lainchan / sec

(untitled)

Spike Spiegel · 2018-05-14 02:02
How can I blog anonymously? I'm a complete newb and want to share my ideas with the world.
Crash Override · 2018-05-14 02:41
Also interested, so bump.
Meddler · 2018-05-14 03:04
Neocities works fine for me, you just need to learn some basic html.
Nameless · 2018-05-15 05:33
>>4620 this, Neocities is great. However, if you really wanted to go even more secure than that, I'd recommend building your own webserver to run a blog off of.
Judge Fang · 2018-08-20 16:18
if you wanna host anonymously buy bulletproof hosting and pay in cryptocoin(tm) than log into via public, but securely https/sftp, etc get filezilla makes it easy for you. most servers and hosting allow one click install of wordpress.
Mario Rossi · 2018-08-20 16:40
I browse a lot of blogs on zeronet. I haven't made on myself but from what I hear it's pretty simple to set up and also hosting is free and anonymous.
H.R. Giger · 2018-08-20 21:56
You could host a wordpress as a Tor hidden service.
Naomi Nascimento · 2018-08-20 22:22
>>5644 Yeah, or you could use something that doesn't have an endless stream of 0days.
Ender · 2018-08-21 06:54
>>5642 There's no such thing as bulletproof hosting. Don't do a one-click wordpress install. That's how you get owned. Go find one of the crappy Tor blogging services and use those.
Drifter · 2018-08-21 16:25
>>5644 >>5649 https://blog.getpelican.com/ This looks neat. The main thing it's missing is comments, but interactivity probably isn't worth it for all the potential security issues it introduces. Just list an email or whatever if you want people to talk to you.
Morpheus · 2018-08-27 03:11
Using overseas blogging websites can be hit or miss. https://fc2.com/ is one of them. Neocities is solid. Stay away from massive conglomerate hosts.
Miho Iwakura · 2018-08-27 04:14
The real problem with blogging truly anonymously isn't the hosting bit, it's the fact that blogging involves sharing info, the more you share the easier it would be for attackers to figure out who you are. Anyone with access to folios of data bought from corps like Visagebook or Moogle, writing analysis, and various other data sifting tools could probably unmask you if you gave them good reason. Unless you only want to hide your identity from random riyajuu, backlash at work for having political opinions/fetishes or whatever, the best security measures would probably just to not blog at all. Unless you are just doing this for fun, in which case ignore me.
Lady Jessica · 2018-08-27 06:10
get a neocities account and only connect to neocities through tor. e. z.
Frank Garza · 2018-08-31 11:56
>>4618 Get on Freenet and make a flog.
Six · 2018-08-31 16:33
>>5681 That should be fixable with generating noise. Create a fake persona. Make some fake continuous grammar errors while paying close attention to avoid using phrases you would use normally for example to create a profile separate from your real. You can go further and also do this for opinions. You can on the surface advocate against your point while providing all the information to let a clear-minded reader stay in favor of it. Of course that means your readers won't know what you think either. If you want to steer opinion it would be difficult to do so. Secondary more incriminating data can be hidden metadata. Some cameras for example created hidden watermarks storing information in the image and not just the official metadata of the file.
The Phantom Phreak · 2019-01-14 03:04
The same way you browse anonymously - with Tor Browser. Just pick any free blog service and only access it through Tor. GPG-sign your messages if you want to make sure you can't be impersonated by someone who has taken control of the service you're using. >>4636 >I'd recommend building your own webserver to run a blog off of. Building your own webserver is great for security, but at odds with anonymity since you'll have to expose your IP. If you need the flexibility to run your own code, then something like >>5642 is probably the best bet. I'm actually interested in doing that myself, but still haven't worked out exactly how.
Agent Smith · 2019-01-14 04:59
>>5681 The guy likely doesn't want his social circle to find out about it, not fuarrrking NSA. Chill out. If he needs that level of anonymity and can't figure it out enough to be specific in his thread, no advice will help him anyway.
John Doe · 2019-01-14 07:09
>>6855 >Just pick any free blog service Rather buy a VPS instead. Using a free one means handing everything over to a third party
Joey · 2019-01-14 20:29
>>6856 In that case a free blog service, like I suggested, is his best option. Though I wouldn't think anyone would make a thread if that was all they wanted. >>6857 Your VPS provider will still have root access to all your data. I don't see how that's better than just using wordpress.com. VPS are mostly useful as training wheels if you want to have your own homeserver eventually.
Incognito · 2019-01-15 04:02
write.as is an option
Linda Lee · 2019-01-16 00:02
>>6855 Bad advice. Most free blog/hosting provider/social media today ask you to confirm your identity by receiving a text message or a phone call. If you're gonna tell people to "just use tor" you should also tell them how they need to ACT on tor. No identity cross-contamination, don't use a burner phone or laptop too close from your home, don't trust anyone (even if they tell you to turn javascript on to use their service), etc etc. Telling people to "just use tor" without telling them everything is bad, and you should feel bad.
