lainchan / sec

What is your clearnet opsec setup?

Just another Random Lainon · 2025-06-21 23:15
I'll start with me LAN --> My russian VPS server running OpenVPN--> ( TOR ) --> onion SSH Tunnel to hacked VPS / Host from RDPs I brought --> Destination Host But to be honest sometimes I just VPN + TOR Are you willing to leak yours?
Cutter · 2025-06-22 00:19
Technique #4 - 'INFORMATION COLLECTION' Information collection is also a very effective method to determine the psychological level of the forum members, and to gather intelligence that can be used against them. In this technique in a light and positive environment a 'show you mine so show me yours' posting is initiated. From the number of replies and the answers that are provided much statistical information can be gathered. An example is to post your 'favourite weapon' and then encourage other members of the forum to showcase what they have. In this matter it can be determined by reverse proration what percentage of the forum community owns a firearm, and or an illegal weapon. This same method can be used by posing as one of the forum members and posting your favourite 'technique of operation'. From the replies various methods that the group utilizes can be studied and effective methods developed to stop them from their activities.
Marly Krushkhova · 2025-06-22 00:47
>>26567 Fair, this is why I said "Are you willing to leak yours". I can understand that this can lead to various problem
Rick Deckard · 2025-06-22 02:00
>>26568 it can be helpful for people who are just into infosec to see the setup of schizos who don't really have anything to hide but develop sophisticated anonymity setups as a matter of principle. unfortunately, this involves awareness of the schizo in question that they aren't actually being tracked, and it also assumes the schizo isn't hyperfixating on one aspect for special interest reasons (rather than comprehensive security). not to mention, its better to speak in terms of general categories of possibility / techniques with supplementary examples than just the setups.
Zero Cool · 2025-06-22 06:15
Doesn't sound much more useful than I2P with an outproxy to tor to be honest, the VPS's also seem redundant.
Neo · 2025-06-22 19:24
>>26568 Duh and you and OP >>26567 are the same person
H.R. Giger · 2025-06-22 20:33
>>26571 No, the first personal VPS hide the ISP that you are connecting to tor, the SSH tunnel at the end encrypt the traffic and hide it from the tor exit node, if you assume it's compromised. It also allows you to use clearnet with non blacklisted IP / the destination host can't tell you are using tor. Only problem is that you must have a Botnet, multiple hacked server (in my case RDPs I brought) so you can rotate the final IP.
Zero Cool · 2025-06-22 20:37
>>26575 What do you mean by this and how did you make this assumption?
Aristóteles Amadópulus · 2025-06-25 02:46
>>26576 >first personal VPS hide the ISP that you are connecting to tor excellent schizobait, remember, don't give the glowies anything, don't reply to their baits with valuable information >but op might be honest glowies scrape this board anyway, op is at best a useful idiot
Fred Nurk · 2025-06-25 03:07
>> 26576 > excellent schizobait, remember, don't give the glowies anything, don't reply to their baits with valuable information You are being watched! They know about your VPS!!!!
Dozer · 2025-06-25 03:52
>>26567 I have already seen this iceberg chart on lambda. Anyway, I just use mullvad vpn with a hardened firefox profile. I am also considering hosting a i2pd instance on a private (preferably non-kyc) vps since my ISP doesn't allow me to forward ports.
12of7 · 2025-06-25 06:42
>>26590 Forgot avvy Forgot avvy Forgot avvy Forgot avvy
Lunch · 2025-06-25 15:29
>mullvad vpn with a hardened firefox profile y u no mullvad browser if you have their vpn
Lunch · 2025-06-27 08:59
>>26591 >I am also considering hosting a i2pd instance on a private (preferably non-kyc) vps since my ISP doesn't allow me to forward ports. You don't need to forward any ports to use i2p.
Frank Garza · 2025-06-28 11:09
I will kill and rape your little sister and your mother if you post LJS+ content on here again.
Jane Doe · 2025-06-28 11:21
>>26607 >if you post LJS+ content What is LJS+?
Shogun · 2025-06-28 11:58
26608 If you don't know you don't gotta know, there are already too many people there I don't want you retarded clearnet glitterboys pollute my board even more.
Haruyoshi · 2025-06-28 12:18
>>26609 Have wanted a quality board to browse ever since I stopped checking all the dead eepsites, but I understand the gatekeeping
Ivan Petrov · 2025-06-28 12:19
>>26608 Pedo ib flooded by bots and literal schizos
The Oracle · 2025-06-28 13:14
>>26611 >calls the board soykaf and people schizo >yet steals content from the board Pick one ya kike its not my problem your board is filled with ignorant name dropping scriptkiddies keep on larping
Joe Bloggs · 2025-06-28 14:25
>>26612 don't worry, if data mining threads like OP are regular content on there then I don't think lains would flood the community like you're imagining.
