<h1>What is Anonymity ? Why is it Important ? </h1>
</div>
</div><!-- /row -->
</div><!-- /container -->
</div><!-- /grey -->
<!-- +++++ Second Post +++++ -->
<divid="anon3">
<divclass="container">
<divclass="row">
<divclass="col-lg-8 col-lg-offset-2">
<h2><b>What is Anonymity ? </b></h2>
<p>Anonymity is the absence of Identification (or Onymity), <b>it is when individuals are indistinguishable from each other, they all look the same.</b></p>
<imgsrc="../aps/anonymity.png"class="imgRz">
<p>In short, <b>Anonymity means you are not identified.</b> In this example, Someone hid their identity, and is talking to Alice. That someone is anonymous until Jack can figure out who that person is. </p>
<p>Anonymity is extremely fragile when that Someone is not implementing strict <ahref="../opsec/index.html">OPSEC</a> practices, relating to:</p>
<ol>
<li><p><u>Using the correct Technology</u>: (What is that Someone using, to protect their Anonymity ? (A mask, a Coat, a mask / the Tor network, i2p, etc))</p></li>
<li><p><u>Using the correct Behavior</u>: (By that Someone's actions, they are not revealing who they are. (They are not saying they are Walter Hartwell White living at XYZ)</p></li>
</ol>
<p><u>DISCLAIMER:</u> That Someone remains Anonymous <b>UNTIL THEY MAKE ONE OPSEC MISTAKE !</b></p>
<p>Keep in mind that maintaining Anonymity is a much stricter practice than that of maintaining Privacy, as you will see, more threat vectors come into the picture.</p>
<h2><b>Anonymous Amongst Who ? What are the odds ?</b></h2></br></br>
<p><b>The strength of your Anonymity is measured by the odds of finding you amongst a group of people.</b></p>
<p><imgsrc="../logos/on0.png"> - Anonymity</p>
<p>let's say your Anonymity is Perfect and you are simply <b>"one human being in the world"</b>, the adversary currently has a chance of <b>1 out of 8 billion</b> to guess that it is you. He'd do better to try and play the lottery than to try and guess that it's you.</p>
<imgsrc="3.png"class="imgRz">
<p>Now let's say the adversary knows that you live in France what are the odds now ?</p>
<p><b>If the adversary knows you live in France</b>, the odds have been significantly reduced from 1 out of 8 billion to <b>1 out of 65 million</b>, but still that's not enough to accurately pinpoint you, the probability of the adversary figuring out who you are is still very low.</p>
<p>But now let's say that the adversary knows more than that, let's suppose that <b>the adversary knows that you have a masters in cybersecurity, and that you work a general IT job in France, for a software company.</b> Now the odds have shrinked further, especially if the adversary is able to combine multiple sources of data to try and profile you.</p>
<imgsrc="5.png"class="imgRz">
<p>Let's say you are trying to chat on <ahref="../anonsimplex/index.html">SimpleX</a> while the adversary is in the chat with you, and he sees that you have a <ahref="https://www.youtube.com/watch?v=S03T47hapAc">gorillaz profile picture</a>, call yourself Nihilist, and talk about Opsec all the time. If the adversary is good at profiling you over time, he could have already shrinked down the odds to <b>1 out of 10 thousand</b> people. Here we're talking about a drastically reduced anonymity, <b>which we can consider to be pseudonymity.</b> but that is still not enough to know who you are IRL.</p>
<p>But you need to be aware that even the tiniest opsec mistake can reduce the odds of your anonymity to <b>1 out of 1</b>, where you are effectively deanonymized. For instance let's say you are in this <ahref="https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FL5jrGV2L_Bb20Oj0aE4Gn-m5AHet9XdpYDotiqpcpGc%3D%40nowhere.moe%2FWdXMbz3Yq9baXgQVKy2EppUm0NCcYluM%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAtVlfehjn5VhPIhDI_ses2kw3itcjMpLMvLlUFejMNlU%253D&data=%7B%22type%22%3A%22group%22%2C%22groupLinkId%22%3A%22gUgzlCwi97y1rHaezDZcLg%3D%3D%22%7D">SimpleX chatroom </a>, and let's say you are sending a picture of your own <ahref="https://monerosupplies.com/product/monerochan-plush/">limited edition MoneroChan fumo plushie</a>:</p>
<p>Now the thing is, <b>there are only 100 of those plushies</b> out there, if the adversary is the seller of those monerochan plushies, your anonymity odds has been reduced to <b>1 out of 100</b>, that's because he knows to whom he sent those 100 plushies, meaning he now only has a group of 100 people to guess who you are from. But upon closer exception it is worse than you may think:</p>
<p>If you look closer at the image the "Certificate of authenticity" says that <b>it is the 41st plushie amongst the 100 that exist</b>. Therefore if the adversary is the plushie seller, <b>your anonymity odds have been reduced 1 out of 1 as he knows to whom he sent the 41st plushie.</b> Meaning that you just deanonymized yourself for that particular adversary. </p>
<p>You get the idea, if you want to remain Anonymous, you need to always ask yourself <b>"how many people could send that?"</b>, <u>if you were to send that picture i sent above, you'd realize that this is a bad idea</u>. The same concept applies as if you were to say what is your real IRL name, your phone number, your home address, your home public IP address, etc. <b>Do not give bullets to an adversary, as he will use everything you give him to shoot you.</b></p>
<p>The least info you send about yourself, what you like, what you dislike, where you live, where you work, what's your past, the better, as otherwise it will be exponentially easier for an adversary to narrow down the possibilities of who you could be, amongst a given group of people.</p>
<h2><b>The Enemies of Anonymity: Surveillance, KYC procedures and Centralisation</b></h2></br></br>
<p><imgsrc="../su2.png"> The first the and foremost enemy of Anonymity is Surveillance of any kind. <b>Privacy is a REQUIREMENT if you want Anonymity</b>.</p>
<pre><codeclass="nim">
Example:
Jack is surveilling Bob 24/7. He sees that Bob purchases a mask and a coat, He sees that Bob wears the mask to then go outside to do something sketchy.
