diff --git a/graphs/.$OPSEC.drawio.bkp b/graphs/.$OPSEC.drawio.bkp new file mode 100644 index 0000000..e0c165d --- /dev/null +++ b/graphs/.$OPSEC.drawio.bkp @@ -0,0 +1,767 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/graphs/OPSEC.drawio b/graphs/OPSEC.drawio index e57f6ea..e0c165d 100644 --- a/graphs/OPSEC.drawio +++ b/graphs/OPSEC.drawio @@ -1,6 +1,6 @@ - + @@ -718,6 +718,49 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/opsec/0_anon/index.html b/opsec/0_anon/index.html index efeb43a..95e3b56 100644 --- a/opsec/0_anon/index.html +++ b/opsec/0_anon/index.html @@ -64,6 +64,9 @@

SRVNAME Setup

+ + +

Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

diff --git a/opsec/aps/index.html b/opsec/aps/index.html index be406d9..1fb55fb 100644 --- a/opsec/aps/index.html +++ b/opsec/aps/index.html @@ -63,6 +63,7 @@ Previous Page

nihilist@mainpc - 2024-04-30

Privacy, Anonymity, Plausible Deniability, Decentralisation, Security, and 0days

+

Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

diff --git a/opsec/closedsource/index.html b/opsec/closedsource/index.html index be734c5..290702a 100644 --- a/opsec/closedsource/index.html +++ b/opsec/closedsource/index.html @@ -66,6 +66,8 @@

What? You want the source code? Hell no, just trust me bro!"

Or in other words, why can't I trust an adversary to not look at me when i install one of his cameras in my bedroom?

+

Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

+ diff --git a/opsec/compilation/index.html b/opsec/compilation/index.html index 61f5997..7878bcc 100644 --- a/opsec/compilation/index.html +++ b/opsec/compilation/index.html @@ -68,6 +68,8 @@
  • OS : Linux

  • I recommend using this setup for Private use, as per the 4 basic OPSEC levels.

    +

    Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

    + diff --git a/opsec/governments/index.html b/opsec/governments/index.html index 1e384e7..3f62e35 100644 --- a/opsec/governments/index.html +++ b/opsec/governments/index.html @@ -63,6 +63,7 @@ Previous Page

    nihilist@mainpc - 2024-06-07

    Governments, Centralisation, and Law Enforcement

    In this tutorial we're going to cover and explain what are governments, and why they are trying to force us into mass surveillance and KYC procedures.

    +

    Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

    diff --git a/opsec/govfear/index.html b/opsec/govfear/index.html index 5260456..48473c5 100644 --- a/opsec/govfear/index.html +++ b/opsec/govfear/index.html @@ -63,6 +63,7 @@ Previous Page

    nihilist@mainpc - 2024-06-07

    Governments fear Decentralisation and Anonymity

    In this tutorial we're going to explain why Decentralisation and Anonymity are essential in reducing the power of the government over it's citizens.

    +

    Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

    diff --git a/opsec/graphene/index.html b/opsec/graphene/index.html index 4829ab7..7c51e3c 100644 --- a/opsec/graphene/index.html +++ b/opsec/graphene/index.html @@ -72,6 +72,8 @@
  • Hardware : (Phone (google Pixel model))

  • I recommend using this setup for Private use, as per the 4 basic OPSEC levels.

    +

    Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

    + diff --git a/opsec/hypervisorsetup/index.html b/opsec/hypervisorsetup/index.html index 1af76c1..2d2616e 100644 --- a/opsec/hypervisorsetup/index.html +++ b/opsec/hypervisorsetup/index.html @@ -71,6 +71,8 @@
  • Host OS : Linux

  • I recommend using this setup first of all to isolate your Public use, and to segment it from the other Uses such as Private use, but it can later be used for Anonymous use, and also Sensitive Use, as per the 4 basic OPSEC levels.

