mirror of
https://github.com/Anon-Planet/thgtoa.git
synced 2024-12-25 23:39:41 -05:00
869 lines
60 KiB
Markdown
869 lines
60 KiB
Markdown
v1.1.7
|
|
|
|
- Add A.P. Open Collective link
|
|
- Remove in memoriam for Lena per her wishes
|
|
- Add Lucas as NTH mod
|
|
- Fix missing inline image leftover from previous PRs
|
|
- "Checking if your Tor Exit Node is terrible": reduce to one section and remove subsections
|
|
|
|
v1.1.6 **"It's alive...again."**
|
|
|
|
The thing works now.
|
|
|
|
- Fixed the errors in pandoc (Tex2PDF) build
|
|
- Updated Tor .onion links
|
|
- Drank a lulz amount of espresso
|
|
- Cleaned up garbage
|
|
- Removed unused links
|
|
- Note regarding Alex's absence (they will return)
|
|
|
|
v1.1.6-pre2
|
|
- I know, I know. Pre-release? Again??! v1.1.6 coming **very** soon.
|
|
- Update to $OXEN staking prices in Session section
|
|
- Small grammar/spelling fixes
|
|
- Fix image inline linking issue (stop using dual linking)
|
|
- Re-order hardlinks to make it easy to manage
|
|
|
|
v1.1.6-pre1
|
|
- Update on Tor Browser route due to major changes
|
|
- Tor Project has condensed their settings and it is no longer
|
|
necessary to manually configure bridges.
|
|
- Fix out of date options/settings for Tor on Android
|
|
- Small grammar/spelling fixes
|
|
- Removal and fix of some bad links
|
|
- Removal of AnonArchive (down)
|
|
- "How to spot if someone has been searching your stuff" fixed
|
|
- PDF and ODT builds disabled temporarily
|
|
- Update to social links for SEO plugin
|
|
- Link to Qubes tutorial for installing Windows VMs
|
|
- Added link to Arkenfox/user.js
|
|
- Remove unnecessary addons
|
|
|
|
v1.1.5
|
|
- Various spelling and grammar fixes
|
|
- Fixed several numbering errors in references
|
|
- Updated and fixed many broken URLs and saved them in the Wayback Machine
|
|
- Noted that https://mastodon.social/@anonypla is gone? added strike-through
|
|
- Adapted Qubes OS hardware requirements that were too low for a decent experience (RAM) according to their recommendation
|
|
- Put more incentive to use Tor Browser Safest mode as long as it does not break anything and switch to Safer if necessary and with precautions linked in an appendix
|
|
- Precision that Anti-Evil Maid on Qubes OS is only available on Intel CPUs
|
|
- Removed dead link of Centry Fork project
|
|
- Added Windows 11 support to the guide
|
|
- Partial additions of partial Qubes 4.1.X support but needs completion and testing (coming soon)
|
|
- Added link to official guide to upgrade from Qubes 4.0.X to 4.1.X (fresh or in-place)
|
|
- Fixed issue in Qubes OS Tor over VPN and VPN over Tor Networking cases that were just plain wrong
|
|
- Added guidance to run Windows 11 within Virtualbox + link to official guide from Oracle
|
|
- Added recommendation to install/use Safing PortMaster and added a link for some compatibility issues between Portmaster and some VPNs
|
|
- Removed Windows AME completely from the guide
|
|
- Replaced the "I would" by a "We would" since it is now a group effort and project
|
|
- Added a safest recommendation for more paranoid people in security level choices in Tor
|
|
|
|
v1.1.4-pre2
|
|
- Fixed some spelling/grammar
|
|
- Update to contributing guidelines
|
|
- Update of modern-crypto room rules
|
|
- Addition of chatroom-rules for the PSA community
|
|
- Update of verification guide (removed outdated content, fixed links, updates)
|
|
- Removal of CTemplar references since it was shutdown
|
|
- Fixed links to Proton services, references, onion URL, and archives
|
|
- Removal of BTC Wasabi recommedation in favor of Coinjoin alternative and wallet recommendations
|
|
- Re-phrasing of some confusing sentences
|
|
- LibRedirect extension is recommended again
|
|
- Fixed many links formatting
|
|
- Removal of removed content (dark pdf)
|
|
- Fixed links to ODT file
|
|
- Added recommendation to <https://z0ccc.github.io/extension-fingerprints/#> and <https://www.deviceinfo.me/>
|
|
- Removed links to non-existant mirrors
|
|
- Updated some outdated references(old project)
|
|
|
|
v1.1.4-pre1
|
|
- Addition of a legacy resources page for the old archives
|
|
- Changes in the about page to reflect the current situation
|
|
- Changes in the donation page to reflect the current situation
|
|
- Fix link to video "How to Hack a Turned-Off Computer, [..]"
|
|
- Misspelling and grammar mistakes fixed
|
|
- Fix formatting
|
|
- Garbage removal
|
|
- Inline linking fixes
|
|
- Privacyguides changed their URL scheme
|
|
- Almost all archive.org links fixed
|
|
- Annotated some links to make them more descriptive
|
|
- Got rid of dupes and empty refs
|
|
- Renew links for researchgate articles that were removed
|
|
- Removed mobile wikipedia links
|
|
- Fix a couple patent links & Rubber-hose cryptanalysis wiki
|
|
- Update PDF archivals so they are direct links but not downloaded
|
|
- Some scientific articles were removed or replaced
|
|
- IEEExplore, Spread-spectrum watermarking of audio signals
|
|
- ScienceDirect, Robust audio watermarking using perceptual masking
|
|
- SSRN, The Cryptocurrency Tumblers: Risks, Legality and Oversight
|
|
- Property of the People, Lawful Access to Secure Messaging Apps Data
|
|
- Arxiv url fixes
|
|
- s/grayshirt/grayshift/gi
|
|
- Trailing parentheses and commas removed
|
|
- Fixed all broken links
|
|
- Removed uMatrix from the guide (use uBlock Origin)
|
|
- Removal of https://xchange.me/ (abandoned)
|
|
- Removal of https://swap.lightning-network.ro/ (abandoned)
|
|
- Removal of https://privacyguides.org/providers/hosting/ (category removed from website)
|
|
- Added a warning about the privacy redirect extension stating it might be abandoned/unmaintained
|
|
- Added Anonymouth for linguistic antiforensics & related links
|
|
|
|
v1.1.3
|
|
- Added dedicated section about gait recognition and other long-range biometric techniques
|
|
- Updated PDF toolchain to allow embedding images in the PDF guide
|
|
|
|
v1.1.3-pre1
|
|
- Updating info to reflect the new identity being used to publich the guide
|
|
- Attempted to reconstruct toolchain to generate PDF and ODT guides
|
|
|
|
v1.1.2
|
|
- Removed SIM/Virtual Numbers providers not accepting at least XMR from the guide as there are sufficient providers accepting XMR
|
|
- Added some more free SMS providers in the guide
|
|
- Added links to Scribe.rip front-end to Medium.com for Medium.com links
|
|
- Considerable work was done in relation to the community aspects of this project and other related projects with the creation of a Matrix space (PSA) regrouping several efforts.
