nihilist`s Blog
Previous Page

OPSEC: Privacy, Anonymity and Plausible Deniability

Tutorials to show how to achieve Privacy, Anonymity and Plausible Deniability online. I have a quality standard as to how i do these tutorials, if there are any improvements i can do on them please let me know.

SHOWCASED ARTICLE: Learn how to audit your own setup, to determine your Operational Security (OPSEC) Level, and find out what is the most appropriate internet use for it.


Articles Status:

  1. ⭐: Personal Favorite
  2. ✅: Completed
  3. 🟠: Work in progress
  4. ❌: Not started yet

⚠️ This Blog is open to contributions:

If you want to contribute, check out the gitea repository for contributions here. (i'm rewarding 10 to 50 euros in monero per new complete blogpost), if the blogpost you want to contribute is not listed below, validate your blogpost idea with me beforehand.

📝 Explaining Concepts

  1. ✅ a Nihilist's Manifesto
  2. ✅ Privacy, Anonymity, Plausible Deniability, Decentralisation, Security, and 0days
  3. ✅ Governments, Centralisation, and Law Enforcement
  4. ✅ Governments fear Decentralisation and Anonymity

📝 Explaining OPSEC ⭐

  1. ✅ Audit your OPSEC and determine the appropriate internet use
  2. ✅ Internet usage segmentation (QEMU VMs + Identity Management)
  3. ✅ OPSEC: Using the right Technology and Behavior




OPSEC LEVEL 1: Privacy

📝 Explaining Privacy

  1. ✅ What is Privacy ? Why is it important ?
  2. ✅ The main source of Privacy: Open source software
  3. ✅ The lack of Open Source Hardware (CPUs, Motherboards, GPUs)

💻 Getting started

  1. ✅ How to install Linux from a Windows PC ⭐
  2. ✅ How to install and update programs on Linux
  3. ✅ How to install GrapheneOS on a Pixel Phone

💻 File Sharing

  1. ❌ One on One large file sharing (Syncthing over VPN)
  2. ❌ P2P large file sharing (Torrents over VPN)

💻 Privacy means Open Source (FOSS)

  1. ✅ How to compile open source software + How to verify software integrity
  2. ✅ How to Virtualize Machines (QEMU/KVM Hypervisor)
  3. ✅ How to get privacy from your ISP using a VPN
  4. ✅ Route QEMU VMs through a Host OS VPN
  5. ✅ Password Management 101 (How to use Keepass)
  6. ✅ Serverside: Should I trust serverside encryption? Should I use PGP?
  7. ✅ Private Messaging (PGP encryption)

⚠️ Miscellaneous - In real life

  1. ❌ Hide the contents of a mail package





OPSEC LEVEL 2: Anonymity

📝 Explaining Anonymity

  1. ✅ What is Anonymity ? Why is it Important ?
  2. ✅ Why isn't Privacy enough for Anonymous use ?
  3. ✅ The main source of Anonymity: The Tor Network
  4. ✅ Using Tor Safely: Tor through VPN or VPN through Tor ?
  5. 🟠 Phone Numbers are incompatible with Anonymity
  6. ❌ Stylography protection (Running a Local LLM and copy pasting messages)

💻 Clientside - Getting Started (⚠️ Check if your ISP allows Tor or Not!)

  1. ✅ Tor Web Browser setup
  2. ✅ How to use the Tor Browser on Mobile
  3. ✅ Tails OS QEMU VM for Temporary Anonymity
  4. ✅ VMs for Long-term Anonymity (Whonix QEMU VMs)

💻 File Sharing

  1. ❌ How to send small files Anonymously (Onionshare)
  2. ❌ One on One large file sharing (Syncthing over Tor)
  3. ❌ P2P large file sharing (Torrents over i2p or Tor)

💻 Clientside - Decentralized Finances ⭐

  1. ✅ Why Financial decentralisation ? (Cryptocurrencies, Exchanges and KYC) ⭐
  2. ✅ How to acquire and use Monero
  3. ✅ Why can't I trust Centralised Exchanges, and random Monero nodes ?
  4. ✅ Haveno Decentralised Exchange direct Fiat -> XMR transaction ⭐
  5. ✅ Haveno DEX Dispute resolution (Fiat -> XMR)
  6. ✅ Haveno DEX Bank Transfer (ex: SEPA) -> XMR transaction
  7. ✅ Haveno DEX Cash By Mail -> XMR transaction ⭐
  8. ❌ Convert Monero into other Cryptos Anonymously (XMR -> BTC Atomic Swaps DEX)
  9. ❌ Monero Inheritence Management

💻 Clientside - Making use of Anonymity (Non-KYC Providers)

  1. ❌ How to get a mail account anonymously (Mails as a service)
  2. ❌ How to get a phone number anonymously (Remote SMSes as a service)
  3. ❌ How to get a credit card anonymously (Credit cards as a service)
  4. ❌ How to get a residential proxies anonymously

🧅 Serverside - Contributing to Anonymity

  1. ✅ Tor Bridge Node
  2. ✅ Tor Node
  3. ✅ Tor Exit Node
  4. ✅ Monero Node
  5. ✅ Monero Mining with p2pool (help validate the network)
  6. ❌ Haveno Seed Node
  7. ❌ Haveno DEX Network

