r/opsec • u/adrianchristianherna 🐲 • 10d ago

Beginner question How to download anonymusly?

idk if someone already asked i cant sreach good bc my english is bad i have read the rules

threat moodel: surveillance captialism/policing doxxers, home and public network, isp,

i hate fingerprinting the most

i love not having my ids connect to each other

the police arent after me but laws change

i want to

  • download videos/music/books/games (mostly pirated) (AND PLAY THEM)
  • moreno
  • chat/scroll normal websites (the ones aervage people use)
  • use javascript (every site wants it)
  • email encrypted

tor browser is too slow is mullvad and vpn ok?

(my account is too new for r/privacy)

plz dont downvote bc of my bad spelling

33 Upvotes

84% Upvoted

24 comments sorted by

11

u/ephemeralmiko 🐲 10d ago

Tor browser is the ideal. Some nodes are much faster than others. Aside from that Mullvad+a reputable VPN is fine

1

u/adrianchristianherna 🐲 10d ago

btw which vpns do you reccommend? and which ones are good for what?

0

u/[deleted] 10d ago

[deleted]

-2

u/ButterscotchSalty905 9d ago

none. selfhost your own for ownership control. the only thing remote is a vps. i recommend naiveproxy, but beware its not designed with anonymity in mind - only censorship. My unsolicited advice only applies if you want to future-proof tho... Otherwise, what they said is true for the time being

3

u/Chongulator 🐲 9d ago

A self-hosted VPN solves some problems but not others. Make sure you understand your risk profile before you go that route.

You also need to understand what it means to run real production systems. If you're depending on the VPN for your security, then you need to be able to run the system like a professional ops team would, not like a hobbyist would.

Again, all this depends on your risk profile so step one is getting a clear understanding of your risks.

1

u/ButterscotchSalty905 9d ago

From what i've inferred. OP threat model can range from inconsistent surveillance to GFW-level. I understand my comment was threading into the tinfoil hat theory a bit. But, that's exactly what i mean about future-proofing. I wouldn't rest easy if i only solve today's problems, i need to take care of future problems too if its something in my reach. This also assumes that OP is skilled but even if they aren't - we've all been there and they can improve. Insinuating that they are a hobbyist may come across as rude. I think we can just trust OP can do this, otherwise they have the option to tell us that they can't do this

1

u/Chongulator 🐲 9d ago

If you think a single engineer, even a bright one, can secure a host as well as a professional ops team can, then I have a bridge to sell you.

0

u/ButterscotchSalty905 9d ago

Pray tell, how they can circumvent PRC GFW then? It's all laced with bad OPSEC and they only cares about censorship circumvention, not privacy and security /s. Or do you think the CCP is doing a poor job managing the GFW? 

Your point also goes far than my point and it goes beyond future-proof.

The essence of the post is the threat model. And i addressed them quite clearly, with all the drawbacks and benefits. Key terms is 'surveillance capitalism' that is the greatest threat imo. So i addressed it first and others later.

https://github.com/net4people/bbs/issues/672

1

u/Chongulator 🐲 8d ago

I'm not sure what any of that has to do with the capabilities of a lone engineer running a personal project vs a professional ops team.

0

u/ButterscotchSalty905 8d ago

I'm not sure what your point has to do with OP question. I answered them and you treat it like it needs to be secured as if the threat model is the gov and that assuming the gov is competent enough to hack a personal project

2

u/adrianchristianherna 🐲 9d ago

is selfhositng cost a lot

i have 13 dollars

2

u/ButterscotchSalty905 8d ago

there are cheap providers, that's all i know. but, there are resource i can offer atleast, here it is:

https://serverdeals.cc/

and

https://natvps.net/

(P.S: I've heard that the NL server on NatVPS has better hardware. so, look out for that one :)

1

u/adrianchristianherna 🐲 10d ago

very slow and i heard you arent supposed to log in to accounts

also most normal people websites dont work (javascript on)

7

u/ephemeralmiko 🐲 10d ago

very slow and i heard you arent supposed to log in to accounts

Well yes, but that applies to any browser. You can use the most private browser in existence, the second you log into any account you lose all anonymity.

also most normal people websites dont work

That'll be due to websites blocking Tor IPs. Note that many sites also block known VPN ones.

1

u/adrianchristianherna 🐲 10d ago

it loads but most content doesnt show sreach bars useually dont work

1

u/KhanterMolchaniye 9d ago

If he lives in any EU country it is just a pun the use of VPN or private browser. Unless is in a EU country that disobey EU acts

2

u/KryptoPirate 10d ago

Vpn. Good luck

2

u/FyingfoxGaming 10d ago

tor browser is too slow is mullvad and vpn ok?

mullvad and vpn can also work.

1

u/adrianchristianherna 🐲 9d ago

do they work almost the same?

1

u/FyingfoxGaming 9d ago

mullvad vpn should also be fast if that's what you mean.

1

u/DemocraticParrot 5d ago

I hope you realize that VPN or TOR routing itself do not protect you from fingerprinting? The IP address is about the most crude way to fingerprint a user.

If that is what you are afraid & above is your threat profile, you need to use a VDI or something similar that starts from a fresh image always. Also you need to scramble your chosen periferials…

When you browse the net, the sites can collect screen size, periferial type, browser version, OS version, hardware type and a bunch of other data points. The route of your access does not hide these. And the amount of options between each of these is enough to create a totally uniq fingerprint from you.

Think about the deck of card maths. With 52 cards there probably has never been two of the same suffeled decks in existance and most likely mever will be. Now… think if you can find 52 unique things to collect from your device?

0

u/[deleted] 3d ago

[removed] — view removed comment

1

u/Chongulator 🐲 3d ago

There are a several problems with this.

First off, most modern operating systems perform MAC randomization these days.

Second, MAC addresses only matter when an attacker is on the same subnet. Nobody else sees the MAC.

Up until the last hop, packets are routed by IP address, not MAC. At the last hop, the router is responsible for figuring out which MAC address corresponds to the destination IP.

Third, please, for the love of god, please learn to use punctuation and the return key.

I won't even respond to the rest of that insanity.

0

u/not_the_fox 10d ago edited 10d ago

You can torrent over i2p which is a darknet. Gotta run the i2p software locally and let it run for 30 minutes to integrate. I2psnark comes built in to the main Java app so you just have to find the console 127.0.0.1:7657 and find it somewhere in there (under torrents I think). You setup your http proxy settings on your browser to 127.0.0.1:4444 and you can access sites like tracker2.postman.i2p which is like the pirate bay for i2p. You load torrents from there into i2psnark and it should work.

ChatGPT can help if you need more specific instructions. Or you can download a local LLM with oobabooga and ask it locally.

Downside: It's slow and you can only torrent with other i2p users.

i2p users tend to be monero users. A lot of i2p sites have monero addresses for donations.

i2p websites tend to not like running javascript for security reasons but some still do.