|
|
- Added link to <https://psa.anonymousplanet.org/> containing the community rules for our chatrooms on Matrix and Discord
|
|
- Added reference to <https://en.wikipedia.org/wiki/Sybil_attack> to the attacks against anonymized Tor traffic section
|
|
- Added reference to <https://arstechnica.com/information-technology/2014/07/active-attack-on-tor-network-tried-to-decloak-users-for-five-months/> in the attacks against anonymized Tor traffic section
|
|
- Added reference to <https://www.whonix.org/wiki/Anbox> for running Android Apps within the Whonix Workstation
|
|
- Added reference to <https://www.wikigain.com/install-macos-monterey-on-virtualbox/> to the macOS VM section
|
|
- Added reference to <https://blog.kraken.com/post/11905/your-fingerprint-can-be-hacked-for-5-heres-how/> to the biometrics section
|
|
- Added reference to <https://propertyofthepeople.org/document-detail/?doc-id=21114562>
|
|
- Added reference to <https://12ft.io/> in the introduction section
|
|
- Added reference to <https://www.bleepingcomputer.com/news/security/firmware-attack-can-drop-persistent-malware-in-hidden-ssd-area/> to the SSD wiping conclusions
|
|
- Added reference to <https://www.welivesecurity.com/wp-content/uploads/2021/12/eset_jumping_the_air_gap_wp.pdf> to the advanced targeted techniques section
|
|
- Small grammar/spelling fixes
|
|
- **Special thanks to the anonymous donator of 1 XMR**
|
|
|
|
v1.1.1
|
|
- Added reference to <https://www.youtube.com/watch?v=H33ggs7bh8M> as an intro video to Monero in the Monero Disclaimer section
|
|
- Added reference to <https://www.youtube.com/watch?v=qkJGF3syQy4> in the Guest VM Browser section about Brave
|
|
- Added reference to <https://www.vice.com/en/article/m7vqkv/how-fbi-gets-phone-data-att-tmobile-verizon> in the metadata/geo-location section
|
|
- Added reference to <https://fingerprintjs.com/blog/disabling-javascript-wont-stop-fingerprinting/> in several sections about JavaScript
|
|
- Added reference to <https://qua3k.github.io/ungoogled/> in the sections about Ungoogled-Chromium
|
|
- Re-Added Privacytools.io in the Links section
|
|
- Added a general disclaimer on the Links page about websites possibly using sponsorships, affiliate links, paid services, premium offers, and merchandising...
|
|
- Re-Added a Discord server to provide easier access to the community through <https://discord.gg/V8dmd9y7mt> with all the rooms bridged to Matrix rooms
|
|
- Changed the Matrix/Discord communities from being room focused (#anonymity) to a broader "Privacy Security Anonymity" space with a new #security focused room and an off-topic room.
|
|
- Creation of a Matrix space at ```#privacy-security-anonymity:matrix.org``` <https://matrix.to/#/#privacy-security-anonymity:matrix.org>
|
|
- Added an RSS bot to those rooms relaying some relevant security and anonymity news within those rooms.
|
|
- Started the test hosting of a small Synapse server with the domain anonymousplanet.org
|
|
|
|
v1.1.0
|
|
- Removed SHA-3 from recommended methods for password storage
|
|
- Added reference to <https://docs.securedrop.org/en/stable/source.html> in the section about communicating sensitive information to various organizations
|
|
- **Pending review** removal of privacytools.io from the guide after discovering sponsored recommendations within the lists on their website. Disclaimer added on the links page.
|
|
- Added reference to <https://web.archive.org/web/20181125133942/https://www.cs.drexel.edu/~sa499/papers/adversarial_stylometry.pdf> in the Stylometry section
|
|
- Added reference to <https://www.whonix.org/wiki/Surfing_Posting_Blogging#Stylometry> in the Stylometry section
|
|
- Added reference to <https://www.whonix.org/wiki/Surfing_Posting_Blogging#Anonymous_File_Sharing> in the appendix checklist of things to check before sharing information
|
|
- Added reference to <https://web.archive.org/web/20181125133942/https://www.cs.drexel.edu/~sa499/papers/adversarial_stylometry.pdf> in the section about countering stylometry using translators
|
|
- Changed the fonts of the website to improve readability (now using "Helvetica", "Calibri",and "Times New Roman")
|
|
- Removed some unnecessary information from the main page and the donations page to reduce their size
|
|
- Added a new Tor Exit node (Tor-Exit-05)
|
|
- Various spelling/grammar fixes
|
|
|
|
v1.0.9
|
|
- Re-Added Privacytools.io (along Privacyguides.org) as a good source of information and recommendations for various services/products/platforms within the guide.
|
|
- Added a Links page to the website with a small collection of recommended projects to visit.
|
|
- Changed the layout of the website to make the buttons a bit smaller
|
|
- Added reference to <https://medium.com/@c5/darkweb-vendors-and-the-basic-opsec-mistakes-they-keep-making-e54c285a488c> in the OPSEC section.
|
|
- Added reference to <https://kycnot.me/> which lists non-KYC cryptocurrencies exchange services
|
|
- Fixed some mistakes in the cryptocurrency swapping section
|
|
|
|
v1.0.8-hotfix
|
|
- Added a reference to <https://privacytests.org/> in the section about picking a browser in a guest VM
|
|
- Fixed not-working Nitter links by changing the Nitter instance to Nitter.net
|
|
- Added Minisign signatures for the PDFs and the ODT file
|
|
- **Hotfix** Added a reference to <https://qua3k.github.io/ungoogled/> and now strongly recommends **against** using Ungoogled-Chromium due to them lagging behind in security patches
|
|
|
|
v1.0.8
|
|
- Added a reference to <https://www.websiteplanet.com/blog/gethealth-leak-report/> in the Smart Devices section
|
|
- Added several academic references to the Tor Correlation Fingerprinting attack: <https://homes.esat.kuleuven.be/~mjuarezm/index_files/pdf/ccs18.pdf>, <https://www.internetsociety.org/sites/default/files/blogs-media/website-fingerprinting-internet-scale.pdf>, and <https://www.esat.kuleuven.be/cosic/publications/article-2456.pdf>
|
|
- Added a reference to <https://blog.torproject.org/new-low-cost-traffic-analysis-attacks-mitigations> in the same section
|
|
- Added an important precision/correction that Tor Correlation Fingerprinting attacks references papers were done in a limited closed-world testing environment and their efficiency in a real open-world situation has not been demonstrated other than theoretically
|
|
- Added two VPS hosting providers to the list of possible providers: <https://cryptoho.st/> and <https://www.privex.io/>
|
|
- Added reference to <https://about.fb.com/news/2021/10/end-to-end-encrypted-backups-on-whatsapp/> announcing e2ee backups on WhatsApp
|
|
|
|
v1.0.7
|
|
- Added reference to <https://www.scientificamerican.com/article/a-blank-wall-can-show-how-many-people-are-in-a-room-and-what-theyre-doing/> in the targeted techniques section
|
|
- Added reference to <https://www.scientificamerican.com/article/a-shiny-snack-bags-reflections-can-reconstruct-the-room-around-it/> in the targeted techniques section
|
|
- Added reference to <https://www.scientificamerican.com/article/footstep-sensors-identify-people-by-gait/> in the targeted techniques section
|
|
- Switched various links from PrivacyTools.io to PrivacyGuides.org that were forgotten in a previous update
|
|
- Added guidance to share information and files publicly including IPFS
|
|
- Added an appendix containing a checklist of things to verify before sharing any information or file (metadata...)
|
|
- Complete reworking of the Introduction and Prologue for better readability (there was way too much text in there)
|
|
- Added references to <https://thenewoil.org>, <https://privacyguides.org>, and the YouTube Techlore channel <https://www.youtube.com/c/Techlore> as bonus introduction reads on privacy and security
|
|
- Various grammar/spelling fixes
|
|
|
|
v1.0.6
|
|
- Added reference to <https://www.forbes.com/sites/thomasbrewster/2021/10/04/google-keyword-warrants-give-us-government-data-on-search-users> in the digital fingerprint section
|
|
- Added the fourth Tor Exit node in the donation page listing
|
|
- Added recommendation for considering Minisign (<https://jedisct1.github.io/minisign/>) as an alternative to PGP/GPG for file signing
|
|
- Added new archive of the guide on anonarchive.org
|
|
- Added Content-Security-Policy and X-XSS-Protection metatags to the HTML headers of the website
|
|
- Added reference to <https://latacora.singles/2019/07/16/the-pgp-problem.html> to justify the recommendation to use Minisign over PGP/GPG for signing
|
|
- Added <https://mobilesms.io> to the list of online phone number providers
|
|
- Added an "extra paranoid" route using Zcash in addition to Monero if you want even more safety than just relying on Monero alone for anonymous crypto transactions
|
|
- Added instructions to install a Zcash wallet on various OSes including the Whonix Workstation
|
|
- Refined the VPN over Tor sections with more information about using a self-hosted VPN/Proxy instead of a VPN provider
|
|
- Added guidance to upgrade Whonix from version 15 to version 16 on Qubes OS
|
|
- Added disclaimer about Windows 11 not being supported (yet) by the guide
|
|
- Some grammar/spelling fixes
|
|
- Various broken links fixes
|
|
|
|
v1.0.5
|
|
- Added reference to <https://www.theguardian.com/australia-news/2021/sep/11/inside-story-most-daring-surveillance-sting-in-history> in the smartphone warnings section
|
|
- Made main website available through IPv6
|
|
- Endnotes are now also supported on the repository MD file through <https://github.com/AnonymousPlanet/thgtoa/blob/main/guide.md> thanks to markdown update from GitHub. Previously, those were only working on the rendered Jekyll HTML
|
|
- Added link to <https://oksms.org> as an option if you cannot afford a dedicated number. More will be added soon.