Conclusion:
Because Bob did not have Privacy from Jack in the first place, Bob cannot have Anonymity either.
</code></pre>
<p>Surveillance CANNOT be tolerated when you want Anonymity. So before you try to learn to be anonymous online, learn why and how to get Privacy online <ahref="../privacy/index.html">here</a>. </p>
<p><imgsrc="../on2.png">The other major enemy of Anonymity is <b>Know Your Customer (KYC) Procedures</b>, these are ways for services to force their customers to identify themselves, wether they like it or not.</p>
<pre><codeclass="nim">
Example:
Jack owns an online service (such as a centralised crypto exchange), he accumulated a large userbase over the years, over 1000 active users. The government where Jack operates is ramping up their financial regulations on businesses, and now Jack is being forced to identify all of it's users using standard KYC procedures
Bob (an user on the website) that was anonymous up until that point, is now forced to do the following if he wants to keep using the platform:
1) state his real life name
2) his date of birth
3) his home address
4) send photos of his identity card
5) send photos of his face (facial left, front and right sides)
Conclusion:
Jack is either forced to identify his users or go out of business
Bob is either forced to identify himself or stop using the service
All of it because the government intends to destroy Bob's right to remain Anonymous online.
</code></pre>
<p><imgsrc="../ce2.png"> But the root cause of surveillance and KYC procedures, is that <b>every centralised entity (any public or private business) will be eventually forced to comply to their government's requests</b>, at the expense of their users.</p>
<p><b>There are only 2 possible long-term outcomes for Centralisation</b>: </b></p>
<ol>
<li><p>Act as a governmental proxy to enforce regulations/agendas, at the expense of users' rights</p></li>
<li><p>Or be forced out of business altogether.</p></li>
</ol>
<imgsrc="1.png"class="imgRz">
<p>To be able to achieve Anonymity, you need Privacy, and at least some level of Decentralisation (in the case of anonymization networks like Tor for instance), as we will see in our next tutorials.</p>
<h2><b>Why is Anonymity Important ?</b></h2></br></br>
<p>In a way, Anonymity is an improvement over Privacy. In the sense that Privacy is about being about to seclude yourself or information about yourself. <b>Anonymity is the logical next step to Privacy,</b> Where you not only just conceal what your actions are, <b>but also who you are.</b></p>
<p>Depending on the context, especially if you are living in a dictatorship, <b>Anonymity is vital for you to act freely, out of the grasp of adversaries.</b></p>
<p>As we have discussed <ahref="../governments/index.html">previously</a>, for a government's laws to be respected, <b>they need to be enforced.</b></p>
<imgsrc="../governments/3.png"class="imgRz">
<p>And for the laws to be enforced, governments need:</p>
<ol>
<li><p>To know what happened (lack of <imgsrc="../su0.png">Privacy, using <imgsrc="../su2.png">Surveillance )</p></li>
<li><p>To know who did it (lack of <imgsrc="../on0.png">Anonymity, using <imgsrc="../on2.png">KYC procedures )</p></li>
</ol>
<p>Governmental control as a concept itself rests upon these fundamental 2 pillars, the detriment of the individual's Privacy, and Anonymity.</p>
<p>In order to regain the control you lost to dictatorships, you first need Privacy, and then you need Anonymity. </p>
<p>Most governments want to control the public opinion through opression and censorship, <b>Journalism is one of the most demanding sectors in terms of Anonymity,</b> especially in authoritarian/dictatorship governments where censorship is omnipresent, for them, very sadly, Anonymity is the difference-maker between life and death in those areas of the world.</p>
<p>For instance, the <ahref="https://rsf.org/en/index">Freedom of the Press index</a> is a great indicator to tell if you are living in a country that employs censorship as a means to control the population or not. Make no mistake, Governments are often ready to murder journalists to protect their public image, like in Mexico: <ahref="https://iv.nowhere.moe/watch?v=KfTZKtA3aWk">[1]</a><ahref="https://iv.nowhere.moe/watch?v=xlLXkZlJBbA">[2]</a>.</p>
<p>Essentially, <b>the idea is to reduce your attack surface as much as possible,</b> given the context of near-omnipresent surveillance, <b>Privacy has it's limits, and Anonymity very often becomes the only way out of opression.</b> If noone knows who did something, there can't be any repercussions for the perpetrating party. </p>
<p>In a way, Anonymity is superior to Privacy because <b>whatever happened may have been hidden thanks to Privacy, but it may be discovered at a later point in time.</b> Anonymity on the other hand, if maintained, <b>remains a permanent way to act without any repercussions.</b></p>