Special Agent Bob · 2025-06-28 15:51
>>26612 >>26613 >>26609 >>26607 >be me >lurks >see someone calling a super sekrit script kiddy site LJS+ and acting like internet tough guy about it >remember that "lambdaplusjs" is a community we've had multiple threads about >check on it >several threads are evident reposts of lainchan threads, that were created on lc first >threads borderline unreadable because either an LLM or someone experiencing psychosis, or some kind of verbal aphasia >its oddly reminiscent of a steganography program >its not steganography >disappointment >back to lainchan at least the math discussions are decent.
Armitage · 2025-06-29 09:57
>>26612 I frequent it because it's one of the very few imageboards that doesn't require JS or a "clean" IP to post, I doubt that anyone at all is happy with the current state of it >steals content from the board Your hissy fit barely classifies as content >>26615 >threads borderline unreadable because either an LLM or someone experiencing psychosis, or some kind of verbal aphasia It's a markov chain FYI, countless attempts have been made to counter it but fagmins lua bootcamp hasn't thaught him how to get rid of it
Demeere · 2025-06-29 16:38
>>26617 >It's a markov chain FYI that makes sense, my intuition was "very weak LLM" but you've reminded me that's just what a markov chain is
Neo · 2025-06-30 11:06
>Are you willing to leak yours? no.
Zhora · 2025-06-30 13:51
>>26567 >LAN --> My russian VPS server running OpenVPN--> ( TOR ) --> onion SSH Tunnel to hacked VPS / Host from RDPs I brought --> Destination Host This is soykaf setup. This is basically tor but with a fixed exit node and is worse then just using tor. VPN + TOR is only good if using TOR in your country is suspicious to your government.
Nobody special · 2025-07-01 06:53
>>26628 > VPN + TOR is only good if using TOR in your country is suspicious to your government. Yes, but isn't connecting long-term to a VPN less suspicious than connecting to Tor long-term? If they see that all your connections go through Tor, it seems to me, it's less suspicious than simply a VPN.
The Phantom Phreak · 2025-07-01 11:40
>>26628 It's a 0 trust setup if you assume that each part can be compromised. It would still work. Ultimately VPN in general is a bad idea, it involves too much trust.
Lady Jessica · 2025-07-05 19:37
>>26630 >Yes, but isn't connecting long-term to a VPN less suspicious than connecting to Tor long-term? If they see that all your connections go through Tor, it seems to me, it's less suspicious than simply a VPN. 1st world governments dont have enough time or interest to do extensive surveillance on every schizo who uses Tor only. It ultimately depends on which country you live in. If your already a person of interest they can probably figure out you are using Tor through a VPN. Using Tor without a VPN also helps normalize Tor usage for everyday things so if enough people do it it wont be as suspicious. Never use Tor --> VPN though because you will ruin your anonymity like OP did and you will only be pseudynomous. >>26589 >excellent schizobait, remember, don't give the glowies anything, don't reply to their baits with valuable information Not giving my personal setup but still good to help educate other people to prevent them from having soykafty setups like OP. dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Tunnels/Introduction#VPN_Tunnel_Risks
Unnamed · 2025-07-06 03:58
>>26693 i don't think it's that hard for a government to implement some kind of automatic system that flags ISP clients that use tor. my country is one of the most incompetent ones yet and they tried to wirecap every major central ISP hub in fuarrrking 2006. and if federal / national government isn't enough the local police will probably be alert as well especially if you live in small towns. VPNs before tor is probably the wisest choice since it's kinda expected by some VPSes
Nell · 2025-07-09 12:52
>>26696 NSA has been logging Tor users long ago. https://web.archive.org/web/20140703215350/http://daserste.ndr.de/panorama/aktuell/nsa230_page-1.html If your threat model is the NSA, it's over. If you think with their global access, all traffic monitored, that a VPN provides any kind of privacy from them, you're an idiot. Way too many people (over 10%) use a VPN for the NSA to allow privacy there. VPN + Tor is a special kind of red flag because a lot of shady people will be using that setup. >Why isn't every criminal in jail then? Because it's not their job to build cases on millions of petty cyber criminals and it would burn their information source. They care about threats to the (((system))), political opponents, leaks, terrorists.
