+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: OpSec and OSINT (https://hackforums.net/forumdisplay.php?fid=322)
+---- Thread: How can I stay completely anonymous? (/showthread.php?tid=5615026)
Pages: Pages
1
2
How can I stay completely anonymous? - D4nnyB0y - May 4, 2017
I want to be able to stay completely anonymous, but stil be able to use PayPal and other websites that look for suspicious activity.
I was thinking a socks5 Proxy, but if someone really wanted to find me, wouldn't they be able to call the the company that provided me the proxy server and ask who connected to the Ip that was used?
No tor can't be used, all websites pick it up and block it or limit accounts immediately...
Thanks !
* - Triops - May 4, 2017
There are a lot of things you can do to remain completely anonymous. But it really depends on what you mean by that. You can use a VPN to hide your real IP address from websites. You can use a completely different OS like Tails or Whonix to be even more secure. And if you want to step it up even farther, create a new email address for every site you sign up for, makes it a lot harder to keep track of someone that way.
* - TwoMyths - May 4, 2017
(May 4, 2017 02:03 PM)Triops Wrote: There are a lot of things you can do to remain completely anonymous. But it really depends on what you mean by that. You can use a VPN to hide your real IP address from websites. You can use a completely different OS like Tails or Whonix to be even more secure. And if you want to step it up even farther, create a new email address for every site you sign up for, makes it a lot harder to keep track of someone that way.
Is a VPN easily traced back to the original ip? Is it possible?
* - SIM-3467872 - May 4, 2017
(May 4, 2017 02:05 PM)TwoMyths Wrote: Is a VPN easily traced back to the original ip? Is it possible?
yes your ISP can see if you connect to vpn directly and even your activity if you use unencrypted vpn.
* - THC - May 4, 2017
(May 4, 2017 03:20 PM)Hiimanshu Wrote: yes your ISP can see if you connect to vpn directly and even your activity if you use unencrypted vpn.
But honestly... What VPN today is unencrypted?
Invest in a good VPN and you won't have to worry about logs or unencrypted nonsense.
Check out PIA, its considered one of the best VPNs out there. They won a data retention lawsuit against the FBI, and I think the only information that the ended up releasing was that users IP was from the "west coast", which is rather general.
https://www.privateinternetaccess.com/
* - Triops - May 4, 2017
(May 4, 2017 03:22 PM)M.D. Wrote: But honestly... What VPN today is unencrypted?
Invest in a good VPN and you won't have to worry about logs or unencrypted nonsense.
Check out PIA, its considered one of the best VPNs out there. They won a data retention lawsuit against the FBI, and I think the only information that the ended up releasing was that users IP was from the "west coast", which is rather general.
https://www.privateinternetaccess.com/
Only issue that I have with PIA is that I have no clue how to use it with HF. Other than that, it's really good.
* - THC - May 4, 2017
(May 4, 2017 03:27 PM)Triops Wrote: Only issue that I have with PIA is that I have no clue how to use it with HF. Other than that, it's really good.
You would need to add a route I believe. Not entirely sure, but I did hear that somewhere before (:
* - CleverUSB - May 4, 2017
No such thing as being totally annonymous.
You can always take sets to help you stay anonymous though. Some of those steps include:
1. Use a no log encrypted VPN
2. Be careful when online, any information can expose you
3. Don't own social media accounts
Those are some very basic procedures but I totally recommend you look into more advanced procedures.
* - SIM-3467872 - May 4, 2017
I think using socks5 over vpn is a good idea to protect your privacy.
* - Yonko - May 4, 2017
Basically its impossible to be COMPLETELY annonymous.
However ways to stay hidden are, socks5 proxy, random generated passwords 16 long, new email for everything you sign up with, NEVER write your irl name somewhere.
* - KelseyM - May 4, 2017
That's impossible.
There are many ways you can protect your identity and keep your footprint small, but nobody is completely anon. Some people have been caught purely by the way they type words..
* - D4nnyB0y - May 4, 2017
I guess I will be going with a socks5 proxy
* - kst.stock - May 5, 2017
why not combine multiple methods. such as use a vpn to connect to tor then connect to a proxy, or use another vpn at the end.
* - P3TER P4RKER - May 5, 2017
I've never cared to be full anon. I own a facebook and all that jazz. But thats just for my family. on any other site I dont use my real name or address I use a VM with linux on it under a system proxy and a vpn it's quite slow but gets the job done.
* - Deutsche Bank - May 7, 2017
Being fully anonymous is not possible, however deception is and it will allow you to be 99% there.
Firstly you must start becoming anonymous.
A good start is to invest in a new vpn provider. In order to do this find one that allows you to pay in cash, and has acceptable privacy policies. Withdraw the cash in small random amounts over the course of a month. Always overdraw, meaning that you get out more money than the actual subscription (also store it in a sealed bag that has never been inside your house or car). Make sure that you wear gloves when handling the cash, and make sure to not get any biological data on it. Next seal it in an envelope in a foreign environment. Lastly drive a couple towns over, preferably rural and make sure no cameras see you depositing the cash. Tell nobody where you are going, or make up a good backstory. Repeat this for two different VPN providers.
Next you need to get a computer that has never connected to any related wifi networks. Always drive to a different location in an spot obscure from any camera's. Set up your connection. You will be connecting using two nested VPN's over Tor. The connection will be slow but it will be secure. Ensure no DNS leaks. There are many tutorials online on how to do this.
Once your connection is established, it is time to encrypt your hdd. Use Veracrypt. Again there are many tutorials on how to do this properly.
It is time to create your new persona. This must be completely unrelated and be as generic as possible while still maintaining marketability for your online services if you provide any.
Time to start seeding information. This is a constantly active job and is required in order to throw off trails. This can be done through multiple setups. Personally I like to do this whenever I travel overseas. I pay for different vpn providers in advance and use them at public hotspots on fresh drives. You can then create different generic persona's online and create fake contact information and seeds for you real account. This can be things such as other aliases, addresses, names, address, country, information, personal traits, characteristics, hobbies. All the iincorrect information you seed will throw everybody off. There is nothing worse than trying to track somebody who apparently lives in 5 countries, is both female and male, plays football and lawn bowls, has both a masters in biology and computer science, and never attended highschool.
Lastly it comes down to personal discipline. This is the security you give yourself. Do not give out personal information, and do not conduct any activities outside of your setup. You do not talk about your anonymous persona on your personal accounts. You mention what you do to nobody, and you hide all physical evidence of your activities. Lastly you must ensure that your laptop is always powered down when not in use.
There is an abundance of things you can do to ensure that you are completely untraceable online, however it also comes down to convenience. Not everybody is willing to give up their freedom of access in order to become private online.
this is by no means a full guide, and what I have mentioned is only a snippet of what really should be done in order to remain anonymous. This is about as simplified as it gets, and I hope this is a base standard for everybody.
Also I should mention that your personal privacy should not matter online. Part of your deception is being clueless to your own activities. This means that should anybody check YOU, they see that you are a normal internet user that has no correlation to your separate online identity.
have a nice day
edit: this also assumes you know the basics of good passwords, using seperate and disposable emails, keeping no logs of your own actions on your computer,and general security measures that have been mentioned numerous times on this forum.
a very good intermediate level guide can be found here
https://www.ivpn.net/privacy-guides/advanced-privacy-and-anonymity-part-1
it describes some of the underlying concepts and implementation well, however the content is not the most secure as of today.