From c3b9f0b9a6ed49790e6562b32854727779d8fb40 Mon Sep 17 00:00:00 2001 From: TwoSixtyThreeFiftyFour <108928957+TwoSixtyThreeFiftyFour@users.noreply.github.com> Date: Thu, 4 Aug 2022 14:25:37 +0000 Subject: [PATCH 01/12] Adds https://generated.photos/face-generator to creating identities section Adds https://generated.photos/face-generator to creating identities section Removes the archive.org link to thispersondoesnotexist as it's pointless? --- guide.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/guide.md b/guide.md index 7e6eb53..0bcafbf 100644 --- a/guide.md +++ b/guide.md @@ -5885,6 +5885,8 @@ Tools that can help with this: - +- (**Generated pictures using this tool have a watermark that you might need to remove using image editing software such as Gimp**) + Now is also the moment where you could finally consider getting an online phone number as explained in the [Online Phone Number (less recommended)] section. We will help you bit by listing a few tips we learned while researching over the years **(disclaimer: this is based on my individual experiences alone)**: @@ -5909,7 +5911,7 @@ We will help you bit by listing a few tips we learned while researching over the - Brave Browser (Chromium-based) with a Private Tor Tab has a better acceptance level than Tor Browser (Firefox based). You will experience fewer issues with captchas and online platforms[^383] if you use Brave than if you use Tor Browser (feel free to try this yourself). -- For every identity, you should have a matching profile picture associated with it. For this purpose, we recommend you just go to [[Archive.org]][399] and generate a computer-generated profile picture (Do note that algorithms have been developed[^393]'[^394] to detect these and it might not work 100% of the time). You can also generate such pictures yourself from your computer if you prefer by using the open-source StyleGan project here [[Archive.org]][400]. Just refresh the page until you find a picture that matches your identity in all aspects (age, sex, and ethnicity) and save that picture. It would be even better to have several pictures associated with that identity, butWedo not have an "easy way" of doing that yet. +- For every identity, you should have a matching profile picture associated with it. For this purpose, we recommend you just go to or and generate a computer-generated profile picture (Do note that algorithms have been developed[^393]'[^394] to detect these and it might not work 100% of the time). You can also generate such pictures yourself from your computer if you prefer by using the open-source StyleGan project here [[Archive.org]][400]. Just refresh the page until you find a picture that matches your identity in all aspects (age, sex, and ethnicity) and save that picture. It would be even better to have several pictures associated with that identity, butWedo not have an "easy way" of doing that yet. - **Bonus**, you could also make it more real by using this service (with an anonymous identity) [[Archive.org]][401] to make a picture more lifelike. Here is an example: @@ -14170,7 +14172,6 @@ See the [Some last OPSEC thoughts][Some last OPSEC thoughts:] section for some t [397]: https://web.archive.org/web/https://github.com/deepfakes/faceswap [398]: https://web.archive.org/web/https://github.com/iperov/DeepFaceLive [Online Phone Number (less recommended)]: #online-phone-number - [399]: https://web.archive.org/web/https://thispersondoesnotexist.com/ [400]: https://web.archive.org/web/https://github.com/NVlabs/stylegan2 [401]: https://web.archive.org/web/https://www.myheritage.com/deep-nostalgia [402]: media/image39.jpeg @@ -15152,4 +15153,4 @@ See the [Some last OPSEC thoughts][Some last OPSEC thoughts:] section for some t [1384]: https://web.archive.org/web/20220718231735/https://officercia.mirror.xyz/5KSkJOTgMtvgC36v1GqZ987N-_Oj_zwvGatOk0A47Ws [1385]: https://web.archive.org/web/20220516000616/https://officercia.mirror.xyz/WeAilwJ9V4GIVUkYa7WwBwV2II9dYwpdPTp3fNsPFjo [1386]: https://web.archive.org/web/20220720023429/https://leakuidatorplusteam.github.io/ - [1387]: https://web.archive.org/web/20220801151048/https://support.torproject.org/glossary/moat/ \ No newline at end of file + [1387]: https://web.archive.org/web/20220801151048/https://support.torproject.org/glossary/moat/ From 022c9f616918eaf3eff22e28338c7a272784a31d Mon Sep 17 00:00:00 2001 From: pterocles Date: Fri, 12 Aug 2022 02:00:12 -0400 Subject: [PATCH 02/12] Update transparency reports - Discord transparency report - Snapchat transparency report - TitkTok transparency report - Reddit transparency report - Twitter transparency report (link) Signed-off-by: pterocles --- guide.