mirror of
http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/blog-contributions.git
synced 2025-07-02 11:56:40 +00:00
Edited the security model
This commit is contained in:
prism_breaker
parent
6f53f8a4f9
commit
b4be778f47
6 changed files with 50 additions and 47 deletions
|
|
@ -19,7 +19,7 @@
|
|||
<mxCell id="em9l_VM-0_EGYDFN-RQg-3" value="<font style="font-size: 15px;">Veracrypt&nbsp;</font>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="440" width="380" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-4" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">Private VM</font></div><div><br></div><div><font style="font-size: 15px;">Decoy wallet</font></div>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-4" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">Private VM</font></div><div><br></div><div><font style="font-size: 15px;">Decoy wallet(Capped)</font></div>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="70" width="380" height="160" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-5" value="<font style="font-size: 15px;">Sensitive VM</font><div><font style="font-size: 15px;">Sensitive wallet</font></div>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f8cecc;strokeColor=#b85450;" vertex="1" parent="1">
|
||||
|
|
@ -42,14 +42,14 @@
|
|||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-15" value="" style="endArrow=classic;html=1;rounded=0;" edge="1" parent="1">
|
||||
<mxGeometry width="50" height="50" relative="1" as="geometry">
|
||||
<mxPoint x="510" y="200" as="sourcePoint" />
|
||||
<mxPoint x="570" y="200" as="sourcePoint" />
|
||||
<mxPoint x="760" y="200" as="targetPoint" />
|
||||
</mxGeometry>
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-16" value="Donation to tor project" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
|
||||
<mxGeometry x="760" y="170" width="120" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-17" value="" style="endArrow=classic;html=1;rounded=0;" edge="1" parent="1">
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-17" value="" style="endArrow=classic;html=1;rounded=0;exitX=0.789;exitY=0.875;exitDx=0;exitDy=0;exitPerimeter=0;" edge="1" parent="1" source="em9l_VM-0_EGYDFN-RQg-4">
|
||||
<mxGeometry width="50" height="50" relative="1" as="geometry">
|
||||
<mxPoint x="510" y="210" as="sourcePoint" />
|
||||
<mxPoint x="760" y="280" as="targetPoint" />
|
||||
|
|
|
|||
BIN
opsec/hide_monero/6.png
Normal file
BIN
opsec/hide_monero/6.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 121 KiB |
BIN
opsec/hide_monero/Donation.png
Normal file
BIN
opsec/hide_monero/Donation.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 481 KiB |
|
|
@ -4,59 +4,58 @@
|
|||
<root>
|
||||
<mxCell id="0" />
|
||||
<mxCell id="1" parent="0" />
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-11" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="em9l_VM-0_EGYDFN-RQg-10" target="em9l_VM-0_EGYDFN-RQg-9">
|
||||
<mxGeometry relative="1" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-10" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">A HDD device so you can safely delete files</font></div>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-10" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">A HDD device so you can safely delete files</font></div>" style="rounded=0;whiteSpace=wrap;html=1;" parent="1" vertex="1">
|
||||
<mxGeometry x="210" y="50" width="490" height="260" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-9" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">A SSD device for fast system response</font></div>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="210" y="410" width="490" height="220" as="geometry" />
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-9" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">A SSD device for fast system response</font></div>" style="rounded=0;whiteSpace=wrap;html=1;" parent="1" vertex="1">
|
||||
<mxGeometry x="210" y="410" width="490" height="310" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-1" value="<font style="font-size: 15px;">Live mode OS</font>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="500" width="380" height="60" as="geometry" />
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-1" value="<font style="font-size: 15px;">Live mode OS</font>" style="rounded=0;whiteSpace=wrap;html=1;" parent="1" vertex="1">
