blog-contributions/opsec/hide_monero/index.html
2025-02-22 16:35:00 +00:00

237 lines
11 KiB
HTML

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="description" content="">
<meta name="author" content="">
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
<title>How to hide your monero wealth</title>
<!-- Bootstrap core CSS -->
<link href="../../assets/css/bootstrap.css" rel="stylesheet">
<link href="../../assets/css/xt256.css" rel="stylesheet">
<!-- Custom styles for this template -->
<link href="../../assets/css/main.css" rel="stylesheet">
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
<![endif]-->
</head>
<body>
<!-- Static navbar -->
<div class="navbar navbar-inverse-anon navbar-static-top">
<div class="container">
<div class="navbar-header">
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a class="navbar-brand-anon" href="\index.html">The Nihilism Blog</a>
</div>
<div class="navbar-collapse collapse">
<ul class="nav navbar-nav navbar-right">
<li><a href="/about.html">About</a></li>
<li><a href="/blog.html">Categories</a></li>
<li><a href="https://blog.nowhere.moe/donate.html">Donate</a></li>
<li><a href="/contact.html">Contact</a></li>
</ul>
</div><!--/.nav-collapse -->
</div>
</div>
<!-- +++++ Posts Lists +++++ -->
<!-- +++++ First Post +++++ -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<a href="../index.html">Previous Page</a></br></br><p><img src="../../assets/img/user.png" width="50px" height="50px"> <ba>nihilist - 00 / 00 / 00</ba></p>
<h1>Hide your monero wealth </h1>
<p>In this tutorial I will show an setup how to hide your monero wealth, with plausible deniability provided by veracrypt </p>
<p>We need a environment very similar to Nihilism's private + sensitive vm setup, so be familiar with it before continuing. Some details mentioned in the previously tutorial will be omitted here.</p>
<p><a href="../sensitivevm/index.html">Sensitive VM setup</a></p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /grey -->
<!-- +++++ Second Post +++++ -->
<div id="anon3">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Initial Setup </b></h2>
<p>According to the nihilism's tutorial, first install your kicksecure or debian <b>host OS</b>. Once you have done installing your host OS, start it in persistent mode first for setting up qemu/kvm</p>
<p>First install all the necessary software</p>
<pre><code class="nim">
$sudo apt-get update; sudo apt install --no-install-recommends qemu-kvm qemu-system-x86 libvirt-daemon-system libvirt-clients virt-manager gir1.2-spiceclientgtk-3.0 dnsmasq-base qemu-utils iptables safe-rm xz-utils
</code></pre>
<p>Next run some necessary configuration</p>
<pre>
<code class="nim">
$sudo adduser "$(whoami)" libvirt
$sudo adduser "$(whoami)" kvm
$sudo systemctl restart libvirtd
$sudo virsh -c qemu:///system net-autostart default
$sudo virsh -c qemu:///system net-start default
</code>
</pre>
<p>Next create a veracrypt container on another storage device, with a big enough hidden volume according to the nihilism's tutorial</p>
<p>Reboot your host OS into live mode, <b>live mode</b> prevents any log or other traces be written to disk. This makes sure digital forensic cannot find out the existence of our private vm</p>
<p>In theory if you have done everything correctly according to previous tutorial, we should have a plausible deniability setup available. The <b>private</b> VM will store our decoy monero wallet. The <b>sensitive</b> VM will store our real monero wallet, which contains a lot of $$$ and might be legally questionable.</p>
<p>The veracrypt container allows you to deny the <b>existence</b> of sensitive VM</p>
<img src="VM_setup.png" class="imgRz">
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Sensitive VM and outer volume setup</b></h2> </br> </br>
<p>First decrypt and mount your hidden veracrypt volume. Next setup Whonix gateway and workstation according to nihilism's tutorial.</p>
<p>You should have all the whonix VM files inside the container</p>
<img src="Whonix_vm_files.png" class="imgRz">
<p>Once you have done setup the Whonix vms inside the sensitive VM, copy this script so you do not need to manually define the VMs everytime rebooted. You just need to run this script everytime you mount the volume</p>
<pre><code class="nim">
#!/bin/bash
if [ $(virsh -c qemu:///system list --all | grep Whonix | wc -l) -ne 0 ];
then
# if the VMs are imported, remove them:
virsh -c qemu:///system destroy Whonix-Gateway
virsh -c qemu:///system destroy Whonix-Workstation
virsh -c qemu:///system undefine Whonix-Gateway
virsh -c qemu:///system undefine Whonix-Workstation
virsh -c qemu:///system net-destroy Whonix-External
virsh -c qemu:///system net-destroy Whonix-Internal
virsh -c qemu:///system net-undefine Whonix-External
virsh -c qemu:///system net-undefine Whonix-Internal
else
# if the VMs are not imported, import them:
virsh -c qemu:///system net-define /mnt/veracrypt1/Whonix-external.xml
