News for hackers. Stuff that matters.
Re:Ask HN: Starting an Anonymous Blog in 2019? by cik on Friday November 08, 2019 @12:55PM (#21484862)
Well, if you're willing to accept my paranoia - here's what I did for a reasonable test. Again, it's only a start - there's more fun and paranoia to be had. At the end of the day it's about having an identity, not a blog.

1. Buy a credit card in cash from somewhere without cameras.

2. Use that credit card to buy a phone number through many of the real voip providers.

3. Buy a used laptop on CL/Kijiji in cash, making sure the pickup is someone's house. Bonus points if you make a friend do it.

4. Go to a Starbucks with your new laptop, sign up for gmail or protonmail using your new phone number.

5. Nuke your laptop and reinstall. It's a burner. Make sure you change the MAC address, just for profit.

6. Sign up for free VPN (500MB start) with something like TunnelBear, using your new email address.

7. Connect to your VPN from the laptop. Now use TOR.

8. Remember that credit card? Time to buy another one - this time so that you can pre-fund Amazon credits (or DO). They'll both accept prepaid credit cards.

9. Blog, do your thing - but only ever publish from a dedicated VM on the laptop. Make sure you're using firefox (or something else) in your VM to test your blog - through the SOCKS proxy you establish (ssh -D) to the host.

10/11. Nuke and rebuild VM and machine at will.

12. Every ~3 months, do a Kijiji exchange for a new laptop.

The above is in no way foolproof. But it's a reasonable start. For the record I don't consider this anonymous or paranoid enough.

Re:Ask HN: Starting an Anonymous Blog in 2019? by t-h-e-chief on Saturday November 09, 2019 @05:19AM (#21490661)
This list is awesome. I would love to shake your hand, but I am fairly sure I would never be able to find you.
Re:Ask HN: Starting an Anonymous Blog in 2019? by apeace on Friday November 08, 2019 @01:01PM (#21484919)
Is #2 even possible? Which phone providers accept prepaid cards and no way to verify the user's identity?

For #7, make sure you do VPN over Tor, not Tor over VPN. The former is more secure for you, and has the additional benefit that sites won't know you're using Tor. The latter sucks for you and Tor if you relay any traffic.

Re:Ask HN: Starting an Anonymous Blog in 2019? by itake on Friday November 08, 2019 @06:49PM (#21488211)
#2, you can walk into a Target and by prepaid SIM cards for about $15/each. You can also signup Google Fi for free, but they will need an address to ship the card to.
Re:Ask HN: Starting an Anonymous Blog in 2019? by beefhash on Saturday November 09, 2019 @05:11AM (#21490643)
Mind you, you'll also have to travel out of the country if you're basically anywhere in Europe, where buying anonymous prepaid cards is simply not possible anymore because laws mandate taking and storing the identity of the buyer.
Re:Ask HN: Starting an Anonymous Blog in 2019? by FDSGSG on Sunday November 10, 2019 @03:16PM (#21499911)
Yeah, if you have no social skills. I've never had trouble with "Uh, I left my ID home. I remember my passport number though, can I just give you that?"

I've bought lots of prepaids in probably most European countries.

Re:Ask HN: Starting an Anonymous Blog in 2019? by DarrenDev on Saturday November 09, 2019 @05:26AM (#21490681)
You buy prepaid sim cards in Ireland for cash in all phone shops and give any name you like. No id required.
Re:Ask HN: Starting an Anonymous Blog in 2019? by justboxing on Saturday November 09, 2019 @04:10AM (#21490481)
> #2, you can walk into a Target and by prepaid SIM cards

That is in direct violation of #1.

>#1 ....from somewhere without cameras

Target has cameras everywhere, even OUTSIDE the Restroom (for "Loss Prevention") and inside the elevators between floors, as well as at self-checkouts and customer service kiosks.

Re:Ask HN: Starting an Anonymous Blog in 2019? by wingerlang on Saturday November 09, 2019 @05:35AM (#21490718)
How long do they keep it? You could walk in with a getup that makes you unidentifiable. Or even ask a random kid to go buy it for you.
Re:Ask HN: Starting an Anonymous Blog in 2019? by algaeontoast on Saturday November 09, 2019 @07:02PM (#21495417)
What brand? Most prepaid sims require some kind of account with your legal name :(
Re:Ask HN: Starting an Anonymous Blog in 2019? by cik on Friday November 08, 2019 @02:05PM (#21485566)
Absolutely. In fact it's possible with at least 3 different providers for whom I have accounts. Before you ask, yes they're all reputable.

I'll definitely agree that VPN over TOR is (by far) more secure - but I feel as if most people aren't capable of it, even though TAILS exists.

Re:Ask HN: Starting an Anonymous Blog in 2019? by cik on Monday November 11, 2019 @09:09AM (#21504902)
I admit that I don't know about the US - but I'd assume this would work somewhere there. Might vary by state.

In Canada just buy your prepaid credit card at one of the independent corner stores we have all over the place. Several don't have cameras. Equally, there's nothing to stop you from walking in with a facemask; it wouldn't be abnormal at all.

Re:Ask HN: Starting an Anonymous Blog in 2019? by cryptozeus on Friday November 08, 2019 @01:04PM (#21484948)
Thanks for this, I was entertaining the idea but this sounds exhausting.
Re:Ask HN: Starting an Anonymous Blog in 2019? by seibelj on Friday November 08, 2019 @06:32PM (#21488071)
Always depends on your threat level. If you are, say, whistle blowing on a major government or corporation and don’t want to be public, it isn’t that bad compared to being (psychologically only if lucky) tortured 24/7 for the rest of your life.
Re:Ask HN: Starting an Anonymous Blog in 2019? by jammygit on Friday November 08, 2019 @06:52PM (#21488235)
Exactly. Journalists in particular need to have more guides like this
Re:Ask HN: Starting an Anonymous Blog in 2019? by telesilla on Friday November 08, 2019 @07:06PM (#21488362)
Centre for Investigative Journalism (UK) does workshops to teach these concepts, they welcome volunteers to sign up and share tech knowledge. The conferences are always extremely interesting, too. Well worth attending.

https://tcij.org/

Re:Ask HN: Starting an Anonymous Blog in 2019? by petercooper on Tuesday November 12, 2019 @05:47PM (#21519065)
this time so that you can pre-fund Amazon credits (or DO). They'll both accept prepaid credit cards.

What billing address would you use on these though?

Re:Ask HN: Starting an Anonymous Blog in 2019? by emptysongglass on Saturday November 09, 2019 @09:37AM (#21491766)
Instead of nuking your system and trading it away all the time, why not use Qubes?
Re:Ask HN: Starting an Anonymous Blog in 2019? by 0x00000000 on Saturday November 09, 2019 @10:13AM (#21491951)
Things like canvas fingerprinting and other hardware “side channels” will most likely persist through reimaging
Re:Ask HN: Starting an Anonymous Blog in 2019? by cik on Monday November 11, 2019 @08:42AM (#21504734)
Absolutely. Some of this is solvable through the use of the VM abstraction layer (hence!). Others do rely on macaddress (hence the constance rejig).

Ideally one would have multiple machines for this - but we have to be realists about the quick and dirty.