@ZTHorse is who you need to contact.
Online Security
- Thread starter Oldman
- Start date
CrankyBoi
Tourist
Thanks!
Lurkist
Tourist
i like it a lot
Just witnessed an awakening of zoophilia amongst a group of "normal" people, but I had to take a step back as their opsec was terrible, they were far too open abou it and on the wrong platform.
I am in a meme/joke group on facebook, nothing that would get you sacked and i was on my normal profile under my real name, and normally its quite tame, but funny.
Last week someone posted a video of a fisherwoman getting dildoed from a guy with a trout and most of the group went nuts for it wanting more, so then others posted videos of mice being inserted, and it exploded from there, some other shock videos, but a lot of common zoo porn, women being penetrated by willing animals.
There was a lot of 30 day bans handed out by facebook, and a couple of whatsapp groups were started for sharing zoo porn. It seemed to awaken something in a lot of people, and more women than men which was surprising, but they were all too naive about security and anonimity, they were on their personal fb profiles. A small number of people were disgusted.
Nobody seemed to be aware that posting that was illegal in the uk, I pointed out that it was illegal and the penalties, and that some of the stuff was outright animal cruelty, then I left the group and cleared my cache, purely because these idiots are going to get a lot of people caught, and the penalties in the uk for just possesing zoo porn are quite severe, and even once you have finished your sentence newspapers and anti zoo groups track people down and pressure employers to sack convicted zoos.
It was a pleasant surprise to see how many regular people were turned on by zoo porn though, it gives me hope we might one day be accepted.
Part of me wants to go in and tell them to be a bit more discreet and use secure platforms, but no way am I taking the chance of outing myself.
I am in a meme/joke group on facebook, nothing that would get you sacked and i was on my normal profile under my real name, and normally its quite tame, but funny.
Last week someone posted a video of a fisherwoman getting dildoed from a guy with a trout and most of the group went nuts for it wanting more, so then others posted videos of mice being inserted, and it exploded from there, some other shock videos, but a lot of common zoo porn, women being penetrated by willing animals.
There was a lot of 30 day bans handed out by facebook, and a couple of whatsapp groups were started for sharing zoo porn. It seemed to awaken something in a lot of people, and more women than men which was surprising, but they were all too naive about security and anonimity, they were on their personal fb profiles. A small number of people were disgusted.
Nobody seemed to be aware that posting that was illegal in the uk, I pointed out that it was illegal and the penalties, and that some of the stuff was outright animal cruelty, then I left the group and cleared my cache, purely because these idiots are going to get a lot of people caught, and the penalties in the uk for just possesing zoo porn are quite severe, and even once you have finished your sentence newspapers and anti zoo groups track people down and pressure employers to sack convicted zoos.
It was a pleasant surprise to see how many regular people were turned on by zoo porn though, it gives me hope we might one day be accepted.
Part of me wants to go in and tell them to be a bit more discreet and use secure platforms, but no way am I taking the chance of outing myself.
scruffypup
Tourist
One thing about the way that is worded.
It makes it sound like there some equivalence. Unfortunately many users of Telegram think all their chats are E2EE (when in fact they are not). Even for secret chats, the cryptographic protocols have not been audited by external cryptographers and are non-standard when compared with battle tested methods such as Double Ratchet.
Signal does still require a phone number, and so does Telegram (unless you use their cryptocurrency bullshit thing). A lot are not smart enough to purchase an anonymous VOIP number with crypto. Best to just stay on Matrix (like beast.chat), particularly as invite codes are only given to members of the forum with some post history.
Another Matrix server may provide increased anonymity, as you can de-associate that from previous activity by regularly rotating identities, having said that though, gaining people's trust may be more difficult if you do that. I would avoid Matrix.org's default server as they have been known to be particularly anal on moderation, (and not the kind we like) particularly when people complain. Fortunately with something like the Matrix protocol, anyone can set up a server (like beast.chat), and it can communicate with other servers in a federated manner, like email providers, not everyone has to be on the same server. There will however be servers (and I think matrix.org may be one of them) which won't support federation to servers like beast.chat.
For VPNs I would stick to those which have had external public audits such as those recommended by Privacy Guides. The reason for this is because the VPN industry spends a lot of money on marketing, astroturfing (getting mouthpieces to pretend to be independent) rather than gaining trust through providing quality and transparency. Typically you can determine this based on if a site has an affiliate program. Tom Scott has a great video on that.