virsh -c qemu:///system net-define /mnt/veracrypt1/Whonix-internal.xml
virsh -c qemu:///system net-autostart Whonix-External
virsh -c qemu:///system net-start Whonix-External
virsh -c qemu:///system net-autostart Whonix-Internal
virsh -c qemu:///system net-start Whonix-Internal
virsh -c qemu:///system define /mnt/veracrypt1/Whonix-Gateway.xml
virsh -c qemu:///system define /mnt/veracrypt1/Whonix-Workstation.xml
fi
</code></pre>
<p>Now we are supposed to have our sensitive whonix gateway and workstaiton ready, open them and upgrade the system</p>
<img src="Whonix_vm_ready.png" class="imgRz">
<p>Next access monero website to get the official wallet, or use any wallet you like</p>
<p>Create a new wallet inside the sensitive workstation vm, and store the seed into the keepassx vault, remember to safely back up this VM.</p>
<img src="Seed.png" class="imgRz">
<p>For how to acquire and use monero, consult the monero tutorial</p>
<p>The setup of sensitive VM is now done, use this VM <b>only</b> for sensitive monero transactions, if you want to have other darknet activities create another dedicated workstation.</p>
<img src="Wallet.png" class="imgRz">
<p></p>
<p><b>Outer volume:</b></p>
<p>Next we will set up the outer volume, which will contains some decoys files that give you plausible deniability when someone forces you to open the veracrypt container</p>
<p>Mount the veracrypt outer volume, remember also to input the <b>hidden volume</b> password, since you <b>do not</b> want your hidden volume get destroyed!</p>
<img src="Veracrypt.png" class="imgRz">
<p>Then download some pirate movies, celebrity leaked nudes and Biden's leaked email to it. Make your outer veracrypt volume spicy but not illegal. </p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<!-- +++++ Second Post +++++ -->
<div id="anon1">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Private VM setup</b></h2> </br> </br>
<p>Then we are going to setup the decoy wallet, the decoy wallet is supposed to be in private VMs, if someone robs you at a gun point you are supposed to open this wallet</p>
<p>Architecturally it should look like this</p>
<img src="6.png" class="imgRz">
<p>Choose one of your private VM, download the monero wallet and generate a new wallet.</p>
<img src="Donation.png" class="imgRz">
<p>Buy something with it randomly, or donate some money to other open source projects.</p>
<p>Occasionally open this private VM and use this wallet, so this VM is going to look like a legit active daily VM.</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<div id="anon1">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Emergency</b></h2> </br> </br>
<p>Now we have come to the <b>most important</b> part, which is how to handle the situation when someone has raided your house</p>
<p><b>Situation one</b>: Your computer is not power up, you can simply give adversary the outer volume password and your decoy wallet, and deny the existence of sensitive VM.</p>
<p><b>Situation two</b>: Someone kicks the door when you are using the sensitive VM, you have to setup the <b>emergency script</b> and shortcut mentioned in nihilism's tutorial, test it <b>multiple times</b> to make sure it works!</p>
<p>You have to make sure your computer can be shutdown properly. I personally prefer a PC than a laptop, since directly unplug the power is always more reliable than a software implementation.</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<!-- +++++ Footer Section +++++ -->
<div id="anonb">
<div class="container">
<div class="row">
<div class="col-lg-4">
<h4>PrismBreaker</h4>
<p>
Shatter the big brother.</p></br></br><p>Creative Commons Zero: No Rights Reserved</br><img src="\CC0.png">
</p>
</div><!-- /col-lg-4 -->
<div class="col-lg-4">
<h4>My Links</h4>
<p>
<a target="_blank" rel="noopener noreferrer" href="http://blog.nowhere.moe/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FL5jrGV2L_Bb20Oj0aE4Gn-m5AHet9XdpYDotiqpcpGc%3D%40nowhere.moe%2FH4g7zPbitSLV5tDQ51Yz-R6RgOkMEeCc%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAkts5T5AMxHGrZCCg12aeKxWcpXaxbB_XqjrXmcFYlDQ%253D&data=%7B%22type%22%3A%22group%22%2C%22groupLinkId%22%3A%22c3Y-iDaoDCFm6RhptSDOaw%3D%3D%22%7D">SimpleX Chat</a><br/>
</p>
</div><!-- /col-lg-4 -->
<div class="col-lg-4">
<h4>About Prism Breaker</h4>
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 87iB34vdFvNULrAjyfVAZ7jMXc8vbq9tLGMLjo6WC8N9Xo2JFaa8Vkp6dwXBt8rK12Xpz5z1rTa9jSfgyRbNNjswHKTzFVh</p></br><p><u>Contact:</u> prismbreaker@waifu.club (<a href="https://keys.openpgp.org/vks/v1/by-fingerprint/735816B2B9E6F4660ECE44D983E602C4B6EA6AEE">PGP</a>)</p>
</div><!-- /col-lg-4 -->
</div>
</div>
</div>
<!-- Bootstrap core JavaScript
================================================== -->
<!-- Placed at the end of the document so the pages load faster -->
</body>
</html>