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/guide.md b/guide.md index f1ce0b9..b74343a 100644 --- a/guide.md +++ b/guide.md @@ -1697,15 +1697,15 @@ If you still do not think such information can be used by various actors to trac - Dropbox Transparency Report [[Archive.org]][211] -- Discord Transparency Report [[Archive.org]][212] +- Discord Transparency Report [[Archive.org]][212] - GitHub Transparency Report [[Archive.org]][213] - Snapchat Transparency Report [[Archive.org]][214] -- TikTok Transparency Report [[Archive.org]][215] +- TikTok Transparency Report [[Archive.org]][215] -- Reddit Transparency Report [[Archive.org]][216] +- Reddit Transparency Report [[Archive.org]][216] - Twitter Transparency Report [[Archive.org]][217] @@ -13910,12 +13910,12 @@ See the [Some last OPSEC thoughts][Some last OPSEC thoughts:] section for some t [209]: https://web.archive.org/web/https://www.microsoft.com/en-us/corporate-responsibility/law-enforcement-requests-report [210]: https://web.archive.org/web/https://www.amazon.com/gp/help/customer/display.html?nodeId=GYSDRGWQ2C2CRYEF [211]: https://web.archive.org/web/https://www.dropbox.com/transparency - [212]: https://web.archive.org/web/https://blog.discord.com/discord-transparency-report-jan-june-2020-2ef4a3ee346d + [212]: https://web.archive.org/web/20220812051950/https://discord.com/blog/discord-transparency-report-q1-2022 [213]: https://web.archive.org/web/https://github.blog/2021-02-25-2020-transparency-report/ - [214]: https://web.archive.org/web/https://www.snap.com/en-US/privacy/transparency/ - [215]: https://web.archive.org/web/https://www.tiktok.com/safety/resources/transparency-report?lang=en - [216]: https://web.archive.org/web/https://www.reddit.com/wiki/transparency - [217]: https://web.archive.org/web/https://transparency.twitter.com/ + [214]: https://web.archive.org/web/20220806141853/https://www.snap.com/en-US/privacy/transparency + [215]: https://web.archive.org/web/20220812054600/https://www.tiktok.com/transparency/en/information-requests-2021-2/ + [216]: https://web.archive.org/web/20220812054736/https://www.redditinc.com/policies/transparency-report-2021 + [217]: https://web.archive.org/web/20220812054839/https://transparency.twitter.com/ [218]: https://yewtu.be/watch?v=euSsqXO53GY [219]: https://web.archive.org/web/https://media.defense.gov/2021/Feb/25/2002588479/-1/-1/0/CSI_EMBRACING_ZT_SECURITY_MODEL_UOO115131-21.PDF [220]: media/image18.jpeg From 4b021dd9467b4a7a0ace8d9b5201151f10c18e2d Mon Sep 17 00:00:00 2001 From: TwoSixtyThreeFiftyFour <108928957+TwoSixtyThreeFiftyFour@users.noreply.github.com> Date: Tue, 16 Aug 2022 09:05:08 +0000 Subject: [PATCH 03/12] Added warning/disclaimer Added warning/disclaimer --- guide.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/guide.md b/guide.md index 0bcafbf..91aa8d8 100644 --- a/guide.md +++ b/guide.md @@ -5886,6 +5886,7 @@ Tools that can help with this: - - (**Generated pictures using this tool have a watermark that you might need to remove using image editing software such as Gimp**) + - **Warning:** This tool requires JavaScript to function and does a lot of fingerprinting. Most of it is being sent to Microsoft Clarity. Even with uBlock installed and on safer level, Tor Browser wasn't efficient at blocking the fingerprinting. This obviously does not work on Safest level. On our tests, only Brave with agressive fingerprinting/ad shields did not send analytics. Now is also the moment where you could finally consider getting an online phone number as