+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Tutorial Establish Greater Privacy & Anonymity For Yourself (/Thread-Tutorial-Establish-Greater-Privacy-Anonymity-For-Yourself)
Establish Greater Privacy & Anonymity For Yourself - 817_091_278 - 10-21-2016
Using Anonymization Software
This is a very common form for providing a certain level of anonymity (and possibly privacy, when used correctly) - however, so many people fail at doing this. There are two forms of anonymization tools that are considered reasonably safe; a virtual private network service and the onion router, both commonly referred to as a VPN or TOR; both do heighten the levels of anonymity, however, pure privacy is another thing. See here to understand the difference.
A virtual private network (VPN); This will usually never provide you with an actual level of privacy (but there are exceptions!); however, anonymity is definitely heightened here. There are many factors that come into play when you want to get actual privacy when using a VPN - one, how reliable is your provider? Read their privacy policy very closely; what do they log and store? Do they monitor connection and usage logs? They can't lie here, nor be vague - since, they can't risk getting sued. Number two, do they use shared internet protocols? This is very important, as, if they do, it'd be very hard for a third-party to even get your user information from the VPN provider; also, make sure they DO NOT log time-stamps, at all! Regarding anonymity, this will likely protect you from the script-kiddies and hackers among us - those you pissed off, or those who just want to make your life difficult. Obviously, your credentials won't be saved by using a VPN - but we'll get to that!
How to ensure strong privacy when using a VPN;
• register and log-in using TOR, and provide them with a temp email whilst also using notsharingmyinfo;
• pay for their services via bitcoins or prepaid credit cards ONLY;
• provide them with real-sounding fake details; like a fake address & name from here.
If you do all this, all that can fuck you up is if the VPN logs and stores sensitive details, and the federalies request it via a warrant.
What services do I personally recommend? One. PrivateInternetAccess (PIA)? Why? Here's why.
The onion router (TOR); This is by-far the safest method to use when attempting to remain strong privacy and anonymity (but only when used correctly). You see, many people fuck up here. They'll use TOR when signing up somewhere, and provide personal information there. They'll send bitcoins (in which they use tor to log-in on) to a service which requires their personal address and information. However, when used correctly - the NSA and any other governmental entity that don't use global monitoring mechanisms - can't track you; the snowden leaks proved this - they are severely struggling with cracking it.
However, if certain conditions are met - you could get fucked. Read here to get a fully detailed understanding on the risk. However, please understand, people will exaggerate and overblow shit out of proportion just to sound intelligent and say, "Don't trust Tor", just because of some faults - but, it really is a beautiful creature. Like, "Exit Nodes Can Be Sniffed" - this is preventable with a VPN. "JavaScript, Plug-ins, and Other Applications Can Leak Your IP", just disable it - and most services won't require you to use this. Fact of the matter is, if you use it correctly, you will in all likely hood not get traced.
Ways to ensure higher-levels of privacy are;
• never, ever provide any personal-details when using services - if that is required (for verification, etc.), DO NOT USE TOR for that service;
• connect to a VPN before connecting to TOR - this will make sure your ISP don't know you are using TOR, and will prevent sniffing attacks to occur;
• never use the same email for services when using TOR, use a temp email and NSMI if possible, but always NSMI;
• do not use any financial services (with the exception of BTC) on TOR.
For the exit nodes, just make sure you connect to TOR after connecting to the VPN!
Do more research if you really care! There is probably more you can do!
DO NOT USE PROXIES!
Encryption!
This is absolutely mandatory. If you need privacy, and don't have this, you might as well just let the cops fuck you in the ass, on your hard drives. In most (rational) countries, you wouldn't be forced to hand over your encryption keys unless it's court-ordered (well, except for the UK) - which only happens if it threatens national security. So, if you encrypt your drives, it's very unlikely that the cops - even if they wanted to - would see the contents on your drive. If they ask you, either tell them to go fuck themselves, or just not say anything - oh, and lawyer the fuck up! It'll scare them real good, especially if they don't have much evidence.
