"Arguing that you don't care about the right to privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say"

Threat Model: Who's Out to Get You?

Before going into this guide, you need to know exactly what you're up against. What are you trying to protect? Is it sensitive data, personal conversations, or maybe just your whole online life? Who's after you - hackers, stalkers, gov agencies? And what's the worst case scenario if they get their hands on your info? Understanding the risks is step one in building your empire.

Picture the Worst Case Scenario

Think about what would happen if they win. Jail, doxxing, or worse? Would your life be turned upside down by leaked private info? The more you understand the potential consequences, the more you can protect yourself.

Stylometry: An Invisible Threat to Anonymity

Stylometry is a technique used to analyze writing patterns in order to identify the author, even when they're using a pseudonym. It can trace your posts, emails, and social media comments across different platforms even if you think you're anonymous. Things like sentence structure, word choice, and punctuation habits create a unique fingerprint that can be tracked back to you. If your writing style can be identified, your identity can too.

How to Combat Stylometry

For more protection, you can create a unique writing style for your anonymous identity. Begin by analyzing your natural writing habits look at your vocabulary, sentence structure, and tone. Once you identify patterns that could give you away, deliberately change them.

For example, if your writing style betrays that you're a 25-year-old gamer, adjust it to sound like you're a 40-year-old with a completely different experience. The key here is consistency. Adopt this new style in all your communications under this pseudonym. A single stumble in tone, word choice or wording can make you stand out and expose you to stylometric analysis.

Remember that even with your best efforts, it is easy to revert to your natural writing style. If a stylometric tool detects inconsistencies, it can reconstruct your original style and then your true identity can be revealed.

In addition, AI based deanonymization techniques now pose an even greater threat. AI can analyze huge data sets to find patterns, linking accounts or deanonymizing users based on subtle correlations such as metadata, images or behavioral traits. For example, machine learning models can analyze posting times, locations or wording across platforms to link seemingly unrelated nicknames.

Tip: Avoid real-time communication whenever possible because its easier to slip up and reveal your true identity or writing style. Instead, draft your messages in notepad first, then change your style, and only then post it.

Creating a Fake Persona: Creating a Believable Yet Secure Alias

Creating a new identity isn't just about throwing together random fake details - it's about creating a believable persona. Start with the basics like name, age, and location. Then, set up a separate email for this alias and avoid using anything from your real life.

To fill in the gaps, use a tool like the Fake Person Generator (https://www.fakepersongenerator.com) for a complete set of details. For photos, skip the stock images. Instead, use AI tools like tools like Stable Diffusion or, if you don't mind spending a bit, use midjourney.

Make sure there's no overlap between your real and fake identities. Pay attention to the smallest details - habits, patterns, or even word choices that could link the two. The more conscientious you are, the harder it will be for anyone to connect the dots.

Behavioral-Biometric Profiling

When staying anonymous online or managing multiple identities, it's not just about what you type, but also how you type it. Even with Tor, your anonymity can be compromised by behavioral-biometric profiling. The way you interact with your devices like your keystroke patterns, typing speed and even your mouse movements can reveal much more than you realize. Stay vigilant and make a conscious effort to change your behavior to reduce the risk of being tracked. Small, unnoticeable habits can give you away - so be unpredictable.

Behavioral-biometric profiling is no longer limited to physical input data. Thanks to advances in artificial intelligence, even indirect behaviors such as browsing habits, session times and metadata can be analyzed across platforms to de-anonymize users. Artificial intelligence algorithms excel at detecting patterns that humans overlook, making even subtle correlations a threat to privacy

What is Behavioral-Biometric Profiling?

Behavioral-biometric profiling is a method used to track individuals based on their unique typing patterns, particularly the time intervals between keystrokes. Research shows that the timing and duration of each keystroke are as unique as a fingerprint. In fact, algorithms only need a few minutes of data to identify a person, even if they change browsers, ip addresses, or websites. This presents a significant threat to the anonymity of Tor users.

The risk increases when typing patterns occur across multiple sites. This allows trackers to compare and link identities, effectively linking different usernames or accounts to the same person. It's not just site operators that collect this data - ad networks can also embed JavaScripts to capture keystroke patterns.