|
|
- Added reference to <https://www.vice.com/en/article/93ypke/the-nsa-and-cia-use-ad-blockers-because-online-advertising-is-so-dangerous> as an argument to recommend adding uBlock to Tor Browser
|
|
- Added reference to <http://0pointer.net/blog/authenticated-boot-and-disk-encryption-on-linux.html> in the in-depth Linux hardening resources
|
|
- Added reference to <https://www.usenix.org/system/files/sec21-hoang.pdf> and <https://gfwatch.org/> in the section about hostile environments
|
|
- Added reference to <https://www.d-id.com/talkingheads/> in the creating new identities section
|
|
- Added reference to <https://twitter.com/SecurityJon/status/1445020885472235524> and <https://labs.f-secure.com/blog/sniff-there-leaks-my-bitlocker-key/> into the Windows Host OS section of the Whonix route
|
|
- Added reference to <https://www.wired.com/story/clearview-ai-new-tools-identify-you-photos/> in the biometrics section
|
|
- Added reference to <https://www.coindesk.com/business/2021/09/21/leaked-slides-show-how-chainalysis-flags-crypto-suspects-for-cops/> in the Cryptocurrencies Transaction section
|
|
- Added Cwtch <https://cwtch.im> to the messaging apps lists and recommendations
|
|
- Added a new fourth Tor Exit node using donations funds
|
|
- Some grammar/spelling fixes
|
|
|
|
v1.0.4
|
|
- Added reference to <https://therecord.media/malware-found-preinstalled-in-classic-push-button-phones-sold-in-russia/> in the burner phone section
|
|
- Added reference to <https://sourceforge.net/p/veracrypt/discussion/technical/thread/3961542951/> in the Veracrypt settings sections
|
|
- Changed Privacytools.io to Privacyguides.org after name change
|
|
- Added reference to <https://github.com/iperov/DeepFaceLive> in the Face recognition section
|
|
- Added reference to <https://www.news.ucsb.edu/2021/020392/dont-fidget-wifi-will-count-you> within the Wi-Fi around you section
|
|
- Matrix room change from #online-anonymity:matrix.org to #anonymity:matrix.org (old alias remains valid)
|
|
- Renewed hosting of Tor-Exit-01 for 1 year using funding from donations
|
|
|
|
v1.0.3
|
|
- Added reference to ProtonMail IP logging case <https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/>
|
|
- Added more information regarding Firefox hardening settings
|
|
- Added reference to <https://www.privateinternetaccess.com/blog/internet-freedom-around-the-world-in-50-stats/>
|
|
- Fixed several broken links
|
|
- Some grammar fixes
|
|
|
|
v1.0.2
|
|
- Minor layout fixes
|
|
- Added BLAKE2 hash to the list of hashes and clarified the hashes recommendations
|
|
- Added Twofish and Serpent to the recommended section in the File Encryption section
|
|
- Added reference to <https://justdeleteme.xyz/> and <https://inteltechniques.com/workbook.html> in the Removing traces section
|
|
- Added references to <https://techcrunch.com/2021/08/19/google-geofence-warrants/> and <https://www.techdirt.com/articles/20210821/10494847401/google-report-shows-reverse-warrants-are-swiftly-becoming-law-enforcements-go-to-investigative-tool.shtml> about the expanding trend of Geofencing warrants
|
|
- Added reference to <https://edwardsnowden.substack.com/p/all-seeing-i> in reference to Apple Privacy
|
|
- Added various references and information about setting up plausible deniability on Linux
|
|
- Added reference and information about setting up plausible deniability on Qubes OS
|
|
- Improved the section about countering linguistic forensics
|
|
- Updated Archive.today onion v2 address to v3
|
|
- Full (self) proofreading resulting in a large amount of spelling/grammar fixes and some shame about those
|
|
|
|
v1.0.1
|
|
- Added information about Monero Atomic Swap for converting from BTC to Monero instead of a swapping service (Monero Rules!)
|
|
- Added link to <https://www.useapassphrase.com/> in the password/passphrase guidelines appendix
|
|
- Added an appendix about Crypto Swapping services with some recommendations
|
|
- Added OnlyFans, Binance and Kraken to the list of tested online services
|
|
- Added Information on how to check if your Tor Exit node is in few or many blocklists to avoid issues when signing-up to various services
|
|
- Various spelling/grammar fixes
|
|
|
|
v1.0.0 Codename "Deal With It" (because it's not perfect, so deal with it)
|
|
- Various spelling/grammar fixes to the Countering Forensic Linguistics section
|
|
- Added guidance on how to compare older PDFs with newer releases using some online tools
|
|
- Added guidance on how to compare older ODTs with newer releases using LibreWriter
|
|
- Removed the attribution to Mark Twain from the quote in the final editorial notes
|
|
- Added some references in the list of threats to anonymity to the proposed mitigations in the guide
|
|
- Various grammar/spelling fixes
|
|
- Slightly changed the Light theme header color
|
|
|
|
v1.0.0-rc3-hotfix (unpublished release)
|
|
- Modified the Countering Forensic Linguistics section to remove the AutoCorrect usage recommendation in favor of "Search and Replace" to avoid unintended mistakes.
|
|
- Removed hybrid-analysis checks from the files as I think VirusTotal is enough
|
|
|
|
v1.0.0-rc3
|
|
- Added recommendation to use the Privacy Redirect extension on the Guest VMs browsers: <https://github.com/SimonBrazell/privacy-redirect>
|
|
- Added a section to emphasize some precautions when using a Browser with JavaScript enabled (including Tor Browser up to the "Safer Level") in every route
|
|
- Added more information and recommendations related to using Tor Browser at the "Safer" level.
|
|
- Added some more crypto disclaimers to avoid some services such as Mixers/Tumblers
|
|
- Re-ordered and re-linked many sections in a more logical way
|
|
- Removed some duplicate information in some sections
|
|
- Fixed some bad hyperlinks
|
|
- Added a release of the guide in the ODT format in addition to PDFs
|
|
|
|
v1.0.0-rc2
|
|
- Many grammar/spelling changes after some proofreading
|
|
|
|
v1.0.0-rc1 (Release Candidate 1)
|
|
- Small grammar/spelling fixes
|
|
- Small layout fixes
|
|
- Added some information about Safari in the Guest VM Browser selection/hardening sections
|
|
- Removed DREAD in the threat modeling references as it is deprecated
|
|
- Added link to <https://arstechnica.com/gadgets/2021/07/vpn-servers-seized-by-ukrainian-authorities-werent-encrypted/> in the No Logging but Logging anyway section of VPN providers
|
|
- Added Session Messenger as a possible "last resort" recommendation for iOS users because well there is no better option it seems despite their lack of PFS and Deniability
|
|
- Corrected the Session Messenger information as not using Tor Natively but using LokiNet Onion Routing natively
|
|
- Added a new Tor Browser route for the simplest, easiest way to access the web anonymously with appropriate security warnings
|
|
- Added additional information on attack mitigations on Bitlocker encrypted drives and reference to <https://dolosgroup.io/blog/2021/7/9/from-stolen-laptop-to-inside-the-company-network>
|
|
- Changed the recommendations about the state of your real phone while using a burner phone. You should never bring it with you and leave it on at home.
