(03-14-2018, 01:00 AM)May Wrote: I'm currently using ExpressVPN. The connection speed is pretty fast.

(03-13-2018, 04:06 PM)chunky Wrote: Perfect Privacy is the best choice in my opinion. It's kinda expensive but you can even play games with it without having an insanely high ping. They don't log anything (not confirmed since you simple can't prove that but many people that did illegal stuff with it had no problems).

(03-14-2018, 03:42 AM)phyrrus9 Wrote:

(03-14-2018, 03:41 AM)brookboys Wrote:

(03-13-2018, 09:50 PM)phyrrus9 Wrote: Rule #1: don't ever trust something you don't control.
They may say they don't keep logs, but in all liklihood they do.

what would you suggest?

1. don't do anything you aren't willing to take the heat for
2. don't trust anything you don't control
3. end to end encryption done by YOU

(03-14-2018, 06:11 AM)mothered Wrote: Bear In mind that a VPN accounts for around 15-20% of your "total" online anonymity.

Just adding to everything mentioned thus far (of which I won't go Into any technicalities), also do (where applicable to you) what's listed below. It's beyond the scope of this post to mention everything- I simply don't have the time, so I've only mentioned a few recommendations.

* Change your browser's user agent (PIA will NOT do this for you).
* Run a VPN alongside the Tor network by Installing the Tor browser (VPN > Tor > Internet)
* Change your screen resolution with a tool named Multiloginapp (The user agent will NOT do this).
* Disable all location features and settings- both browser and OS-based.
* Prevent Social Media leaks by ALWAYS logging out of your accounts when not In use. Just by being logged In (and not actively viewing your accounts), your "account type" can be leaked.
* To prevent your browser leaking your connection (ISP, connection type, Internal & external IP address), disable WebRTC. Although VPNs do prevent such Information from being disclosed, leaks do happen.
* Some VPNs only handle IPv4 requests, hence (where supported) If an IPv6 request Is made, the VPN will not handle It and result In an IPv6 leak, thereby disclose your location, ISP etc. If supported, disable IPv6 In your router.
* Going to the extreme, If you're navigating via your cell phone, certain sensors (example, proximity sensor, gyroscope sensor, magnetometer sensor, barometer sensor, ambient light sensor) can reveal PINs, passwords, location, voice searches etc. Disable those you don't need/use.
* Use a private search engine. I recommend MetaGer- It also has a built-In proxy that allows you to open links anonymously within that proxy. This adds an additional layer of protection to your current setup.
* Stating the obvious, for your day-to-day navigation outside the Tor network, use a secure web browser. I recommend Epic browser. This also has a built-In proxy.
* Where possible, disable JavaScript. This Is responsible for an array of browser leaks.

As said, by no means does this cover anonymity In It's entirety. When time permits. I shall document further recommendations.

(03-15-2018, 04:29 AM)phyrrus9 Wrote: DO NOT feel secure behind that setup.

Quote:Don't ever feel secure, because the fact is that there will always be one more bug, and there is always a way.

(03-15-2018, 04:29 AM)phyrrus9 Wrote:

(03-14-2018, 06:11 AM)mothered Wrote: Bear In mind that a VPN accounts for around 15-20% of your "total" online anonymity.

Just adding to everything mentioned thus far (of which I won't go Into any technicalities), also do (where applicable to you) what's listed below. It's beyond the scope of this post to mention everything- I simply don't have the time, so I've only mentioned a few recommendations.

* Change your browser's user agent (PIA will NOT do this for you).
* Run a VPN alongside the Tor network by Installing the Tor browser (VPN > Tor > Internet)
* Change your screen resolution with a tool named Multiloginapp (The user agent will NOT do this).
* Disable all location features and settings- both browser and OS-based.
* Prevent Social Media leaks by ALWAYS logging out of your accounts when not In use. Just by being logged In (and not actively viewing your accounts), your "account type" can be leaked.
* To prevent your browser leaking your connection (ISP, connection type, Internal & external IP address), disable WebRTC. Although VPNs do prevent such Information from being disclosed, leaks do happen.
* Some VPNs only handle IPv4 requests, hence (where supported) If an IPv6 request Is made, the VPN will not handle It and result In an IPv6 leak, thereby disclose your location, ISP etc. If supported, disable IPv6 In your router.
* Going to the extreme, If you're navigating via your cell phone, certain sensors (example, proximity sensor, gyroscope sensor, magnetometer sensor, barometer sensor, ambient light sensor) can reveal PINs, passwords, location, voice searches etc. Disable those you don't need/use.
* Use a private search engine. I recommend MetaGer- It also has a built-In proxy that allows you to open links anonymously within that proxy. This adds an additional layer of protection to your current setup.
* Stating the obvious, for your day-to-day navigation outside the Tor network, use a secure web browser. I recommend Epic browser. This also has a built-In proxy.
* Where possible, disable JavaScript. This Is responsible for an array of browser leaks.

As said, by no means does this cover anonymity In It's entirety. When time permits. I shall document further recommendations.

That's a very comprehensive list, and I like it, but there are a couple things I want to add.
DO NOT feel secure behind that setup. Don't ever feel secure, because the fact is that there will always be one more bug, and there is always a way. The list above is a very good list in that it aims to prevent many of these bugs from being useful, which is great, but I would say a setup like this should only account for 80% of your security tactics. What's above is the common methods of being "anonymous", and they're pretty strong as they are, but you should add some layers of obfuscation on top of it.

Here's a script you can run (and should run periodically) to change your ToR exit node. Remember, ToR is only as strong as the exit nodes (unless you stay entirely in-network). I would advise putting this in a cron job so that it runs every say 15 minutes. Bonus points if you write a program that reads your own traffic and changes it after a certain number of requests are made. Ultra bonus points if you make a program that keeps multiple ToR sessions running and randomly sends your traffic amongst them and pieces it back together locally.

Code:

(echo authenticate '""'; echo signal newnym; echo quit) | nc localhost 9051

The same sort of thing should be done with your proxies. Mothered mentioned a browser with good proxy support, maybe its possible to write a browser addon that changes this proxy every 30 requests.

Doing both of these things will add a SERIOUS layer of obfuscation to your layer of security, which would (in my eyes) bring your security level to 95%, and of course the last 5% is you. How you browse, the mouse gestures you make, the pages you visit, etc can all ID you, so if you want to claim that last 5%, you'll need to make sure you're extra random when browsing.

(03-15-2018, 10:29 AM)mothered Wrote: Where your setup permits, proxy chaining Is also a good addition.

Bear In mind that If one proxy In the chain fails, the rest will go down with It. When I have some time up my sleeve, It'll document an extremely In depth tutorial on everything pertaining to online security and anonymity. It will be very lengthy, yet as simplified as possible to allow those who're not so tech-savvy have a clear understanding.

(03-15-2018, 12:31 PM)brookboys Wrote:

(03-15-2018, 10:29 AM)mothered Wrote: Where your setup permits, proxy chaining Is also a good addition.

Bear In mind that If one proxy In the chain fails, the rest will go down with It. When I have some time up my sleeve, It'll document an extremely In depth tutorial on everything pertaining to online security and anonymity. It will be very lengthy, yet as simplified as possible to allow those who're not so tech-savvy have a clear understanding.

Love it here , its great that you guys like this a lot of useful information, and great detailed explanation.