this post was submitted on 06 Feb 2025
19 points (95.2% liked)

Privacy

2052 readers
225 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don't promote big-tech software
  3. No reposting of news that was already posted
  4. No crypto, blockchain, NFTs
  5. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 5 months ago
MODERATORS
 

cross-posted from: https://lemmy.ml/post/25679666

I recently put together a detailed opsec guide that covers practical steps for reducing your digital footprint, securing communications, and avoiding common pitfalls people make when trying to stay private online.

The goal was to create something that's actually useful and not just the usual "use a vpn and tor" advice. I tried to break down realistic methods that can help both beginners and people already familiar with opsec.

Id love to get some feedback from the community - what's missing, what could be improved, and if there's anything you disagree with.

all 16 comments
sorted by: hot top controversial new old
[–] [email protected] 5 points 2 months ago (2 children)

I skimmed it really quick. Looks like a really good writeup! You talk about stylometry, you might be as paranoid as I am.

I don't even try to hide my speech patterns, but I should.

Will try to give it a slow read when I have time. I like your work so far!

[–] [email protected] 2 points 2 months ago (1 children)

Thanks! Take your time and share your opinion after reading.

[–] [email protected] 3 points 2 months ago (1 children)

I've read it more slowly now. I think it could use a few edit passes to get things condensed into fewer categories. I felt I was reading the same advice in multiple contexts.

The amount of bullshit was near zero, I really think you know what's up. Sometimes, you left out basic "everybody knows" details, and I had to process for a moment to decide if it was because you were unaware or just for brevity. I concluded that you just wanted to write about the important stuff and not rehash old tips. That's a good thing.

Be safe out there.

[–] [email protected] 1 points 2 months ago (1 children)

Hi thanks again! Can you expand what you mean by "it could use a few edit passes to get things condensed into fewer categories" and "I felt I was reading the same advice in multiple contexts". Would love to fix it.

[–] [email protected] 1 points 2 months ago* (last edited 2 months ago) (1 children)

I read over it again just now. I don't know wtf I was talking about.. disregard that criticism. I was just searching for something productive to feedback, I guess. I think I'm just getting a general feel of disorganization that I can't quite put my finger on. Perhaps you've been editing since I last read, and that is why I no longer feel that way?

BTW, do you follow Michael Bazzell's work? He's got several books that are very informative. It seems you may have read them or at least heard his podcast. If not, you're in for a treat.

[–] [email protected] 2 points 2 months ago

Hey, I just added table of contents, you can even look at github commits (https://github.com/whos-zycher/opsec-guide/commits/main/)

Ill check his work for sure!

[–] [email protected] 4 points 2 months ago (1 children)

Searx is unmaintaned, there is a fork called SearXNG.

[–] [email protected] 2 points 2 months ago

good catch! Will change it.

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago) (1 children)

I think it’s good you tell people to check their threat model, but then on the other hand some of the advice comes across for those in an extreme category of the spectrum, which most people aren’t.

For example, most people aren’t whistleblowers or political dissidents sharing news online and needing to hide from state governments - they’re regular working folks who need to be more worried about falling prey to the everyday phishing and social engineering attacks aiming for their bank accounts and credit cards.

It’s cool to know the extreme parameters for top security, but it’s important to get the daily, small stuff right, too. Like using password managers, MFA, being vigilant looking out for all chances of scams, not using shady websites, services or pirated software, leaving software and devices unpatched, etc.

[–] [email protected] 1 points 2 months ago* (last edited 2 months ago)

Hey, thanks for feedback! I will rewrite it a bit - expand the threat model and maybe will add some security "level" thing.

[–] [email protected] 2 points 2 months ago (1 children)

A table of contents with links to headers would be good to include, so people can easily jump to sections that interest them.

An additional subheading for each category that covers negative consequences of using whatever method might be good, especially since this is a guide for neophytes as well as more experienced people, and the (often) inverse relationship between security and useability isn't always understood.

[–] [email protected] 2 points 2 months ago

thanks for the feedback! I will add these things, appreciate it bro.

[–] [email protected] 1 points 2 months ago* (last edited 2 months ago) (1 children)

Thanks for making this @[email protected], I found this a useful writeup :)

[–] [email protected] 2 points 2 months ago

youre welcome!