Best practices to maintain anonymity online

How can I maintain an acceptable degree of privacy and anonymity while browsing the internet?

Should I chain a VPN with Tor or are obfs4 bridges are safe enough?
Which email clients are safe to use with Tor? If there isn't any, how can I configure mine to be secure?

According to Tor Browser design document[1], Tor Browser builds new circuits for each new domain and isolate all cookies, TLS session IDs and other identifying information on URL level. If this is true, then why is it widely recommended to restart Tor (or Tails) if the user wants to unlink his current activity from what he is about to do next?

Are there any known exploits that can penetrate TBB instances configured with safest options?

Are there any other browsers, text browsers especially, that can meet design requirements of TBB?[2]

Am I missing anything here that you would like to add?

1. torproject.org/projects/torbrowser/design/#identifier-linkability
2. torproject.org/projects/torbrowser/design/#DesignRequirements

Other urls found in this thread:

whonix.org
ufile.io/h6ipz
twitter.com/NSFWRedditVideo

I apologize for double posting. Can mods please delete one of my threads?

you cant delete it?

I didn't set a password for the thread so, no.

This is kind of outdated but most of the info is still good.

Attached: 1518386338591.png (1345x1751, 218.68K)

or just use librefox

You want to look like everybody else. That's mostly it. It's like finding someone in a crowd.

congratulations you just disabled posting on 8ch
you're free!

browsers should have a option for disabling third party referrer sending. keeping it on the same domain would be ok but sending it to some completely unrelated domain is retarded and only useful for tracking. theres no reason for some random site to know that someone came to it from this board

There is no such thing as anonymity on the Internet. Sure you can disguise your IP or block fingerprinting but at the end of the day you are still a person in a large crowd. Best thing you can do is use open source software that doesn't phone home and use a VPN.

You have to use Tor Browser with default settings (except turning security option to High) and no addons

Thunderbird with TorBirdy addon

you cannot. use above or webmail without javascript
if you grab random email client and set it to use Tor proxy, it might leak real IP or other data about your PC

known? don't know
but if you want higher security use one of those two:
-Whonix virtual machine. use Tor Browser inside it. whonix.org
-have firewall software that will block any internet access outside Tor.exe, might protect you if someone uses exploit on Tor Browser

If you use other browser, you could look unique, even if you configure it to send same headers and useragent that Tor Browser uses, the behavior can be different

What software, OS, hardware do you use?
All Intel CPUs post 2009 are hardware backdoored and will send your browsing history to Tel Aviv
All Windows starting from Vista are backdoored

...

use Full Disk Encryption
with it, even if your anonymity setup will fail and they come to your home, they won't be able to access your data and prove any crime that you did

Tor works by design, VPN "works" by trust.

also
capitalism = profit motive, not ethical motive

VPN = capitalism = wants to earn as much profits as possible without giving a fuck about ethics = scam
Tor = communism = wants to provide something for humanity without profit

Lol. Your premise is entirely incorrect. Tor is a trust network like everything. You trust that those nodes are clean regardless of the packets being encrypted.

but tor browser became almost unusable since they updated to the new firefox look. its either super slow or just hangs.

Communism is reporting every packet you send to the commissar.

sometimes if freezes for a while after starting it but it works after ~30 seconds

if one or two nodes that you use are CIA, you are not de-anonymized. you would need to get 3 CIA nodes. or just 3 nodes that all cooperate with each other.
with VPN you only need one "node" to be compromised and you are lost

and even if you had a real VPN that wouldn't sell data or cooperate with police, VPN is still shit because you get same IP for every website that you visit, so all your activities can be correlated. and if you use standard browser with VPN you will get fingerprinted with useragent and other shit


you can consider using older one that worked but adjusting prefs.js values to the ones in new TBB, so you get same useragent and other stuff. but behavior of browser won't be identical
can you upload your current prefs.js file somewhere and post link?

It's still entirely a network of trust.

This might help:

privacytools.io

This is terrible advice, completely unsurprising given Zig Forums's ignorance of anything tech related but still you should know better.

ufile.io/h6ipz

oh boy it's another opsec argument thread
Which predictable post will (you) make?

...

Tor Browser Bundle
TorChat
Ricochet
OnionShare

Orbot
Orfox
Tor Browser for Android
ChatSecure

I2P
I2PSnark
iMule

Tribler

gpg4usb

Recuva
Eraser
Darik's Boot and Nuke, DBAN
VeraCrypt

Ubuntu Linux
Project Trident (FreeBSD)

They are my favorite softwares. If you use macOS, you can use GPG Suite instead of gpg4usb.

I use Eraser and CCleaner to remove traces of my H.D.D.

Full Disk Encryption is necessary when you have Child Pornography.

...

