Read this if you're in an emergency and need to burn it all down to avoid prison. : OpSec | Torhoo darknet markets
I want to begin this post by saying that everyone does their setup in a different way, so your mileage may vary (YMMV) throughout this entire post. However, this will provide general advice to both protect yourself from threats before they happen, as well as some fast tricks.
Lesson 1 - Buying Yourself Enough Time
- You need, and I must say this, really need cameras in your house, apartment or area of work. If you're not mobile and working from cafe shops or you're on the run, you need vision on what's going on.
- Rotate the times you work on. Don't log in same day for example at 9 PM and start working exactly 8 hours. The cops will know when to raid you so that you're asleep.
- Make sure there is no plain text data. Encrypted everything. Strong password, in your head only. Don't give shit and don't say shit. Get a lawyer to figure out how to justify the encrypted data.
Lesson 2 - Minimizing Liabilities
- Scenario 1 - You are using Tails, and the cops are on their way on your staircase or in your yard. What do you do? Pull out the drive immediately, microwave it or burn it down. Flushing might work, but they might be smart enough to check your sewer - especially if you buy drugs.
- Scenario 2 - You've got incriminating evidence everywhere. Drugs, guns, etc. Your main issue now? Destroy your data. SSD's should be in use ONLY, no HDD's. Make sure they are accessible easily. Microwave or burn. SIM cards? Microwave or burn. RAM? Microwave or burn. That covers the most essential things. Store all backups off-site where they can't get to.
- Scenario 3 - You're clean of any drugs or guns, but panicked and have no time to burn anything, and everything is encrypted. Chill, you're gonna be okay with a good lawyer as long as you don't give up the keys.
Lesson 3 - Plausible Deniability
- Did you know that you can use your job as an excuse? Freelancers included, ones with NDA agreements.
- Become a freelancer on any site that works, employ yourself as a programmer, pentester, specialist, anything.
- Save the NDA agreement on an unencrypted drive, or on your phone, as proof.
- You've now got a massive bonus in court. The more legitimate the clients, the better. The more, the merrier. If you have actual clients and you actually work like that, you're golden.
- This, with a good lawyer, gives you a fat fucking excuse for not decrypting your drives for the authorities.
Lesson 4 - Don't Use a Fucking Phone
- Do I really need to say anything here? They're a nightmare for your security and a treasure trove for police.
- If you can configure a secure phone on your own, you know how to dispose of it for sure.
- If you don't, then you should not be using a phone for your operations.
This is not a fully complete post of course. But I will keep it updated and I will incorporate any suggestions you may have, as this post might very well become a sticky here, thanks to
https://torhoo.cc/go.php?u=TDNVdlkyaGhkRzV2YVhJPQ==# and
https://torhoo.cc/go.php?u=TDNVdlFtVmxiSHBsWW5WaQ==# for having the idea.