pappine/blog-contributions
1
0
Fork 0
forked from nihilist/blog-contributions
Code Pull Requests Activity
4f891d5cbd
blog-contributions/opsec/vpn/index.html

230 lines
9.7 KiB
HTML
Raw Normal View History

updated
2024-07-25 12:23:36 +02:00
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="description" content="">
<meta name="author" content="">
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
<title>How to get privacy from your ISP using a VPN</title>
<!-- Bootstrap core CSS -->
<link href="../../assets/css/bootstrap.css" rel="stylesheet">
<link href="../../assets/css/xt256.css" rel="stylesheet">
<!-- Custom styles for this template -->
<link href="../../assets/css/main.css" rel="stylesheet">
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
<![endif]-->
</head>
<body>
<!-- Static navbar -->
<div class="navbar navbar-inverse-anon navbar-static-top">
<div class="container">
<div class="navbar-header">
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a class="navbar-brand-anon" href="\index.html">nihilist`s Blog</a>
</div>
<div class="navbar-collapse collapse">
<ul class="nav navbar-nav navbar-right">
<li><a href="/about.html">About</a></li>
<li><a href="/blog.html">Categories</a></li>
a good fuckin update
2024-08-12 23:22:38 +02:00
<li><a href="https://blog.nowhere.moe/donate.html">Donate</a></li>
updated
2024-07-25 12:23:36 +02:00
<li><a href="/contact.html">Contact</a></li>
</ul>
</div><!--/.nav-collapse -->
</div>
</div>
<!-- +++++ Posts Lists +++++ -->
<!-- +++++ First Post +++++ -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
updated the directory layout
2024-08-18 22:50:34 +02:00
<a href="../index.html">Previous Page</a></br></br><p><img src="../../assets/img/user.png" width="50px" height="50px"> <ba>nihilist@mainpc - 2024-06-27</ba></p>
updated
2024-07-25 12:23:36 +02:00
<h1>How to get privacy from your ISP using a VPN </h1>
add context to tutorials
2024-07-31 23:07:35 +02:00
<p><h2><u>OPSEC Recommendations:</u></h2></p>
<ol>
<li><p>Hardware : PC / Laptop / Homeserver / Remote Server</p></li>
<li><p>Host OS : <a href="../linux/index.html">Linux</a></p></li>
<li><p>Hypervisor: <a href="../hypervisorsetup/index.html">libvirtd QEMU/KVM</a></p></li>
<li><p>VM : <a href="../hypervisor/index.html">Linux</a></p></li>
</ol>
<p>I recommend to use that setup as part of your <a href="../privacy/index.html">Privacy Use</a> online, to hide what you are browsing online from your ISP</p>
updated
2024-07-25 12:23:36 +02:00
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /grey -->
<!-- +++++ Second Post +++++ -->
<div id="anon3">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Why does Bob need a VPN to begin with ? </b></h2>
<p>Bob now has <a href="../linux/index.html">Linux</a> as his host operating system on his computer, with a debian private VM setup thanks to the <a href="../hypervisorsetup/index.html">QEMU/KVM hypervisor</a>. Now as per his private internet usage in his debian VM, he was thinking: <b>"My Debian VM only has open source software, but who else may spy on me?"</b></p>
<p>As he browsed the web from his linux laptop he realised one thing; He's paying for an internet connection. A company is offering the internet service to his house.</p>
<img src="0.png" class="imgRz">
<p>Meaning, that when Bob is browsing the web on google.com; youtube.com or duckduckgo.com, his internet service provider can see that he's connecting there!</p>
<p>That doesn't sit well with Bob. <b>Bob decides that his ISP shouldn't be aware of what he's doing with his internet usage.</b> Therefore, he wants to use a VPN.</p>
<img src="1.png" class="imgRz">
Fixed typos and broken link
2024-08-24 16:01:33 +02:00
<p>But thing is, Bob realises that the VPN market is over-saturated, there's a lot of choice. He wants to know what's the best VPN out there. After browsing for some time, he found this article from <a href="https://www.privacyguides.org/en/vpn/">Privacy Guides</a> where they compare popular VPN services according to their standards. From there, Bob decides he's going to try to use <a href="https://kycnot.me/service/Mullvad">Mullvad VPN</a>.</p>
updated
2024-07-25 12:23:36 +02:00
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Purchasing a VPN</b></h2> </br> </br>
<p>Bob goes on mullvad.net to purchase the VPN (which is 5 euros monthly) </p>
<img src="2.png" class="imgRz">
<img src="3.png" class="imgRz">
<img src="4.png" class="imgRz">
<img src="5.png" class="imgRz">
<p>Here Bob can pay with various means. For ease of use he can pay using his credit card for example, but as we'll see in later tutorials on <a href="../finances/index.html">decentralised finances</a>, <a href="../monero2024/index.html">Monero</a> is the ideal payment choice for financial privacy.</p>