We know that all of Privacy Guide's financial donations go through their OpenCollective org. Any additions to the site go through multiple levels of filtering. Content is generally discussed publicly, drafted, then approved by team members all within public either on their forums or GitHub. They have no affiliate program and seem to pride themselves on that.
I've seen NordVPN mentioned a few times around here, personally I would not use them. They've had a couple of issues in the past, one was an enumeration of accounts, pretty basic mistake that should not have been possible. There were security issues from a RAT. There seems to be a pattern. There is the distinct feeling they spend a lot less money on infrastructure, validation and auditing than they do on marketing. Seem to recall them having television adverts in like 60 countries, yet they cannot afford to validate these things do not happen. They spend a HUGE amount of money trying to game search engine results too.
There is no substitute for the Tor Browser in regard to fingerprinting, so I would stick to that. There is a warning on Privacy Guides about that, and in fact the Brave website as well.
Just a general note on the Linux recommendations. It's important to have a suitable threat model. Simply using Linux is no better than Windows, unless you're using it for specific reasons. Specific distributions like TAILS have amnesic properties, meaning that no data (recent files etc) is forensically able to be recovered. When you open files in programs they often have "cache" files which may lead an adversary with physical access directly to the content you've been viewing.
Distributions such as Qubes-OS may provide further compartmentalization between activities with disposable virtual machines. Tor support is available through the use of Whonix virtual machines. The way that Qubes-OS and Whonix differ from TAILS is that they contain one virtual machine that is configured to send all traffic through a separate virtual machine running Tor, whereas TAILS uses a firewall and special rules to "pipe" everything into Tor. Qubes, and Whonix can provide increased security against a local threat, such as malware, which is not uncommon in de-anonymization operations these days.
As for "separate laptops", my suggestion is to have a bootable and removable volume that can be entirely removed from the system you use and placed in a hidden place in another room. Obviously using strong encryption like LUKS is a must, but there is no substitute for complete deniability.
Performance can be very good with portable NVMes. The USB 4.0 standard allows for 40Gbit throughput, which you're never going to reach using a web browser.
Last edited:
scruffypup
Tourist
Some further things I noticed in this thread which I thought I'd point out:
That particular neocities website is known for its misinformation and scaremongering, many of the pages contain absolute paranoid misinformation because the author thinks something works in a different way to what it actually does. There is also a lot of incorrect and outdated information there too.
"Eyes" is a common marketing technique by VPN providers. It really is quite irrelevant nowadays. There are worse jurisdictions for privacy than the "eyes" countries. That is why it is best to not place trust in a single entity. That is the premise behind Tor, the circuit contains multiple parties, none of which can de-anonymize you alone, and that stream changes every 120 seconds if no data is being sent.
No, because there's generally no E2EE.
I'd probably use something like Cryptomator for this, as it has been publicly audited. Be very careful about "web-based E2EE", it's entirely possible for a provider to switch that off for specific accounts should they wish to do so.
There are a number of recommended data redaction tools. There is also a specific guide for mac users.
The recommended ones there will do that, and additionally provide working kill switch functionality to disconnect the connection, rather than fall back to a connection not on the VPN. You should ALWAYS use your VPN provider's DNS servers (which is the default). There is an advanced explanation on that.
There are not any specific clients that are "better" for privacy, except maybe non-commercial ones. Personally I use qBitttorrent, but not for anything zoo specific, and of course I always make sure to use that through a VPN. Tor usage is not possible in most cases with Bittorrent protocol as it does not support UDP. Bittorrent over Tor is not recommended.
That particular neocities website is known for its misinformation and scaremongering, many of the pages contain absolute paranoid misinformation because the author thinks something works in a different way to what it actually does. There is also a lot of incorrect and outdated information there too.
"Eyes" is a common marketing technique by VPN providers. It really is quite irrelevant nowadays. There are worse jurisdictions for privacy than the "eyes" countries. That is why it is best to not place trust in a single entity. That is the premise behind Tor, the circuit contains multiple parties, none of which can de-anonymize you alone, and that stream changes every 120 seconds if no data is being sent.
No, because there's generally no E2EE.
I'd probably use something like Cryptomator for this, as it has been publicly audited. Be very careful about "web-based E2EE", it's entirely possible for a provider to switch that off for specific accounts should they wish to do so.
There are a number of recommended data redaction tools. There is also a specific guide for mac users.