|
||||
<mxGeometry x="270" y="560" width="380" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-3" value="<font style="font-size: 15px;">Veracrypt&nbsp;</font>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="440" width="380" height="60" as="geometry" />
|
||||
<mxCell id="q80Ufr8oIVUb-D7EubpW-1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" edge="1" parent="1" source="em9l_VM-0_EGYDFN-RQg-3" target="em9l_VM-0_EGYDFN-RQg-10">
|
||||
<mxGeometry relative="1" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-4" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">Private VM</font></div><div><br></div><div><font style="font-size: 15px;">Decoy wallet(Capped)</font></div>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-3" value="<font style="font-size: 15px;">Veracrypt&nbsp;</font>" style="rounded=0;whiteSpace=wrap;html=1;" parent="1" vertex="1">
|
||||
<mxGeometry x="270" y="430" width="380" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-4" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><span style="font-size: 15px;">Outer volume</span></div><div><span style="font-size: 15px;">Some pirate movies or games, or anything that</span></div><div><span style="font-size: 15px;">is immoral but not illegal</span></div>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" parent="1" vertex="1">
|
||||
<mxGeometry x="270" y="70" width="380" height="160" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-5" value="<font style="font-size: 15px;">Sensitive VM</font><div><font style="font-size: 15px;">Sensitive wallet</font></div>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f8cecc;strokeColor=#b85450;" vertex="1" parent="1">
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-5" value="<font style="font-size: 15px;">Sensitive VM</font><div><font style="font-size: 15px;">Sensitive wallet</font></div>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f8cecc;strokeColor=#b85450;" parent="1" vertex="1">
|
||||
<mxGeometry x="350" y="80" width="220" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-7" value="" style="pointerEvents=1;shadow=0;dashed=0;html=1;strokeColor=none;fillColor=#4495D1;labelPosition=center;verticalLabelPosition=bottom;verticalAlign=top;align=center;outlineConnect=0;shape=mxgraph.veeam.ram;" vertex="1" parent="1">
|
||||
<mxGeometry x="350" y="518" width="48.4" height="25.2" as="geometry" />
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-7" value="" style="pointerEvents=1;shadow=0;dashed=0;html=1;strokeColor=none;fillColor=#4495D1;labelPosition=center;verticalLabelPosition=bottom;verticalAlign=top;align=center;outlineConnect=0;shape=mxgraph.veeam.ram;" parent="1" vertex="1">
|
||||
<mxGeometry x="354.83" y="577.4" width="48.4" height="25.2" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-8" value="" style="outlineConnect=0;dashed=0;verticalLabelPosition=bottom;verticalAlign=top;align=center;html=1;shape=mxgraph.aws3.data_encryption_key;fillColor=#7D7C7C;gradientColor=none;" vertex="1" parent="1">
|
||||
<mxGeometry x="354.83" y="445" width="38.75" height="50" as="geometry" />
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-8" value="" style="outlineConnect=0;dashed=0;verticalLabelPosition=bottom;verticalAlign=top;align=center;html=1;shape=mxgraph.aws3.data_encryption_key;fillColor=#7D7C7C;gradientColor=none;" parent="1" vertex="1">
|
||||
<mxGeometry x="354.83" y="435" width="38.75" height="50" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-12" value="" style="endArrow=classic;html=1;rounded=0;" edge="1" parent="1">
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-12" value="" style="endArrow=classic;html=1;rounded=0;" parent="1" edge="1">
|
||||
<mxGeometry width="50" height="50" relative="1" as="geometry">
|
||||
<mxPoint x="570" y="110" as="sourcePoint" />
|
||||
<mxPoint x="760" y="110" as="targetPoint" />
|
||||
</mxGeometry>
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-14" value="Dark net activity" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f8cecc;strokeColor=#b85450;" vertex="1" parent="1">
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-14" value="Dark net activity" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f8cecc;strokeColor=#b85450;" parent="1" vertex="1">
|
