diff --git a/opsec/index.html b/opsec/index.html index 6fd8a8e..ab4596f 100644 --- a/opsec/index.html +++ b/opsec/index.html @@ -49,7 +49,7 @@
  • ⭐: Personal Favorite
  • ✅: Completed
  • 🟠: Work in progress
    • -
  • ❌: Not started yet
    • +
  • ❌: Not started yet (can be brainstormed on their assigned gitea issues here)

    • ⚠️ This Blog is open to contributions: @@ -83,7 +83,7 @@
  • ✅ Audit your OPSEC and determine the appropriate internet use
  • ✅ Internet usage segmentation (QEMU VMs + Identity Management)
  • ✅ OPSEC: Using the right Technology and Behavior
    • -
  • ❌ How to maintain multiple Identities Online
    • +
  • ❌ How to maintain multiple Identities Online



    • @@ -112,14 +112,14 @@
  • ✅ How to install Linux from a Windows PC ⭐
  • ✅ How to install and update programs on Linux
  • ✅ How to install GrapheneOS on a Pixel Phone
    • -
  • ❌ Easy Private Chats - Simplex
    • +
  • ❌ Easy Private Chats - Simplex

    • 💻 File Sharing

      -
    1. ❌ One on One large file sharing (Syncthing over VPN)
      2. -
    2. ❌ P2P large file sharing (Torrents over VPN)
      3. +
    3. ❌ One on One large file sharing (Syncthing over VPN)
      4. +
    4. ❌ P2P large file sharing (Torrents over VPN)

    @@ -132,7 +132,7 @@
  • ✅ Password Management 101 (How to use Keepass)
  • ✅ Serverside: Should I trust serverside encryption? Should I use PGP?
  • ✅ Private Messaging (PGP encryption)
    • -
  • ❌ How to use GPG SmartCards to secure your PGP keys
    • +
  • ❌ How to use GPG SmartCards to secure your PGP keys

    • ⚠️ Miscellaneous - In real life

    @@ -163,13 +163,13 @@
  • ✅ The main source of Anonymity: The Tor Network
  • ✅ Using Tor Safely: Tor through VPN or VPN through Tor ?
  • 🟠 Phone Numbers are incompatible with Anonymity
    • -
  • ❌ How to protect against fingerprinting (persona, text, files)
    • -
  • ❌ How to run a local LLM to change your writing style (and it's use in whonix VM)
    • +
  • ❌ How to protect against fingerprinting (persona, text, files)
    • +
  • ❌ Stylography protection (Running a Local LLM and copy pasting messages)

    • 💻 Clientside - Getting Started (⚠️ Check if your ISP allows Tor or Not!)

      -
    1. ❌ How to setup and navigate Qubes OS
      2. +
    2. ❌ How to setup and navigate Qubes OS
    3. ✅ Tor Web Browser setup
    4. ✅ How to use the Tor Browser on Mobile
    5. ✅ Tails OS QEMU VM for Temporary Anonymity
      6. @@ -180,18 +180,18 @@

      💻 Clientside - Censorship Evasion

      1. ✅ How to access Tor when it is being blocked, using VPNs
        2. -
      2. ❌ How to temporarily access Tor when VPNs are blocked, using Tor bridges
        3. -
      3. ❌ How to access Tor when VPNs are blocked, using VPSes (SSH port forwarding / OpenVPN port sharing)
        4. -
      4. ❌ How to access Tor when you are in Russia or China using v2ray (vmess / vless)
        5. +
      5. ❌ How to temporarily access Tor when VPNs are blocked, using Tor bridges
        6. +
      6. ❌ How to access Tor when VPNs are blocked, using VPSes (SSH port forwarding / OpenVPN port sharing)
        7. +
      7. ❌ How to access Tor when you are in Russia or China using v2ray (vmess / vless)

      💻 File Sharing

        -
      1. ❌ How to send small files Anonymously (Onionshare)
        2. -
      2. ❌ One on One large file sharing (Syncthing over Tor)
        3. -
      3. ❌ P2P large file sharing (Torrents over i2p or Tor)
        4. +
      4. ❌ How to send small files Anonymously (Onionshare)
        5. +
      5. ❌ One on One large file sharing (Syncthing over Tor)
        6. +
      6. ❌ P2P large file sharing (Torrents over Tor)

      @@ -200,21 +200,21 @@
    6. ✅ Why Financial decentralisation ? (Cryptocurrencies, Exchanges and KYC) ⭐
    7. 🟠 How to setup your Monero Wallet
    8. ✅ Why can't I trust Centralised Exchanges, and random Monero nodes ?
      9. -
    9. ❌ How to get your first Monero ? (xmrbazaar.com, crypto swaps, p2p chats)
      10. +
    10. ❌ How to get your first Monero ? (xmrbazaar.com, crypto swaps, p2p chats)
    11. 🟠 Haveno Decentralised Exchange direct Fiat -> XMR transaction ⭐
    12. ✅ Haveno DEX Dispute resolution (Fiat -> XMR)
    13. ✅ Haveno DEX Bank Transfer (ex: SEPA) -> XMR transaction
    14. ✅ Haveno DEX Cash By Mail -> XMR transaction ⭐
      15. -
    15. ❌ Convert Monero into other Cryptos Anonymously (XMR -> BTC Atomic Swaps DEX)
      16. -
    16. ❌ Monero Inheritence Management (Threshold encryption (2of3)+ PGP)
      17. +
    17. ❌ Convert Monero into other Cryptos Anonymously (XMR -> BTC)
      18. +
    18. ❌ Monero Inheritence Management (Threshold encryption (2of3)+ PGP)