The recommended ones there will do that, and additionally provide working kill switch functionality to disconnect the connection, rather than fall back to a connection not on the VPN. You should ALWAYS use your VPN provider's DNS servers (which is the default). There is an advanced explanation on that.
There are not any specific clients that are "better" for privacy, except maybe non-commercial ones. Personally I use qBitttorrent, but not for anything zoo specific, and of course I always make sure to use that through a VPN. Tor usage is not possible in most cases with Bittorrent protocol as it does not support UDP. Bittorrent over Tor is not recommended.
Last edited:
A nice visualization of HTTP, HTTPS and TOR and what it does for you.
www.eff.org
How HTTPS and Tor Work Together to Protect Your Anonymity and Privacy
Click the "Tor" button to see what data is visible to eavesdroppers when you're using Tor. The button will turn green to indicate that Tor is on. Click the "HTTPS" button to see what data is visible to eavesdroppers when you're using HTTPS. The button will turn green to indicate that HTTPS is on....
i want to start being active here but im held back by the security issues with this site. im posting in here before an introduction lol
im more or less a script kiddy when it comes to internet security and my methods have been adopted less through knowledge and more through observation and misplaced (but lucky?) trust. my fundamental issue is the lack of an onion address and the heavy reliance on javascript (is it a good idea to encourage users to enable their browser to run scripts from a webpage? and also to have content that isnt encrypted?) made this account ages ago but have avoided downloading anything as a result of these kinds of concerns. i wonder if they are valid concerns or just a self fulfilling prophecy or correlation making me think my actions are the cause ("havent been in trouble using my system, therefore it works" is hardly a secure opsec model or a logical argument)? also one of the site sponsors (selling sex toys which seem great - has anyone posted proof they purchased one) seems to be at best a scam at worst a honey pot? (love to be able to post a correction here if it turns out they are reliable and safe - they dont seem active for some time but a competitor to bad dragon realistic toys would be nice) having that on the site seems highly suspect.
many of the comments in this thread alone seem to have people volunteering their own security models on a similar basis to how i justify my own ("havent been arrested yet"). not to say there hasnt been quality advice (someone mentioned that no amount of traffic obfuscation keeps you safe if a government is specifically targetting you which is something im not sure many realize - especially when they have data points like forum posts on a site like this to establish a timing attack). the conclusion there is that just because peoples threat profile mean their security models appear to work doesnt mean they have worked any more than it means they are on a list somewhere.
i write all this not to bring people down but to explain what things look like from where i am sitting. i want to be an active member of this community it seems chill af but do i really have to look over from this side longingly because i wont let my guard down? im thinking the platform zoovilleforum uses is so heavily reliant on javascript that it just doesnt function on an onion address? i know others have asked this before as well and the seeming lack of response along with the removal of the old onion link seems concerning.
and then there is matrix. never have i seen a service recommended because it is so convenient and accessible promoted so heavily in zoo/zeta/beast communities without hearing it mentioned in general public discourse. and again it only seems to work with javascript? anyone got reputable info on matrix from independent organizations that test this stuff out?
i have other security issues (really want to run a secure telegram client but cant figure out how to get a cell number not connected to me (cash purchase of a burner is sadly not an option) that a community like this could help address and make me more comfortable engaging and i really want to make a solid introduction post and contribute to the community in meaningful (not just horny) ways. i just cant while zooville doesnt seem to align with my security model. can anyone give me some comfort that my concerns arent valid or (for everyones safety not just mine) can the staff and mods get onion up and running again, encourage encryption of content uploads and if not remove reliance on javascript then at least discourage it?
i know im asking for a lot given i have so far contributed nothing but i hope my post is taken genuinely not cynically (and that this is the best place for the post).
im more or less a script kiddy when it comes to internet security and my methods have been adopted less through knowledge and more through observation and misplaced (but lucky?) trust. my fundamental issue is the lack of an onion address and the heavy reliance on javascript (is it a good idea to encourage users to enable their browser to run scripts from a webpage? and also to have content that isnt encrypted?) made this account ages ago but have avoided downloading anything as a result of these kinds of concerns. i wonder if they are valid concerns or just a self fulfilling prophecy or correlation making me think my actions are the cause ("havent been in trouble using my system, therefore it works" is hardly a secure opsec model or a logical argument)? also one of the site sponsors (selling sex toys which seem great - has anyone posted proof they purchased one) seems to be at best a scam at worst a honey pot? (love to be able to post a correction here if it turns out they are reliable and safe - they dont seem active for some time but a competitor to bad dragon realistic toys would be nice) having that on the site seems highly suspect.
