blog-contributions/opsec/anonymityexplained/index.html

244 lines
15 KiB
HTML
Raw Normal View History

2024-07-25 12:23:36 +02:00
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="description" content="">
<meta name="author" content="">
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
<title>What is Anonymity ? Why is it Important ? </title>
<!-- Bootstrap core CSS -->
<link href="../../assets/css/bootstrap.css" rel="stylesheet">
<link href="../../assets/css/xt256.css" rel="stylesheet">
<!-- Custom styles for this template -->
<link href="../../assets/css/main.css" rel="stylesheet">
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
<![endif]-->
</head>
<body>
<!-- Static navbar -->
<div class="navbar navbar-inverse-anon navbar-static-top">
<div class="container">
<div class="navbar-header">
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
2024-10-06 21:59:43 +02:00
<a class="navbar-brand-anon" href="\index.html">The Nihilism Blog</a>
2024-07-25 12:23:36 +02:00
</div>
<div class="navbar-collapse collapse">
<ul class="nav navbar-nav navbar-right">
<li><a href="/about.html">About</a></li>
<li><a href="/blog.html">Categories</a></li>
2024-08-12 23:22:38 +02:00
<li><a href="https://blog.nowhere.moe/donate.html">Donate</a></li>
2024-07-25 12:23:36 +02:00
<li><a href="/contact.html">Contact</a></li>
</ul>
</div><!--/.nav-collapse -->
</div>
</div>
<!-- +++++ Posts Lists +++++ -->
<!-- +++++ First Post +++++ -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
2024-08-18 22:50:34 +02:00
<a href="../index.html">Previous Page</a></br></br><p><img src="../../assets/img/user.png" width="50px" height="50px"> <ba>nihilist@mainpc - 2024-06-29</ba></p>
2024-07-25 12:23:36 +02:00
<h1>What is Anonymity ? Why is it Important ? </h1>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /grey -->
<!-- +++++ Second Post +++++ -->
<div id="anon3">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>What is Anonymity ? </b></h2>
<p>Anonymity is the absence of Identification (or Onymity), <b>it is when individuals are indistinguishable from each other, they all look the same.</b></p>
<img src="../aps/anonymity.png" class="imgRz">
<p>In short, <b>Anonymity means you are not identified.</b> In this example, Someone hid their identity, and is talking to Alice. That someone is anonymous until Jack can figure out who that person is. </p>
<p>Anonymity is extremely fragile when that Someone is not implementing strict <a href="../opsec/index.html">OPSEC</a> practices, relating to:</p>
<ol>
<li><p><u>Using the correct Technology</u>: (What is that Someone using, to protect their Anonymity ? (A mask, a Coat, a mask / the Tor network, i2p, etc))</p></li>
<li><p><u>Using the correct Behavior</u>: (By that Someone's actions, they are not revealing who they are. (They are not saying they are Walter Hartwell White living at XYZ)</p></li>
</ol>
<p><u>DISCLAIMER:</u> That Someone remains Anonymous <b>UNTIL THEY MAKE ONE OPSEC MISTAKE !</b></p>
<p>Keep in mind that maintaining Anonymity is a much stricter practice than that of maintaining Privacy, as you will see, more threat vectors come into the picture.</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
2024-11-14 21:07:01 +01:00
<!-- +++++ Second Post +++++ -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Anonymous Amongst Who ? What are the odds ?</b></h2> </br> </br>
<p><b>The strength of your Anonymity is measured by the odds of finding you amongst a group of people.</b></p>
<p><img src="../logos/on0.png"> - Anonymity</p>
<p>let's say your Anonymity is Perfect and you are simply <b>"one human being in the world"</b>, the adversary currently has a chance of <b>1 out of 8 billion</b> to guess that it is you. He'd do better to try and play the lottery than to try and guess that it's you.</p>
<img src="3.png" class="imgRz">
<p>Now let's say the adversary knows that you live in France what are the odds now ?</p>
<img src="4.png" class="imgRz">
<p><b>Now let's say that the adversary knows you live in France</b>, the odds have been significantly reduced from 1 out of 8 billion to <b>1 out of 65 million</b>, but still that's not enough to accurately pinpoint you, the probability of the adversary figuring out who you are is still very low.</p>
<p><img src="../logos/on1.png"> - Pseudonymity</p>
<p>But now let's say that the adversary knows more than that, let's suppose that <b>the adversary knows that you have a masters in cybersecurity, and that you work a general IT job in France, for a software company.</b> Now the odds have shrinked further, especially if the adversary is able to combine multiple sources of data to try and profile you.</p>