explained in the [Online Phone Number (less recommended)] section. @@ -5911,7 +5912,9 @@ We will help you bit by listing a few tips we learned while researching over the - Brave Browser (Chromium-based) with a Private Tor Tab has a better acceptance level than Tor Browser (Firefox based). You will experience fewer issues with captchas and online platforms[^383] if you use Brave than if you use Tor Browser (feel free to try this yourself). -- For every identity, you should have a matching profile picture associated with it. For this purpose, we recommend you just go to or and generate a computer-generated profile picture (Do note that algorithms have been developed[^393]'[^394] to detect these and it might not work 100% of the time). You can also generate such pictures yourself from your computer if you prefer by using the open-source StyleGan project here [[Archive.org]][400]. Just refresh the page until you find a picture that matches your identity in all aspects (age, sex, and ethnicity) and save that picture. It would be even better to have several pictures associated with that identity, butWedo not have an "easy way" of doing that yet. +- For every identity, you should have a matching profile picture associated with it. For this purpose, we recommend you just go to or * and generate a computer-generated profile picture (Do note that algorithms have been developed[^393]'[^394] to detect these and it might not work 100% of the time). You can also generate such pictures yourself from your computer if you prefer by using the open-source StyleGan project here [[Archive.org]][400]. Just refresh the page until you find a picture that matches your identity in all aspects (age, sex, and ethnicity) and save that picture. It would be even better to have several pictures associated with that identity, butWedo not have an "easy way" of doing that yet. + +***Warning:** https://generated.photos/face-generator requires JavaScript to function and does a lot of fingerprinting. Most of it is being sent to Microsoft Clarity. Even with uBlock installed and on safer level, Tor Browser wasn't efficient at blocking the fingerprinting. This obviously does not work on Safest level. On our tests, only Brave with agressive fingerprinting/ad shields did not send analytics. - **Bonus**, you could also make it more real by using this service (with an anonymous identity) [[Archive.org]][401] to make a picture more lifelike. Here is an example: From ad72f59d1a4c45016a66fb9408bdd1e7444e1369 Mon Sep 17 00:00:00 2001 From: pterocles Date: Tue, 16 Aug 2022 11:45:04 -0400 Subject: [PATCH 04/12] Small addition: add link to meek-azure documentation for iOS * add link to commit where iOS Onion Browser dropped meez-azure: "Removed Meek Azure bridge [support], since Microsoft announced starting to block it." * Remove dupe reference to footnote #522 and #523 (document will now render this as reference #516) * Add link to Tor Project: "Run Tor Bridges to Defend the Open Internet" Signed-off-by: pterocles --- guide.md | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/guide.md b/guide.md index aca1209..f183600 100644 --- a/guide.md +++ b/guide.md @@ -2165,7 +2165,7 @@ While the official Tor Browser is not yet available for iOS, there is an alterna - Snowflake - - (Meek-Azure is unfortunately not available on Onion Browser for iOS for some reason) + - (Meek-Azure is unfortunately not available on Onion Browser for iOS (See [commit 21bc18428](https://github.com/OnionBrowser/OnionBrowser/commit/21bc18428368224507b27ee58464ad352f4ec810) for more information.) Personally, if you need to use a Bridge (this is not necessary for a non-hostile environment), you should pick a Snowflake one (since Meek-Azure bridges are not available). Those will probably work even if you are in China and want to bypass the Great Firewall. It is probably the best option you have on iOS. @@ -11694,17 +11694,17 @@ Each Virtual Machine is a sandbox. Remember the reasons for using them are to pr In some environments, your ISPs might be trying to prevent you from accessing Tor. Or accessing Tor openly might