Resource Practice Good OPSEC

[Dr.Sleep (Im tired)]

With the recent Raids of some of our member's houses and seizure of accounts, it is more important that ever to Practice Good OPSEC.​

The OPSEC Onion
There are multiple levels of OPSEC that need to be broken for the feds to bust down your door. Failing to do any of the following increases the risk of Raids and Legal action.

1. Don't be there
   • If something is a legal offense, it will put you on the legal radar. A good rule of thumb is if you are unsure, do not do it.
2. Don't Get Caught
   • If you decide to do something questionable, make sure you can cover you tracks so people cannot trace it back to your account.
3. Don't Be identified
   • If you do get caught, all is not lost. As long as you have not declared any personal traits like head shots, you should be fine. This is where TOR helps quite a bit, if one can mask their IP, or if you use an IP of a public place, it is much harder to identify who you are.
4. Remove blame from yourself
   • If you are identified, it may be a great time to start trying to remove blame from yourself, if someone has penetrated the 3 OPSEC layer, then you are most likely dead in the water. It may be a good time to start contacting a lawyer.

So, how can i practice Good OPSEC?

I cannot help you with poor decision making, for that is on you,. However, I can Help you with layer 3 of the onion.​

1. Use Tor
   • The Onion Network has gained popularity over the years for its great private nature. A common misconception is that you will be seen a guilty if you use TOR. Tor is just a web browser like Google or bing, as long as you do not admit to anything, you should be fine.
2. Limit personal identifying traits
   • Although out wonderful moderation team keeps most threats from making an account on the Website, It is still necessary to practice good opsec. DO NOT post your Birthday, Face shot, Legal Name, Metropolitan area, Or for the love of god, Address. This includes whilst purchasing questionable things online. Use a throwaway re-loadable money order card to order things and be sure to pick them up at an shipping location that does not require an ID.

How do i use TOR

TOR is usable on most electronic devices and is easiestly installed on desktop or laptop computers (not cromebooks).​

1. Visit https://www.torproject.org/download/ to download the installer for your correct operation system.
2. launch the launcher and follow the instructions of the TOR installer to finish installing TOR, You may need to reboot to finish installing TOR
3. Duck Duck GO! is the Default browser on TOR. You can use Tor as a normal browser with great bandwidth drawbacks.

Although you can visit regular links on TOR, .onion links like http://suicidabvrputryeg3mxdwwtwnv3eqj2koztuaiko5zn5rzodtencnad.onion (The tor address for SaSu) only work on TOR capable browsers, Like the official TOR browser. Exercise extreme caution whilst browsing TOR links, there is a higher quantity of malicious sites on tor, so it is best to stick to Known TOR sites.​

Links to Video essays About TOR



I will be here to answer questions. Any long time onion Users, Please assist these newbies in their questions. The more tor users we have, the more likely we are to gain new nodes.

 

[fuzzy-clown]

Note that if you ever logged into SaSu with your real IP, if you switch over to only logging in via tor, it's already too late as your real IP has already been associated with your account. You'd have to abandon your SaSu account and make a new one where you only login via tor.

It only takes 1 time for you to forget to use tor and then your real IP is compromised.

 

[Dr.Sleep (Im tired)]

Note that if you ever logged into SaSu with your real IP, if you switch over to only logging in via tor, it's already too late as your real IP has already been associated with your account. You'd have to abandon your SaSu account and make a new one where you only login via tor.

It only takes 1 time for you to forget to use tor and then your real IP is compromised.

Not entirely, as long as your ISP clears their logs, you should be fine.
for reference, Comcast will clear logs after 180 days.

even then, the ISP only knows that you connected to the site, they do not know your account name and so fourth. It may be best to exercise caution in those 180 days however.

 

[fuzzy-clown]

Not entirely, as long as your ISP clears their logs, you should be fine.
for reference, Comcast will clear logs after 180 days.

even then, the ISP only knows that you connected to the site, they do not know your account name and so fourth. It may be best to exercise caution in those 180 days however.

If you absolutely must be anonymous, it would be a bad idea to rely on your ISP clearing the logs after 180 days.
Your IP might not have changed at all, someone could have already asked your ISP to identify you, or maybe your ISP had some offline backup of those logs that they haven't destroyed yet.

I don't think we need to be super anonymous on SaSu, but people must be aware that just because you use Tor doesn't mean you're anonymous if you've already given your identity on the same account before.