diff --git a/opsec/hypervisorsetup/30.png b/opsec/hypervisorsetup/30.png index 33acbc9..d998389 100644 Binary files a/opsec/hypervisorsetup/30.png and b/opsec/hypervisorsetup/30.png differ diff --git a/opsec/hypervisorsetup/50.png b/opsec/hypervisorsetup/50.png new file mode 100644 index 0000000..d8ddde7 Binary files /dev/null and b/opsec/hypervisorsetup/50.png differ diff --git a/opsec/hypervisorsetup/51.png b/opsec/hypervisorsetup/51.png new file mode 100644 index 0000000..57c46d4 Binary files /dev/null and b/opsec/hypervisorsetup/51.png differ diff --git a/opsec/hypervisorsetup/index.html b/opsec/hypervisorsetup/index.html index 7d30c2e..3cb7b57 100644 --- a/opsec/hypervisorsetup/index.html +++ b/opsec/hypervisorsetup/index.html @@ -163,6 +163,9 @@ nihilist@debian:~# virt-manager
Next just make sure that the NAT network is created, and that the ISOs and VMs folders are with the correct permissions:
And also create another NAT network so that we can put all the untrusted VMs such as Windows into:
+That way, the adversary that can normally see what's going on in the network attached to the Windows VM can no longer see as it is being put in a different network altogether.
nihilist@debian:~$ mkdir ISOs
nihilist@debian:~$ mkdir VMs
@@ -203,6 +206,10 @@ nihilist@debian:~$ sudo chown nihilist:libvirt -R ISOs
+Then before we begin the installation, we make sure that the windows VM uses the untrusted NAT network to make sure it remains isolated:
+
+Then we hit Apply, and then we click on begin installation
+
diff --git a/opsec/sensitivevm/index.html b/opsec/sensitivevm/index.html
index c931293..1d9d708 100644
--- a/opsec/sensitivevm/index.html
+++ b/opsec/sensitivevm/index.html
@@ -586,7 +586,7 @@ stress -m 1 --vm-bytes $(free -ght | grep Mem | cut -d ' ' -f 12 | cut -d 'G' -f
In what context is there Deniability ?
-With this setup, you have deniability the moment that the script finishes running, regarding the existance of the veracrypt hidden volume, and the whonix sensitive VMs. Meaning that it is impossible for an adversary that seizes your computer to prove the existance of the Whonix Sensitive VMs after shutting down the Host OS.
+With this setup, you have deniability the moment that the Host OS finishes shutting down, regarding the existance of the veracrypt hidden volume, and the whonix sensitive VMs that are in it. Meaning that it is impossible for an adversary that seizes your computer to prove the existance of the Whonix Sensitive VMs after the Host OS finished shutting down.
Below is all an adversary will be able to see, if he were to seize your laptop after you manage to shut it down:
Of course, if you are ever forced to, ONLY give your decoy password to the adversary. The existance of the hidden volume, and of the secret password thats used to reveal it must remain a secret at all costs, it must remain known only by you.
diff --git a/opsec/tailsqemuvm/21.png b/opsec/tailsqemuvm/21.png
new file mode 100644
index 0000000..57dd804
Binary files /dev/null and b/opsec/tailsqemuvm/21.png differ
diff --git a/opsec/tailsqemuvm/index.html b/opsec/tailsqemuvm/index.html
index ac18416..f256b58 100644
--- a/opsec/tailsqemuvm/index.html
+++ b/opsec/tailsqemuvm/index.html
@@ -66,6 +66,7 @@
In this tutorial we're going to look at how you can run Tails OS (The Amnesic Incognito Linux System) in a QEMU VM, following the official documentation here.
Tails OS is suitable for Short Term Sensitive Use due to it's default live-mode feature, where upon shutting down the OS, every forensic trace of what you were doing is completely erased from memory, where the entire OS is loaded into. There are no disk-writes at all by default. (Unless if you use the persistent storage, which is not suitable for sensitive use, due to not being deniable encryption like Veracrypt ).
+
OPSEC Recommendations:
diff --git a/opsec/tor/bridge/index.html b/opsec/tor/bridge/index.html
index 9aa2000..ab25184 100644
--- a/opsec/tor/bridge/index.html
+++ b/opsec/tor/bridge/index.html
@@ -64,7 +64,11 @@
TOR Bridge (June 2023 update)
Before we start, you will need a Debian VPS (you can get one on digitalocean for example), if you prefer to use your own self hosted server, make sure that port 80 and 443 are correctly port forwarded so that the public ip points to the server and not the router. Once that's done, go and ssh into your Debian server.