be a safety risk. -In those cases, it might be necessary to use Tor bridges to connect to the Tor network (see Tor Documentation [[Archive.org]][244] and Whonix Documentation [[Archive.org]][337]). +In those cases, it might be necessary to use Tor bridges to connect to the Tor network (see Tor Documentation [[Archive.org]][244] and Whonix Documentation [[Archive.org]][337]). Optionally, if you are able, you should (seriously!) consider running a bridge [[Archive.org]][] yourself, as this would greatly help reduce the amount of censorship in the world. Bridges are special Tor entry nodes that are not listed on the Tor public directory. Some of those are running on people running the Snowflake Browser extension[^520] while others are running on various servers around the world. Most of those bridges are running some type of obfuscation method called obfs4[^521]. *Only available for Desktop Tor users: Recently, the Tor Project has made it incredibly simple to access Bridges with **Connection Assist**, and it is now automatically done in hostile or censored regions. Simply open the Tor Browser and the connection will be configured based on your needs on any hostile network. Previously, we had a list of options below this paragraph which were necessary to enable and configure bridges, but now that this is done automatically using [moat](https://support.torproject.org/glossary/moat/).* [[Archive.org]][1387] -Here is the definition from the Tor Browser Manual[^522]: "obfs4 makes Tor traffic look random and prevents censors from finding bridges by Internet scanning. obfs4 bridges are less likely to be blocked than its predecessor, obfs3 bridges". +Here is the definition from the Tor Browser Manual[^523]: "obfs4 makes Tor traffic look random and prevents censors from finding bridges by Internet scanning. obfs4 bridges are less likely to be blocked than its predecessor, obfs3 bridges". Some of those are called "Meek" bridges and are using a technique called "Domain Fronting" where your Tor client (Tails, Tor Browser, Whonix Gateway) will connect to a common CDN used by other services. To a censor, it would appear you are connecting to a normal website such as Microsoft.com. See for more information. -As per their definition from their manual[^523]: "meek transports make it look like you are browsing a major web site instead of using Tor. meek-azure makes it look like you are using a Microsoft web site". This is a type of "domain fronting" [^524]. +As per their definition from their manual: "meek transports make it look like you are browsing a major web site instead of using Tor. meek-azure makes it look like you are using a Microsoft web site". Snowflake bridges make it appear like your connections are phone calls to random internet users. This is a type of "domain fronting" [^524]. See ["domain fronting"](https://www.bamsoftware.com/papers/fronting/#sec:introduction) from the link in the previous paragraph for a detailed explanation of these types of secret "bridges". Lastly, there are also bridges called Snowflake bridges that rely on users running the snowflake extension in their browser to become themselves entry nodes. See [[Archive.org]][563]. @@ -13437,8 +13437,6 @@ Model-specific registers (MSRs) and their configuration bits can also be detecte [^521]: GitHub, Obfs4 Repository [[Archive.org]][1348] -[^522]: Tor Browser Manual, Pluggable Transport [[Archive.org]][1349] - [^523]: Tor Browser Manual, Pluggable Transport [[Archive.org]][1349] [^524]: Wikipedia, Domain Fronting [[Wikiless]][1350] [[Archive.org]][1351] @@ -15126,5 +15124,6 @@ Model-specific registers (MSRs) and their configuration bits can also be detecte [1385]: https://web.archive.org/web/20220516000616/https://officercia.mirror.xyz/WeAilwJ9V4GIVUkYa7WwBwV2II9dYwpdPTp3fNsPFjo [1386]: https://web.archive.org/web/20220720023429/https://leakuidatorplusteam.github.io/ [1387]: https://web.archive.org/web/20220801151048/https://support.torproject.org/glossary/moat/ + [1388]: https://web.archive.org/web/20220708014922/https://blog.torproject.org/run-tor-bridges-defend-open-internet/ [1389]: media/image59.png From 4ec157fba37e3f1b2126af94522373036bfe310b Mon Sep 17 00:00:00 2001 From: "T. H" Date: Wed, 17 Aug 2022 01:29:22 -0400 Subject: [PATCH 05/12] Mention running bridge types ranked by difficulty * To run any of them, it only requires small knowledge of Linux. this places the information required into the realm of possibility, even for unseasoned Linux users. * Note: there are many guides on both Tor Project and Stack Overflow. * Consider running either the 1st or 2nd options as they are the easiest. Signed-off-by: pterocles --- guide.