many of the comments in this thread alone seem to have people volunteering their own security models on a similar basis to how i justify my own ("havent been arrested yet"). not to say there hasnt been quality advice (someone mentioned that no amount of traffic obfuscation keeps you safe if a government is specifically targetting you which is something im not sure many realize - especially when they have data points like forum posts on a site like this to establish a timing attack). the conclusion there is that just because peoples threat profile mean their security models appear to work doesnt mean they have worked any more than it means they are on a list somewhere.
i write all this not to bring people down but to explain what things look like from where i am sitting. i want to be an active member of this community it seems chill af but do i really have to look over from this side longingly because i wont let my guard down? im thinking the platform zoovilleforum uses is so heavily reliant on javascript that it just doesnt function on an onion address? i know others have asked this before as well and the seeming lack of response along with the removal of the old onion link seems concerning.
and then there is matrix. never have i seen a service recommended because it is so convenient and accessible promoted so heavily in zoo/zeta/beast communities without hearing it mentioned in general public discourse. and again it only seems to work with javascript? anyone got reputable info on matrix from independent organizations that test this stuff out?
i have other security issues (really want to run a secure telegram client but cant figure out how to get a cell number not connected to me (cash purchase of a burner is sadly not an option) that a community like this could help address and make me more comfortable engaging and i really want to make a solid introduction post and contribute to the community in meaningful (not just horny) ways. i just cant while zooville doesnt seem to align with my security model. can anyone give me some comfort that my concerns arent valid or (for everyones safety not just mine) can the staff and mods get onion up and running again, encourage encryption of content uploads and if not remove reliance on javascript then at least discourage it?
i know im asking for a lot given i have so far contributed nothing but i hope my post is taken genuinely not cynically (and that this is the best place for the post).
CrankyBoi
Tourist
I'm pretty sure being a member of this forum is highly unlikely to get you arrested.. !!
hi thanks so much for responding! i appreciate your valid reply. im a paranoid fuckwit and "your risk of this happening is not nearly as high as you seem to think" is definitely something that needs to be said to me now and then. so i apologize if the reply i wrote below this disclaimer before adding this explainer/apology seems aggressive or harsh. its not you, its me. (but my points are still valid too)
not just about me, it's anyone using the site and a wide range of risk profiles. even so that is almost half my point. being active here won't get me in trouble but if i get entrapped meeting up with someone for some four legged play or used to get to someone i met for play then the kind of supportive pro-active views i will probably post about will really dig me a hole. id rather not have my own words used against me in court or a doxxing if i can avoid it.
not to go too hard against your point (it's valid, i'm paranoid and very low priority if i even am on someones radar, so dont take my reply personally at all) but is zooville really taking the attitude "it's highly unlikely so we wont do things that are known to provide the lowest possible risk profile for the format"? "you wont be arrested 99.99% sure, trust" might be valid but it wasnt really the basis of my concern. why the weird scam looking sex toy site as advertizer? why javascript? why abandon onion link? all are questions i think are worthy of a reply. the answers may be "no it isnt i bought one here is a picture", "site works without it and javascript exploits are the least of your worries[idk the tech side here]" and "because it was incompatible with the forum platform / v2 onion died and v3 presents new problems" and not particularly satisfying but at least that is better than no answer at all or an answer to another question...
when deep and loving relationships are at risk of being destroyed from unjust prosecution that could have been prevented surely that's enough to add that extra level of security (one that has existed before and was removed without explanation afaik!). even forgetting about me that idea of a confused dog ripped from their intimate sexual partner and lifelong friend and not knowing what they did wrong to never get to see them again is enough to do as much as i can at a broad level to protect. besides in the future it might be my lonely, isolated and confused lover that is torn from me and either murdered or adopted to a strange family and a lifetime of anxiety and abandonment fears. i guess thats the emotional argument anyway.
humananimal
Esteemed Citizen of ZV
- Is this a fact? Or a suspicion ?
You sounds sure that they have a log. If so they have already made it ready when there is a request.
- Which uncommon non-commercial VPN is there to choose from at all ?
- A non-commercial VPN probably don’t have the resources to build and check secure system, and this way is unreliable. And if not commercial, how does the firm earn the money? Either filanthropic or by selling information.