|
|
- Changed the route picking UML to only show options depending on your skills/resources/availability without considering threats/adversaries
|
|
- Expanded the threat modeling section (after the previous UML) with adversaries/threats and picking the adequate route in consequence
|
|
- Added reference to <https://arxiv.org/pdf/2107.04940.pdf> to the Bad Cryptography section
|
|
- Added reference to <https://edition.cnn.com/2021/07/23/tech/idme-unemployment-facial-recognition/index.html> to the Face Recognition section
|
|
- Lowered recommendation for RiseUP as a free mail service as they now require invitation for registration
|
|
- Added reference to <https://gitlab.com/FG-01/fg-01> as a possible mitigation to gait recognition systems as well as 2 more journalistic references to gait recognition
|
|
- Changed information about China/Russia "will block" ECH/eSNI to "might block" as it hasn't been verified/confirmed
|
|
- Added a whole appendix on Counteracting Forensic Linguistics (Writeprint) with your anonymous identities
|
|
- Added IPFS mirror of the whole website at <https://ipfs.anonymousplanet.org>
|
|
|
|
v0.9.9h
|
|
- Fixed bad and missing linking about browser selection and install in guest VMs setup sections
|
|
- Added ShutUp10 to the list of tools to improve Privacy on Windows 10
|
|
- Removed Windows AME from the recommendations/possibilities within guest VMs and advising against it instead
|
|
|
|
v0.9.9g
|
|
- Added Safing.io to the recommended VPN providers list (provisional)
|
|
- Many links fixed/updated/replaced/removed (dead links check on the whole document)
|
|
- Updated most of the .onion v2 addresses to .onion v3 addresses (except for Archive.today which is still on v2)
|
|
- Added .onion addresses to some publication links having a Tor mirror such as The Intercept
|
|
- Decided to switch the licensing of the project to add NonCommercial (cc-by-nc-4.0), prior releases are not affected
|
|
|
|
v0.9.9f
|
|
- Added section on search engines
|
|
- Added some more information on Brave source of adblocking
|
|
- Added separator between the text and the references to the online HTML version
|
|
- Added a ToC entry of the references to the online HTML version
|
|
- Added a bit more information on eventual physical destruction of HDDs and SSDs
|
|
|
|
v0.9.9e
|
|
- Added more information on why I recommend Brave within guests VMs and more information about other choices (mainly Firefox)
|
|
- Added Browser Hardening guidelines for Brave, Ungoogled-Chromium, Edge, and Firefox
|
|
|
|
v0.9.9d
|
|
- Changed wording from all incorrect "TAILS" instances to the correct "Tails"
|
|
- Changed wording from some incorrect "Qube OS" instances to the correct "Qubes OS"
|
|
- Added header to the PDFs with the title
|
|
- Added footer to the PDFs with the page numbers
|
|
- Changed the PDFs from having all references in the endnotes to having them in the footnotes of each page for better readability
|
|
|
|
v0.9.9c
|
|
- Improved the password/passphrase recommendation section
|
|
- Added a new Tor Exit node to the project <https://metrics.torproject.org/rs.html#details/F535BA067A776457083141688C7FE781B6DFB24E>
|
|
- Added ChaCha20 to the recommended file/disk encryption algorithms
|
|
- Various fixes in the README/Index
|
|
|
|
v0.9.9b
|
|
- Changed recommendation from Veracrypt to Bitlocker for Windows simple encryption route to prevent rubber-hose cryptanalysis
|
|
- Started running a Tor exit-node using project funds <https://metrics.torproject.org/rs.html#details/970814F267BF3DE9DFF2A0F8D4019F80C68AEE26>. I was only able to buy 3 months with the remaining funds. Please donate if you want this to continue.
|
|
- Changed slightly the donations requests so that they appear sooner including in the README/index.html and earlier in the guide in a lighter way
|
|
- Small grammar/spelling fixes
|
|
|
|
v0.9.9a
|
|
- Added Wikiless links to all Wikipedia articles for enhanced privacy (see <https://codeberg.org/orenom/wikiless>)
|
|
- Added message to inform users with JavaScript disabled that JavaScript is needed to toggle the themes on the website
|
|
- Removed underline of every hyperlink in the PDF format guide for better readability
|
|
- Added small section about helping others staying anonymous by running a Tor entry/relay node
|
|
- Shortened the Index/README to make it more readable and creating a sub-page with the safety/integrity/authentication information
|
|
- Added new hosting provider to the list (<https://1984.is>) and created a small appendix dedicated to recommended hosting providers
|
|
- Small grammar/spelling fixes
|
|
- Small fixes on the website layout (thanks to LiJu09 again)
|
|
|
|
v0.9.9
|
|
- Added toggle switch from dark to light theme for the website (requires Javascript) to improve general UX (very special thanks to LiJu09 for the great help)
|
|
- Fixed layout issues in the OSX section about Gatekeeper and XProtect
|
|
- Small fix in the malware section "higher level" changed to "lower level"
|
|
- Added reference to <https://www.inteltechniques.com/podcast.html> as an OSINT resource
|
|
- Added reference to <https://github.com/Qubes-Community/Contents/blob/master/docs/privacy/anonymizing-your-mac-address.md> in the Qubes Route section
|
|
- Various spelling/grammar fixes
|
|
|
|
v0.9.8
|
|
- Added reference to <https://github.com/insight-decentralized-consensus-lab/post-quantum-monero/blob/master/writeups/technical_note.pdf> in the Monero Disclaimer section
|
|
- Added cars in the Smart Devices section because obviously cars are also issues
|
|
- Added reference to <https://www.washingtonpost.com/technology/2019/12/17/what-does-your-car-know-about-you-we-hacked-chevy-find-out/> in the Smart Devices section
|
|
- Added more OSINT links: <https://osintframework.com/>, <https://recontool.org>, and <https://github.com/jivoi/awesome-osint>
|
|
- Added more information about crafting your legend for your anonymous identities in a consistent manner in the creating new identities section
|
|
- Added more OPSEC information and a reference to <https://www.youtube.com/watch?v=IqZZU9lFlF4>
|
|
- Added more references to Hardening Linux: <https://wiki.archlinux.org/title/Security> and <https://codeberg.org/SalamanderSecurity/PARSEC>
|
|
- Added references to AppArmor usage on Whonix VMs: <https://www.whonix.org/wiki/AppArmor>
|
|
- Added AppArmor/SELinux references within the Qubes OS section for Hardening VMs
|
|
- Added light introduction video references for hardening Linux/Windows/MacOS by the nice people at Techlore.
|
|
- Switched from Mastodon.online to Mastodon.social <https://mastodon.social/@anonypla>
|
|
- Fixed duplicate notations on GPG key
|
|
- Added Nitter links to Twitter links
|
|
- Various spelling/grammar fixes
|
|
|
|
v0.9.7b
|
|
- Added disclaimer about Monero usage and its long-term security relative to KYC regulations
|
|
- Added a bonus step within the BTC anonymizing section to reference Wasabi Wallet <https://wasabiwallet.io/> as an added efficient obfuscation measure
|
|
- Fixed layout issue at the very end of the guide (wrong tabulation)
|
|
- Added reference to RiseUp, Disroot, and Autistici for e-mail creation if you need an e-mail verification for creating for instance a ProtonMail or a MailFence account
|
|
- Removed <http://keys.gnupg.net/> from README because it's dead it seems
|
|
|
|
v0.9.7a
|
|
- Fixed wrong information about Session messenger and presence of Forward Secrecy and removed from recommendations due to that and the absence of deniability
|
|
- Added information about how to get/use BTC anonymously using Monero swapping
|
|
- Removed the THGTOA subreddit and the discord server (due to being mostly unused) to leave only the Matrix room and GitHub for discussions
|
|
- Made the README slightly more user-friendly
|
|
- Various spelling/grammar fixes
|
|
|
|
v0.9.7
|
|
- Fixed DNS section stating that ECH/eSNI leaks DNS when in fact it leaks only DN (Domain Name)
|
|
- Fixed DNS section stating that Firefox enforces OCSP stapling when it does not
|
|
- Added information in DNS section that Chromium based browsers do not rely on OCSP but CRLSets
|
|
- Fixed DNS illustration according to above fixes
|
|
- Renamed DNS section into DNS and IP and added information about IP correlation with various websites despite having encrypted DNS
|
|
- Added reference to <https://www.hackerfactor.com/blog/index.php?/archives/906-Tor-0day-The-Management-Vulnerability.html> in the anonymize Tor/VPN traffic section
|
|
- Added section about rootkits and backdoors in the malware in the malware, exploits and viruses section
|
|
- Added information about rootkits and firmware malware/backdoors
|
|
- Added Session in the messengers table and recommendations
|
|
- Added disclaimer to be extra cautious when using Tails (always use the last version and be extremely careful with bundled apps)
|
|
- Various spelling/grammar fixes
|
|
|
|
v0.9.6b
|
|
- Added emphasis and disclaimer on the threat model of this guide to clarify strongly that this guide is a DRAFT and may contain inaccuracies. This guide should not be considered a definitive truth.
