From 2d033715bb9814f50d0579f0a0e436de5d18a8c1 Mon Sep 17 00:00:00 2001 From: "TheHatedOne@noreply.codeberg.org" Date: Mon, 27 Jun 2022 12:23:29 -0400 Subject: [PATCH 1/4] Blog --- _posts/2022-06-27-Ideas.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 _posts/2022-06-27-Ideas.md diff --git a/_posts/2022-06-27-Ideas.md b/_posts/2022-06-27-Ideas.md new file mode 100644 index 0000000..ffd4bb8 --- /dev/null +++ b/_posts/2022-06-27-Ideas.md @@ -0,0 +1,19 @@ +--- +layout: post +title: "Ideas" +date: 2022-06-27 +categories: blog +layout: post +--- + +There's a lot of things, a lot of things to do. We should begin to progress, with this being said such ideas are possible for the future. + +- Mastadon Instance +- Public Matrix Homeserver +- Hosted Tor Node +- Tor Service + +A lot of large plans for the future we hope to accomplish. For *our* future (not a communist reference). + + +~ There's a revolution coming. \ No newline at end of file From 963c7cb3f00778d80bdb7de3d82fd1b6433eb1be Mon Sep 17 00:00:00 2001 From: "TheHatedOne@noreply.codeberg.org" Date: Tue, 19 Jul 2022 20:35:03 -0400 Subject: [PATCH 2/4] Update Formatting --- _items/tools.md | 1 - 1 file changed, 1 deletion(-) diff --git a/_items/tools.md b/_items/tools.md index 3da08c5..5785ece 100644 --- a/_items/tools.md +++ b/_items/tools.md @@ -48,7 +48,6 @@ Multifactor authentication is extremely important as it provides multiple layers #### __Books__ - [*Extreme Privacy: What It Takes to Disappear* by Michael Bazzell](https://www.amazon.com/dp/B09W78GW2T) - - [*How to Disappear: Erase Your Digital Footprint, Leave False Trails, and Vanish without a Trace* by Frank M. Ahearn & Eileen C. Horan](https://www.amazon.com/How-Disappear-Digital-Footprint-Without/dp/1599219778/)
From 8d5765e497b68df33b38dd80b95aeac6c58acb22 Mon Sep 17 00:00:00 2001 From: "TheHatedOne@noreply.codeberg.org" Date: Tue, 19 Jul 2022 20:38:38 -0400 Subject: [PATCH 3/4] Preface, desktop security model and footnotes --- _items/Another guide.md | 35 ++++++++++++++++++++++++++++++----- 1 file changed, 30 insertions(+), 5 deletions(-) diff --git a/_items/Another guide.md b/_items/Another guide.md index e5c2d3b..149656c 100644 --- a/_items/Another guide.md +++ b/_items/Another guide.md @@ -17,6 +17,10 @@ The Guide
+## Preface + +--- + Well... I never thought i'd be making a guide so, here we go.... I guess.... Let's define a few important things here: @@ -55,7 +59,9 @@ _Disclaimer: This is for education / research._ -\>> [Creating our Aliases](#creating-our-aliases)
-\>> [Secure Communications](#secure-communications)
--\>> [Secure Hardware](#secure-hardware)
+ +-\>> [Physical Security](#physical-security)
+ - -\>> [Secure Hardware](#secure-hardware)

@@ -256,15 +262,23 @@ Without these 2 things, it can easily compromise you. A massive amount of information is stored on our desktop, meaning that it contains a trove of our personal information. From search results to private documents. These items are **NOT** private on "traditional" operating systems. +The default desktop enviroment has a broken security model. +This is due to the fact of lacking permissions and proper isolation as done on mobile operating systems such as Android with their per-app permission toggles. +Some services like Firejail, SELinux and Apparmor can fix a lot of these issues, but the fact is configuring these services for every application can be a daunting task and can lead to much user-error. It is assumed that the average population is likely using Windows, Mac, or ChromeOS. These are absolutely terrible options for privacy. There are some efforts to "privatize" these operating systems, though due to the fact that they are all *closed-source*, means that many of these hardening methods that we would do, can just as easily fail if the OS itself is backdoored. If you are new to the "operating system realm", a good replacement / dual-boot for these would be Fedora or Manjaro. -By "good", we assume the following: You are a beginner, you have little to none Linux experience or knowledge. +By "good", we assume the following: You are a beginner, you have little to no Linux experience or knowledge. These choices have been made for the easy installation and low maintenance. The operating system you choose should not be based upon what is recommended