lainchan / sec
Public Identities
Eldon Tyrell · 2018-09-08 03:56
How do you separate your public identity from your online identities? Anyone got some tips for a secretive person to build a public profile safely and what information can be made available.
Masami Eiri · 2018-09-08 09:36
build multiple public identities, one for each thing you want to do. One for bills, one for browsing news sites, one for in person interactions, one for anonymous/pseudoanonymous media, one for illegal soykaf. Never let them bleed, either through using the same browser/program/pseudonym for different identities or through typing style. It may even be useful to give them all different "personalities". You already have different personalities depending on the people you're with, it should be the same with your online activity.
Hong, Guil Dong · 2018-09-08 17:48
honesty just use FPG[1], it will give you a bunch of fake info to generate for a person. Than use online services over a proxy. keep your online life and personal life seperate
https://www.fakepersongenerator.com/
Jim Hilger · 2018-12-16 03:59
i rarely go outside. I just act nice in public, upon recieving a compliment; say thanks. Upon recieving a greeting; return with one. Thats it.
The Plague · 2018-12-16 11:32
William Holtzer · 2018-12-16 11:40
I have 3 identities, 1 for work, 1 for social interactions with strangers, and a private identity that i used when i had friends.
There isn't anything fancy i do, really. Just make sure not to mix them, not to use personal information whenever possible, etc.. From time to time i google these identities (that are just nicknames with specific avatars really) and see what i can find. I've been doing this for around 5 years, no problems so far.
Except that once i used uber, and the nickname on my uber was pinpointing my address on google. I emailed the website and they removed it.
Y.T · 2018-12-17 22:10
practice samefagging, it will teach you how to make up personalities
Unnamed · 2019-01-21 05:14
I have two identities. 1 is very very public, instagram, LinkedIn, site etc and massively SEO'd them. 2 is my online identity, completely seperate. And i bet on the scale of the 1st identity to cloud the 2nd online private identity i have. Humans/friends generally stop searching when they know everything that i want them to know via my public identity. So it worked till date, no one knows my private handle online.
Splicer · 2019-01-21 12:50
>>6939
Best way of doing things, for me I'm a bit to much when it comes down to my public identity but I blame younger and dumber me for doing that. You can probably find out way to much about me, but none of it stuff that I really care about nor is it life/job threatening.
>>5836
>Than use online services over a proxy.
While I think this advice is good, don't use a commercial or free-to-go vpn for anyone reading. Best bet, use a VPS provider that you can trust or one that you know most governments cant do anything about. https://cockbox.org
Bobby Newmark · 2019-01-23 23:19
>>6940
A VPN or service you can trust? You mean no one, right?
It's a really bad OPSEC measure to put your life in the hands or any service that ain't yours.
NEVER TRUST ANYONE is the rule here.
If you're on the internetz for more than 15 years you must know that.
Never trust a no log policy.
Never trust a "bulletproof" host, etc.
If you don't have physical access to the server your a using as a VPN; don't use it.
Even better tip:
-Never do anything highly illegal at home or with anything linked to your identity. (sure you can download torrents at home).
-Use burners. Buy with cash. Wear a hat. Walk don't drive.
If you're gonna drop advices about governement surveillance please know wtf you're talking about.
God. You're putting users at risk.
Someone will read you and think it's ok to do shady things on paid VPNs.
opsec is serious business, like the internet.
Ein · 2019-01-23 23:26
Idk why anyone will go with cockbox.
The admin learned everything while making his email service.
You're gonna put trust on someone who don't know "everything" that he should know.
He also tried to have some king of opsec but failed as his identity is now public.
Spike Spiegel · 2019-01-23 23:38
>>6942
How would you go about making your internet usage anonymized? Does using a distributed network like TOR make you a target for ISPs?
Hagbard Celine · 2019-01-24 00:46
>>6946
Sure. Using tor will get you flagged, the actionable intelligence gathered from that activity is pretty slim though, depending on a whole bunch of circumstances(who else is using tor at the time, what they suspect you of doing, what other times you use tor and how that's correlated with whatever they suspect you of). Use a tor bridge hosted in a different country with obfsproxy if you feel noided.
The chances that anybody, even Five Eyes, can de-anonymize tor users reliably are pretty low. Many well funded and often competing institutions have a vested interest in keeping the tor network secure and anonymous for their own operations. Also keep in mind that unless you're threatening "national security" interests, Five Eyes don't care what you're doing on tor and they don't work well together with LEO.
in general, you should use tor for a wide variety of traffic. It looks suspicious as fuarrrk if you use tor exclusively in short periods roughly 2 weeks before drugs arrive at your doorstep, for instance.
#1 reason why tor should be used for non-illegal activity, it provides more cover traffic for illegal activity.
Worth noting that in many countries(Iran or China for instance, maybe Russia too) simply using tor is likely to get you in trouble. In that case obfsproxy and a reliable bridge HOSTED IN A DIFFERENT COUNTRY should be considered a must, and ideally if you can afford it you'd run your own bridge on a VPS in a different country.
Yu-ichi · 2019-01-24 01:01
>>6943
none of which are the slightest indication that cockbox is bad.
vc is a G, and he's more knowledgeable about server infrastructure than anybody whose never run a major web service(aka, most people). The fact that cock.li is still up and running is a testament to his ability.
Guthrie · 2019-01-24 02:02
>>6947
Wouldn't a VPN just add another layer of obfuscation to using TOR? Even if the provider itself isn't completely transparent because you don't own the server yourself, the traffic isn't in plain sight to your ISP and most have foreign locations.
Naomi Nascimento · 2019-01-24 03:18
>>6949
yes, but in many cases that obfuscation is exactly what you're looking for.
Spike Spiegel · 2019-01-24 11:49
>>6948
I lol'd.
Stop sucking his dick you fanboi.
Just reverse his twitter feed and see for yourself:
he started to learn like 2-3 years ago.
(Maybe he deleted the tweet by now tho)
I'm sure he have more knowledge than people working on this field for more than 15 years :')
The loudest voice is often the dumbest one.
I'm not saying that what he is trying to do is bad.
I'm 100% on his side. But let's be real here;
You are putting your trust in someone with less than 5 years of experience.
I'm not here to hold your hand, do whatever you like. I'm sure it's a lot of fun to get your box raided every year because VC like to be a edgy 7years old trapped in a fat neckbeard body.
You know, ego, drama, stay away.
Ishikura "Tatsu" Tatsuhiko · 2019-01-24 20:23
>>6948
He's accidentally borked my server on MULTIPLE occasions. I was a customer for well over a year.
Guthrie · 2019-01-24 20:28
>>5818
use TOR, never use a name more than once, don't trash talk, do what you need with the alias and dump it.