|
|
- Added reference to the new Tutanota incident forcing them to monitor users
|
|
- Added reference to the RSA Conference 2020, When Cybercriminals with Good OpSec Attack <https://www.youtube.com/watch?v=zXmZnU2GdVk> video in the OPSEC section
|
|
|
|
v0.9.6a
|
|
- Added the USB Wi-Fi dongle option within the section to block Host OS network access while allowing VM network access
|
|
- Small spelling/grammar fixes
|
|
|
|
v0.9.6
|
|
- Added references to AnonAddy and Simplelogin e-mail aliasing services in the e-mail verification section of creating new online identities. Could be useful.
|
|
- Fixed the word SSD that was somehow spelled SDD all over the place (/shame)
|
|
- Added section to explain how to disable/prevent Internet Access on the Host OS while allowing VMs (specifically the Whonix Gateway) to access the internet in the Whonix Route
|
|
- Added further password recommendation based on Bruce Schneier recommendations <https://www.schneier.com/blog/archives/2014/03/choosing_secure_1.html>
|
|
- Removed telegram channel because is was unused and empty in favor of keeping only the Matrix channel (Primary) and the Discord channel (Secondary) but linked
|
|
- Added information about AMD PSP not having remote management capabilities unlike IME
|
|
- Various spelling/grammar fixes
|
|
|
|
v0.9.5
|
|
- Added some small disclaimer for Coreboot containing some proprietary software
|
|
- Added reference to Tempora surveillance program
|
|
- Small correction to the text relating to the Tutanota court order to avoid misunderstandings
|
|
- Added <https://censys.io/> and <https://www.zoomeye.org/> in addition to Shodan as IoT search engines options
|
|
- Removed SHA3 from the "avoid" list because it was incorrect
|
|
- Added more information in the Online Backups section
|
|
- Added more references to people caught due to their fingerprints appearing on shared pictures online in the biometrics section
|
|
- Added link to <https://stegcloak.surge.sh/> in the Hidden communications in plain sight section
|
|
- Various small spelling/grammar fixing
|
|
|
|
v0.9.4
|
|
- Added reference to <https://www.youtube.com/watch?v=FDZ39h-kCS8> in the Smart Devices around you section
|
|
- Added reference to TypingDNA (<https://www.typingdna.com/>) in the Online Behavior section
|
|
- Various small spelling fixes
|
|
- Added reference to SORM (Russia) along PRISM,XKEYSCORE...
|
|
- Added reference to smarttags (Apple AirTags, Samsung Smarttags, Tile...) in the smart devices section
|
|
- Added reference to Michael Bazzell's interesting OSINT Techniques book <https://inteltechniques.com/book1.html> in the bonus resources section
|
|
- Added reference to LibGen in the Introduction section in addition to Sci-Hub
|
|
- Fixed some ordering issues in the various sections that were re-ordered in previous updates
|
|
|
|
v0.9.3
|
|
- Added reference to <https://disable-gatekeeper.github.io/> and how to disable MacOS Gatekeeper on Big Sur
|
|
- Various grammar/spelling/layout fixes
|
|
- Transifex translations are now possible and open for any volunteer. Currently some are working on Russian/Ukrainian
|
|
- Added https://crypton.sh/ to the list of Monero accepting phone number providers
|
|
- Added reference to e-mail tracking in the Malware section
|
|
- Updated DNS section to reflect change from eSNI to ECH
|
|
- Added more OSINT video tutorials references from Bellingcat
|
|
- Added information about OCSP stapling in the DNS section
|
|
- Added illustration for comparing simple OCSP vs OCSP stapling
|
|
- Added illustration for comparing DNS encryption with and without ECH
|
|
|
|
v0.9.2a
|
|
- Multiple small punctuation fixes for better readability/translation of markdown format
|
|
- Small reference fix from BBC to The Guardian
|
|
|
|
v0.9.2
|
|
- Added reference to <https://mattw.io/youtube-geofind/location> for Video geolocation (YouTube)
|
|
- Added reference to <https://jakecreps.com/tag/osint-tools/> for various OSINT tools to try on yourself
|
|
- Fixed some bad links between a bunch of cross-references
|
|
- Some font color fixing in the dark themed PDF
|
|
- Added various attribution references for some external illustrations
|
|
- Various spelling/grammar fixes
|
|
- Re-organized some of the de-anonymization methods into grouped sub-sections for readability
|
|
|
|
v0.9.1
|
|
- Fixed Messaging table inaccuracies regarding metadata leaks and e2e for Element/Matrix and Zoom
|
|
- Added reference/guidance to Windows AME (<https://ameliorated.info/>)for use in guest VMs in place of Standard Windows 10 Pro
|
|
- Added Tor Mirror into the HTML header for discoverability
|
|
- Added reference to <https://arxiv.org/pdf/1906.05754.pdf> in the crypto transactions section
|
|
- Added references to NEC NeoFace and Clearview AI face recognition systems in the Face/Biometrics section
|
|
- Added FLoC opt-out and no-referrer policies into the HTML header
|
|
- Added reference to <https://arxiv.org/abs/1512.05616> in the Smart Devices warning section
|
|
- Added reference to <https://people.eecs.berkeley.edu/~dawnsong/papers/2012%20On%20the%20Feasibility%20of%20Internet-Scale%20Author%20Identification.pdf> in the digital fingerprint section
|
|
- Added reference to <https://www.gwern.net/Death-Note-Anonymity> in the Bonus section
|
|
- Fixed the Qubes OS section implying that Qubes OS is a Linux distribution when it is not
|
|
- Fixed LICENSE file missing on the website
|
|
- Various spelling/grammar fixes
|
|
|
|
v0.9.0
|
|
- Various layout, spelling, and grammar fixes
|
|
- Added new discussion channel on matrix ```#online-anonymity:matrix.org```
|
|
- Fixed connectivity methods table recommendations (VPN over Tor over VPN)
|
|
- Removed the shark meme because it was a bit much
|
|
- Added reference to the recent Spotify AI voice recognition patent <https://patents.justia.com/patent/10891948>
|
|
- Added more information and illustration about Tor Bridges and especially Meek bridges for users in hostile environments
|
|
- Added some more information about hash collisions
|
|
- Moved Requirements section up before Introduction
|
|
- Fixed DNS privacy illustration DoHoT that was spelled wrong
|
|
- Fixed Appendixes names that were out of order
|
|
- Added guidance to create a Proxy VPS in addition to a VPN VPS in the case of the now VPN/Proxy over Tor route
|
|
- Added more guidance to the "No Tor/VPN" option in a hostile environment
|
|
|
|
v0.8.9a
|
|
- Moved the donations section to the bottom of the guide
|
|
|
|
v0.8.9
|
|
- Added reference to <https://www.freehaven.net/anonbib/date.html> in the bonus resources section
|
|
- Many small fixes in the README
|
|
- Various small layout and grammar fixes
|
|
- Removed some parts about unblockable telemetry on MacOS Big Sur since this issue is no longer relevant it seems (and the telemetry can be blocked)
|
|
- Erratum: removed a quote from a user on his request
|
|
|
|
v0.8.8
|
|
- Fixed QR codes pointing to old addresses (but still valid)
|
|
- Added Keyoxide proofs to the README
|
|
- Various small fixes
|
|
- Huge thanks to the generous donator of 1 XMR
|
|
- Added proper native Tor mirror on <http://thgtoa7imksbg7rit4grgijl2ef6kc7b56bp56pmtta4g354lydlzkqd.onion>
|
|
|
|
v0.8.7
|
|
- Added reference to <https://www.scss.tcd.ie/doug.leith/apple_google.pdf> in the Smart Devices section and the OS Telemetry section.