    +

    Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

    + diff --git a/opsec/index.html b/opsec/index.html index 326f37f..9699402 100644 --- a/opsec/index.html +++ b/opsec/index.html @@ -49,7 +49,7 @@
    1. ⭐: Personal Favorite
    2. ✅: Completed
    3. -
    4. 🟠: Work in progress
    5. +
    6. 🚧: Work in progress
    7. ❌: Not started yet (can be brainstormed on their assigned Forgejo issues here)

    @@ -73,20 +73,20 @@
    1. ❌ The State is the Enemy
    2. ❌ The Individual reigns Supreme, no matter what the State says.
    3. -
    4. ✅ a Nihilist's Manifesto
    5. -
    6. ✅ Privacy, Anonymity, Plausible Deniability, Decentralisation, Security, and 0days
    7. -
    8. ✅ Governments, Centralisation, and Law Enforcement
    9. -
    10. ✅ Governments fear Decentralisation and Anonymity
    11. +
    12. a Nihilist's Manifesto
    13. +
    14. Privacy, Anonymity, Plausible Deniability, Decentralisation, Security, and 0days
    15. +
    16. Governments, Centralisation, and Law Enforcement
    17. +
    18. Governments fear Decentralisation and Anonymity
    19. ❌ What is my Attack surface ?

    📝 Explaining OPSEC ⭐

      -
    1. ✅ Audit your OPSEC and determine the appropriate internet use
    2. -
    3. ✅ Internet usage segmentation (QEMU VMs + Identity Management)
    4. -
    5. ✅ OPSEC: Using the right Technology and Behavior
    6. -
    7. ✅ How to maintain multiple Identities Online
    8. +
    9. Audit your OPSEC and determine the appropriate internet use
    10. +
    11. 🚧 Internet usage segmentation (QEMU VMs + Identity Management)
    12. +
    13. OPSEC: Using the right Technology and Behavior
    14. +
    15. How to maintain multiple Identities Online
    16. ❌ Public Chats / Private Chats / Anonymous Chats / Deniable Chats
    17. ❌ 10 Things you must do if you are pro-freedom
    18. @@ -107,40 +107,40 @@

      📝 Explaining Privacy

        -
      1. ✅ What is Privacy ? Why is it important ?
      2. -
      3. ✅ Why can't I trust closed-source software for Privacy?
      4. -
      5. ✅ The lack of Open Source Hardware (CPUs, Motherboards, GPUs)
      6. -
      7. ✅ Why can't I trust Server-side Encryption ?
      8. +
      9. What is Privacy ? Why is it important ?
      10. +
      11. Why can't I trust closed-source software for Privacy?
      12. +
      13. The lack of Open Source Hardware (CPUs, Motherboards, GPUs)
      14. +
      15. Why can't I trust Server-side Encryption ?
      16. ❌ Cloudflare : The world's largest Man in the Middle
      17. ❌ Why is metadata detrimental to my privacy ?

      💻 Getting started

        -
      1. ✅ How to have Privacy on your Computer (Linux) ⭐
      2. -
      3. ✅ How to have Privacy on your Phone (GrapheneOS)
      4. +
      5. How to have Privacy on your Computer (Linux) ⭐
      6. +
      7. How to have Privacy on your Phone (GrapheneOS)
      8. ❌ How to have Privacy on your Router (Openwrt)
      9. -
      10. ✅ Easy Private Chats - SimpleX
      11. -
      12. ✅ How to setup Qubes OS
      13. +
      14. 🚧 Easy Private Chats - SimpleX
      15. +
      16. How to setup Qubes OS

      💻 File Sharing

        -
      1. ✅ One on One large file sharing (Syncthing over VPN)
      2. -
      3. ✅ P2P large file sharing (Torrents over VPN)
      4. +
      5. One on One large file sharing (Syncthing over VPN)
      6. +
      7. P2P large file sharing (Torrents over VPN)

      💻 Maintaining Privacy

      1. ❌ How to use Linux - The essentials
      2. -
      3. ✅ How to compile open source software + How to verify software integrity
      4. -
      5. ✅ How to Virtualize Machines (QEMU/KVM Hypervisor)
      6. -
      7. ✅ Password Management 101 (How to use Keepass)
      8. -
      9. ✅ Private Messaging (PGP encryption)
      10. -
      11. ✅ How to navigate Qubes OS
      12. +
      13. How to compile open source software + How to verify software integrity
      14. +
      15. How to Virtualize Machines (QEMU/KVM Hypervisor)
      16. +
      17. 🚧 Password Management 101 (How to use Keepass)
      18. +
      19. Private Messaging (PGP encryption)
      20. +
      21. How to navigate Qubes OS