Some banks already use this technology to detect fraudulent activity by analyzing typing patterns. Interestingly, similar methods were used during World War II, when the British identified German telegraph operators based on their unique transmission habits.

How to limit the profiling of typing

If you're concerned about being identified through your typing style, try these:

Like mentioned in combating stylometry section, write in a text editor: Write your text offline in a program like notepad, then copy and paste it into the browser. This prevents websites from recording your keystrokes. When this method is used by a large number of people, the harder it becomes to profile individuals.

Use browser extensions: Some extensions aim to reduce tracking of typing patterns by randomizing or obfuscating keystroke times. However, be careful with extensions, especially in browsers such as Chrome, as websites can potentially disable or bypass them.

Disable JavaScript: This is a more extreme but effective measure. Without JavaScript enabled, websites cannot run scripts that collect typing patterns. Note, however, that future profiling techniques may emerge that bypass the need for JavaScript.

By staying aware of behavioral-biometric profiling and implementing these strategies, you can significantly lower your chances of being tracked and de-anonymized even when faced with advanced tracking techniques.

Locking Down Social Media: Minimizing Digital Footprints

Let's be honest completely avoiding social media is nearly impossible unless you're living in a forest. But that doesn't mean you can't minimize the mess and keep your footprint minimal.

Delete every old accounts and create new using tor. You can rent a temp number for verification, but keep in mind most of these services require payment, which can leave a financial trail, to maintain anonymity, use monero for payment on sites like - https://www.smscodes.io https://crypton.sh
Disable any settings that compromise your privacy, such as those that allow apps to use your data for "improving your experience."
Make all your accounts private.
Never use your real name, photos, or any identifying information across platforms. If possible, use separate devices or virtual machines for each alias to prevent crosslinking of accounts through device fingerprinting.
For your profile picture dont use personal photos or identifiable images, such as pictures taken from your window, which could reveal your location.
Don't share personal details like your age, hobbies, or interests in your bio. Leaving these fields blank is usually safest.
Dont tag the location of your pictures in social media posts.
Avoid accepting friend requests or follows from random people.
Enable 2FA on every account that you have, you can use apps like FreeOTP or Aegis.
If possible use different usernames in every place, this will make it impossible for tools like whatsmyname.app to find accounts on other platforms.
Always use strong, unique passwords, avoid using easily guessable information like birthdays or common words.

Strong Passwords: How to Avoid Common Traps

If you're reusing passwords across multiple platforms, you're making it way too easy for someone to cross reference your identity. That's why unique passwords for every account are a must have. Password managers like KeePassXC make it simple to generate and store strong, unique passwords securely. For even more security, use whonix in offline mode to prevent leaks. And if you manually generate passwords, tools like pwgen or methods like Diceware can help create strong, random passwords that are nearly impossible to crack.

Anonymous payments

For payments, monero is one of the most secure options due to its privacy features that hide the sender, receiver, and transaction amount. Here are some methods to buy Monero anonymously:

Option 1: Use a p2p exchanges like BitValve, HodlHodl, or LocalCoinSwap they allow you to buy cryptocurrencies without KYC. After purchasing a more transparent cryptocurrency (e.g. Litecoin or Bitcoin), you can use Trocador to exchange it for Monero and send the funds to your personal wallet.

Option 2: You can also buy Monero directly from decentralized exchanges like Haveno or Bisq, which do not require KYC. These platforms let you buy Monero directly from sellers and withdraw it straight to your wallet. Using DEXs ensures greater privacy and control over your funds without relying on a thirdparty intermediary.

Additionaly Ensure that you always send the funds to your personal monero wallet, ideally one that is selfhosted on a secure machine, such as a hardware wallet or a wallet on an air gapped device.

For additional layers of anonymity, avoid using personal devices. Consider using a separate, clean device for sensitive transactions and financial activities, like a dedicated laptop with whonix + qubes.

While shopping online, use anonymous marketplaces that accept Monero. You can also use Trocador to purchase prepaid cards with Monero for even more privacy.