|
|
- Moved/rephrased small introduction paragraph about Apple being among the best choices for Privacy in the OS and Telemetry section.
|
|
- Changed recommendation for Android VM to Androix-x86 CyanogenMod releases (14.1 r5 at the time of this writing)
|
|
- Several small spelling/grammar/layout fixes
|
|
- Added more explanation and illustration to the basic concept of Virtualization through a new Appendix
|
|
- Fixed illustration to mention Tor Stream Isolation possibilities
|
|
- Added a couple easter eggs because why not
|
|
|
|
v0.8.6
|
|
- Small layout fixes due to regex errors in pandoc conversion
|
|
- Small re-write of the instant messaging section that should make more sense now
|
|
- Changed the Briar information to reflect that they do now provide a Desktop option (with limited features) in addition to the Android client (emulator no longer strictly required)
|
|
- Updated the messaging table to include qTox (Tox) and Gajim (XMPP)
|
|
- Added reference to IDF famous tweet <https://twitter.com/idf/status/1125066395010699264>
|
|
- Added some references to Zero-Trust security models
|
|
- Added some references to Bad Opsec resources (<https://www.youtube.com/watch?v=eQ2OZKitRwc> and <https://www.youtube.com/watch?v=eQ2OZKitRwc>)
|
|
- Added several tools to check an IP or your own IP for various things in the "Your IP Address" section
|
|
- Added references to Hybrid Analysis for PDFs in addition to VirusTotal
|
|
- Added small additional illustration about threat models in the Introduction
|
|
- Added small additional illustration about Privacy vs Anonymity in the Introduction
|
|
- Removed the password protected PDF file from the project because it was never used and creaitng more compatibilities issues than necessary on my side
|
|
- Replaced donations QR codes with better ones
|
|
|
|
v0.8.5
|
|
- Changed donations QR codes with better ones with logos
|
|
- Many small fixes in grammar/spelling/layout
|
|
- Fixed many unnecessary escaping backslashes in front of special characters because pandoc does that
|
|
- Changed all lines containing code lines into inline code for better readability on the online version
|
|
- Migrated my Mastodon account to <https://mastodon.online/@anonypla> (old one redirected automatically)
|
|
- Fixed Tor over VPN section that was clearly missing emphasis on it being a viable option with good use cases
|
|
- Added more information in the Pick your Connectivity conclusions for a better overview
|
|
- Added section about Online file Syncing in the Online Backup section
|
|
- Added more information about messaging apps and a rather detailed table comparing their privacy/security/anonymity features
|
|
- Added disclaimer on reddit/discord to not discuss sensitive topics on those platforms
|
|
|
|
v0.8.4
|
|
- Added more information regarding Tor stream isolation and VPNs
|
|
- Added reference to <https://clickclickclick.click> in the Behavior analysis section
|
|
- Added project website mirror at <https://mirror.anonymousplanet.org> (hosted at GitLab)
|
|
- Added PDFs mirror at CryptPad.from
|
|
- Added reference to recently released list of data collected by Google Chrome
|
|
- Added reference to <https://www.bbc.com/news/technology-55573802> about Facial recognition defeating Face Masks in the biometrics section
|
|
- Added reference to Microsoft Azure Facial Cognitive Services Demo <https://azure.microsoft.com/en-us/services/cognitive-services/face/#demo> in the biometrics section
|
|
- Added reference to <https://www.bellingcat.com/news/2021/03/19/berlin-assassination-new-evidence-on-suspected-fsb-hitman-passed-to-german-investigators/> in the biometrics section
|
|
|
|
v0.8.3
|
|
- Added reference to <https://www.reflectacles.com/> glasses to interfere with CCTV surveillance.
|
|
- Added "enhance" example to the deblurring section
|
|
- Thanks to the anonymous donators. Their donations were spent to renew the domain for 3 more years (4 years total).
|
|
- Added information about risks/drawbacks related to Tor Stream Isolation when using VPN over Tor and for which use cases this method is recommended
|
|
- Added QR code for BTC legacy address in the donations section
|
|
|
|
v0.8.2
|
|
- Brighter fonts on some headers for better readability in dark mode
|
|
- Added reference to Sci-Hub in the introduction
|
|
- Added reference to deniable encryption on Linux and why it is not (yet) in the current routes
|
|
- Added reference to EncroChat and Sky ECC and warning against using such commercial devices/services for anonymity
|
|
- Small fixes in some URLs that were not properly changed after domain switch to anonymousplanet.org
|
|
- Added Bitcoin legacy address in addition to Segwit for donations
|
|
- Various spelling/grammar issues
|
|
|
|
v0.8.1
|
|
- Fixed many various small layout/spelling/grammar issues
|
|
- Fixed 2 shortened URLs (t.me and bit.ly) from the guide with correct destination URLs
|
|
- Added some references to "roll your own crypto" cases (Telegram, Zoom)
|
|
- Added reference to <https://www.vice.com/en/article/y3g97x/location-data-apps-drone-strikes-iowa-national-guard> in the Metadata/Geolocation section
|
|
- Removed archive.today PDF links to replace them with Archive.org links (because archive.today doesn't actually save PDFs)
|
|
- Added reference to a MAC tracking device <https://amsignalinc.com/data-sheets/Acyclica/Acyclica-RoadTrend-Product-Sheet.pdf> in the MAC address section
|
|
- Added disclaimer about not endorsing Cloudflare in the DNS section by mentioning them several times for technical reasons.
|
|
- Added references to Ungoogled-Chromium as an alternative to Tor Browser, Firefox and Brave.
|
|
- Added some results of Browser fingerprinting testing by the EFF coveryourtracks project.
|
|
- Added reference to Tor Browser security levels which I realized are not known by most people.
|
|
- Added Archive.org links to all documents/pages hyperlinks for people willing to avoid direct links to various websites
|
|
- Added Invidious (through yewtu.be invidious instance hosted in the NL) links to all YouTube videos hyperlinks for people wanting more privacy on Youtube videos
|
|
- Added reference to AMD PSP security analysis (and how it is not as bad as IME) in the "Your CPU" section <https://www.youtube.com/watch?v=bKH5nGLgi08&t=2834s> and the laptop recommendation section.
|
|
- Moved the Safe Browser part of Guest OSes into an Appendix to avoid duplication
|
|
- Added domain for project <https://anonymousplanet.org/> with donation funds
|
|
|
|
v0.8.0
|
|
- Changed mat2 VM appendix to debian testing (instead of stable) to get latest version of mat2
|
|
- Fixed mat2 VM appendix as the network was not working properly with the previous guidance
|
|
- Added reference to <https://en.wikipedia.org/wiki/Stylometry>
|
|
- Added references to various threat modeling methodologies (LUNDDUN, STRIFE, DREAD, PASTA) and some more in-depth resources for those willing to go further
|
|
- Added reference to <https://geekfeminism.wikia.org/wiki/Who_is_harmed_by_a_%22Real_Names%22_policy%3F> in the introduction
|
|
- Added reference to <https://gendersec.tacticaltech.org/wiki/index.php/Complete_manual#.22Real.22_names> in the creating identities section
|
|
- Multiple spelling/grammar fixes (including email into e-mail, and wifi into wi-fi)
|
|
- Added reference to <https://www.whonix.org/wiki/Data_Collection_Techniques> as bonus resources in de-anonymization methods
|
|
- Added reference to <https://www.whonix.org/wiki/DoNot> in the OPSEC section because it should be there
|
|
- Added reference to <https://www.whonix.org/wiki/Printing_and_Scanning> in the Printing Watermarking section
|
|
- Added reference to MIT project SeeingYellow <http://seeingyellow.com/> in the Printing Watermarking section
|
|
- Re-Wrote the malware section in the de-anonymization methods for better readability
|
|
- Added a specific Anti-Virus section in the Malware checks section with various references and arguments for some selective/limited use.
|
|
- Added reference to EFF security scenarios (<https://ssd.eff.org/en/module-categories/security-scenarios>) in the Introduction as examples of threat models for various people.
|
|
- Added new section with guidance for safe document publishing including various tool recommendations.
|
|
- Added a bit more guidance on malware removal for Pictures and Documents (PDFs, Office Documents...)
|
|
- Added Bad Cryptography in the de-anonymization threats with some examples
|
|
- Added several Behavior Analysis references in the renamed "Your Digital Fingerprint, Footprint, and Online Behavior" section
|
|
|
|
v0.7.9
|
|
- Updated GitHub Transparency report
|
|
- Added information to make animated online identities pictures for increased plausibility
|
|
- Added references to the list of services blocking Tor (<https://gitlab.torproject.org/legacy/trac/-/wikis/org/doc/ListOfServicesBlockingTor>)
|
|
- Added reference to <https://haveibeenpwned.com/> in the Identities maintenance section
|
|
- Added automatic archival and links of the project to Archive.today (through Archive.fo)
|
|
|
|
v0.7.8
|
|
- Various small layout/spelling/grammar fixes
|
|
- Added reference to Financial transactions and KYC in the real-name system section
|
|
- Added guidance to bypass some local restrictions on supervised computers safely (Appendix Q)
|
|
- Added guidance to run Tails without using Tor in a hostile environment
|
|
- Updated UML diagram of various routes to include a non-dedicated laptop
|
|
- Changed the whole document to a more formal/cleared grammar for better readability and compatibility with translation engines
|
|
- Changed table colors for better readability in dark modes (PDF and Online)
|
|
|
|
v0.7.7
|
|
- Added some acknowledgements to various added Projects
|
|
- Changed and improved the "Picking your route" section with the new option (Tails+Whonix)
|
|
- Added basic threat model illustration in the Introduction
|
|
- Added basic UML diagram to pick your route
|
|
- Added basic UML diagrams for picking your connectivity methods
|
|
- Added illustration of the Tails with HiddenVM option
|
|
- Rescaled some images that were way too big
|
|
- Added a whole bunch of platforms to the Online Identities section
|
|
- Added more references to German law in the Online Identities section
|
|
- Added a legend to the Online Identities overview table
|
|
|
|
v0.7.6
|
|
- Added reference to video visually explaining DNS
|
|
- Added some information related to the anonymous use of Bitcoin (vs Monero).
|
|
- Added reference to risks of using Crypto Tumblers and Mixers.
|
|
- Added reference to the Go Incognito project (<https://github.com/techlore-official/go-incognito>) and their informative YouTube videos for optional introduction before reading this guide.
|
|
- Added reference to ExifTool and ExifCleaner to Metadata removal sections for documents (because they also work on those formats)
|
|
- Added reference to picture recognition cloaking tools (Fawkes, Adverserial.io, LowKey) for preventing picture recognition algorithms from various platforms.
|
|
- Added detailed guidance to create Android guest VMs in the Whonix Route
|
|
- Added detailed guidance to create Android Qubes in the Qubes Route
|
|
- Added detailed guidance to use Persistent Plausible Deniability with Whonix within Tails (using HiddenVM project)
|
|
- Added Briar, GitLab to the online identities sections
|
|
- Added recommended Apps for sharing and communicating anonymously
|
|
- Added some acknowledgements to various added Projects
|
|
|
|
v0.7.5
|
|
- Added reference to <https://github.com/rshipp/awesome-malware-analysis> in the Malware analysis appendix
|
|
- Many small fixes in layout/spelling/grammar
|
|
- Added quotes around VirusTotal "privacy policy"
|
|
- Changed "Exploits in your Apps" to "Malware and Exploits in your Apps"
|
|
- Added references to State surveillance using "mandatory" apps such as WeChat.
|
|
- Added Wikipedia reference to <https://en.wikipedia.org/wiki/List_of_government_mass_surveillance_projects>
|
|
- Added guidance and references to check files for integrity and authenticity in the "Checking files for malware" section.
|
|
- Added emphasis on recommendation of using Tor Browser on the Host OS if Tor is available.
|
|
- Removed GPG signatures from markdown and text files to instead sign the whole release for convenience in Contribution workflow.
|
|
- Adapted the README to the new signatures
|
|
- Added Bitcoin donation option
|
|
|
|
v0.7.4
|
|
- Added reference to Whonix Live mode if you don't want persistence when shutting down the VMs as an added possible safety measure
|
|
- Added reference to harden Linux from <https://madaidans-insecurities.github.io/guides/linux-hardening.html>
|
|
- Added reference to Linux security issues from <https://madaidans-insecurities.github.io/linux.html>
|
|
- Added reference to PDF listing malware analysis tools <https://www.winitor.com/pdf/Malware-Analysis-Fundamentals-Files-Tools.pdf>
|
|
- Added reference to SANS Malware Analysis cheat sheet <https://digital-forensics.sans.org/media/analyzing-malicious-document-files.pdf>
|
|
- Added reference to the DoHoT project in the DNS section <https://github.com/alecmuffett/dohot> and updated the DNS illustration with this possibility
|
|
- Various spelling/grammar fixes
|
|
- Started adding some proper code blocks in the online Markdown version and will slowly adopt this in the whole guide in the future
|
|
- Fixed the Title missing a T
|
|
- Fixed a an hyperlink issue causing PDFID to detect an Automatic Action on guide.pdf
|
|
- Added warning in README concerning VirusTotal "privacy policy"
|
|
- Changed the PDFID warnings in the README to better explain their meaning for checking the PDFs published here
|
|
- Started fixing some accessibility issues in the guide (bad indents, empty spaces...)
|
|
- Fixed some bad links in cross-references
|
|
- Changed link from <https://panopticlick.eff.org/> to <https://coveryourtracks.eff.org/>
|
|
|
|
v0.7.3
|
|
- Added extra-security measures and references for sending cash to a VPN provider safely
|
|
- Added reference to sim-swapping in TOTP recommendation (and why SMS 2FA is bad)
|
|
- Added VirusTotal scans to all PDFs in the repository (while not endorsing/recommending VirusTotal at all for anything sensitive)
|
|
- Added Disclaimer about VirusTotal and their privacy policy in the guide and README
|
|
- Added QR code for Monero donations within the guide itself
|
|
- Added references in the Phishing section
|
|
- Added reference to <https://archive.flossmanuals.net/bypassing-censorship/index.html> in the Safe Access without Tor/VPN appendix
|
|
- Added guidance to communicate sensitive information safely to various organization (such as the press)
|
|
- Various grammar/spelling/layout fixes
|
|
|
|
v0.7.2
|
|
- Small layout/spelling/grammar fixes
|
|
- Added methods to check your surveillance and censorship levels on your Network using various resources.
|
|
- Changed site font to Helvetica
|
|
- Changed paragraph spacing on PDFs for better readability
|
|
|
|
v0.7.1
|
|
- Switched Github Pages Jekyll theme to Hacker because I prefer dark themes and this one doesn't rely on external fonts (Google).
|
|
- Added some references to voice deepfake tech in the Biometrics section
|
|
- Slightly changed the styles/colors of the PDFs
|
|
|
|
v0.7.0
|
|
- Added recommendations to consider leaving your smartphone at home online instead of just leaving it powered off or within a faraday bag.
|
|
- Added disclaimer stating that this guide is not sponsored by any commercial entity such as VPN providers
|
|
- Added specific sections and guidance about the various connectivity schemes (Tor, VPN over Tor, Tor Over VPN, VPN only, VPN over VPN and No Tor/VPN) with various references.
|
|
- Added guidance for using Tor Bridges with Tor Browser, Tails, Whonix and Qubes OS.
