Incredibly detailed, bravo it is :)
[DETAILED] Complete Anonymity/OPSEC Guide |
|
I would also like to recommend the following tools for OSX users:
Little Snitch 3 Personal firewall for outgoing connections. Must have. obdev.at/products/littlesnitch/index-en.html Micro Snitch New tool which protects from cam/mic spying. obdev.at/products/microsnitch/index-en.html OSX Rkhunter Rkhunter version for OSX with UI and updater. antirootkit.com/software/OS-X-Rootkit-Hunter.htm Stay safe!
I'm going over a few things,
For the first... All of your Disk image creators are bad except the Win32DiskImager. Rufus, LinuxLiveUSB and Unetbootin are terrible because they overwrite your syslinux.cfg with their own. That can break the boot process. There is an Icelandic VPN that is safe to use, the laws in Iceland do not require VPN services to keep logs. https://lokun.is/ This one does not keep logs as well as it isn't expensive.. GoogleDNS at least is probably one that you don't want to use. As Google keeps logs https://developers.google.com/speed/public-dns/privacy With Full disk encryption you should link this https://wiki.archlinux.org/index.php/Disk_encryption A lot of important information on there. As well as mention that you NEED to encrypt your swap. If say, you keep an application open in SWAP and shut down your computer by unplugging the cable, then data in swap is kept and can be seen. Thus; All type of information leaked, which is a breach into your privacy. Overwriting data once with bunch of zeros is more than enough to make it unrecoverable. This has been proven as well as if you want to, I can find the research paper done on that subject. 3 times isn't really overdoing it but using something like the Gutmann method would be stupid. Yet even then, it is possible in theory to recover the data so you ain't perfectly safe until you have physically destroyed the hard drive. I find it really amusing that you should mention Google as "not safe" search engine but yet you list their DNS as usable. heh. ;-) If I see something more. I'll just let you know on IRC. I think I've covered what I saw when reading this now at 2am. (Jul 18, 2015 09:44 AM)Тоху Wrote: One thing I am confused about is your VPN > Tor vs Tor > VPN. Tor > VPN With this method you send data through tor and then to your VPN and out. This method protects you from your VPN provider. They don't know who you are because you connect after going through Tor. VPN > Tor This method sends first data to your VPN then towards tor and then out. This method means that your VPN provider can see what you are doing, what sites are requested and log your activity before you connect to tor. That is a basic explanation of how it it.
Let's all talk about Schatten's thread now. 🎉
https://hackforums.net/showthread.php?tid=4912439 No? Okay. 😵 (Jul 18, 2015 12:10 PM)Asterea Wrote: I would just stick to Tor and multiple relay's and a safe exit-node to visit .onion's and would dodge proxies to use Tor since they are not vey safe and stick to addon's that block Javascript, Flash etc. and use DuckDuckGo as search engine since Google is very annonying on Tor and not safe. DDG? haha no, use startpage. (Jul 19, 2015 07:26 AM)Asterea Wrote: Startpage is good too considering it's set as the main s.e but why not DDG? DDG is bad, in the paste they used amazon servers and their was a pic how there TOS contradicted itself and the owner owned a data mining company before. Also veracrypt is on a Microsoft owned website and there is no audit like TC. |
|
|