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/guide.md b/guide.md index f183600..6b25496 100644 --- a/guide.md +++ b/guide.md @@ -2095,6 +2095,14 @@ Please see [Appendix Y: Installing and using desktop Tor Browser]. - Snowflake +- **If your internet isn't censored**, consider running one of the bridge types to help the network! + + - Easy: Obsf4 - You can run your own Obsf4 easily with these instructions. + + - Medium: Snowflake - More about Snowflakes here. + + - Hard: Meek - This is the documentation. It's not as simple. + Personally, if you need to use a Bridge (this is not necessary for a non-hostile environment), you should pick a Meek-Azure. Those will probably work even if you are in China and want to bypass the Great Firewall. It is probably the best option to obfuscate your Tor activities if needed and Microsoft servers are usually not blocked. *Only available for Desktop Tor users: Recently, the Tor Project has made it incredibly simple to access Bridges with **Connection Assist**, and it is now automatically done in hostile or censored regions. Simply open the Tor Browser and the connection will be configured based on your needs on any hostile network. Previously, we had a list of options below this paragraph which were necessary to enable and configure bridges, but now that this is done automatically using [moat](https://support.torproject.org/glossary/moat/).* [[Archive.org]][1387] @@ -2167,6 +2175,14 @@ While the official Tor Browser is not yet available for iOS, there is an alterna - (Meek-Azure is unfortunately not available on Onion Browser for iOS (See [commit 21bc18428](https://github.com/OnionBrowser/OnionBrowser/commit/21bc18428368224507b27ee58464ad352f4ec810) for more information.) +- **If your internet isn't censored**, consider running one of the bridge types to help the network! + + - Easy: Obsf4 - You can run your own Obsf4 easily with these instructions. + + - Medium: Snowflake - More about Snowflakes here. + + - Hard: Meek - This is the documentation. It's not as simple. + Personally, if you need to use a Bridge (this is not necessary for a non-hostile environment), you should pick a Snowflake one (since Meek-Azure bridges are not available). Those will probably work even if you are in China and want to bypass the Great Firewall. It is probably the best option you have on iOS. - You are almost done From 38ebe5bee4d0252a94b1be8aa563bdb946819585 Mon Sep 17 00:00:00 2001 From: pterocles Date: Wed, 17 Aug 2022 01:35:49 -0400 Subject: [PATCH 06/12] Fix missing Archive.org link * Missing archive link fix Signed-off-by: pterocles --- guide.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/guide.md b/guide.md index 6b25496..6a9a8d7 100644 --- a/guide.md +++ b/guide.md @@ -11710,7 +11710,7 @@ Each Virtual Machine is a sandbox. Remember the reasons for using them are to pr In some environments, your ISPs might be trying to prevent you from accessing Tor. Or accessing Tor openly might be a safety risk. -In those cases, it might be necessary to use Tor bridges to connect to the Tor network (see Tor Documentation [[Archive.org]][244] and Whonix Documentation [[Archive.org]][337]). Optionally, if you are able, you should (seriously!) consider running a bridge [[Archive.org]][] yourself, as this would greatly help reduce the amount of censorship in the world. +In those cases, it might be necessary to use Tor bridges to connect to the Tor network (see Tor Documentation [[Archive.org]][244] and Whonix Documentation [[Archive.org]][337]). Optionally, if