-
+Now regarding the choice of location for the server, in order to make sure that Tor remains decentralised, make sure that you are picking a country that doesn't have many tor nodes (see the bubbles graph):
+
+Disclaimer: Do not host your Tor node in Germany, Netherlands or in the US, as there are already too many nodes in those countries. Try to run your own Tor nodes in countries that have the least nodes preferably, as this will help keeping the Tor network decentralized.
+
+
diff --git a/opsec/tor/exit_node/index.html b/opsec/tor/exit_node/index.html
index a78d345..380a8f0 100644
--- a/opsec/tor/exit_node/index.html
+++ b/opsec/tor/exit_node/index.html
@@ -77,6 +77,9 @@ If you are still motivated to get your own exit node, keep the phone number of a
Now you can get a domain name to resolve to your exit node, or just use the one provided by njal.la :
+Now regarding the choice of location for the server, in order to make sure that Tor remains decentralised, make sure that you are picking a country that doesn't have many tor nodes (see the bubbles graph):
+
+Disclaimer: Do not host your Tor node in Germany, Netherlands or in the US, as there are already too many nodes in those countries. Try to run your own Tor nodes in countries that have the least nodes preferably, as this will help keeping the Tor network decentralized.
diff --git a/opsec/tor/relay/country.png b/opsec/tor/relay/country.png
new file mode 100644
index 0000000..132f7d8
Binary files /dev/null and b/opsec/tor/relay/country.png differ
diff --git a/opsec/tor/relay/index.html b/opsec/tor/relay/index.html
index 9ac75d5..938c23c 100644
--- a/opsec/tor/relay/index.html
+++ b/opsec/tor/relay/index.html
@@ -67,7 +67,9 @@
You will also need to make sure that the VPS provider allows the hosting of a tor node! check torproject's good/bad isps page here.
For example, you wouldn't be able to host an exit node on DigitalOcean, however hosting a regular node is completely fine.
-TODO: showcase the Tor DDOS PoW protection
+Now regarding the choice of location for the server, in order to make sure that Tor remains decentralised, make sure that you are picking a country that doesn't have many tor nodes (see the bubbles graph):
+
+Disclaimer: Do not host your Tor node in Germany, Netherlands or in the US, as there are already too many nodes in those countries. Try to run your own Tor nodes in countries that have the least nodes preferably, as this will help keeping the Tor network decentralized.
diff --git a/productivity/diet-n-mental-health/index.html b/productivity/diet-n-mental-health/index.html
index 53e4a1c..bf149bf 100644
--- a/productivity/diet-n-mental-health/index.html
+++ b/productivity/diet-n-mental-health/index.html
@@ -413,7 +413,7 @@
How friction-free is the digestion ?
How energetic and alive your body feels after digesting it ?
-You will see after experimenting a bit, that your body digests best what is furthest away from you from an evolutionnary perspective. Try out eating only meat for one meal and observe how your body feels, based off the above 3 criterias. You'll see that it takes forever to digest that kind of food, the body will be dragged down by the inertia caused by the digestion itself, and you won't feel energetic at all you'll most likely want to sleep (even though you cannot properly sleep and properly digest at the same time). And as a counter example, see what how your body feels after eating what i recommend below:
+You will see after experimenting a bit, that your body digests best what is furthest away from you from an evolutionnary perspective. Try out eating only meat for one meal and observe how your body feels, based off the above 3 criterias. You'll see that it takes forever to digest that kind of food, the body will be dragged down by the inertia caused by the digestion itself, and you won't feel energetic at all you'll most likely want to sleep (even though you cannot properly sleep and properly digest at the same time). And as a counter example, see how your body feels after eating what i recommend below:
If your body feels agile and alive and it doesn't take long to digest, your body is telling you that this is good food because it is not building up inertia, but rather it is making it feel alive and well. Inertia is not what you are looking for when you want to live, as death basically is total inertia. You need aliveness, energy and agility.
On top of that, the more intertia you make your body go through while eating, the more you will need to sleep for your body to repair the damage done that has been done. But if you eat the right kind of food, your sleep quota will go down, as there will be less damage done to the body, meaning less maintenance to do on the body, meaning less sleep will be required.