When using Monero, there are three main methods of connecting to the network, each with different levels of security and convenience:

Remote node (using Whonix): This is the most convenient option, offering decent security when used with Whonix to prevent IP address disclosure. You can use this site to find nodes https://monero.fail/ however, this involves some risk https://www.youtube.com/watch?v=n6Bxp0k7Uqg https://moonstoneresearch.com/2023/11/03/Postmortem-of-Monero-CCS-Hack.html

Local node: Theoretically the most secure, but requires downloading the entire Monero blockchain - hundreds of gigabytes per computer. Doing this through Tor is nearly impossible, and downloading without Tor exposes you to outside observers who may deduce that you are using Monero. In addition, every time you restart a local node after an outage, it has to resync, which takes some time. Ideally, the node should run 24/7, although this interferes with shutting down the computer and using disk encryption.

Hosted VPS node: This involves running a Monero node on a VPS connected via clearnet. The VPS maintains the blockchain and interacts with the Monero network, while you access it via the onion service for additional privacy.

Finances

Avoid flaunting earnings from Tor-related activities to maintain a low profile. Refrain from conspicuous displays of wealth, such as buying cars, real estate, or luxury goods with these funds. Keeping your earnings out of traditional financial institutions further preserves your anonymity. Store cash securely for emergencies instead.

Smart Management of Earnings:

Rather than spending lavishly, integrate these funds into your daily life subtly. Make small, low profile improvements to your living conditions or purchase work related items that blend with your usual expenses. Use cash as much as possible to avoid creating a paper trail, and opt for simple receipts over invoices.

Essential Tips to Keep in Mind:

Stay under the radar: Avoid purchases that could attract attention or scrutiny.
Avoid financial institutions: Keeping your money out of banks minimizes traceability.
Use cash transactions: Cash is nearly untraceable, ensuring greater privacy.
Subtle improvements: Gradually enhance your lifestyle in ways that don't raise suspicion.

Web Browsing: Keep Your Privacy Intact

Mainstream browsers such as Chrome and Opera are known for collecting huge amounts of user data, often violating user privacy. To improve your security, consider switching to privacy focused browsers such as Brave or LibreWolf.

For users managing multiple accounts or personas, anti-detection browsers such as Dolphin{anty}, Incogniton or Ghost Browser offer a best solution. These browsers protect against fingerprinting techniques that track users based on unique device and browsing characteristics.

For search engines, you should avoid Google and other crap. Instead, consider using privacy focused search engines such as DuckDuckGo or SearXNG.

Recommended privacy extensions: uBlock Origin HTTPS Everywhere Privacy Badger Automatic cookie removal Cookie AutoDelete NoScript ClearURLs

Data Protection: Keep Your Files Secure and Permanently Deleted

When you delete a file from your device, it doesn't get removed. The system only marks the space it occupies as free, but the data remains and can often be recovered. If sensitive data was saved without encryption, traces remain even after deletion. To prevent this, it is best to use an encrypted file system from the beginning, ensuring data protection.

If you've already stored unencrypted files, you'll need to use a secure eraser tool to remove all traces. These tools overwrite the data several times, making recovery nearly impossible. A highly recommended method is NIST 800-88. For additional privacy, consider using a secure operating system like Tails or Whonix, but the best at all is whonix paired with qubes.

Encrypted Storage: The Key to Safeguarding Your Data

To protect sensitive data, encryption is a must. The hard drive stores not only saved files, but also various system generated data, such as logs and temporary files that can reveal your activities. Without encryption, unauthorized people can access or restore this data, even after it has been deleted.

Always use open source encryption software, as it's more transparent and less likely to have hidden backdoors compared to closed source options. VeraCrypt is a reliable choice for Windows users, while Linux users can use dm-crypt/LUKS. These tools help keep your data secure and out of reach of prying eyes.

Mobile Security: Fortifying Your Smartphone Against Threats

First, don't use an iPhone, while iPhone may seem secure, they are heavily integrated with Apple's ecosystem, which collects a significant amount of user data. Apple's control over the device's hardware and software compromises user privacy, making it a less than ideal choice for those seeking anonymity, IOS is closed source, you never know what is collected and you cant even root it.

Second, while roms like LineageOS might look privacy sexy, they actually weaken your anonymity. Simple example, you can't relock the bootloader once it's unlocked, leaving your phone vulnerable to forensic tools that can extract everything.