||||
<mxGeometry x="760" y="80" width="120" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-15" value="" style="endArrow=classic;html=1;rounded=0;" edge="1" parent="1">
|
||||
<mxGeometry width="50" height="50" relative="1" as="geometry">
|
||||
<mxPoint x="570" y="200" as="sourcePoint" />
|
||||
<mxPoint x="760" y="200" as="targetPoint" />
|
||||
<mxCell id="q80Ufr8oIVUb-D7EubpW-3" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;" edge="1" parent="1" source="q80Ufr8oIVUb-D7EubpW-2">
|
||||
<mxGeometry relative="1" as="geometry">
|
||||
<mxPoint x="770" y="525" as="targetPoint" />
|
||||
</mxGeometry>
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-16" value="Donation to tor project" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
|
||||
<mxGeometry x="760" y="170" width="120" height="60" as="geometry" />
|
||||
<mxCell id="q80Ufr8oIVUb-D7EubpW-2" value="<font style="font-size: 15px;">Private VM</font><div><font style="font-size: 15px;">Contains a Decoy wallet</font></div>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="490" width="380" height="70" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-17" value="" style="endArrow=classic;html=1;rounded=0;exitX=0.789;exitY=0.875;exitDx=0;exitDy=0;exitPerimeter=0;" edge="1" parent="1" source="em9l_VM-0_EGYDFN-RQg-4">
|
||||
<mxGeometry width="50" height="50" relative="1" as="geometry">
|
||||
<mxPoint x="510" y="210" as="sourcePoint" />
|
||||
<mxPoint x="760" y="280" as="targetPoint" />
|
||||
</mxGeometry>
|
||||
<mxCell id="q80Ufr8oIVUb-D7EubpW-6" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" edge="1" parent="1" source="q80Ufr8oIVUb-D7EubpW-4" target="em9l_VM-0_EGYDFN-RQg-14">
|
||||
<mxGeometry relative="1" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-18" value="Routine purchase using crypto" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
|
||||
<mxGeometry x="760" y="250" width="120" height="60" as="geometry" />
|
||||
<mxCell id="q80Ufr8oIVUb-D7EubpW-4" value="Charity donations" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
|
||||
<mxGeometry x="770" y="495" width="120" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="q80Ufr8oIVUb-D7EubpW-7" value="<font style="font-size: 15px;">Anonymous donation to transfer</font><div><font style="font-size: 15px;">&nbsp;money to your sensitive identity</font></div>" style="text;html=1;align=center;verticalAlign=middle;resizable=0;points=[];autosize=1;strokeColor=none;fillColor=none;" vertex="1" parent="1">
|
||||
<mxGeometry x="830" y="290" width="240" height="50" as="geometry" />
|
||||
</mxCell>
|
||||
</root>
|
||||
</mxGraphModel>
|
||||
|
|
|
|||
Binary file not shown.
|
Before Width: | Height: | Size: 54 KiB After Width: | Height: | Size: 70 KiB |
|
|
@ -95,6 +95,7 @@ $sudo virsh -c qemu:///system net-start default
|
|||
<p>Next create a veracrypt container on another storage device, with a big enough hidden volume according to the nihilism's tutorial</p>
|
||||
<p>Reboot your host OS into live mode, <b>live mode</b> prevents any log or other traces be written to disk. This makes sure digital forensic cannot find out the existence of our private vm</p>
|
||||
<p>In theory if you have done everything correctly according to previous tutorial, we should have a plausible deniability setup available. The <b>private</b> VM will store our decoy monero wallet. The <b>sensitive</b> VM will store our real monero wallet, which contains a lot of $$$ and might be legally questionable.</p>
|
||||
<p>The veracrypt container allows you to deny the <b>existence</b> of sensitive VM</p>
|
||||
<img src="VM_setup.png" class="imgRz">
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
|
|
@ -105,7 +106,7 @@ $sudo virsh -c qemu:///system net-start default
|
|||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Sensitive VM setup</b></h2> </br> </br>
|
||||
<h2><b>Sensitive VM and outer volume setup</b></h2> </br> </br>
|
||||
<p>First decrypt and mount your hidden veracrypt volume. Next setup Whonix gateway and workstation according to nihilism's tutorial.</p>
|
||||
<p>You should have all the whonix VM files inside the container</p>
|
||||
<img src="Whonix_vm_files.png" class="imgRz">
|
||||
|
|
@ -151,6 +152,12 @@ fi
|
|||
<p>For how to acquire and use monero, consult the monero tutorial</p>
|
||||