Mario Rossi · 2019-01-17 04:42
>>6882 >Most free blog/hosting provider/social media today ask you to confirm your identity by receiving a text message or a phone call. Do they? Which ones? I seriously doubt the likes of Wordpress do that. OP should use one that doesn't of course. >Telling people to "just use tor" without telling them everything is bad, and you should feel bad. It sounds like you have an axe to grind. Tor is not perfect, but it's the best option for OP. Even used naively it will grant better privacy guarantees than most ideas ITT. There are people suggesting OP to self-host FFS.
William Holtzer · 2019-01-17 04:48
>>6882 What's your alternative?
BloodCat · 2019-01-18 03:34
Mediawiki
Agent Jones · 2019-01-18 10:18
pastebin
Technician · 2019-01-19 19:41
>>6882 >Most free blog/hosting provider/social media today ask you to confirm your identity by receiving a text message or a phone call. What are you talking about? Wordpress.com lets you register with a disposable email.
Netrunner · 2019-01-23 23:32
>>6931 The problem with wordpress is that you can't use it without javascript on. Really bad opsec. Yeah sorry I put wordpress in the list but it do not ask for a phone number like twitter/fb/etc.
Linda Lee · 2019-01-23 23:33
>>6893 Depends on your threat model.
SHODAN · 2019-01-24 03:20
There's pelican, a python program that takes markdown files you've written and puts them into a HTML blog, no javascript. You can use different templates too. A raspi could host that as an onion service.
Sipho Nkosi · 2019-01-28 02:25
You can use any static site generator like pelican or hugo, but they all have a problem if you need to allow no-js comments it's not that easy.
Morpheus · 2019-06-19 03:10
Just found this on HN: http://voidnull.sdf.org/ https://news.ycombinator.com/item?id=20220048
Miho Iwakura · 2019-06-23 22:14
>>5680 Could you elaborate more on this about fc2 please? Have you tried other nipponese oversea websites besides this one?
藤原純一 · 2019-06-25 00:27
>>5681 >Unless you only want to hide your identity from random riyajuu, backlash at work for having political opinions/fetishes or whatever, the best security measures would probably just to not blog at all. it's better to risk, post, die, than to never post and stay quiet. >>5683 >get a neocities account and only connect to neocities through tor. e. z. neocities can shut your site down or steal it >>6855 >The same way you browse anonymously - with Tor Browser. Just pick any free blog service and only access it through Tor. do you know such blog services that allow to create blog with Tor and without google captcha? also, what if they close your site or steal it >>6857 >Rather buy a VPS instead. Using a free one means handing everything over to a third party how do you want to pay for VPS in anonymous way?
Pris · 2019-06-28 15:11
>>7961 >how do you want to pay for VPS in anonymous way? many VPS hosters accept bitcoin/crypto
Otto Normalverbraucher · 2019-06-29 22:24
I've never used IPFS, but this is supposedly exactly the kind of thing it's built for. The other thought that comes to mind is just using, say, an imageboard for your blogging. If you have a persistent identity and the website doesn't require an account, this is anonymous enough, especially if you're just using text. For that matter, you could make a Pastebin account or use some other such hosting service and do this over Tor. Your main issue would be getting an audience, I suppose, but there are plenty of places where you can link to your writings from any of these.
Haruyoshi · 2019-06-30 07:07
>>7961 >do you know such blog services that allow to create blog with Tor and without google captcha? >>7947 looks good, but I'm sure there's more. >what if they close your site or steal it I woouldn't be concerned with this, but you can always sign your stuff with GPG.
Liet Kynes · 2019-07-06 16:08
>>4618 I was wondering the same just now. Can we use txti.es ? The blogs can be edited as required and there is custom url support too. Importantly, it is fast.
Nobody special · 2019-07-07 08:26
i guess the easiest and simplest way to host an anonymous blog would be to buy a crappy little notebook, install debian or something, don't put any personally identifiable info on it, install tor, set up a hidden service (any idiot can do this in five minutes), and set up a reasonably secure server. qubes would be better but probably overkill unless you're doing something very naughty. you could use orbot on a cellphone to do the same thing, but cellphones are even less secure. and you can't set file permissions. but it's very easy to set up a tor hidden service on a cellphone if you just want anonymity from your family, boss, and classmates or whatever.
The Plague · 2019-07-15 04:54
>>8007 Again this dumb suggestion to selfhost. Just log in a blog service via Tor jammit. Selfhosting is for security not privacy.
Aristóteles Amadópulus · 2019-07-16 07:56
>>8053 The problem is, most blogging platforms are auto-flagging accounts registered from a tor exit node and asking for a phone verification or some other soykaf. But you're right about selfhosting.
Technician · 2019-07-16 13:26
>>8053 How is a self-hosted onion service not anonymous?
Nobody special · 2019-07-17 04:23
>>8064 It's harder to setup and requires you to maintain the server securely and privately. It's much easier and safer to just use a free service with Tor. An onion service hosted at home could be deanonymized by correlating the site downtime with power failures in your region for instance. The final decision will depend on your needs and threat model, but the simpler solution is going to be better most of the time.