be okay, do more drugs bro, here's a video about CIA MIND CONTROL, just give up, you're fuarrrked". I don't know what to tell you. It's quite evil what you're doing. But luckily there are people that can be more evil than you if need be. Keep it up.

>>25356 >Journalist getting harassed wat do? I'm sorry I don't think Journalism is for this person. And using windows is a non-option for this line of work. So they sound unprepared. And getting demoralized for their line of work? A journalist worth their salt would have the peculiar psyche where if they're threatened on any level from a slap on the wrist to the threat of their family getting slaughtered or face any other such obstacles that this has the opposite effect of demoralization, instead reinvigorate their vigor to stay the course. This is the requirement of fighting evil. So what I'm saying I don't think this line of work is for them, unless they grow some balls. At least get a support network. Most journalists have. And the best journos are switching to qubes. Get help there. For example: https://www.theguardian.com/info/2024/apr/04/when-security-matters-working-with-qubes-os-at-the-guardian

>>25359 >strawman >strawman >soykaf nobody said >strawman >You really just don't know what the fuarrrk you're talking about so you should probably shut up and stop pretending like you do You're still doing it my dude. Try responding to what was actually said >The branches of government that created and fund Tor ... have no overlap with government departments who care about all the drugs, guns, kiddy porn and hackers that are also on Tor. That's why the "muh government origins" argument doesn't actually affect the integrity of Tor. >people like you come in say "no no no bro, you're just a sktizo" Sounds like this isn't the first time somebody has called you out for reacting to something that didn't happen. Like I said in >>25357 make sure you quote the whole line you are responding to instead of letting your imagination fill in the rest, that would be a good first step.

>>25367 >All branches are interconnected in an hierarchy. Data is readily shares between them, especially upwards. The CIA spent the last 50 years running drugs out of Afghanistan but the DEA doesn't arrest them because the CIA is higher in the "hierarchy"? Ok, so clearly the intel agencies that run Tor are also higher in the hierarchy than the FBI...

>>25368 are you genuinely playing dumb or are you just genuinely dumb? god i swore not to talk with glowies...

>>25369 >Glowie? I think he's just a simple Semite that does whats in it's nature, debate semantics, steal the show, derail, for no purpose other than exercising their seditious genetic behavioral traits. Whatever he's doing, it's poisoning the well and ignoring the topic of the thread "Schizo Level Opsec". And that includes protecting oneself from adding data to your individual Permanent Record (Snowden et al).

>>25369 >are you genuinely playing dumb or are you just genuinely dumb? Not an argument try again. >>25370 >I think he's just a simple Semite that does whats in it's nature, debate semantics, steal the show, derail, for no purpose other than exercising their seditious genetic behavioral traits And what are you doing right now? >Whatever he's doing, You're not even pretending that you read and understood my post. You saw the word "glowie" and turned your brain off. Now you're just an animal reacting to stimuli. >Permanent Record (Snowden et al) A book you obviously haven't read. Don't tell me his soybrained "muh democracy" spiel works on you. The reason nobody talks about Snowden anymore is because his rhetoric was specifically targeted at reddit NPCs who never cared about privacy and autonomy in the first place.

>>25384 >Debates quality of arguments > doesn't talk about actionable security, > talks about philosophy of security. > Doesn't talk about increasing OPSEC This it typical kyke glowie TTP 101 stuff m8. I only have one question, let us all see if you can focus on the thread topic or just non-sequitur your way back into not talking about security again. The question is as follows. >Is Network Investigative Technique (NIT) hardware or software? if you're unsure, use a lifeline and ask the Chinese. FBI pretty mad as of late.