<p>The setup of sensitive VM is now done, use this VM <b>only</b> for sensitive monero transactions, if you want to have other darknet activities create another dedicated workstation.</p>
|
||||
<img src="Wallet.png" class="imgRz">
|
||||
<p></p>
|
||||
<p><b>Outer volume:</b></p>
|
||||
<p>Next we will set up the outer volume, which will contains some decoys files that give you plausible deniability when someone forces you to open the veracrypt container</p>
|
||||
<p>Mount the veracrypt outer volume, remember also to input the <b>hidden volume</b> password, since you <b>do not</b> want your hidden volume get destroyed!</p>
|
||||
<img src="Veracrypt.png" class="imgRz">
|
||||
<p>Then download some pirate movies, celebrity leaked nudes and Biden's leaked email to it. Make your outer veracrypt volume spicy but not illegal. </p>
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
|
|
@ -163,16 +170,13 @@ fi
|
|||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Private VM setup</b></h2> </br> </br>
|
||||
<p>Now we are going to set up our private VM, this part is going to differ from nihilism's tutorial. We are going to replicate <b>another</b> group of whonix workstation and gateway inside the outer veracrypt volume</p>
|
||||
<p>We are going to have a decoy monero wallet, this wallet will have much less money in it, and all the transactions are charity related. If you have too much money in private VM, you can also pretend it is anonymous donation and move to your sensitive wallet.</p>
|
||||
<img src="Money_flow.png" class="imgRz">
|
||||
|
||||
<p>Mount the veracrypt outer volume, remember also to input the <b>hidden volume</b> password, since you <b>do not</b> want your hidden volume get destroyed!</p>
|
||||
<img src="Veracrypt.png" class="imgRz">
|
||||
|
||||
<p>Repeat <b>exactly</b> what you have done in the previous section, import and setup the whonix VMs, and copy the management script to it.</p>
|
||||
<p>Once done open up the workstation VM, download a monero wallet, and create a new wallet, save the seed to the local keepass database.</p>
|
||||
<p>Occasionally open this private VM, and make some donations to open source project you like, so this VM is going to look like a legit active daily VM.</p>
|
||||
<p>Then we are going to setup the decoy wallet, the decoy wallet is supposed to be in private VMs, if someone robs you at a gun point you are supposed to open this wallet</p>
|
||||
<p>Architecturally it should look like this</p>
|
||||
<img src="6.png" class="imgRz">
|
||||
<p>Choose one of your private VM, download the monero wallet and generate a new wallet.</p>
|
||||
<img src="Donation.png" class="imgRz">
|
||||
<p>Buy something with it randomly, or donate some money to other open source projects.</p>
|
||||
<p>Occasionally open this private VM and use this wallet, so this VM is going to look like a legit active daily VM.</p>
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
|
|
@ -184,8 +188,8 @@ fi
|
|||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Emergency</b></h2> </br> </br>
|
||||
<p>Now we have come to the <b>most important</b> part, which is how to handle the situation when someone has raided your house</p>
|
||||
<p><b>Situation one</b>: Your computer is not power up, you can simply give adversary the outer volume password and deny the presence of hidden volume, and your sensitive activities will be safe</p>
|
||||
<p><b>Situation two</b>: Someone kicks the door when you are using the sensitive VM, you have to setup the emergency script and shortcut mentioned in nihilism's tutorial, test it <b>multiple times</b> to make sure it works!</p>
|
||||
<p><b>Situation one</b>: Your computer is not power up, you can simply give adversary the outer volume password and your decoy wallet, and deny the existence of sensitive VM.</p>
|
||||
<p><b>Situation two</b>: Someone kicks the door when you are using the sensitive VM, you have to setup the <b>emergency script</b> and shortcut mentioned in nihilism's tutorial, test it <b>multiple times</b> to make sure it works!</p>
|
||||
<p>You have to make sure your computer can be shutdown properly. I personally prefer a PC than a laptop, since directly unplug the power is always more reliable than a software implementation.</p>
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue