nihilist`s Blog
Previous Page

Privacy, Anonymity and Plausible Deniability

Tutorials to show how to achieve Privacy, Anonymity and Plausible Deniability online. I have a certain quality standard as to how i do these tutorials, if there are any improvements i can do on them please let me know.

SHOWCASED ARTICLE: Learn how to audit your own setup, to determine your OPSEC Level, and find out what is the most appropriate internet use for it.


Articles Status:

  1. ✅: Completed
  2. 🟠: Work in progress
  3. ❌: Not started yet

⚠️ This Blog is open to contributions:

If you want to contribute, check out the gitea repository for contributions here. (i'm rewarding 10 to 50 euros in monero per new complete blogpost), if the blogpost you want to contribute is not listed below, validate your blogpost idea with me beforehand.

📝 Explaining Concepts

  1. ✅ a Nihilist's Manifesto
  2. ✅ Privacy, Anonymity, Plausible Deniability, Decentralisation, Security, and 0days
  3. ✅ Governments, Centralisation, and Law Enforcement
  4. ✅ Governments fear Decentralisation and Anonymity

📝 Explaining OPSEC ⭐

  1. ✅ Audit your OPSEC and determine the appropriate internet use
  2. ✅ Internet usage segmentation (QEMU VMs + Identity Management)
  3. ✅ OPSEC: Using the right Technology and Behavior




OPSEC LEVEL 1: Privacy

📝 Explaining Privacy

  1. ✅ What is Privacy ? Why is it important ?
  2. ✅ The main source of Privacy: Open source software
  3. ✅ The lack of Open Source Hardware (CPUs, Motherboards, GPUs)

💻 Getting started

  1. ✅ How to install Linux from a Windows PC ⭐
  2. ✅ How to install and update programs on Linux
  3. ✅ How to install GrapheneOS on a Pixel Phone

💻 Privacy means Open Source (FOSS)

  1. ✅ How to compile open source software + How to verify software integrity
  2. ✅ How to Virtualize Machines (QEMU/KVM Hypervisor)
  3. ✅ How to get privacy from your ISP using a VPN
  4. ✅ Password Management 101 (How to use Keepass)
  5. ✅ Serverside: Should I trust serverside encryption? Should I use PGP?
  6. ✅ Private Messaging (PGP encryption)



💻 Decentralisation in the service of Privacy

  1. ✅ Self-Hosting tutorials Category


OPSEC LEVEL 2: Anonymity

📝 Explaining Anonymity

  1. ✅ What is Anonymity ? Why is it Important ?
  2. ✅ The main source of Anonymity: The Tor Network
  3. ✅ Using Tor Safely: Tor through VPN or VPN through Tor ?
  4. 🟠 Shifting from a public to an Anonymous online persona
  5. 🟠 Phone Numbers are incompatible with Anonymity

💻 Clientside - Anonymity using the Tor browser (⚠️ Check if your ISP allows Tor or Not!)

  1. ✅ If your ISP allows Anonymity (You -> Tor -> Websites)
  2. ❌ If your ISP Does not allow Anonymity (You -> VPN -> Tor -> Websites)
  3. ❌ If websites don't allow Anonymity (You -> Tor -> VPNs -> Websites)
  4. ❌ If Tor and VPNs are illegal in your country ⚠️ (You -> Tor Bridge -> Tor -> Websites)


💻 Clientside - Anonymity using VMs (⚠️ Check if your ISP allows Tor or Not!)

  1. ✅ Tails OS QEMU VM for Temporary Anonymity
  2. ✅ VMs for Long-term Anonymity (Whonix QEMU VMs)
  3. ❌ Routing QEMU VMs through VPNs (You -> VPN -> Tor -> Websites)
  4. ❌ Routing VPNs through Whonix / Tails QEMU VMs (You -> Tor -> VPN -> Websites)
  5. ❌ Using Tor Bridges with Whonix / Tails QEMU VMs (You -> Tor Bridges -> Tor -> Websites)

🧅 Serverside - Decentralisation in the service of Anonymity

  1. ✅ Tor Bridge Node
  2. ✅ Tor Node
  3. ✅ Tor Exit Node
  4. ✅ Monero Node
  5. ❌ Haveno Seed Node

💻 Clientside - Decentralized Finances

  1. ✅ Why Financial decentralisation ? (Cryptocurrencies, Exchanges and KYC) ⭐
  2. ✅ How to acquire and use Monero
  3. ✅ Haveno Decentralised Exchange direct Fiat -> XMR transaction ⭐
  4. ✅ Haveno DEX Dispute resolution (Fiat -> XMR)
  5. ✅ Haveno DEX Bank Transfer (ex: SEPA) -> XMR transaction
  6. ✅ Haveno DEX Cash By Mail -> XMR transaction ⭐

🧅 Serverside - Anonymity on Remote Servers (⚠️ Remote Hosting = Safer!)

