From 0f3f25f29320a4dbbb8f0b2b06c739b3612bd8dc Mon Sep 17 00:00:00 2001 From: nihilist Date: Sat, 2 Nov 2024 09:44:28 +0100 Subject: [PATCH] forgot the opsec requirements --- opsec/whentorisblocked/index.html | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/opsec/whentorisblocked/index.html b/opsec/whentorisblocked/index.html index 851f5c4..d1589d8 100644 --- a/opsec/whentorisblocked/index.html +++ b/opsec/whentorisblocked/index.html @@ -71,6 +71,19 @@

DISCLAIMER: Be aware that when doing a (you -> Tor -> VPN -> website) setup, you are getting rid of the stream isolation that is there by default in Whonix, making every application in that Whonix VM go through one circuit, rather than through many circuits. Over time this can lead to traffic use correlation if you start to use this VM for every other Anonymous use.

So keep in mind that a website blocking Tor traffic is the only scenario in which you need a (you -> Tor -> VPN -> website) setup. the rest of your anonymous activities are to remain in a regular Whonix VM (you -> Tor -> website) setup !

+ + +

OPSEC Recommendations:

+
    +

  1. Hardware : (Personal Computer / Laptop)

    2. +

  2. Host OS: Linux

    3. +

  3. Hypervisor: libvirtd QEMU/KVM

    4. +

  4. Application: Host-based VPN (if your ISP doesn't allow Tor traffic)

    5. +

  5. VM: Whonix VMs (for any regular long-term Anonymous Use)

    6. +
+

I recommend using this setup into one of the above mentioned VMs, for Anonymous use, as per the 4 basic OPSEC levels.

+

Sidenote: If your ISP does not allow Tor traffic, make sure that you route the QEMU VMs traffic through a VPN, to hide the tor traffic from your ISP (You -> VPN -> Tor) Setup

+