Donna Hawthorne · 2025-07-10 08:21
>>26636 So you believe I can't even trust myself, my own self hosted russian VPN? >>26708 Read OP post : >>26628 >>26567
Hitomi · 2025-07-15 22:20
I'll tell ya that russian VPS is hurting you more then helping read about SORM
Neuromancer · 2025-07-15 22:23
Self hosted VPN is a bad idea if your the only user then its a permanent fingerprint and low traffic low user VPN nodes are easily traced back by timing and netflow analysis.
Nemissa · 2025-07-19 16:51
>>26724 It's not about hiding your fingerprint but simply hiding from your ISP that you connect to Tor
Boris Grishenko · 2025-07-19 17:36
Does tor bridges help to hide info from the ISP?
Vasya Pupkin · 2025-07-20 07:47
>>26747 In theory they work, but I'm uncertain whether those agencies, ISPs, and organizations haven't collected all the bridges by brute-force. It's such an easy to screw with target, to just automatically request a lot of bridges for a few days until you got them all.
Lain Iwakura · 2025-07-20 13:24
>>26567 I have accpted that I will never do anything worth arresting me for in my life, I have 0 privacy and I jam the glowies with my presence. I reduce the signal to noise ratio.
Splicer · 2025-07-20 16:41
>>26750 Stop trying to outsmart glowies and break the rules, otherwise you'll get arrested for no reason.
Jean Dupont · 2025-07-22 20:53
>>26567 Let me reveal my very scarwy power level to you? Certainlwy. I use grapheneos and disable cyberhumped apps when I am not using them. I say hello to le family and disable Messenger. I check up on muh package deliveries, and then I disable Amazon. Obviously I take full advantage of storage scopes, network permissions, and other fine grain security settings per app. Next is the firewall on my lappy toppies and desky toppies. Those get their iptables manually written. UFW is cyberhumped and allows all sorts of trash through. It's almost illegible (compared to iptables). VPNs are easy enough to toggle up when needed. Ditto witto for proxychains4. I talk siwwy sometimes. I don't use google, spotify, apple music, etc. I leave my phone at home a lot, and don't sleep near it.
The Fin · 2025-07-23 04:07
>>26763 Literal anyone on this forum, step 0 of privacy
Technician · 2025-07-23 04:14
>>26571 This got to be one of the stupidest thing I've read today. The more unique your system is, the more fingerprintable you'll be. See, imagine I'm a fed if your Tor guard node is compromised you are dead. Because guard will see the traffic coming from i2p outproxy (you are one of the only person on earth doing that), they have the confirmation that it's you, even if it require more complex traffic analysis to know what do you do.
Yu-ichi · 2025-07-26 18:51
>>26767 he's far from being the only person doing that because most i2p outproxies like false or acetone route traffic to the tor network that's also irrelevant, as the adversary knows you're using tor, but doesn't know that you're using i2p. if you're deanonymized on tor, the adversary will understand that you're using an outproxy, so necessarily you're a i2p user, but he won't be able to know which i2p user did it. he would have to launch another deanonymization campaign to have that information.
Special Agent Bob · 2025-07-27 15:05
I use librewolf with a VPN because I'm just a normal man that enjoys his privacy
Mitnick · 2025-08-02 06:25
>>26567 Public library computers.
Drano · 2025-08-02 20:42
>>26567 What Russian VPS provider can you recommend?
Project 2502 · 2026-02-07 04:00
>>26567 Cirno here, you should get some enlightment over the fact "soykaf happens" at random, simply because they invited someone stupid to run arrests. Example: Yezhov, 1937, the person who was eager to treat millions of anonymopus clauses regarding random people seriously. Turned out to be a crazy shortie with ulterior motives.
Junichi Fujiwara · 2026-02-07 04:35
>>26818 So naive, don't you remember anakata?...
Ender · 2026-02-08 13:17
>>26567 man, I hate this image. It's so performative. >DNS42 Ah yes, DN42, the experimental meshnet used for learning. You might as well use Minix as a dailydriver >LoRaWAN + Reticulum That's like saying RJ45 + World Wide Web. Teenage nonsense Anyways here's mine
Bobby Newmark · 2026-02-09 10:36
>>27744 This picture is a meme btw, not meant to be taken seriously
Cypher · 2026-02-09 16:15
on the positive side: sometimes try to be anonymous using password manager and generating 40-50 character passwords sms 2 factor authentication not clicking on ipgrabber links or malware links using ublock origin medium mode on the negative side: same username everywhere ublock usually turned off for compatibility real name and location visible on a few socials doxxed twice not behind vpn
Chani · 2026-02-10 13:54
use untraceable computer to get burner email account. use burner email to get mullvad account number without providing any identifying info. pay mullvad with cash in an envelope containing no info except the account number. read mullvad instructions for connecting to mullvad via tor. set up tor to mullvad and use it anywhere to connect securely, privately, and anonymously to any internet site. tor has nothing to reveal. mullvad has nothing to reveal.