  1. ✅ Acquiring and using remote servers anonymously (non-KYC providers) ⭐
  2. 🟠 Hosting a .onion website when the ISP allows anonymity (with custom .onion Vanity V3 address) (server -> tor)
  3. ❌ Hosting a .onion website when the ISP doesnt allow anonymity (server -> vpn -> tor)


🧅 Serverside - Clearnet Services (⚠️ Remote Hosting = Safer!)

  1. ✅ Clearnet Bind9 DNS server setup (with DNSSEC)
  2. ✅ Clearnet Matrix server
  3. 🟠 XMPP server (Gajim, OMEO encryption, ejabberd .onion setup)
  4. ✅ Remote anonymous access setup (cockpit + ssh through tor)
  5. ✅ Anonymous self-hosted clearnet Mail Server ⭐




OPSEC LEVEL 3: Plausible Deniability

📝 Explaining Plausible Deniability

  1. ✅ What is Plausible Deniability ? Why is it Important ?
  2. ❌ The main source of Plausible Deniability: Veracrypt Hidden Partitions
  3. ❌ Other sources of Plausible Deniability: Steganography
  4. ❌ Why isn't Anonymity Enough ?
  5. 🟠 Sensitive Services: Self-Host or Host Remotely ?

💻 Clientside - Getting Started

  1. ✅ Plausible Deniability (Veracrypt Hidden Partition)
  2. ✅ Plausibly Deniable Critical Data Protection
  3. ✅ Plausibly Deniable Anonymity VMs (Whonix VMs in a Hidden Volume)⭐

🧅 Serverside - Protecting Plausible Deniability (⚠️ Self Hosting = Risky!)

  1. ✅ Open source router VM setup (pfsense on QEMU/KVM)
  2. ✅ Electrical Failover (basic UPS setup)
  3. ✅ Internet Failover (Dual WAN pfsense setup)
  4. ✅ Physical Protection for an .onion Service (SSH + USB + Physical intrusion detection, automatic mail notifications, emergency shutdowns)
  5. ✅ Endgame V3 (.onion service Anti DDOS / Load Balancer / WAF service + Captcha) ⭐

💻 Steganography - Hiding secrets in plain sight

  1. ❌ Hiding textfiles into images
  2. ❌ Hiding textfiles into audio files
  3. ❌ Hiding entire zipfiles into other files



Inspirations

  1. Hack Liberty Resources
  2. Privacy Guides
  3. Simplified Privacy
  4. The Hitchhiker's guide to Anonymity


Non-KYC VPS providers



Current services used:

  1. ServersGuru (KYC-Free reseller of cloud providers like Hetzner)
  2. nicevps.net (KYC-Free registrar)

Previous services:

  1. Incognet (both registrar and cloud provider)
  2. Hostiko (cloud provider)
  3. Other Non-KYC Cloud Providers



LEGAL DISCLAIMER: 
Across the entirety of my blog, in all articles that I made, I advocate for the legal use of technologies, even when I am talking about Privacy-enhancing and Anonymity-enabling technologies. In no way am I advocating for any illegal use of any technology showcased in any article on my blog. as the goal of this blog is to remain stricly informative and educative.


I decline any and all responsibility for any mis-use of any of the technology i showcase in the entirety of my blog. I also decline any and all responsibility for any physical, digital and psychological damage caused by the mis-use of any showcased technology, as the responsibility of such acts remains with the perpretating third-party. By reading this blog, you permanently, irrevocably and world-widely agree that I am in no way am responsible for any illegal action done by you or anyone that uses any of the showcased technology in my blog articles.

Nihilism

Until there is Nothing left.

My Links

RSS Feed
Matrix Chat

About nihilist

Donate XMR: 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8


Contact: nihilist@nihilism.network (PGP)