<img src="5.png" class="imgRz">
<p>Let's say you are trying to chat on <a href="../anonsimplex/index.html">SimpleX</a> while the adversary is in the chat with you, and he sees that you have a <a href="https://www.youtube.com/watch?v=S03T47hapAc">gorillaz profile picture</a>, call yourself Nihilist, and talk about Opsec all the time. If the adversary is good at profiling you over time, he could have already shrinked down the odds to <b>1 out of 10 thousand</b> people. Here we're talking about a drastically reduced anonymity, <b>which we can consider to be pseudonymity.</b> but that is still not enough to know who you are IRL.</p>
<p><img src="../logos/on2.png"> - Onymity</p>
<p>But you need to be aware that even the tiniest opsec mistake thing can reduce the odds of your anonymity to <b>1 out of 1</b>, where you are effectively deanonymized. For instance let's say you are in this <a href="https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FL5jrGV2L_Bb20Oj0aE4Gn-m5AHet9XdpYDotiqpcpGc%3D%40nowhere.moe%2FWdXMbz3Yq9baXgQVKy2EppUm0NCcYluM%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAtVlfehjn5VhPIhDI_ses2kw3itcjMpLMvLlUFejMNlU%253D&data=%7B%22type%22%3A%22group%22%2C%22groupLinkId%22%3A%22gUgzlCwi97y1rHaezDZcLg%3D%3D%22%7D">SimpleX chatroom </a>, and let's say you are sending a picture of your own <a href="https://monerosupplies.com/product/monerochan-plush/">limited edition monerochan</a>:</p>
<img src="6.png" class="imgRz">
<p>Now the thing is, <b>there are only 100 monerochan plushies</b> out there, if the adversary is the seller of those monerochan plushies, he knows where he sent all of the 100 plushies, therefore your anonymity has been reduced to <b>1 out of 100</b> But thing is, upon closer exception it is worse than you may think:</p>
<img src="7.png" class="imgRz">
<p>If you look closer at the image the "Certificate of authenticity" says that it is the 41th monerochan out of the 100 plushies that exist. Therefore <b>if the adversary is the plushie seller, your anonymity odds have been reduced 1 out of 1 As he now knows to whom he sent the 41th plushie.</b> Meaning that you just deanonymized yourself for that particular adversary. </p>
<p>You get the idea, if you want to remain Anonymous, you need to always ask yourself <b>"how many people could send that?"</b>, <u>if you were to send that picture i sent above, you'd realize that this is a bad idea</u>, same as in saying your real IRL name, your phone number, your home address, your home public IP address, etc.</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<div id="anon1">
2024-07-25 12:23:36 +02:00
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>The Enemies of Anonymity: Surveillance, KYC procedures and Centralisation</b></h2> </br> </br>
<p><img src="../su2.png"> The first the and foremost enemy of Anonymity is Surveillance of any kind. <b>Privacy is a REQUIREMENT if you want Anonymity</b>.</p>
<pre><code class="nim">
Example:
Jack is surveilling Bob 24/7. He sees that Bob purchases a mask and a coat, He sees that Bob wears the mask to then go outside to do something sketchy.
Conclusion:
Because Bob did not have Privacy from Jack in the first place, Bob cannot have Anonymity either.
</code></pre>
<p>Surveillance CANNOT be tolerated when you want Anonymity. So before you try to learn to be anonymous online, learn why and how to get Privacy online <a href="../privacy/index.html">here</a>. </p>
<p><img src="../on2.png">The other major enemy of Anonymity is <b>Know Your Customer (KYC) Procedures</b>, these are ways for services to force their customers to identify themselves, wether they like it or not.</p>
<pre><code class="nim">
Example:
Jack owns an online service (such as a centralised crypto exchange), he accumulated a large userbase over the years, over 1000 active users. The government where Jack operates is ramping up their financial regulations on businesses, and now Jack is being forced to identify all of it's users using standard KYC procedures
Bob (an user on the website) that was anonymous up until that point, is now forced to do the following if he wants to keep using the platform:
1) state his real life name
2) his date of birth
3) his home address
4) send photos of his identity card
5) send photos of his face (facial left, front and right sides)
Conclusion:
Jack is either forced to identify his users or go out of business
Bob is either forced to identify himself or stop using the service
All of it because the government intends to destroy Bob's right to remain Anonymous online.