|
|
- Added last resort guidance for situations where Tor and/or VPN might not be possible options.
|
|
- Added guidance to use Long Range Antennas (Yagi type) for connecting to Public Wi-Fis from a safe distance
|
|
- Added new face recognition reference and gait recognition reference
|
|
- Added dark themed PDF
|
|
- Fixed error in Windows VM installation behind Whonix (missing Network setting)
|
|
- Various grammar/spelling fixes
|
|
|
|
v0.6.9
|
|
- Fixes/Adds to the online phone numbers sections. Recommendations based on identification requirements.
|
|
- Grammar/Spelling fixes.
|
|
|
|
v0.6.8
|
|
- Added security disclaimer concerning online phone providers using Monero.
|
|
|
|
v0.6.7
|
|
- Added guidance to possibly get online phone numbers using Monero (less recommended than a Physical Burner Phone with a Pre-paid SIM paid by cash).
|
|
- Adapted the various sections of the guide to reflect the above change.
|
|
|
|
v0.6.6
|
|
- Added reference to PornHub biometrics identification statement
|
|
- Small various spelling/layout fixes
|
|
- Added reference to Project Snowflake from Tor at the end of the guide if you wish you help others evade censorship
|
|
- Removed bad link to <https://www.blackbagtech.com/blog/2017/01/13/windows-10-jump-list-forensics/> (no archive available)
|
|
- Fixed bad inline reference
|
|
- As from now on, all new references in this guide will also be saved to the Internet Archive in case of article removal
|
|
- Added privacy vs anonymity in the Introduction
|
|
- Added more references to legitimate use of Anonymity from the Whonix and Tor projects
|
|
|
|
v0.6.5
|
|
- Passive automated mirror setup at GitLab <https://gitlab.com/AnonymousPlanet/thgtoa>
|
|
- Added Donation Monero address within the guide
|
|
- Added README/Guide mention to the GitLab mirror
|
|
- Changed CHANGELOG/LICENSE to CHANGELOG.md/LICENSE.md for GitHub Pages integration
|
|
- Updated GPG key with GitLab noreply e-mail for commit verification
|
|
- Added sitemap on GitHub Pages for SEO
|
|
- Added latest version, changelog and alternative pdf download links on Github Pages
|
|
- Verified site on Keybase
|
|
|
|
v0.6.4
|
|
- Improved HTML layouts for better readability and SEO
|
|
- Added redirect from <https://anonymousplanet.github.io> to the guide page
|
|
- Fixed README to to include hyperlinks
|
|
|
|
v0.6.3
|
|
- Added Table of Contents to PDF formats for better readability
|
|
- Fixed Appendixes/Sections references in the Markdown/HTML format
|
|
- Moved target-audience disclaimer from introduction to start of document
|
|
- Small layout fixes
|
|
|
|
v0.6.2
|
|
- Various little kramdown glitches fixed in HTML format
|
|
- Small fixes in spelling/grammar
|
|
- Added a small disclaimer in the introduction to let people know they can just read the first 26 pages to learn about the various threats without the need for practical applications
|
|
|
|
v0.6.1
|
|
- Various endnotes layout fixes
|
|
- Added OSINT YouTube Playlist reference
|
|
- Added reference to Whonix Live Host OS documentation (Similar to HiddenVM project)
|
|
- Added Twitter account (If it lasts, it was already suspended three times) <https://twitter.com/AnonyPla>. I'd be grateful if you share/like my tweet about this guide.
|
|
|
|
v0.6.0
|
|
- Various small spelling/grammar/layout fixes
|
|
- Added various references to Whonix Documentation (Hardening, Anti-Forensics, Anti-Evil Maid...)
|
|
- Added one Bellingcat reference to a recent case
|
|
- Added some Qubes OS references (Anti-Evil Maid and Hardening)
|
|
- Added new sub-route to the Tails route using the HiddenVM project <https://github.com/aforensics/HiddenVM> for providing Plausible Deniability within Tails
|
|
|
|
v0.5.9
|
|
- Added Monero accepting VPS providers as options for self-hosting cloud services and self-hosting VPN services
|
|
|
|
v0.5.8
|
|
- Added various references to Whonix documentation (anti-forensics, cold boot attack defenses, full disk encryption)
|
|
- Small various fixes
|
|
- Added reasoning for not supporting M1 Macs
|
|
- Added Acknowledgements at the end of the guide
|
|
- Added some resources to cold-boot, evil-maid defenses
|
|
|
|
v0.5.7
|
|
- Added methods to check Trim/ATA/NVMe operations on external SSDs
|
|
- Added methods to securely delete data on Qubes OS
|
|
|
|
v0.5.6
|
|
- Added donations/sponsorship support to this project using Monero
|
|
- Added reference to Law Enforcement surveillance capabilities (CCC video)
|
|
- Added guidance to remove some forensic traces from MacOS
|
|
- Added guidance to remove some forensic traces from Linux (log deletion and trim)
|
|
- Added variants for securely erasing SSD drives (only ATA drives were mentioned, added specific info for NVMe drives).
|
|
- Added lists of laptop brands supporting Secure Erase (SSD) from BIOS/UEFI.
|
|
- Changed recommendation from GParted to System Rescue instead due to GParted not providing nvme-cli by default.
|
|
- Fix: Multiple fixes in SDD/HDD sections (layout, duplicate data...)
|
|
- Fix: Multiple fixes in SDD secure erasing section and added various warnings for various methods
|
|
- Fix: Removed blkdiscard from wrong section and from MacOS as it's not supported on MacOS by Homebrew
|
|
- Various spelling/grammar fixes
|
|
|
|
v0.5.5
|
|
- Added passphrase recommendations (xkcd.com) in the OPSEC section and other sections.
|
|
|
|
v0.5.4
|
|
- Added more information and mitigation possibilities for CPU exploits on Virtual Machines (Spectre, Meltdown...)
|
|
|
|
v0.5.3
|
|
- Added guidance to hidden containers with plausible deniability in the backup section
|
|
- Added guidance for online backups
|
|
- Added information for VPN kill switches for Whonix, MacOS and Linux
|
|
|
|
v0.5.2
|
|
- Update of GPG key (added no-reply e-mail) to get verified commits
|
|
|
|
v0.5.1
|
|
- Small various fixes
|
|
|
|
v0.5.0
|
|
- Added Watermarking section in threats with pictures/videos/audios watermarks and printer watermarks within
|
|
|
|
v0.4.9
|
|
- Various small spelling/grammar/layout fixes
|
|
- Added some Laptop recommendations and more info about Libreboot and Coreboot
|
|
- Added various references to key disclosure laws
|
|
- Added guidance to create a mat2-web guest Debian VM for removing metadata from files conveniently
|
|
- Changed CHANGELOG to markdown for integrating into GitHub Pages
|
|
|
|
v0.4.8
|
|
- Various fixes on spelling/grammar and layout
|
|
- Various fixes on KeepassXC sections for Linux/MacOS
|
|
- Added hardening recommendations for Virtualbox
|
|
- Added VPN installation tutorials for Linux/MacOS
|
|
|
|
v0.4.7
|
|
- added Virtualbox workaround for Spectre/Meltdown issue mitigation
|
|
- added section and guidance to remove metadata from various files and tools
|
|
- added reference to Haven app for physical security in OPSEC section
|
|
- added recommendation to use systematic TOTP 2FA for online identities when possible
|
|
- added references to Deepfakes, facial recognition and fingerprint recognition in biometric threats
|
|
|
|
v0.4.6 Added link to Shodan to Smart Devices Section, Full rewrite of data wipe sections (especially SSDs)
|
|
|
|
v0.4.5 Improved SSD/HDD erasure section and some spelling fixes.
|
|
|
|
v0.4.x Added Backup methods, OPSec tricks, Malicious USB, Printers and various fixes
|
|
|
|
v0.3.x Added MacOS information and various fixes
|
|
|
|
v0.2.x Added Qubes OS information and various fixes
|
|
|
|
v0.1.x Initial Release (missing Qubes OS details and MacOS support)
|