Conversation

Notices

1. Matty-kun :Christmas_kitty_bell: (matty@nicecrew.digital)'s status on Saturday, 10-Jun-2023 03:31:59 JST Matty-kun :Christmas_kitty_bell:
   I've updated the OPSEC guide to include a section on EXIF (metadata), the government, cryptocurrency, what to do if you have poor OPSEC and a TL;DR for people who have ADHD. Please read through it and let me know what you think. Thanks!
   
   https://nicecrew.digital/about/safety
   • xianc78 repeated this.
   • Woggy's Zeonic Frolicks (washedoutgundampilot@poa.st)'s status on Saturday, 10-Jun-2023 03:31:59 JST Woggy's Zeonic Frolicks

     in reply to

     @matty Haven’t read the updated one but one pitfall I imagine some of the boys fall into is not realizing that others in the family and friend circle could take pics of the same stuff and totally out them. You could think you’re sneaky taking a pic of your pets, or crops, or hobbies only for a sister or parent to upload it to her public facing TL

   • Codeki :njp: (codeki@poa.st)'s status on Saturday, 10-Jun-2023 05:02:47 JST Codeki :njp:

     in reply to

     • Woggy's Zeonic Frolicks

     @WashedOutGundamPilot @matty Oh, like that dude on 4chan who found out his sister was a camwhore because he uploaded a picture from the webcam on the family computer and people went “Wait, I know that bookcase. I’ve got pictures of your sister.”

     Woggy's Zeonic Frolicks likes this.
   • Some Purple Cat (purpcat@boks.moe)'s status on Sunday, 11-Jun-2023 02:14:10 JST Some Purple Cat

     in reply to
     @matty Not a bad guide but here's some important shit I've learned online.
     The most important rule of Opsec IMO is to always have some sort of fear. Don't get too cocky like the idiot on Poast who made the post with all his alts. In fact if you want to really be paranoid here's a good trick: make every post as if it'd have your real name and photo attached to it even though you're not in this case. If you have a career that could be on the line from posting, think twice about posting or posting anything like real life experiences.To add to this, if you think "oh there's no way XYZ will come for me what do I have to hide", you're exactly the kind of low hanging fruit that would use your email to ask for help running a darkweb market or showing up at a political protest without a mask AND carrying your cell phone or something.It should be added in that Encrypted messaging apps won't save you from two different scenarios. The first is you're sloppy with opsec and talking to someone who is baiting you into saying dumb shit or ratting you out behind the scenes (this is how Vertias was good at getting results). The second is the thing the XKCD comic on encryption that techbros keep posting satirized. Recently the FBI got a court order to unlock the phone of a pedophile using Wickr using his face. Or maybe they'll do the same with the other guy's phone. Doxing is game of putting together a puzzle and they will use anything to dox you. People bring up photos all the time in this thread but I'll add another, one very common thing that feds and amateurs have used online are timestamps, such as using it to identify if the writer of malware is Russian, Chinese, American, or Israeli. The theory that 4chan is flooded by Israeli shills is fueled by the timestamps of when the people post or how when Israel was getting shelled posting slowed down. This is also what federal agents do as well to unmask people online, they take advantage of every single slip up. For example:Don't just strip one piece of EXIF data but all pieces of it. I know the UK caught one notorious pedophile as well by using Flickr to see what photos were taken with a specific model of an Olympus camera in a country. Maybe also use a different camera for posting online to avoid being traced back with say, dead sensor pixels/dust spots in the sensor. Big tech will dox you, and the same goes with your cell phone. See the guy who sent Kurt Eichenwald the famous gif. But I can go one better.NEVER TRUST GOOGLE! Aside from numerous leaks, a Wired article talked about how Google has helped create political prisoners out of boomers. In 2018 it was revealed Google monitors location data when it's set to "off". Even Google Employees don't get their own settings or trust Google, and think Chrome's private mode is a joke. That's not even getting into the political stance of the company which is that they hate you and think it's funny.Avoid drama whores and groups loaded with them. Drama whores have no allegiances and are far more likely to dox you. In short though have internet street smarts, don't join groups that make it obvious where you lie on the spectrum.Most importantly, the best way to "avoid" the government is to not make yourself a target.
     xianc78 and  like this.
   • Rayfield (rayfield@poa.st)'s status on Sunday, 11-Jun-2023 02:26:42 JST Rayfield

     in reply to
     @matty I'm at work but if I don't post this I'll forget later. I have a few suggestions for the metadata section regarding videos and file formats that might give your name away and how to fix this.
   • Kottonballs (kottonballs@nicecrew.digital)'s status on Sunday, 11-Jun-2023 02:31:45 JST Kottonballs

     in reply to
     Very well done!
     
     You mention EXIF data. What about revealing information in pictures posted even if EXIF is missing? One example I always tell people is to never post pictures of your guns even with the s/n blacked out. It's a way to narrow down who you are.
     xianc78 repeated this.
   • Matty-kun :Christmas_kitty_bell: (matty@nicecrew.digital)'s status on Sunday, 11-Jun-2023 02:31:45 JST Matty-kun :Christmas_kitty_bell:

     in reply to

     • Kottonballs
     I think that kind of goes without saying though. You probably should not post pictures of your guns period, but if you do it should be on a neutral background.
   • xianc78@gameliberty.club's status on Sunday, 11-Jun-2023 02:41:10 JST xianc78

     in reply to

     • Some Purple Cat

     @PurpCat @Matty All your darknet IDs should be completely separate from any of your clearnet IDs, and ESPECIALLY your real ID.