I use LUKS (Linux) and VeraCrypt to encrypt my CP.

just hit it with a hammer or drop it few times before you do that

Don't post, only larp.
Change IP each time you want to go to another website.

Can I get this in plaintext, please?.. Is there any software that can convert text in images to plaintext?

That information is pretty much outdated as the user who posted it also said. Any modification you make on your browser such as adding another blacklist, installing another privacy extension and so on will result in a more unique fingerprint than before. Trying to craft a privacy oriented browser yourself is counter intuitive. This is why Tor Browser was created in the first place. It has a uniform fingerprint across its userbase while employing necessary safeguards to ensure anonymity and privacy. You can also increase the security level to "safest" via Torbutton if you like.

I need to add that increasing the security level will undoubtedly cause Tor Browser to have a different fingerprint than it was originally shipped with. But even then it still makes more sense than trying to tweak everything by yourself and risk messing up. Tor Browser can only have three different fingerprints if users don't make additions that are strictly advised against in TBB guidelines.

Don't bother. Most of Zig Forums will agree that it isn't worth it because the kike tech companies will win over all of us anyway. We will be losers living in the eternal Google 1984 dystopia. Don't ever think otherwise.

Is umatrix allowed? Going back to a browser without it painful now. What about ublock origin?

Depends on your threat model. uMatrix trades anonymity with privacy. Crafting special rules per site makes your fingerprint more unique and harm your anonymity but blocking harmful scripts and media content will improve your privacy.

Only if they fingerprinted for that which is unlikely and fingerprinting through regular methods generates more and better data from more users which is generally preferable in mass surveillance.
The don't disable things, it makes you unique phrase is nearly 100% bullshit.
WebRTC can leak your IP through multiple proxies. Is your real IP worth the information that WebRTC is not disabled?
WebGL allows access to OpenGL over Javascript which could be used to fingerprint you over your graphics and allows to gain way more information then WebGL is disabled.
The list goes on. You get the idea.

Yes I do get the idea. Any modification to the regular Firefox to improve privacy harms your anonymity. Wearing a balaclava outside will hide your identity, improving privacy, but make you stick out like a sore thumb, harming your anonymity. The type of your balaclava will also be an additional identifier.

This is why I recommend using Tor Browser and configuring the security slider to the safest level. The more widespread this practice is, the better.

Apparently you didn't.
People on the street don't see your prostate.
When you get on an airplane you will be checked. That's where they see your prostate is made out of metal.
You can even browser YT with these settings. How is that secure? Go back to where you came from.

browse

JavaScript is turned off at the safest level so I don't understand how you could browse YouTube when Google scripts can't run. Unless you messed up something of course.

> Full Disk Encryption is necessary when you have Child Pornography.

End of story. gets it.

Webmail, if you use client you are one time going to forget to turn tor on and the client is going to fetch emails without tor. Trust me, it's going to happen.

chain vpn's together like tor or use i2p or tor alongside with vpn, easy.

OnionShare is very good whey you share CP! It uses Tor network so it's very safe.

I restarted it to test that so it definitely isn't my fault.
Maybe it's dependent on noscript which I uninstalled. Or it's because of uBlock Origin which I highly doubt.

Fucking dumbass, why do you even use TBB if you rip out necessary addons?

This shouldn't be necessary at all since firefox has a variable to disable JS too, pajeet.

The best way to spot a LARPer is simply observing how he relentlessly defends retarded ideas that could only be conceived by someone who has no background knowledge on the subject.

The best way to spot a pajeet and nocoder is observing how he defends completely unnecessary decencies and shit code which doesn't even do what it claims to do.

Attached: 8ch.net_post.php.png (2048x890, 185.64K)

Maybe it can't do what it claims to because you modified a browser that wasn't meant to be modified? Tor Browser can't help it if koders like you can't stop doing retarded shit.

Write about the same subject every time and sign every post with one of several usenet quotes. No one will ever recognize you.

Attached: 85c43c86c4e0fc24e23a2877a2c49c81.png (758x1024, 602.69K)

The browser has an internal setting that does the exact same, so why use cancer and why make a dependency on it?
Sure, completely necessary. It's not just pajeets hacking some javascript 1337 H4XX0R solution together instead of using the settings of the browser.
You don't even have to restart Firefox. It becomes effective immediately. No 1337 H4XX0R pajeet solution required. Why do you still defend that crap? Are you one of those pesky pajeets?

Click one of the links in the OP, press Crlt+F and type "noscript". You will then realize that noscript has more functionality than you think. Read the rest of the document while you are at it, for the sake of my sanity if anything.

NoScript disables JavaScript, many plug-ins, and many HTML5 features.

You can put it in OneNote and it allows you to copy and paste any text off an image as plain text

Kill yourself.