Security Info for Newbies

[DoomKitty]

I sort of think all security measures give a false sense of security, just cuz being human is the weakest link.  Tons of people get busted who use TAILS and a number of people have been busted BECAUSE they were using Tor. TAILS isn't gonna protect you if you are using the same username across multiple platforms that you weren't securely accessing or used IRL info to sign up for, or if you forgot you used your secure email on some random site where you talked about IRL info that could identify you, or you suddenly start ordering tons of packs internationally instead of spreading them out over time and it makes someone suspicious, or like that one dnm vendor whose identity was initially discovered cuz he posted pics holding the weed he was selling and LE used the high-res pics to basically take his fingerprints.  I mean that dude also made a ton of other fuck ups as well, but it just shows that being human is where security always breaks down.  Always have to be vigilant and dont trust software to do all the work!

@sweetmelissa589  I'm not sure what RCs interest you, but many RCs can be considered illegal under the Federal Analogue Act, and the legality of others can change at any moment, so i would recommend at least a vpn and secure email (proton has a free version of both).

 

[porkandbeansboy]

@DoomKitty That's because Europol has cracked the Tor Browser and they won't tell anyone else they did it because well... they want to keep doing it lol. They aren't false sense security think of it like security for your house if someone WANTS to break into your house that desperately they will FIND a way to do it. NOTHING is invincible to being cracked but that doesn't mean you should make things EASY for anybody to do so... think of it as likee not leaving your front door and back doors unlocked in your house you would keep them locked despite the fact someone could like kick it down or maybe pick the lock etc.

That being said every single point you have made in your Post is absolutely 100% correct. They can even use your writing style I saw a Documentary where these people knew a Blog Post was made by the same individual by using a , with like double spacing betweeen the  ,  like that for example. Just as @DoomKitty just pointed it all it takes is something as SIMPLE as that to EXPOSE you wide open so be careful.

Remember though it doesn't matter how careful you are if they want to get you they will accomplish it. You can't fight all the power that they are throwing at you for goal of finding out who you are and doing it 24/7 waiting for you to make a single and simple mistake such as the ones @DoomKitty pointed out. Like it has been stated though it's MAINLY the V3nd0rz that got to worry about security a lot more than the average User. Yet the average user still needs to be as secure as possibly able to be by the specific individual.

 

[Clarissa]

I sort of think all security measures give a false sense of security, just cuz being human is the weakest link.  Tons of people get busted who use TAILS and a number of people have been busted BECAUSE they were using Tor. TAILS isn't gonna protect you if you are using the same username across multiple platforms that you weren't securely accessing or used IRL info to sign up for, or if you forgot you used your secure email on some random site where you talked about IRL info that could identify you, or you suddenly start ordering tons of packs internationally instead of spreading them out over time and it makes someone suspicious, or like that one dnm vendor whose identity was initially discovered cuz he posted pics holding the weed he was selling and LE used the high-res pics to basically take his fingerprints.  I mean that dude also made a ton of other fuck ups as well, but it just shows that being human is where security always breaks down.  Always have to be vigilant and dont trust software to do all the work!

@DoomKitty This made my night.  Thank you.  For years I've been wanting to print that statement on billboards and T-shirts.

Computer defenses, software programs, VPN's, cryptography protocols are all created by HUMANS which means it can be defeated by HUMANS.  (I think there's even a reference to that in Mr. Robot).  That's literally the only lesson in Cybersecurity that anyone needs to know.  It's also why social engineering and phishing scams are booming.  I've even been a victim of one or two despite writing white papers on avoiding them.

I read through all 5 pages of this thread to learn that no one shared what TOR actually is.  It's a network of servers developed with the U.S. Navy that enabled people to browse the internet anonymously.  I never trusted TOR.  Not for a second.  There's just no way the government hasn't built in a back door to the TOR network and is monitoring everything (hell, that is exactly what I would do).

I've mostly given up on software and security measures.  The NSA/CIA/FBI have unlimited access since 9/11 due to everything being related to "National Security".  The truth is -- there is no privacy.  And if the government can't get a warrant for some reason, they hire a blackhat to do it for them.  I don't know why news reporters don't report the fact that privacy doesn't exist.  The funny thing is: you only get on the government's radar when you start encrypting emails and using TOR and drawing unwanted attention to yourself.

If you want to be safe, you'll need to build a Faraday cage, your own network/ISP, your own firewalls and IDS, your own VPN, everything from scratch.  AKA You need to be a certifiable genius to be able to do all of that.

Sorry for dropping all this bad news on you guys.  I'm just trying to give a realistic picture here.  In this century, there is no privacy.  Cellphones, bluetooth, WiFi, smartwatches, biotech/devices, online banking, debit/credit cards, GPS, GPS-enabled cars, METRO cards (yes I'm serious) etc.  Anything that transmits a signal is vulnerable.  All of this is traceable and hackable.  My advice: just don't draw attention to yourself.  Go through life being a "normal" citizen and the gov't will have no reason to harass you.