      💻 Privacy from your ISP

        -
      1. ✅ How to get privacy from your ISP using a VPN inside a VM
      2. -
      3. ✅ How to Route VMs traffic through a VPN on the Host OS
      4. +
      5. How to get privacy from your ISP using a VPN inside a VM
      6. +
      7. 🚧 How to Route VMs traffic through a VPN on the Host OS
      8. ❌ How to route your entire network through a VPN on the Router
      9. ❌ How to route your entire network through XRay on the Router
      10. @@ -194,7 +194,7 @@
      11. ❌ How to obtain Internet access anonymously
      12. ✅ VMs for Long-term Anonymity (Whonix QEMU VMs)
      13. ✅ Tor Web Browser setup
      14. -
      15. 🟠 How to use the Tor Browser on Mobile
      16. +
      17. 🚧 How to use the Tor Browser on Mobile
      18. ✅ How to Anonymously access websites that block Tor
      19. ✅ How to Anonymous access websites that block Tor and VPNs
      20. ✅ Easy Anonymous Chats - SimpleX (and onion-only servers)
      21. @@ -315,7 +315,7 @@
      22. ✅ Using the Host-OS in live-mode to enable Sensitive Use
      23. ✅ The main source of Plausible Deniability: Deniable Encryption
      24. ✅ Sensitive use VMs Setup (Whonix VMs in a Veracrypt Hidden Volume)⭐
      25. -
      26. 🟠 Plausibly Deniable Critical Data Backups
      27. +
      28. 🚧 Plausibly Deniable Critical Data Backups

      💻 Steganography - Hiding secrets in plain sight

        @@ -337,11 +337,11 @@
      1. ❌ Host OS WAN Failover Configuration
      2. ✅ Electrical Failover (basic UPS setup)
      3. ❌ Isolating on-premise hidden services (VM-based restrictive networking)
      4. -
      5. 🟠 Deniable Encryption Protection Automation
      6. +
      7. 🚧 Deniable Encryption Protection Automation

      🧅 Serverside - Remote Plausible Deniability (⚠️ Remote Hosting = Safer!)

        -
      1. 🟠 Sensitive Services: Self-Host or Host Remotely ?
      2. +
      3. 🚧 Sensitive Services: Self-Host or Host Remotely ?
      4. ✅ When the Adversary is the cloud provider himself
      5. ❌ Sensitive remote servers organisation
      6. ✅ Anonymous Servers Monitoring
      7. @@ -359,7 +359,7 @@
      8. ✅ How to setup a basic NGINX / PHP / MySQL app
      9. ✅ How to setup a MySQL Master-Master replication over Tor
      10. ✅ OnionBalance for .onion domains load balancing
      11. -
      12. 🟠 Endgame V3 (.onion service Anti DDOS / Load Balancer / WAF + Captcha) ⭐
      13. +
      14. 🚧 Endgame V3 (.onion service Anti DDOS / Load Balancer / WAF + Captcha) ⭐

      diff --git a/opsec/internetsegmentation/index.html b/opsec/internetsegmentation/index.html index b6091c8..402ba50 100644 --- a/opsec/internetsegmentation/index.html +++ b/opsec/internetsegmentation/index.html @@ -64,6 +64,7 @@

      Internet Usage Segmentation Setup

      In this tutorial we're going to cover how to properly segment your internet usage. This is the most common opsec practice that you should always use. We're going to base ourselves off from the pyramid of internet use that we have seen previously, to be able to replicate each of the 4 OPSEC levels into our current setup:

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      diff --git a/opsec/linux/index.html b/opsec/linux/index.html index 6c49415..af4e071 100644 --- a/opsec/linux/index.html +++ b/opsec/linux/index.html @@ -71,6 +71,8 @@

      I recommend using this setup on your main PC, laptop, but also as a home server or a remote server. For Privacy use, and potentially Anonymous use if you implement the correct technology for it later on, as per the 4 basic OPSEC levels.