    💻 Clientside - Making use of Anonymity (Non-KYC Providers)

      -
    1. ❌ How to get a mail account anonymously (Mails as a service)
      2. -
    2. ❌ How to get a phone number anonymously (Remote SMSes as a service)
      3. -
    3. ❌ How to get a credit card anonymously (Credit cards as a service)
      4. -
    4. ❌ How to get a residential proxies anonymously
      5. +
    5. ❌ How to get a mail account anonymously (Mails as a service)
      6. +
    6. ❌ How to get a phone number anonymously (Remote SMSes as a service)
      7. +
    7. ❌ How to get a credit card anonymously (Credit cards as a service)
      8. +
    8. ❌ How to get residential proxies anonymously

    @@ -229,8 +229,8 @@
  • ✅ Tor Exit Node
  • ✅ Monero Node
  • ✅ Monero Mining with p2pool (help validate the network)
    • -
  • ❌ Haveno Seed Node
    • -
  • ❌ Haveno DEX Network
    • +
  • ❌ Haveno Seed Node
    • +
  • ❌ Haveno DEX Network

    • 🧅 Serverside - Anonymous Hidden Services

    @@ -238,14 +238,14 @@
  • ✅ Where to host Anonymous Hidden Services ?
  • ✅ Hidden Service with custom .onion Vanity V3 address
    • -
  • ❌ Basic Webserver setup (NGINX / PHP / MYSQL)
    • -
  • ❌ Minimalistic MoneroSSO .onion setup
    • +
  • ❌ Basic Webserver setup (NGINX / PHP / MYSQL)
    • +
  • ❌ Minimalistic MoneroSSO .onion setup
  • ✅ XMPP Chat Server Setup (Clearnet + Onion + OMEMO E2EE)
    • -
  • ❌ Gitea .onion setup (Code repositories)
    • -
  • ❌ Nextcloud .onion setup (cloud storage)
    • -
  • ❌ Mastodon .onion setup (Microblogging)
    • -
  • ❌ Discourse .onion setup (Forums)
    • -
  • ❌ How to setup Nerostr (Nostr blogging)
    • +
  • ❌ Gitea .onion setup (Code repositories)
    • +
  • ❌ Nextcloud .onion setup (cloud storage)
    • +
  • ❌ Mastodon .onion setup (Microblogging)
    • +
  • ❌ Discourse .onion setup (Forums)
    • +
  • ❌ How to setup Nerostr (Nostr blogging)


    • 🧅 Serverside - Anonymous Clearnet Services

    @@ -261,9 +261,9 @@

    ⚠️ Miscellaneous - In real life

      -
    1. ❌ How to send a mail package anonymously
      2. -
    2. ❌ How to recieve a mail package anonymously
      3. -
    3. ❌ How to remain Anonymous during a protest
      4. +
    4. ❌ How to send a mail package anonymously
      5. +
    5. ❌ How to recieve a mail package anonymously
      6. +
    6. ❌ How to remain Anonymous during a protest

    @@ -320,21 +320,21 @@
  • ✅ Internet Failover (Dual WAN pfsense setup)
  • ❌ Deniable Encryption Protection (emergency shutdown script, shortcut, + systemd service)
  • ✅ Automating Deniable Encryption Protection (USB Changes, detecting movements, and SSH bruteforce attempts)
    • -
  • ✅ Endgame V3 (.onion service Anti DDOS / Load Balancer / WAF + Captcha) ⭐
    • +
  • ✅ Endgame V3 (.onion service Anti DDOS / Load Balancer / WAF + Captcha) ⭐

    • 🧅 Serverside - Remote Plausible Deniability (⚠️ Remote Hosting = Safer!)

      -
    1. ❌ When the Adversary is the cloud provider himself
      2. -
    2. ❌ Protecting against cold boot attacks, with RAM encryption (no hardware access!)
      3. -
    3. ❌ System Intrusion / Integrity monitoring (kernel modules, binary files, unwanted processes, hardwre changes)
      4. -
    4. ❌ Custom Linux OS making (debian-based)
      5. -
    5. ❌ Obtaining a non-KYC dedicated server, with a custom OS
      6. -
    6. ❌ Intrusion detection on remote servers
      7. +
    7. ❌ When the Adversary is the cloud provider himself
      8. +
    8. ❌ Protecting against cold boot attacks, with RAM encryption (no hardware access!)
      9. +
    9. ❌ System Intrusion / Integrity monitoring (kernel modules, binary files, unwanted processes, hardwre changes)
      10. +
    10. ❌ Custom Linux OS making (debian-based)
      11. +
    11. ❌ Obtaining a non-KYC dedicated server, with a custom OS
      12. +
    12. ❌ Intrusion detection on remote servers

    ⚠️ Miscellaneous - In real life

      -
    1. ❌ When protests go wrong - SimpleX Disappearing Messages
      2. +
    2. ❌ When protests go wrong - SimpleX Disappearing Messages