>>25387 Nice infographic, but they also deploy bots and AI is making it eaiser

>>25343 While the other person seemed like a typical redditor or privacy NPC spouting the typical use GrapheneOS, bitwarden, and signal. The key takeaway is Tor is neither bad nor good. The good being that its opensource and anyone can run a server. Most internet protocal's that use TCP should take advantage of routing through Tor to protect privacy. The bad is that web browsers including Tor browser (TBB) have had zero days over the years and that Tor knew of flaws that could be exploited but couldn't patch till LEA were done using them if I remember correctly (internal emails). The other bad things are who has more incentives to run the nodes, a random volunteer or people with unlimited budget resources? Onion services control the last hops via their tor client so they could restrict the last few hops to their nodes to maybe do corelation. That said onions solve the bad exit nodes and DNS should never exist in the first place but the internet was created by DARPA in the first place. You should use Tor but understand its limitations and threats (e.g not enough sandboxing by default for starters).

>>25359 I fuarrrking swear people really downplay InfraGard and their agent smiths gangstalking people in the MATRIX (Multistate Anti-Terrorism Information Exchange). https://en.wikipedia.org/wiki/MATRIX

>>25359 >It's not about the specificity or severity of the crimes or lack thereof. Point is it's fusion. An information sharing system. It's all connected. Miles of red tape. >let's fuse all our info >okay, let's give each state and major city a small buereacracy >so now we have 79 new groups? >80 if you include the national association You'd think it would just be a service that feds provide to local LEO, like the NICS, but no.

>>23182 >We know the NSA has tools that allow them to compromise hard drives. If anyone knows more about that, or knows how to mitigate this issue, Don't buy hard drives of the DoD's website https:amazon.com/ or online. Not just this but most of the non brand nip gook brands are in fact fake storage with sdcards soldiered to the board inside a case. >>25359 >Really enjoying your selective messaging campaigns on your cute little Lainchan Honeypot. It's clear as day there are glowies here, contractors It's clear as day that redditors are here. Yeah rule number 3. in /rules.html is clearly doublespeak that can only be interpreted by the mods. The rules on here are not very clear and I constantly see posts getting removed that are typical of chan culture and light humor. You cant even say certain words here without a filter being added lol.(USER WAS WARNED FOR THIS POST,Do not whine and cry about 8chan, lainchan.jp, "quality", "invasions", "newfags", mods, bans, or kalyx outside of /q/.)

One thing I've learned after years on imageboards is that when people start posting about "redditors" and similar stuff, they have nothing to say and I stop reading.

>>25400 >they have nothing to say and I stop reading. then I go to reddit to read what people have to say. The rule I have learned on imageboards is those that get mad are indeed reddit users and are mad cuz it shows their true character which is that of a gatekeeper and group think and group thought. Also to be fair the same goes for people that say /pol users instead of /pol users as the ones that would get mad would be people that use them the most.

The glowies go away once you quit using 4chan and reddit The reddit and 4chan go away once you quit using glowies

>>25405 What did the post say? This place isn't a honeypot, these guys are literal DoD / NATO / Mi6. Pretty sure the owner is UK MoD. They do selective messaging. Some people come asking for help, having serious issues and they do security theater. Then try to send the target down rabbit holes. The big one is all about impossible CIA mind control stuff. If you talk about TEMPEST or Red black engineering they either delete or use other kyke tactics. Beware tor is hacked out the wazoo. Because of TEMPEST.

>>25407 >Red black engineering What is that?

>>25401 >then I go to reddit to read what people have to say. Lol, nope, I'm not a Reddit user. But people who start in with the whole dumbass hate thing about some group of people most often, in fact, have nothing to say that's worth reading. >The rule I have learned on imageboards is those that get mad are indeed reddit users and are mad cuz it shows their true character which is that of a gatekeeper and group think and group thought. Like you, for instance, lol.

>>25409 Not that other lain, and I'm not a troll, but I do find it funny that people have negative emotional responses to soykaf they read online, especially chans. They haven't yet figured out the world is black comedy. Even the worst of it. That's why most people can barely function. Maybe get a clue?