I use DiskCryptor on both my drives; you can see here how you'd encrypt them via DC. Don't use BitLocker, as it requires a policy that allows a certain cold-boot attack to happen.
I'd suggest using AES - as it's fast and very popular, so if it was broken, they'd make quick security updates on it. For a detailed understanding on encryption, read here.
Using Bitcoins Effectively
Bitcoins, by nature, are very ineffective at providing actual privacy; as all of your transactions are listed online. Therefor, your going to have to do some extra work to ensure your identity is remained unknown when using bitcoins.
First of all, use blockchain's TOR version; blockchainbdgpzk.onion - use a permanent email address, but use NSMI!
Secondly, use a mixer for every transaction; I always use Helix; grams7enufi7jmdl.onion/helix/light. Basically, in whatever way you are retrieving your bitcoins, use a mixer. When sending bitcoins, use a mixer; and for Helix, use the multiple transactions method - and if it's very sensitive, use the delay function.
Don't tie your bitcoins to where you need to provide shipping information; if you absolutely need to, create a second wallet and send the funds (mixed) there, then transact. This if, of course, assuming that the coins are dirty - which, come on, this is a hacking forum, who here has 'clean bitcoins'?
Use Privacy-Minded Email Providers
I'll get quickly on point with this, since I assume most of you understand why this is mandatory for privacy. I use Sigaint; it's a TOR-based email service provider. It's survived FBI/CIA attack(s) before. It's existed for a long time and has been vouched by certified sources. However, never sign up with the sigaint address, use NSMI and sign up with that. And, NEVER, EVER, use the same Sigaint address on multiple services! This is a HUGE NO-NO! Create a new Sigaint email for every service; PayPal, Blockchain, etc.
Use Password Managers
1Password; I personally use this for my 30-char complex passwords. I assume it's not needed to say more.
Conclusion
I'll probably add more later on - however, I have to game now - I can begin feeling my withdrawal symptoms.
Hopefully, this is will prove as useful information to some.
RE: Establish Greater Privacy & Anonymity For Yourself - 817_091_278 - 10-28-2016
You should also use TOR when using TOX.
RE: Establish Greater Privacy & Anonymity For Yourself - pvnk - 10-28-2016
Thanks for all the tips and advice.
RE: Establish Greater Privacy & Anonymity For Yourself - Cyber Warrior - 10-28-2016
Nice tutorial, thank you, it will help beginners for sure.
RE: Establish Greater Privacy & Anonymity For Yourself - d0ntjump - 10-30-2016
Awesome post! Thank you & keep the knowledge coming.
RE: Establish Greater Privacy & Anonymity For Yourself - D@rk TruTH - 10-30-2016
use whonix gateway in virtual box it works great .... give it a try
RE: Establish Greater Privacy & Anonymity For Yourself - 817_091_278 - 10-30-2016
(10-30-2016, 05:57 PM)D@rk TruTH Wrote: use whonix gateway in virtual box it works great .... give it a try
Not very applicable for casual users, however.
RE: Establish Greater Privacy & Anonymity For Yourself - Dotyam - 11-11-2016
Hell of a tutorial ! I'm pretty new at this, and all the links are really useful
RE: Establish Greater Privacy & Anonymity For Yourself - vipor - 01-02-2017
I wouldn't recommend using 1password as it is proprietary and cannot be trusted.
If you are going to use a password manager you should use a open source one such as KeePassX.
RE: Establish Greater Privacy & Anonymity For Yourself - pvnk - 01-02-2017
(01-02-2017, 03:39 AM)vipor Wrote: I wouldn't recommend using 1password as it is proprietary and cannot be trusted.
If you are going to use a password manager you should use a open source one such as KeePassX.
I agree with this individual's input on the open source alternative. Although I'm against password managers altogether.