</code></pre>
<p><img src="../ce2.png"> But the root cause of surveillance and KYC procedures, is that <b>every centralised entity (any public or private business) will be eventually forced to comply to their government's requests</b>, at the expense of their users.</p>
<p> <b>There are only 2 possible long-term outcomes for Centralisation</b>: </b></p>
<ol>
<li><p>Act as a governmental proxy to enforce regulations/agendas, at the expense of users' rights</p></li>
<li><p>Or be forced out of business altogether.</p></li>
</ol>
<img src="1.png" class="imgRz">
<p>To be able to achieve Anonymity, you need Privacy, and at least some level of Decentralisation (in the case of anonymization networks like Tor for instance), as we will see in our next tutorials.</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<!-- +++++ Second Post +++++ -->
2024-11-14 21:07:01 +01:00
<div id="anon2">
2024-07-25 12:23:36 +02:00
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Why is Anonymity Important ?</b></h2> </br> </br>
<p>In a way, Anonymity is an improvement over Privacy. In the sense that Privacy is about being about to seclude yourself or information about yourself. <b>Anonymity is the logical next step to Privacy,</b> Where you not only just conceal what your actions are, <b>but also who you are.</b></p>
<p>Depending on the context, especially if you are living in a dictatorship, <b>Anonymity is vital for you to act freely, out of the grasp of adversaries.</b></p>
<p>As we have discussed <a href="../governments/index.html">previously</a>, for a government's laws to be respected, <b>they need to be enforced.</b> </p>
<img src="../governments/3.png" class="imgRz">
<p>And for the laws to be enforced, governments need:</p>
<ol>
<li><p>To know what happened (lack of <img src="../su0.png">Privacy, using <img src="../su2.png">Surveillance )</p></li>
<li><p>To know who did it (lack of <img src="../on0.png">Anonymity, using <img src="../on2.png">KYC procedures )</p></li>
</ol>
<p>Governmental control as a concept itself rests upon these fundamental 2 pillars, the detriment of the individual's Privacy, and Anonymity.</p>
<p>In order to regain the control you lost to dictatorships, you first need Privacy, and then you need Anonymity. </p>
<p>Most governments want to control the public opinion through opression and censorship, <b>Journalism is one of the most demanding sectors in terms of Anonymity,</b> especially in authoritarian/dictatorship governments where censorship is omnipresent, for them, very sadly, Anonymity is the difference-maker between life and death in those areas of the world.</p>
<img src="2.png" class="imgRz">
2024-08-12 23:22:38 +02:00
<p>For instance, the <a href="https://rsf.org/en/index">Freedom of the Press index</a> is a great indicator to tell if you are living in a country that employs censorship as a means to control the population or not. Make no mistake, Governments are often ready to murder journalists to protect their public image, like in Mexico: <a href="https://iv.nowhere.moe/watch?v=KfTZKtA3aWk">[1]</a> <a href="https://iv.nowhere.moe/watch?v=xlLXkZlJBbA">[2]</a>.</p>
2024-07-25 12:23:36 +02:00
<p>Essentially, <b>the idea is to reduce your attack surface as much as possible,</b> given the context of near-omnipresent surveillance, <b>Privacy has it's limits, and Anonymity very often becomes the only way out of opression.</b> If noone knows who did something, there can't be any repercussions for the perpetrating party. </p>
<p>In a way, Anonymity is superior to Privacy because <b>whatever happened may have been hidden thanks to Privacy, but it may be discovered at a later point in time.</b> Anonymity on the other hand, if maintained, <b>remains a permanent way to act without any repercussions.</b></p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<!-- +++++ Footer Section +++++ -->
<div id="anonb">
<div class="container">
<div class="row">
<div class="col-lg-4">
<h4>Nihilism</h4>
<p>
Until there is Nothing left.</p></br></br><p>Creative Commons Zero: No Rights Reserved</br><img src="\CC0.png">
2024-07-25 12:23:36 +02:00
</p>
</div><!-- /col-lg-4 -->
<div class="col-lg-4">
<h4>My Links</h4>
<p>
2024-10-03 21:57:20 +02:00
<a target="_blank" rel="noopener noreferrer" href="http://blog.nowhere.moe/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FL5jrGV2L_Bb20Oj0aE4Gn-m5AHet9XdpYDotiqpcpGc%3D%40nowhere.moe%2FH4g7zPbitSLV5tDQ51Yz-R6RgOkMEeCc%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAkts5T5AMxHGrZCCg12aeKxWcpXaxbB_XqjrXmcFYlDQ%253D&data=%7B%22type%22%3A%22group%22%2C%22groupLinkId%22%3A%22c3Y-iDaoDCFm6RhptSDOaw%3D%3D%22%7D">SimpleX Chat</a><br/>
2024-07-25 12:23:36 +02:00
</p>
</div><!-- /col-lg-4 -->
<div class="col-lg-4">
<h4>About nihilist</h4>
2024-08-28 20:13:19 +02:00
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8</p></br><p><u>Contact:</u> nihilist@contact.nowhere.moe (<a href="https://nowhere.moe/nihilist.pubkey">PGP</a>)</p>
2024-07-25 12:23:36 +02:00
</div><!-- /col-lg-4 -->
</div>
</div>
</div>
<!-- Bootstrap core JavaScript
================================================== -->
<!-- Placed at the end of the document so the pages load faster -->
</body>
</html>