<p>So Bob pays for the VPN, then his account has time added:</p>
<img src="6.png" class="imgRz">
<img src="7.png" class="imgRz">
<pre><code class="nim">
# Download the Mullvad signing key
sudo curl -fsSLo /usr/share/keyrings/mullvad-keyring.asc https://repository.mullvad.net/deb/mullvad-keyring.asc
# Add the Mullvad repository server to apt
echo "deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg --print-architecture )] https://repository.mullvad.net/deb/stable $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/mullvad.list
# Or add the Mullvad BETA repository server to apt
echo "deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg --print-architecture )] https://repository.mullvad.net/deb/beta $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/mullvad.list
# Install the package
sudo apt update
sudo apt install mullvad-vpn
Introduction to self-hosting hidden services
2024-08-03 18:41:13 +02:00
# Connect to Mullvad VPN
mullvad account login
Enter an account number: 91320912809328832
Mullvad account "91320912809328832" set
# Connect to the VPN:
mullvad lockdown-mode set on
mullvad connect
curl ifconfig.me
194.127.199.92
updated
2024-07-25 12:23:36 +02:00
</code></pre>
<p>From there, Bob can launch the VPN from his desktop:</p>
<img src="8.png" class="imgRz">
<p>And he can see that his IP got changed accordingly to the location he picked: </p>
<img src="9.png" class="imgRz">
<p>The VPN is also protecting against DNS and WebRTC leaks, according to <a href="https://mullvad.net/en/check">https://mullvad.net/en/check</a></p>
added mullvad browser
2024-08-08 22:17:34 +02:00
<p>Now that you are using Mullvad as a VPN, you can also use their Mullvad Browser, which is basically a Hardened Firefox based off the Tor Browser:</p>
<pre><code class="nim">
[ mainpc ] [ /dev/pts/3 ] [~/Nextcloud/blog]
→ apt search mullvad
Sorting... Done
Full Text Search... Done
mullvad-browser/unknown,now 13.5.1-1 amd64
Mullvad Browser
mullvad-vpn/unknown,now 2024.4 amd64 [installed]
Mullvad VPN client
[ mainpc ] [ /dev/pts/3 ] [~/Nextcloud/blog]
→ apt install mullvad-browser -y
[ mainpc ] [ /dev/pts/3 ] [~/Nextcloud/blog]
→ mullvad-browser
</pre></code>
<p>And from there you can browse the web using the same VPN connection:</p>
<img src="11.png" class="imgRz">
<img src="12.png" class="imgRz">
<p>From there, just like on the Tor Browser, you can protect against fingerprinting by setting the security level here:</p>
<img src="13.png" class="imgRz">
<p>If you want to reduce your fingerprinting attack surface as much as possible, you can choose to disable javascript by selecting the "Safest" security level, but it may break some websites functionnality.</p>
<img src="14.png" class="imgRz">
updated
2024-07-25 12:23:36 +02:00
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<!-- +++++ Second Post +++++ -->
<div id="anon1">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Conclusion</b></h2> </br> </br>
<p>So now currently, Bob has managed to setup a Debian VM (with only open source software) with a VPN in order to use it and gain privacy from his ISP.</p>
<img src="10.png" class="imgRz">
<p>Currently, Bob's setup is suitable for Public use (thanks to his windows VM), AND suitable for Private use too (thanks to his debian VM with the VPN setup).</p>
<p>Next, Bob can setup KeepassXC to implement proper <a href="../passwordmanagement/index.html">Password Management</a>.</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<!-- +++++ Footer Section +++++ -->
<div id="anonb">
<div class="container">
<div class="row">
<div class="col-lg-4">
<h4>Nihilism</h4>
<p>
Until there is Nothing left.
</p>
</div><!-- /col-lg-4 -->
<div class="col-lg-4">
<h4>My Links</h4>
<p>
updated matrix chat link
2024-08-15 14:43:58 +02:00
<a target="_blank" rel="noopener noreferrer" href="http://blog.nowhere.moe/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://matrix.to/#/#nowheremoe:nowhere.moe">Matrix Chat</a><br/>
updated
2024-07-25 12:23:36 +02:00
</p>
</div><!-- /col-lg-4 -->
<div class="col-lg-4">
<h4>About nihilist</h4>
a good fuckin update
2024-08-12 23:22:38 +02:00
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8</p></br><p><u>Contact:</u> nihilist@nowhere.moe (<a href="https://nowhere.moe/nihilist.pubkey">PGP</a>)</p>
updated
2024-07-25 12:23:36 +02:00
</div><!-- /col-lg-4 -->
</div>
</div>
</div>
<!-- Bootstrap core JavaScript
================================================== -->
<!-- Placed at the end of the document so the pages load faster -->
</body>
</html>
Copy Permalink