>>25408 I won't say much for now as I wanna see what drivel the glowies concoct on the matter first. Nonetheless a good starting point: https://en.wikipedia.org/wiki/Red/black_concept A very cheap consumer of the shelf solution: https://github.com/maqp/tfc Beyond not being able to build a SCIF, copper mesh is good alt. Also to test your nigger-rigged Faraday cage: https://www.rtl-sdr.com/deep-tempest-eavesdropping-on-hdmi-via-sdr-and-deep-learning/

>>25407 I was asking for help because a journalist is being targeted, his windows computer is being hacked all the time, they kill his internet connection and mess with his editing software so that he can't make videos. Some people responded with suggestions and those posts were deleted too.

>>25410 I like to point out stupidity and troll trolls once in a while. It's kind of a fun occasional hobby. No offense, but you're the one who seems to be upset about it. I guess you projected that onto me? Cheers.

Some LARP user ITT deleting his own posts pretending to be chased down by feds.

>>25425 well the guy who posted pic rel wasn't me I replied: "let's see if they delete it" and jannies deleted both posts. Of course, I can't prove this to you, but at least to me as well as the other anon, it's very real.

>>25425 I'm the supposed "LARP" holy kek. Yea I definitely DID NOT delete my own post. That's fuarrrking wild. I'm glad you saved it fren. I hope you and your journo fren figure it all out. Invest in some body cams as well. Learn self-hosting AI and running facial recognition models. It helps a ton with your investigations. Saves a ton of time. You should be making friends with all nationalities, because the glowies are basically a machine, where the biggest losers are not their enemies but random civilians everywhere. That's why we prepare. Best wishes to you. Appleman. I'm an elephant. I've been at this for a for two decades. I remember everything. Keep it up.

>>25428 good luck to you too and thanks for the advice; it's much appreciated! And yeah... divide et impera is their usual MO. Friendships that transcend nationality and culture is what gets us through

>>25417 Yeah my post was deleted recommending to use custom DNS on their router and to use bridge mode a third party router using open source firmware. >>25421 >redditor that deleted all the posts lol you know this place glows when there is no public moderation log for transparency >>25425 >>25428 lol I archived this whole thread and my posts got deleted too.(USER WAS WARNED FOR THIS POST, Do not whine and cry about 8chan, lainchan.jp, "quality", "invasions", "newfags", mods, bans, or kalyx outside of /q/.)

>>25432 >Yeah my post was deleted recommending to use custom DNS on their router and to use bridge mode a third party router using open source firmware. lmao thanks for repeating that because I forgot about it

>>23843 >Connect directly to Tor on a foreign network if you're concerned. exit node should still be a self-hosted VPS paid with cash ideally. Because connecting to Tor on a public wifi is an easy way to trigger some alerts. And then there's still the issue of remaining anonymous to the surveillance mechanisms of the public wifi: hiding your device from them, hiding from surveillance cams, ... to be honest, I don't think many people would need this kind of protection though. If you're a whistleblower, go to someone you trust physically, but it has to be someone you haven't got any digital communication with. Hand them physical media with the secret infos and ask that person to contact journalists/professionals on your behalf and protect your identity. Usually whistleblowers are under NDA contracts or subject to unethical laws, and that's where the actual, real danger is. If you actually have good reason to assume they're going to come after you big time, just use a real life proxy. That's the only sensible way to go about things without having to become an expert at opsec and IT. Trying to become an expert at these things in itself is already extremely suspicious activity and will most definitely land you on the naughty list. And then when you leak some hardcore insider intel, they just cross reference the contextual information of leak to the naughty person database as well as a list of employees of the company you work for. And if it turns out that only a couple people in the company have been making google searches about opsec and online anonymity, it will be very easy to identify you. If you actually have damning evidence and wish to come forward with it: STAY OFFLINE