you are able, you should (seriously!) consider running a bridge [[Archive.org]](https://web.archive.org/web/20220708014922/https://blog.torproject.org/run-tor-bridges-defend-open-internet/) yourself, as this would greatly help reduce the amount of censorship in the world. Bridges are special Tor entry nodes that are not listed on the Tor public directory. Some of those are running on people running the Snowflake Browser extension[^520] while others are running on various servers around the world. Most of those bridges are running some type of obfuscation method called obfs4[^521]. From f7d0a34e0553e5836841b7f3d6316469fb8a481d Mon Sep 17 00:00:00 2001 From: "T. H" Date: Wed, 17 Aug 2022 20:14:19 -0400 Subject: [PATCH 07/12] Fix minor formatting issue --- guide.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/guide.md b/guide.md index 27b77d8..744230c 100644 --- a/guide.md +++ b/guide.md @@ -5936,9 +5936,9 @@ We will help you bit by listing a few tips we learned while researching over the ***Warning:** https://generated.photos/face-generator requires JavaScript to function and does a lot of fingerprinting. Most of it is being sent to Microsoft Clarity. Even with uBlock installed and on safer level, Tor Browser wasn't efficient at blocking the fingerprinting. This obviously does not work on Safest level. On our tests, only Brave with agressive fingerprinting/ad shields did not send analytics. - - **Bonus**, you could also make it more real by using this service (with an anonymous identity) [[Archive.org]][401] to make a picture more lifelike. Here is an example: +- **Bonus**, you could also make it more real by using this service (with an anonymous identity) [[Archive.org]][401] to make a picture more lifelike. Here is an example: - - Original: +- Original: ![][402] From 1417418fdd6dc874651f1762eca3484326d6a812 Mon Sep 17 00:00:00 2001 From: Alex Anderson <84602909+NobodySpecial256@users.noreply.github.com> Date: Thu, 18 Aug 2022 23:01:37 +0000 Subject: [PATCH 08/12] Update CNAME --- CNAME | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CNAME b/CNAME index 8d776bb..d82853b 100644 --- a/CNAME +++ b/CNAME @@ -1 +1 @@ -anonymousplanet-ng.org \ No newline at end of file +anonymousplanet.org \ No newline at end of file From ff5f7540bb2cc852d09b1aa055440be52b95b6e5 Mon Sep 17 00:00:00 2001 From: Alex Anderson <84602909+NobodySpecial256@users.noreply.github.com> Date: Thu, 18 Aug 2022 23:03:19 +0000 Subject: [PATCH 09/12] Update CNAME --- CNAME | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CNAME b/CNAME index d82853b..8d776bb 100644 --- a/CNAME +++ b/CNAME @@ -1 +1 @@ -anonymousplanet.org \ No newline at end of file +anonymousplanet-ng.org \ No newline at end of file From c020a94aeaefdfda5e99039fee82aa75eaa0bca0 Mon Sep 17 00:00:00 2001 From: Alex Anderson <84602909+NobodySpecial256@users.noreply.github.com> Date: Thu, 18 Aug 2022 23:15:51 +0000 Subject: [PATCH 10/12] Update CNAME --- CNAME | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CNAME b/CNAME index 8d776bb..d82853b 100644 --- a/CNAME +++ b/CNAME @@ -1 +1 @@ -anonymousplanet-ng.org \ No newline at end of file +anonymousplanet.org \ No newline at end of file From 9c0b4c9b4fa2f470842e8aab7c8ae5716620de0f Mon Sep 17 00:00:00 2001 From: Alex Anderson <84602909+NobodySpecial256@users.noreply.github.com> Date: Thu, 18 Aug 2022 23:18:25 +0000 Subject: [PATCH 11/12] Update CNAME --- CNAME | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CNAME b/CNAME index d82853b..8d776bb 100644 --- a/CNAME +++ b/CNAME @@ -1 +1 @@ -anonymousplanet.org \ No newline at end of file +anonymousplanet-ng.org \ No newline at end of file From a5ca6258564f9b5d775254a233a2c0e1194499d5 Mon Sep 17 00:00:00 2001 From: Alex Anderson <84602909+NobodySpecial256@users.noreply.github.com> Date: Thu, 18 Aug 2022 23:19:31 +0000 Subject: [PATCH 12/12] Update CNAME --- CNAME | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CNAME b/CNAME index 8d776bb..d82853b 100644 --- a/CNAME +++ b/CNAME @@ -1 +1 @@ -anonymousplanet-ng.org \ No newline at end of file +anonymousplanet.org \ No newline at end of file