Ishikura "Tatsu" Tatsuhiko · 2026-03-02 15:21
Many years ago now I read about an interesting one where some criminals piggybacked on other peoples satellite connections to receive data. Data was sent to an IP that used satellite, that data was beamed over huge areas of the earth and they just picked that up somewhere, maybe hundreds of miles away.. The host of the IP just dropped the traffic as it looked like gibberish. I don't know how they sent data because they were never caught. I would not be surprised if they used a mesh of 9000 hacked wifis and a pigeon carrier.
Nell · 2026-03-02 21:12
i have nothing to hide but i get pissed off because i have a bunch of embarrassing gay pornography that i have to save for very specific research purposes on my drives, i study human behavioral psychology
Acid Burn · 2026-03-04 17:24
>>26567 >Linkola based. currently brewing soykaf from a yagi antenna pointed at the local soybucks, VPN->Tor
Unspecified · 2026-03-06 17:52
>>26693 Don't listen to this idiot , if you want to stop your ISP from seeing your own TOR go through a trusted no logs VPN First -> then to TOR it will hide the tor requests from your ISP
Jim Hilger · 2026-03-12 23:30
>>27802 or use meek-azure
Koos van der Merwe · 2026-03-13 07:43
>>27818 How does this work or make the set up better ?
Cutter · 2026-03-13 20:15
>>27802 It's objectively less secure to pay for a vpn that would deanonymize you than stealing someone else's wifi or using a c2 as a pseudovpn
Pulse · 2026-03-22 08:55
iCloud private, mullvad vpn, and different emails for different sites same goes for social media. Since i dont do anything illegal pretty pointless to be honest.
Ivan Petrov · 2026-04-05 14:18
what would be a good starter opsec setup?
Liet Kynes · 2026-04-15 12:12
>>27819 look it up >>27837 I don't understand how people have been buckbroken into accepting surveillance over all their soykaf because it's a little hard to manage separate e-mail accounts. It's really sad that those types have made it here. >>27866 what is this supposed to mean?
Naomi Nascimento · 2026-04-20 18:16
Incognito mode + free proxy found on Google
The Phantom Phreak · 2026-04-20 21:43
>>27866 Learn about threat models and develop one. Work within that. For some, Signal is good, for others it's beyond stupid.
Agent Jones · 2026-04-20 21:49
The best privacy setup is plastic surgery + burnt fingerprints.
Technician · 2026-04-20 22:04
>>26747 I worked on an ISP and used Tor trough Brave to play games on archive.org they my boss ordered a guy to uninstall the browser from my PC because he thought I was using Brave to bypass the proxy, he saw it on camera, I got mad at it and start to argue with him and because of that they fired me. On my final day they showed me the Internet logs, you can see clearly strange traffic but it isn't possible to associate it with Tor, they've never mentioned it. Keep in mind I was using Tor with bridges enabled. It was totally worth tough, soykaf place to work, and I gained valuable knowledge on how limited ISP monitoring is.
Special Agent Bob · 2026-04-21 02:24
>>26567 For normal web traffic I just use Tor. If I want to be extra careful I'll spin up a virtual machine and connect through another server.
Unsigned · 2026-04-22 11:59
>>27742 >anakata I remember The Pirate Bay lawsuit in 2006 (so long ago..), but nothing else about the lives of the founders after. Did he get busted using a library computer? Why did I post what I though? I am targeted by every known intelligence agency in my country and every major intelligence agency in the world. It is impossible for me to go online privately; i am always followed and if i'm home or find a new computer, they'll just read out my computer signal via the network and use 0-days for their operations. I have dropped the pretense that we live in a world where there is privacy from the glowniggers if you are targeted by them. Now I use that against them in various ways, one being that their hypersurveillance bullshit does not scare me and i just public library computers for my antics. They haven't busted me for anything illegal online and they never will, precisely because I hide in public and don't do anything illegal.
Linda Lee · 2026-09-05 09:25
Bobby Newmark · 2026-09-08 01:49
>>27897 A HUGE amount of free proxy inject ads and sometimes downgrade your connections into http. They also log who connect to it to then sell your data. But free proxy AREN'T useless if you chain them with an anonymization network like Tor.
Special Agent Bob · 2026-09-30 16:21
Is there any way to make an X/twitter account using Tor? Yes I know it is like kicking dead whales down the beach bla bla but I want to make an account with the minimal possible trace to then advertise a website I'm making. If you try only email via Tor it tells you to download the app or use Google Is buying an account with crypto my only alternative?