[sinmar]

So it's alright to accept plaintext passwords pre-TLS?
You do realize Exploit.IM also stores passwords in plaintext and admins regularly hijack accounts.
You're literally standing up for a Jabber service solely because it has a "cool h4x0r name."

Read my full rant about Exploit.IM here: https://hackforums.net/showthread.php?tid=4910065

I'm not defending it, I'm saying trying to say that calling it bad because their SSL isn't set up good is retarded. As for the plaintext comment, most all XMPP servers store plaintext passwords or unsalted MD5 because the popular XMPPd's don't have security in mind.

[ZuGgY]

I have a question, if I just leave my DNS as is by default, is that bad? I haven't touched it, honestly...

Thanks.

[Synapse]

Bookmarked very nice and hq thread

[Тоху]

Great guide, took a while to read all the way through, but valuable information gained.

[ᴎᴀᴎᴏ]

Just updated the thread. Took a few things out, added a few other options and variants. Just going to keep on working on it slowly. Also going to put in a few OSX applications soon too along with also adding something about Torify/Torsocks.

[xomk]

Very nice, high-quality guide! Thank you for posting!

[Inkling]

This is an amazing guide.

Do you think you could add more?
I really enjoyed reading this.

[Betty Blue]

Awesome. Maybe the 80% of idiots in this section will learn something, hope to see some of the good suggestions I and others gave you added in!

[Loki123]

I'm going over a few things,

For the first... All of your Disk image creators are bad except the Win32DiskImager.
Rufus, LinuxLiveUSB and Unetbootin are terrible because they overwrite your syslinux.cfg with their own. That can break the boot process.

There is an Icelandic VPN that is safe to use, the laws in Iceland do not require VPN services to keep logs.
https://lokun.is/
This one does not keep logs as well as it isn't expensive..

GoogleDNS at least is probably one that you don't want to use. As Google keeps logs
https://developers.google.com/speed/public-dns/privacy

With Full disk encryption you should link this
https://wiki.archlinux.org/index.php/Disk_encryption
A lot of important information on there. As well as mention that you NEED to encrypt your swap. If say, you keep an application open in SWAP and shut down your computer by unplugging the cable, then data in swap is kept and can be seen. Thus; All type of information leaked, which is a breach into your privacy.

Overwriting data once with bunch of zeros is more than enough to make it unrecoverable. This has been proven as well as if you want to, I can find the research paper done on that subject. 3 times isn't really overdoing it but using something like the Gutmann method would be stupid. Yet even then, it is possible in theory to recover the data so you ain't perfectly safe until you have physically destroyed the hard drive.

I find it really amusing that you should mention Google as "not safe" search engine but yet you list their DNS as usable. heh. ;-)

If I see something more. I'll just let you know on IRC. I think I've covered what I saw when reading this now at 2am.

[Zink]

I just read through this thread,
great work zer0.
Actually learned something.

[ᴎᴀᴎᴏ]

-snip-

Talked to you on IRC, fixed a lot of that.

Edited a bunch of things, will continue looking into adding a few more things.

[Evil Corp]

Saving this for later read. Thanks for taking time doing this.

[HIGH PAID FELLA]

OP, as linked before ArchLinux has a great documentation regarding applications, protocols and anonymity.

[ᴎᴀᴎᴏ]

OP, as linked before ArchLinux has a great documentation regarding applications, protocols and anonymity.

I added a link to their encryption information under my Whole Disk Encryption section. Might add more soon, going to look through there Wiki today at some point.

[Тоху]

One thing I am confused about is your VPN > Tor vs Tor > VPN.

As I understand, and as the OPSEC for Hackers link at the bottom of your post states around the middle of the slideshow (a bit before), Tor > VPN is okay, VPN > Tor = GO TO JAIL.