 

[Kalsima]

@Clarissa and @DoomKitty that was the most interesting post I read today. That information is incredibly  valuable I am extremely grateful for you both its like having a second layer of protection. My husbands eyes were about to pop out of his head while  I was reading it to him. I warned him not to be such a Trump hater on Twitter. I think you put the fear of God in him. Thank you now hopefully he won't watch MSNBC and tweet constantly. Thank you both. Love ya Hev

 

[Kalsima]

@eagan1 I don't like talking politics on forum but why do I say this is Trumps fault? Because he is the POTUS and should be leading our country. I see no leadership and I believe that Covid his words and actions have cost over 160,000 Americans. Putting false information is dangerous people have died from his own words. Taking hydroxyclorooquine  is dangerous that's killed people.He is de-assembling the DOJ and out of the WHO and trying to leave NATO and destroy are post office. I don't want to argue politics but he is not fit to lead. And I won't mention how he treats women and lies like he breathes. He had our military attack American Citizens on American Soil. Oh and he is dividing our country he is racist and a misogynist the list goes on. I will respect your opinion but I am proud to be a libtard as the GOP calls us. But everyone has a right to their own opinion and I respect yours as well. Even though we might be on different sides I still like and respect you as a person and friend. Love ya Hev Thanks for asking about me feeling better. Got out of bed today without crying and fixing up my Art Studio . Kind of you for asking @eagan1

 

[Kalsima]

Thank you @Clarissa I honestly thought it was free speech but it did make me nervous when Trump said he would not leave oval office if Biden won. I was thinking dictator and fascism and afraid my husband would be put in a concentration camp because he's a bit too outspoken. I was reading your post to him. And we didn't know Twitter was hacked. My husband wanted me to thank you he feels better and agrees with you we are definitely living in scary times. And we both love reading your posts together you have taught us so much in the past week we appreciate all you have done to help members like me that are old school my daughter even gives us crap. You are so kind and helpful a true asset to our forum. Thanks so much. Love ya

 

[Clarissa]

I'm definitely not political either (I'm SO far from it), but Trump is pretty much "buddies" with Putin and I'm pretty sure I heard him compliment Kim Jong-un of N. Korea on multiple occasions. I could see Trump putting away citizens into black sites for public speech, but it would attract too much attention.

Yeah this happened with LinkedIn a few years ago. The entire company was hacked. All emails and passwords were sold for cents on the dark web. In this case of Twitter, you just have to make sure you change all your passwords. I know it's annoying, but Walgreens/Amazon/etc. sell password journals where you can write down all your usernames and passwords. That's what I usually do.

It can't be a coincidence that this hack exposed the accounts of a former US president and a possible future president, yet Trump comes off scott clean? He's a business man. These types of schemes and smear campaigns are built into his DNA. CNN reported that Cybersecurity experts now worry that the bitcoin scam may mask a much more troubling data breach that could expose private communications and other sensitive material later on (think of what happened to Hillary). It's like a Hillary-leak repeat -- she's suddenly not qualified to be president because she made a few personal emails on her work account. Such B.S.

I get to "freshen" up on my current events and you guys get some useful info. I also love to investigate a good conspiracy. This is totally a win-win!

 

[veggieragz]

@Clarissa

I know I'm late to the conversation but your precision regarding how deeply tailored our media is and how much we're led to believe otherwise is extremely refreshing andcomforting when it should be so unsettling.

I dont claim to understand 1 percent of how this kind of manipulation even works, I just come from a gen or a demographic that i think can very much feel it even in our bodies how much of a reality television show life in this country is.

Edit; despite my personal opinion that the election is and has been rigged without a broken seam for so long and in ways even more cartoonishly sinister than are covered here, dont worry I do plan to vote just in case

 

[Clarissa]

@veggieragz Yeah a lot of what I'm talking about is complex social engineering hacking attacks usually performed by nation-states (Russia or anyone with an interest in Trump being elected).  Like you said, I think Russia is enjoying the 24/7 reality TV show we are providing.  That's probably why Trump is so upset about the mail-in votes.  Unfortunately, mail-in votes do not come equipped with a computer or CPU that can be hacked.  So I'm sure that has him all worried.  I don't claim to be super political, but what I remember from basic high school history, is that the electoral college has all the power so there are only a few states that determine an election.  And of course New York or California or large states with millions of citizens that produce a huge portion of the nation's wealth aren't included in this vote.  I don't think this shit has been updated since like the 1800's hah.

I can't remember the exact source or where I heard this from, but last election Facebook was helping the Trump campaign by marketing and advertising for him.  That is just SO wrong.  Facebook is the highest paying (salary) company in the US for Software Devs/Engineers like myself and I probably wouldn't even consider working for them if that's true.

These are just a few very small examples.  It barely covers the big picture.  And whatever happened to the 2016 Election Hacking investigation?  They found that Trump was colluding with the Russians, and what, they just let it go?  I don't understand at all.

 

[TeknoFunk]

I have a simple question. If you have a vpn proton or the like when it's finally time to pay, you are still using a source of payment that can be tracked correct?

How do you get around this part?

 

[EasyMoneySnip3r]

7 minutes ago, Ayyy7393 said:

@TeknoFunk is paying worth it???

 

[EasyMoneySnip3r]

@Toker short and sweet and i learned new things .. thanks!