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      + diff --git a/opsec/logos/daturagit.png b/opsec/logos/daturagit.png new file mode 100644 index 0000000..3ccd720 Binary files /dev/null and b/opsec/logos/daturagit.png differ diff --git a/opsec/manifesto/index.html b/opsec/manifesto/index.html index 03a62a5..9185aed 100644 --- a/opsec/manifesto/index.html +++ b/opsec/manifesto/index.html @@ -63,6 +63,7 @@ Previous Page

      user@Whonix - 2024-05-19

      a Nihilist's Manifesto

      Explaining why I have a blog in the first place.

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      diff --git a/opsec/multiple_identities/index.html b/opsec/multiple_identities/index.html index c78fdc0..f1a1a22 100644 --- a/opsec/multiple_identities/index.html +++ b/opsec/multiple_identities/index.html @@ -40,6 +40,7 @@

      How to Maintain Multiple Identities Online

      In this tutorial, we’ll guide you through setting up and managing multiple online identities to enhance your privacy and security. We’ll discuss why this is crucial, how to establish distinct personas, and the steps you need to keep them isolated from each other.

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      @@ -254,4 +255,4 @@ - \ No newline at end of file + diff --git a/opsec/openhardware/index.html b/opsec/openhardware/index.html index b3e8662..a17b9a6 100644 --- a/opsec/openhardware/index.html +++ b/opsec/openhardware/index.html @@ -63,6 +63,8 @@ Previous Page

      nihilist@mainpc - 2024-07-10

      The lack of Open Source Hardware (CPUs, Motherboards, GPUs)

      + +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      diff --git a/opsec/opsec/index.html b/opsec/opsec/index.html index cc75943..ba61cdf 100644 --- a/opsec/opsec/index.html +++ b/opsec/opsec/index.html @@ -67,7 +67,8 @@

      By default, if you're not careful with the technology you use, your very ability to have privacy and anonymity is not possible. And if your behavior isn't strictly controlled to protect your anonymity while using those technologies, that can also compromise both privacy and anonymity.

      If you wish to have Privacy and Anonymity online, you need to use the correct technologies, and to have the correct behavior when using them.

      - + +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      diff --git a/opsec/opsec4levels/index.html b/opsec/opsec4levels/index.html index fdd8ef4..4c7dfab 100644 --- a/opsec/opsec4levels/index.html +++ b/opsec/opsec4levels/index.html @@ -72,6 +72,7 @@

      To do so, we are going to simplify it down to 4 OPSEC levels: Public, Private, Anonymous and Sensitive.

      Sidenote: If your setup is suitable only for public internet use, you CANNOT use it for any private use, and so on.

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      diff --git a/opsec/p2ptorrents/index.html b/opsec/p2ptorrents/index.html index cfa477f..6694f45 100644 --- a/opsec/p2ptorrents/index.html +++ b/opsec/p2ptorrents/index.html @@ -63,7 +63,8 @@ Previous Page

      XMRonly - 2024 / 10 / 23

      Peer-to-Peer Large File Sharing (Torrents over VPN)

      -

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      + diff --git a/opsec/passwordmanagement/index.html b/opsec/passwordmanagement/index.html index 3a1ae9d..b63bce2 100644 --- a/opsec/passwordmanagement/index.html +++ b/opsec/passwordmanagement/index.html @@ -63,7 +63,8 @@ Previous Page

      nihilist@mainpc - 2024-06-16

      Password Management 101 (How to use Keepass)

      -

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      + diff --git a/opsec/pgp/index.html b/opsec/pgp/index.html index 1f8b731..9779866 100644 --- a/opsec/pgp/index.html +++ b/opsec/pgp/index.html @@ -64,6 +64,8 @@

      How to use PGP encryption

      In this tutorial we're going to look at how to setup PGP keys, and use them to encrypt messages

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      + diff --git a/opsec/privacy/index.html b/opsec/privacy/index.html index 9159e7c..1b35284 100644 --- a/opsec/privacy/index.html +++ b/opsec/privacy/index.html @@ -63,6 +63,9 @@ Previous Page

      nihilist@mainpc - 2024-06-14

      What is Privacy ? Why is it Important ?

      This is where the Journey begins. We're going to look at why you should bother with Privacy first of all, and what it is exactly.