🧅 Serverside - Anonymous Hidden Services

  1. ✅ Where to host Anonymous Hidden Services ?
  2. ✅ Hidden Service with custom .onion Vanity V3 address
  3. ❌ Basic Webserver setup (NGINX / PHP / MYSQL)
  4. ❌ Minimalistic MoneroSSO .onion setup
  5. 🟠 XMPP prosody .onion setup (chat service)
  6. ❌ Gitea .onion setup (Code repositories)
  7. ❌ Nextcloud .onion setup (cloud storage)
  8. ❌ Mastodon .onion setup (Microblogging)
  9. ❌ Discourse .onion setup (Forums)


🧅 Serverside - Anonymous Clearnet Services

  1. ✅ Where to host Anonymous Clearnet Services ?
  2. ✅ How to rent remote servers anonymously (Cloud resellers) ⭐
  3. ✅ How to rent remote domains anonymously (Registrar resellers) ⭐
  4. ✅ Remote anonymous access setup (cockpit + ssh through tor)
  5. ✅ Clearnet Bind9 DNS server setup (with DNSSEC)
  6. ✅ Clearnet Matrix server (federated clearnet chatting)
  7. ✅ Anonymous (remote or self-hosted) clearnet Mail Server ⭐


⚠️ Miscellaneous - In real life

  1. ❌ How to send a mail package anonymously
  2. ❌ How to recieve a mail package anonymously
  3. ❌ How to remain Anonymous during a protest



OPSEC LEVEL 3: Plausible Deniability

📝 Explaining Plausible Deniability

  1. ✅ What is Plausible Deniability ? Why is it Important ?
  2. ✅ Why Anonymity isn’t enough for Sensitive use ?
  3. 🟠 Sensitive Services: Self-Host or Host Remotely ?

💻 Clientside - Getting Started

  1. ✅ The main source of Plausible Deniability: Veracrypt Hidden Partitions
  2. ✅ Plausibly Deniable Critical Data Backups
  3. 🟠 Plausibly Deniable Anonymity VMs (Whonix VMs in a Hidden Volume)⭐

💻 Steganography - Hiding secrets in plain sight

  1. ❌ Other sources of Plausible Deniability: Steganography
  2. ❌ Hiding textfiles into images
  3. ✅ Hiding entire zipfiles into videofiles files (zulucrypt)

🧅 Serverside - Plausible Deniability at Home (⚠️ Self Hosting = Risky!)

  1. ✅ Open source router VM setup (pfsense on QEMU/KVM)
  2. ✅ Electrical Failover (basic UPS setup)
  3. ✅ Internet Failover (Dual WAN pfsense setup)
  4. ❌ Deniable Encryption Protection (emergency shutdown script, shortcut, + systemd service)
  5. ✅ Automating Deniable Encryption Protection (USB Changes, detecting movements, and SSH bruteforce attempts)
  6. ✅ Endgame V3 (.onion service Anti DDOS / Load Balancer / WAF + Captcha) ⭐

🧅 Serverside - Remote Plausible Deniability (⚠️ Remote Hosting = Safer!)

  1. ❌ When the Adversary is the cloud provider himself
  2. ❌ Protecting against cold boot attacks, with RAM encryption (no hardware access!)
  3. ❌ System Intrusion / Integrity monitoring (kernel modules, binary files, unwanted processes, hardwre changes)
  4. ❌ Custom Linux OS making (debian-based)
  5. ❌ Obtaining a non-KYC dedicated server, with a custom OS
  6. ❌ Intrusion detection on remote servers



Inspirations

  1. Hack Liberty Resources
  2. Privacy Guides
  3. Simplified Privacy
  4. The Hitchhiker's guide to Anonymity


Non-KYC VPS providers



Current services used:

  1. ServersGuru (KYC-Free reseller of cloud providers like Hetzner)
  2. nicevps.net (KYC-Free registrar)

Previous services:

  1. Incognet (both registrar and cloud provider)
  2. Hostiko (cloud provider)
  3. Other Non-KYC Cloud Providers



LEGAL DISCLAIMER: 
Across the entirety of my blog, in all articles that I made, I advocate for the legal use of technologies, even when I am talking about Privacy-enhancing and Anonymity-enabling technologies. In no way am I advocating for any illegal use of any technology showcased in any article on my blog. as the goal of this blog is to remain stricly informative and educative.


I decline any and all responsibility for any mis-use of any of the technology i showcase in the entirety of my blog. I also decline any and all responsibility for any physical, digital and psychological damage caused by the mis-use of any showcased technology, as the responsibility of such acts remains with the perpretating third-party. By reading this blog, you permanently, irrevocably and world-widely agree that I am in no way am responsible for any illegal action done by you or anyone that uses any of the showcased technology in my blog articles.

Nihilism

Until there is Nothing left.

My Links

RSS Feed
Matrix Chat

About nihilist

Donate XMR: 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8


Contact: nihilist@contact.nowhere.moe (PGP)