For the highest level of security and privacy, GrapheneOS is the top choice. However, it is limited to Pixel 6 or newer devices. These phones are particularly resistant to forensis tools like Cellebrite. If you're on a budget, you can purchase a used Pixel device, but always ensure you are not using an old SIM card, as that could compromise your security.

If you can't use GrapheneOS, DivestOS is a good alternative. While not as good as GrapheneOS, it provides a much better privacy and security environment compared to the bloated, standard rom that most phones come with. It removes unnecessary features and adds enhancements that better protect user data.

Secure Communicators and Emails: Protecting Your Conversations

Use applications such as Signal, or better yet, choose Molly (molly.im), Session or XMPP with onion domains and OTR/OMEMO encryption. These offer much stronger privacy protection than the major messaging services. If you're still using Gmail, Outlook or any of these popular platforms, just stop - it's a privacy disaster waiting to happen. Instead, get interested in alternatives such as cock.li, morke.org or TorBox.

And don't forget: PGP is your friend. Learn it, use it, live it.

Also get rid of pseudo "anonymous" services, remember apps like Anom, Encrochat or Phantom Secure? They were nothing more than honeypots designed to catch users, often supported by law enforcement agencies. If a service promises "perfect privacy" or seems overly polished, it's probably compromised, run by the cops, or soon will be. Trust privacy solutions that focus on open, decentralized systems and have a track record of resisting government scrutiny.

VPN: Secure your connection, but don't trust blindly

VPNs are often advertised as the best privacy tool, but let's be honest, they mostly suck and it's just marketing, a VPN routes your internet traffic through an encrypted tunnel, but your VPN provider still sees everything unless it has a strict no-logs policy, and even then, what assurance do you have that they don't keep logs?

Here's how to choose perhaps a good provider:

No logs policy: This should be mandatory, some vpns claim they don't keep logs, but you can't trust them. Payment with monero: If they don't accept monero, that's a red flag, you must be able to pay anonymously. Avoid free vpns: They are more likely to sell your data than protect it.

To increase your privacy when using a VPN, it's best to set up your own, preferably in a country like Russia, where the regulations will be less like working with other governments to ensure you have control over the server and can set it up as securely as necessary.

Remember: your ISP may not see what you're doing, but it knows you're using a VPN. If you're serious about your anonymity, assume that VPNs are shit. You can use VPNs for everyday use - surfing the Internet, but if serious anonymity is involved, just don't use them.

Mullvad vpns seems to be a good option.

Tor/I2P

If you're serious about staying anonymous, you need to use Tor or I2P. But they're not magic. Time based attacks are the order of the day: even if you do everything by the book, if your enemy controls enough nodes on the network, he can track your activity - for example, what time you are online on some forum and more. You should also be aware of malicious relays, the FBI is known to create its own nodes on the network to spy on users. You can't blindly trust the network. Always be on the lookout for exploits, and disabling JS in your browser settings is a must.

How Photo Metadata and Digital Signatures Affect Privacy: EXIF Data, Noise, and Quantization Tables

EXIF data

EXIF (Exchangeable Image File Format) metadata is embedded in most image files and contains various information about the photo, such as the camera model, settings (e.g., aperture, shutter speed, ISO) and sometimes even GPS coordinates or location data. This metadata can be easily accessed and analyzed, providing detailed information about the circumstances under which the photo was taken. Before publishing or sharing photos online, it is necessary to delete EXIF data to protect privacy, as this information can reveal not only the device used, but also the exact location where the photo was taken, which can be exploited by malicious actors.

Noise

Digital noise is a grainy texture often visible in photos, especially in low-light conditions. Each camera sensor has a unique noise pattern that can be used to trace the origin of the image back to the specific device that captured it. Forensic experts can use specialized algorithms to analyze these noise patterns, creating a "fingerprint" for the image. This fingerprint can then be compared to a database of known noise patterns to identify the camera or device in use. Although more difficult to detect than other forms of metadata, digital noise is another potential source of privacy leakage that can compromise anonymity.

Quantization tables

Quantization tables are a key part of the JPEG compression process, in which image pixel data is simplified to reduce file size. During compression, pixel values are approximated, and this approximation process uses quantization tables, which vary depending on the device or software. These tables can serve as digital signatures for the camera or editing software used to create or modify the image. Forensic tools can use these tables to analyze the image and potentially identify the source device. In fact, even if an image has been modified or compressed, a quantization table can provide valuable insight into the original source, which can be crucial for image authentication or tracking.