here, you yourself will need to research what is best suited for your situation and needs. +Using a Linux-based operating system will **NOT** make you secure by default. +This is often times a common misconception. +The actual threat model of your Linux system will vary per-person. +Linux is *private by default*, meaning that your personal information is not being *harvested* like traditional operating systems including Windows and MacOS. +QubesOS is an exception as it is entirely based upon security. Those who are looking for some excitement or extremely into privacy, security and / or anonymity should look at [QubesOS](https://qubes-os.org) and [Tails](https://tails.boum.org) if you haven't already. @@ -389,8 +403,6 @@ qubes-usb-proxy qubes-gpg-split ``` -Unofficial templates can be found on the QubesOS forum, and there is always the ability to build your own template from scratch. - Fedora-35: ``` @@ -404,6 +416,10 @@ sudo qubes-dom0-update qubes-template-debian-11 ``` When installing applications, it may be best to clone a minimal template and install the application on there for increased compartmentalization. +This is a suggested option if you have the capability to space additional system resources. + +Unofficial templates can be found on the QubesOS forum. +There is always the ability to build your own template utilizng the [Qubes builder](https://www.qubes-os.org/doc/qubes-builder/).
@@ -411,6 +427,7 @@ When installing applications, it may be best to clone a minimal template and ins If you've opted to have updates over Tor, it is recommended that we also update our repositories on both dom0 and our templates. Changing our repositories over Tor helps increase anonymity as we'd be connecting to the onion site instead of the clearnet. +See the [Whonix wiki](https://www.whonix.org/wiki/Onionizing_Repositories) for more information. dom0: @@ -725,7 +742,15 @@ Hardware Key: A small little device that can be used for MFA and GPG. Very useful to have a physical device. Something like this is recommended to have a backup clone and stored in a safe location such as a safe. -- Faraday Pouch - This will block all radio waves and signals, which can ensure that absolutely connectionn is traveling out of your devices. +- Faraday Pouch - [Wiki](https://wikiless.northboot.xyz/wiki/Faraday_cage) This will block all radio waves and signals, which can ensure that absolutely connectionn is traveling out of your devices. It completely air-gaps the device. +It's best to actually test this before you will need to actually use this. +Connect to a bluetooth speaker while playing music, put the device into the bag and wait to see after the buffer for the music to stop. +If the music does not ever stop, this means that the bag does not work properly and should not be used.
+ +## Footnotes + +--- + From 488ad0661d8a7097e60a3e0f9f10b19774024521 Mon Sep 17 00:00:00 2001 From: "TheHatedOne@noreply.codeberg.org" Date: Wed, 20 Jul 2022 21:53:02 -0400 Subject: [PATCH 4/4] Update --- _items/Another guide.md | 4 +--- _posts/2022-06-27-Ideas.md | 19 ------------------- 2 files changed, 1 insertion(+), 22 deletions(-) delete mode 100644 _posts/2022-06-27-Ideas.md diff --git a/_items/Another guide.md b/_items/Another guide.md index e43c681..9a84ca6 100644 --- a/_items/Another guide.md +++ b/_items/Another guide.md @@ -61,9 +61,7 @@ _Disclaimer: This is for education / research._ -\>> [Creating our Aliases](#creating-our-aliases)
-\>> [Secure Communications](#secure-communications)
- --\>> [Physical Security](#physical-security)
- - -\>> [Secure Hardware](#secure-hardware)
+-\>> [Secure Hardware](#secure-hardware)

diff --git a/_posts/2022-06-27-Ideas.md b/_posts/2022-06-27-Ideas.md deleted file mode 100644 index ffd4bb8..0000000 --- a/_posts/2022-06-27-Ideas.md +++ /dev/null @@ -1,19 +0,0 @@ ---- -layout: post -title: "Ideas" -date: 2022-06-27 -categories: blog -layout: post ---- - -There's a lot of things, a lot of things to do. We should begin to progress, with this being said such ideas are possible for the future. - -- Mastadon Instance -- Public Matrix Homeserver -- Hosted Tor Node -- Tor Service - -A lot of large plans for the future we hope to accomplish. For *our* future (not a communist reference). - - -~ There's a revolution coming. \ No newline at end of file