      + +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      + diff --git a/opsec/privatesimplex/index.html b/opsec/privatesimplex/index.html index 5fe80fb..81466f8 100644 --- a/opsec/privatesimplex/index.html +++ b/opsec/privatesimplex/index.html @@ -63,7 +63,9 @@ Previous Page

      XMRonly - 30 / 11 / 2024

      Easy Private Chats - SimpleX

      -

      + + + @@ -80,7 +82,7 @@ Online communication is one of the most ubiquitous activities on all of the internet. From newsletters, corporate emails and even down to instant messaging with friends, its spread cannot be denied. With such wide reach, it would seem very important to protect these communication channels, yet this is almost an after-thought for most mainstream messengers. Platforms with millions of users market their services with the latest buzz words yet close-source their protocols leaving users with a "trust me bro". With so many options to choose from how can we best decide which app to use? In this article we'll compare a few options (Telegram, Signal and SimpleX) to see how their technical details stack up and determine which is best for easy private chats.

      - +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      diff --git a/opsec/qubesos/index.html b/opsec/qubesos/index.html index e2d88b7..9e33b83 100644 --- a/opsec/qubesos/index.html +++ b/opsec/qubesos/index.html @@ -67,6 +67,8 @@

      Qubes OS is a very cutting edge OS that uses virtualization everywhere to compartmentalize your digital life. It is technically not a Linux distribution, it is built on Xen which is a type 1 hypervisor that runs on bare metal, https://en.wikipedia.org/wiki/Xen

      First you have Xen hypervisor booted at startup, then you get separate VM for all of your activities. Because all of your activities are separated by VM, one of them get hacked will not compromise the security of your entire system. It is like manage your personal pc like a server, that is why Qubes OS is a highly secure OS if used correctly

      If you want to dive into the tech details and concepts about Qubes, official document is the best place https://www.qubes-os.org/intro/

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      + diff --git a/opsec/qubesosnetwork/index.html b/opsec/qubesosnetwork/index.html index 8c17e10..92ee00a 100644 --- a/opsec/qubesosnetwork/index.html +++ b/opsec/qubesosnetwork/index.html @@ -64,6 +64,8 @@

      How to navigate qubes OS and segment your internet uses

      In this tutorial we will set up the environment for public, private and anonymous online identities, and how to use qubes os.

      If you are still not familiar with the identity model please check this link Theories about building up your online identities

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      + diff --git a/opsec/serversideencryption/index.html b/opsec/serversideencryption/index.html index 1281c3a..409919b 100644 --- a/opsec/serversideencryption/index.html +++ b/opsec/serversideencryption/index.html @@ -62,6 +62,7 @@
      Previous Page

      nihilist@mainpc - 2024-05-01

      Why can't I trust Server-side Encryption ?

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      @@ -95,6 +96,7 @@

      What happens here, is that Bob decides to trust Jack with the confidentiality of his data, instead of encrypting his sensitive data with PGP. What can happen from there ?

      + diff --git a/opsec/syncthingvpn/index.html b/opsec/syncthingvpn/index.html index 1a3e8e2..5aa387f 100644 --- a/opsec/syncthingvpn/index.html +++ b/opsec/syncthingvpn/index.html @@ -63,7 +63,8 @@ Previous Page

      XMRonly - 2024 / 11 / 01

      One-on-One Large File Sharing (Syncthing over VPN)

      -

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      + diff --git a/opsec/vpn/index.html b/opsec/vpn/index.html index e6d3623..f6f0a44 100644 --- a/opsec/vpn/index.html +++ b/opsec/vpn/index.html @@ -73,6 +73,8 @@

      I recommend to use that setup as part of your Privacy Use online, to hide what you are browsing online from your ISP

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      + diff --git a/opsec/vpnqemu/index.html b/opsec/vpnqemu/index.html index ff0f378..4a29aed 100644 --- a/opsec/vpnqemu/index.html +++ b/opsec/vpnqemu/index.html @@ -62,7 +62,8 @@
      Previous Page

      nihilist@mainpc - 2024-08-08

      Route QEMU VMs through a Host OS VPN

      -

      +

      Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!

      +