Physical OPSEC

1. Safe Workplace: "Hacker Den"

If you are serious about OPSEC, create a dedicated, secure space for all sensitive activities. This is your fortress - treat it as such.

Stationary Configuration: Use one computer specifically for sensitive operations. It's best to remove the battery, making it a stationary device. Never take this machine outside your trusted work area.
Emergency stop: Install an emergency shutdown switch to immediately cut power and encrypt data in an emergency.
Screening Signals: Use Faraday cages or signal blocking pouches to isolate equipment when not in use. This prevents signal leakage or remote attacks.
Controlled Access: Lock the room and keep it out of the reach of people you don't 100% trust. Sound isolation or white noise devices can prevent eavesdropping.
Never cross worlds: Never mix this equipment with personal devices or use it for nonsensitive tasks. Treat your hacker cave as a "leak-free zone"

The hacker den is your safe zone - leaving it with sensitive devices exposes you to unnecessary risk. Keep it locked, secured and isolated.

2. Always turn off the power

Encryption is pointless if devices are left on or in sleep mode. Always turn them off completely after use. This ensures that encryption mechanisms protect data and prevent physical access attacks during downtime.

3. Be invisible

Avoid flashy clothing, logos or accessories that will make you memorable. Blend into the background with neutral clothing and keep a low profile wherever you are. Anonymity starts with being forgotten.

4. GPS and Wi-Fi: forbidden zones

Never turn on GPS on your devices unless absolutely necessary. Avoid connecting to unknown Wi-Fi networks, even for casual browsing. Public networks are often traps for data interception.

5. Mobile phone triangulation: Know the risks

Cell phone triangulation uses signals from multiple towers to determine a user's location, a example of triangulation with:

One tower: The phone's distance from one tower is known, but the exact direction remains unclear. You are located somewhere in the circular area around the tower.
Two towers: Overlapping coverage creates two possible phone locations.
Three towers: Three towers triangulate the exact location with high accuracy.

Modern systems can locate a user to within a meter or even a centimeter in urban environments.

How to avoid: Use Faraday bags to completely block signals or aluminum cans (with a small hole) to distort signals and confuse triangulation. For sensitive operations, leave the phone completely.

6. encrypted storage on the go

Choose a portable storage device with features such as.

Secure Lanyards: Use drives with built in loops to securely attach them to your wrist or bag.
Quick Disconnect: Attach with lightweight, breakable USB cables, so you can quickly detach or destroy them when needed.

Always encrypt your contents with tools like VeraCrypt and avoid using these drives outside of a secure workspace unless absolutely necessary.

7. disruption of facial recognition

When moving through heavily monitored areas, subtle disguises are key:

Reflective sunglasses, patterned masks or low-profile hats to confuse the artificial intelligence.
Avoid overly obvious disguises that will make you stand out more.

8. Public transportation over personal vehicles

If you are moving between locations, use public transportation instead of private vehicles. License plates and fare systems tie your movements to your identity. Pay your tickets in cash to avoid leaving a paper trail.

9. Separate digital life from physical life

Never mix devices or tools used for sensitive operations with those used in daily life. For anonymous operations:

Use air-isolated devices without connection to the Internet or external networks.
Never connect USB drives or media from "normal" life to a system used for sensitive activities.

Treat every connection as a potential leak.

10. Be mindful in high-stress situations.

Learn to remain calm under pressure. Practicing mindfulness or stress management techniques can help you stay calm during unexpected interactions, such as interrogations by law enforcement or other adversaries.

11. Emergency protocols

Be prepared for worst-case scenarios:

Kill Switch: Use it to immediately clear all active sessions.
Relocation Plans: Know the exit routes and plan safe locations to move to.
Data Protection: Always carry critical information on encrypted drives.

12. When in doubt, disappear.

If you think you're being tracked, leave all devices behind. Even phones that are turned off can still be used for tracking. If carrying a device is unavoidable, use a Faraday bag to completely block all signals, ensuring no communication or location tracking can occur.