>>25440 >Going dark I'd also add, that if somebody "going dark" you better brush up on surveillance countermeasures: https://libgen.is/book/index.php?md5=84868C0271EDC8A88E82791824717672 Surveillance Countermeasures: The Professional's Guide to Countering Hostile Surveillance Threats Aden C. Magee At least the 2019 version. Any version you find before this not good enough. Also know your strengths and weaknesses on the matter. Are you good with body language? Micro-expressions? For example, while you're walking down the street, can you detect a surveillance operative whose standing 75 yards away from you buried in a crowd in a busy square? Or can you fire up a phone that you know the IMEI is on a list and then around 30 mins later detect the three to four who show in the crowd of several hundred? If you're unsure, then don't think you can beat a surveillance team. It's something you have to be born with. Those who aren't born with it, and simply trained end up in foreign prisons on espionage charges or other lies to simply get rid of you. Also if you're going to leak something, don't do what every god damn leaker does and simply just talk to the feds, MIL-CI, cops, etc. Keep your mouth shut, save it for the judge. Let the prosecutor duke it out with your lawyer in a court of law. Leaking cases are some of the hardest to actually prove. If you study computer science with a focus on hardware, basically if nobody saw you do it, it's quite hard to prove. Snowden could've probably tried his luck if he didn't fuarrrk off to Asia and just kept his mouth shut except for one sentence "I want a lawyer. I will only speak to my lawyer." Same with that trans leaker. I can't remember the name. If you beat he surveillance team (this also precludes having no phone), and then tor is not the way unless you're connected for less than 10 minutes. You'd be better with a throw away device after connecting to public wifi and sending a pgp hidden steghide email from a throwaway, then river the device and get back to safety undetected. Yagi wifi on mountain or from tall building is useful. Last but not least pray to the lord almighty, whatever that is for you, him, her, them, doesn't matter. You just gotta believe in something bigger than yourself, all else is just arrogance.

>>25444 >River the device. Don't do that. Part out the device. Crushing up every silicon chip into dust using strong pliers in a bowl. It's not hard if the pliers are formidable.

>>25444 Please stop reading detectives so much they impair your intelligence. >Aden Magee is a career intelligence professional. He has performed as a senior advisor in support of the Department of Defense, Department of Homeland Security, Department of Energy, and the FBI. Fed telling you how to counter feds, >Dorrance Publishing Company, Inc. is a Pittsburgh, Pennsylvania, United States–based book publishing company American fed telling you how to counter feds, published in America. Americans are the world standard on sheer stupidity.

>>25446 >NO GOY DON'T LOOK AT THIS BOOK Dude if you're not a glowie and any sort of professional on any dimension in any field at all where surveillance is a problem, then this book is in the least a good introduction to what I believe most citizens don't know anything about, such as floating box surveillance, and how to use disguises. If you got something better, why not post it rather then simply saying "NO DON"T LOOK" in typical fed TTP fasion.

>>25446 That's a good book. Some of us are quite old and come from times when it was moral and legal to kill feds and soldiers who stand in the way of our Holy mission.

>>25448 My message cut off. I was saying that it's harder today to kill feds and get away with it. So I recommend the peaceful means of surveillance countermeasures. Especially if it's a small team. If one is in fact dealing with a floating box surveillance team, there could be 30+ people for the small team to deal with. Is it wise for the target to shoot at or trying to run away from 30 or undercover? Surveillance countermeasures as presented in this book are a good alternative in modern times. But what else are you suggesting that has functionality that would prevent this guys or yid from being forever imprisoned or shot dead on their way to make their drop?

anyone know if watching videos through yt-dlp leaves a fingerprint?

>>25450 >yt-dlp Depends on your connection and how you're using it I believe. I don't know much about it, but it looks like a proxy type front end similar to invidious but cli? If you want to make it more anonymous run it though a whonix terminal. I actually tested this awhile ago it works. Looking at the github it doesn't talk about privacy or anonymity so I don't think that's its purpose. Other then allowing you to watch videos without a google account.

>>25450 Only the IP, but that can be mitigated with Tor like >>25451 said, although not all exit nodes work

>>25452 Tor isnt for watching YouTube.

>>25461 Yes it absolutely is if you want to do you part in wasting glowie resources and reduce future advanced targeted attacks through HUMINT and other silly stuff because you got a profile built for you based on your interests and habits of choosing to be an idiot by doing ANYTHING at all on clearnet. But maybe you're just some poor middle-class piece of soykaf with no power and not doing anything important and therefore don't really matter to the perpetuation of the human species? So maybe just KYS? Or be a cool guy like Luigi and get your soykaf pushed in by the elites, and then ruin your life lol.

>>25474 >advanced targeted attacks through HUMINT and other silly stuff because you got a profile built for you based on your interests and habits naw I use facebook dawg everything p good over here bruh

>>25475 Gotta love In-Q-Tel. Now these are all signature reduction farms. Facebook, Google, Microsoft. I'm not particular sure what type of human executive would be okay with this. Do they like get moist when some spook-suit says to them "You're serving your nation Son, thanks for letting us spy on all your customers :)". Just doesn't make sense to me. Cannot wait to see these guys get Luigi'ed though. People are starting to wake up.

>>25479 >I'm not particular sure what type of human executive would be okay with this. - blackmail - harassment - intimidation - flattery - an offer of power - threatening with legal action glowies have playbooks for these kinds of things. But more importantly: there are no important startups that stay sovereign. When a startup gains power it is immediately co-opted. Psychopaths swarm to it like flies to a turd and eventually take over. Puppets are installed and the entire thing is managed and controlled. That's just the reality of the world we live in: you exchange your soul for power.

>>25480 >there are no important startups that stay sovereign >Psychopaths swarm to it like flies to a turd and eventually take over. >you exchange your soul for power. Baking my noodle, Lainanon. Founders and C-suite bros should ponder more on making startups resilient to such antics.

>>25481 >Founders and C-suite bros should ponder more on making startups resilient to such antics. They'll just sue you for endangering national security. Or two bullets to the head. You cannot stop it. They'll always find a way to get you. Always. The only reasonable thing to do is to not partake in the game and live a quiet life and do whatever is in your power to not contribute to the system of enslavement. >the only winning move is not to play Why do we keep falling for this scam that infinite technological progress will lead to us living better lives? We've never had this much technology and yet we've never been enslaved and shackled to the system this much. Avoid taxes, avoid legal work, do not deal with banks, do not deal with unethical companies, do not buy into the consoomer meme, return to the land, live a simple life and be good to your local community. Just stay away from the game. Power is not worth the price.

The basic problem isn't technology. It's isn't this ideology or that ideology. It isn't too many rules and laws. It isn't people having gotten away from the simple, natural life. It isn't mass migrations, or increased conflicts. It isn't the destruction of the environment. Yes, all of these things are problems, but they aren't the basic problem. There is a more fundamental problem that is responsible for every one of these other problem, and many more. It's called "overpopulation".

>>25479 It's called a voyeurism fetish irc sometimes I get off when I do osint on trannies but thats only if they look like they can pass as a women then I get a boingnnnnnngggggg btw I like to cross dress and i work for a three letter alphabet and am doing gods work btw

>>23291 > Suspecting a Harvard student was behind the threats, agents checked to see if anyone had accessed Tor through the local wireless networks. That led them to Kim, who promptly confessed. Could have just said "it wasn't me" since they had no actual evidence that he was the one that sent the mail other than he was also using TOR at some point. Unless they were using some kind of timing to provde it like he sent data using TOR at this time and the email was received at this time. Other than that yeah I guess he could have just used someone else' internet connection.

>Tor is a good start, but I’m willing to bet most nodes are malicious, and that the NSA has a couple vulnerabilities up their sleeve. Any actual evidence of this? Or is this just pure speculation?

i think for now also if you want to avoid atleast local gov surveillance you can probably buy a starlink and use a vpn on it. pay using a off shore debit card. this way you get a internet connection. dont even connect to the apartment ethernet just beam straight into the sky and tell no one

>>25845 >beam straight into the sky and tell no one When you beam anything anywhere you are broadcasting it to everyone. Not only does everyone know about it, they can intercept it and try to analyze it. That's why security-minded people use cables instead of wifi. And Musk is the last person on Earth I'd trust with my data.

>>25847 >security-minded people use cables you seem to live in a place where you can get a link through cable in a private way. this is not my case. every cable, 5g or cellphone connection is tied to a subscription tied to a real legal name, by law. and police interception tools are standardized. starlink however is unregulated territory. that is why iran dissidents smuggle can smuggle in and use starlinks, that's why scam compounds prefer them. and thats why in brazil you can access X thru starlink but not thru government controlled internet. > you are broadcasting it to everyone intercepting starlink connections is way harder for local police than logging into their standard interception tool designed for ethernet connections

>>25960 >starlink however is unregulated territory. Using 5G satalites to beam you with a connection that the Starlink user terminals (dishes) may use GPS to determine their location for optimal satellite alignment and to connect to the nearest satellites in the constellation. This helps ensure a stable and efficient internet connection.

>>23182 >>I want to Believe! People are always the weakest link, so you have to think not about electronics, but about the acquisition of weapons [if it is possible in the place where you live!], Pumping exercises, martial arts, cold weapons.

>>25399 There is no point in opening this topic. All True Imageboards have sunk into oblivion because the secret services destroyed all the action, russian scum first of all. Now the board is a forum for girls from sushi and/or imbecile schoolchildren with guro and child pornography. Brotherhood of the Wheel aka World Mafia knows its business.

>>23184 >>23184 >listen close, and you can hear electronic hum of satan himself witnessing your every sin that he will use to wrestle your soul back into his fold truly, a SEL-adjacent finding

The only way to be untraceable is to connect through a chain of hacked servers that don't log your actions... Even then, someone might notice what you've done and prepare a trap.

>>23184 Some modern cameras can see through walls.

OP consult chatgpt...............

>I would have a second computer, inside an actual Faraday cage, completely airgapped. lol

>>23851 >Brave doesn't auto-update. At least not on my devices. I have to update it manually. it phones home to update servers by default

>>27560 It's funded by the same people behind Eye of Sauron. That's all you need to know about the browser and the people forcing it on imageboards.

>>27557 may we see these cameras?

Every time someone gets caught by the government, it's because they overlooked some component of their plan or because someone fuarrrked up adhering to it. Some common mistakes include: -laughably poor encryption standards -trusting encryption too much -single-hop VPNs -not obfuscating your VPN connection -not using a VPN killswitch/firewall -using the same proxy twice -not having enough e-mail accounts -not bridging TOR -signing up for every basic bitch website/e-service then getting surprised when all your info gets leaked/OSINT'd -making these soykafty threads The bottom line is that, for the most part, the only difference between private snooping and gov't snooping is persistence. The government has the money to monitor you for as long as it takes for you to make a mistake. No one is going to hack through your seven proxies all located outside the seven eyes/safari club/PRISM countries then admit in a court that they did that. They're going to wait for you to not connect to those proxies, send your personal e-mail address in plaintext, then use that e-mail to find your LinkedIn account and pwn you at work. Practice reasonable data hygiene, destroy old drives, keep backups, and don't do what that Harvard twat did and ADMIT EVERYTHING YOU SHOULDN'T BE DOING.

>>27573 >destroy old drives I usually write a short for loop in bash to write three passes of /dev/urandom and two passes of /dev/zero over an entire drive which is probably overkill. Either AES is unbreakable or old drives need to be destroyed. Both of these cannot be true at the same time. How often I wipe my drives is entirely based on vibes since I don't have any illegal files. My threat model is perpetually defending against an omnipresent threat actor with infinite resources which keeps burning million dollar exploits on my setup that doesn't have anything valuable anyway.

>>27575 if i study sec will i learn important concepts like "threat model" and that sort of thing...been computing a long time but only ever bothered with sec if it was necessary

>>27575 A single pass with /dev/urandom, followed by "secure erase" if the drive supports it, is probably sufficient even if AES has a fatal flaw.

>>27573 > and don't do what that Harvard twat did and ADMIT EVERYTHING YOU SHOULDN'T BE DOING. Pardon my ignorance, who would that be?

>>25479 >I'm not particular sure what type of human executive would be okay with this. The executives that consider everyone that's not part of their luciferian sect mere cattle. >>27594 Uncle Ted