Effective Planning

Effective opsec goes beyond just reacting to threats - it requires proactive foresight to predict both small disruptions and major security breaches. By preparing for the worst, you can react quickly, control the situation, and protect both your information and operations.

Key Considerations

How to Stay Unnoticed After Success? Once you've achieved your goals, reevaluate your security. Tighten access to new resources, enhance protections, and minimize visibility to avoid exposure. It's crucial to maintain a low profile and adapt security measures as your situation changes.
Should You Change Communication Methods and Traffic Patterns? Altering your digital footprint is vital. Consider changing your communication tools, rotating encryption keys, and switching networks to disrupt potential surveillance efforts. This keeps your actions unpredictable and harder to trace.
How to Secure New Resources Without Exposing Vulnerabilities? Use advanced encryption, implement strict access controls, and utilize secure storage methods. It's important to ensure that any new resources don't create backdoors or weaknesses that can be exploited.
How to Ensure Long Term Success? Don't view success as permanent. Treat it as a temporary state that requires ongoing protection. Continuously upgrade your methods, tools, and tactics to stay ahead of evolving threats and secure your position in the long run.

Preparing for Unexpected Outcomes

Managing the Risk of Failure: Failure is unavoidable at some point. The key is to have an exit strategy and the ability to neutralize threats quickly to minimize damage and prevent further exposure.

Response Strategies:

How Quickly Can All Connections Be Severed? Speed is crucial during a crisis. Pre set triggers that allow you to shut down systems, encrypt data, and disconnect from networks at a moment's notice can prevent unwanted exposure and erase traces of your activity.
How Do You Erase Traces of Your Activity? Severing connections isn't enough you must also erase all digital and physical evidence. Use secure deletion tools and ensure that no physical traces of your operations remain behind.
Do You Have a Relocation Plan? If exposure is total, you may need to relocate and assume a new identity. Having pre prepared hiding spots, networks, and credentials can ensure a swift recovery and a return to operational security.
How to Stay Ahead of Evolving Threats? The landscape of threats is constantly shifting. Stay vigilant to emerging risks, new surveillance technologies, and evolving tactics. Constantly update your operations to stay one step ahead of the game.

Expected Outcomes:

By managing success discreetly and strategically, you'll protect yourself from adversaries and maintain your operational advantage. A low profile, combined with secure and flexible practices, strengthens your position while minimizing risk. This approach fosters growth opportunities and ensures a resilient, long term operational framework, keeping you one step ahead in an ever changing environment.

Strategic Thinking: A Key to Long Term Success and Risk Management

When you're in a high risk situation, strategic thinking isnt just important, its a must. Thoughtful planning helps you minimize risks and avoid unnecessary mistakes, while rushing in impulsively can expose you to dangers that could have been avoided.

Why Strategic Thinking Matters?

Spot Risks Early: Good planning helps you identify potential threats before they become problems.
Avoid Rash Decisions: Taking the time to think things through prevents hasty actions that could backfire.
Stay Focused on the Big Picture: Strategic thinking ensures that each step you take brings you closer to your long-term goals

How to Apply Strategic Thinking

Set Checkpoints: At critical moments, pause to reassess your plan and adjust if needed.
Analyze the Situation: Don't make decisions without gathering all the relevant info first.
Prepare for All Outcomes: Think through both the best case and worst case scenarios.
Learn and Adapt: After each action, reflect on what worked and what didn't, then refine your approach.

Don't Rush to Act

Rushing often leads to mistakes. Take the time to plan, even if it feels like it's slowing you down. Precision beats speed every time.

Flexibility and Adaptation

Be Ready to Adapt: Your strategy should evolve as new information comes in
Keep Reassessing: Regularly revisit your plan and update it as things change.

What Happens If You Skip Strategic Thinking

Increased vulnerability: Hasty decisions open you up to risks you might have avoided.
Getting Off Track: Without a clear plan, you're more likely to stray from your objectives
Higher failure risk: Poor planning leads to breakdowns when things get tough.

Strategic thinking ensures that decisions are well aligned, risks are minimized, and flexibility is maintained in dynamic environments.

More to come soon™ Questions, suggestions, anything? write at zycher@cock.li

Files

guide.md

Latest commit

History