- So I don’t see there is a work around if one has to use a VPN.
Alternatively one can use TorBrowser on the PC (but sadly very slow on an iPad).
They have to comply to the law where they operate in. If a commercial VPN provider offers traffic exit point from Germany then they have to comply to the local laws.
Commercial VPN is NOT anonymity when one using is committing crimes - its about getting past the GEO regulations with stuff like netflix and news sites to access the lawful data from the point of the provider. There are shady VPN providers who say they don't collect logs, but then again they could be shut down any time on the country they are operating in if the law requires them to have logs for all user activity e.g. for like 9 years or so.
As a Harrison Ford movie stated : "Choose wisely"
Last edited:
Over the past few years I came to the conclusion that educating people on how VPNs work and what they do is pointless. Unless the person has at least some IT knowledge. The privacy adverts are way too much persuasive even though misleading.
Those who use VPNs for privacy therefore form a wall of more easy targets protecting those who use TOR or other more heavy duty methods.
Those who use VPNs for privacy therefore form a wall of more easy targets protecting those who use TOR or other more heavy duty methods.
Who cares - Zoophilia as an idea is totally legal, unless you get caught with your pants down doing intercourse, and post pics of yourself doing it online.
MondoGoodBoy
Tourist
If using a commercial VPN does nothing, what systems would you recommend for people trying to protect their anonymity and identity online? TOR is the go to for covert internet traffic, followed by commercial VPNs. Other than these two i'm not sure what else to use.
EquineMan101
Tourist
Thank you for the heads up! I think I should go around and read all the rules sections prior to engaging. It makes sense there should be rules for sites like this. Im new here, so this helps me navigate the waters greatly.
fistingmike
Citizen of Zooville
Thanks!
Jtiller997
Tourist
[MEGA THREAD - computer security, IPsec OPsec]
HEY GUYS - 24 years programming experience here, tech guy, just wanted to share some opinions and thoughts when it comes to online security and give people a greater sense of security online. I've done everything you can think of, from white-hat activities to black-hat and all the grey inbetween - beign into beast means you need to stay safe online, and i will help you as best as i can!
Encrpytion:
End-to-end encryption (E2EE) is a method of securing communication between two or more devices by encrypting the content of the message at the sender's device, and then decrypting it only at the recipient's device. The encryption keys used to encrypt and decrypt the message are generated on the devices themselves, and are not stored on any servers or third-party systems. This ensures that only the sender and intended recipient can read the contents of the message, even if it is intercepted or accessed by unauthorized parties during transmission.
To understand why end-to-end encryption is better, it's helpful to consider other methods of encryption that are commonly used in communication. One common approach is to encrypt messages using a system where the keys used to encrypt and decrypt messages are stored on a server. This system is known as "client-server encryption." While this method can provide some level of security, it's not as secure as end-to-end encryption because the encryption keys are stored on a server that can potentially be accessed by hackers or other malicious actors.
In contrast, end-to-end encryption provides a higher level of security because the encryption keys are generated and stored only on the devices of the sender and recipient. This means that even if a hacker or government agency were to gain access to the server or the transmission itself, they would not be able to read the message because they do not have the encryption keys.
End-to-end encryption is important for protecting the privacy and security of communication in a variety of settings, including personal conversations, business communication, and political organizing. By using end-to-end encryption, individuals and organizations can communicate more securely and have greater control over their data and information.
Messengers:
There are several messengers online that use encryption for messages. Here are some examples:
VPNs:
My favorite vpn by far is PROTONVPN:
ProtonVPN comes with KILLSWITCH, stopping ALL traffic from flowing if it's not connected through the encrypted tunnel - this is the most important part of this thread, honestly!
ProtonVPN's Secure Core system is a feature that provides an additional layer of security and privacy to VPN connections. When you use ProtonVPN's Secure Core, your internet traffic is routed through multiple servers in privacy-friendly countries before it reaches the final destination. This means that if a server in a less secure country were to be compromised, your traffic would still be protected by the other servers in the chain.
Here's how ProtonVPN's Secure Core system works:
It's important to note that while ProtonVPN's Secure Core system can provide an additional layer of security and privacy, it does not guarantee complete anonymity or protection from all threats. It's still important to take other security measures, such as using strong passwords and keeping your software up-to-date, to protect your online privacy and security.
ProtonVPN also lets you connect to the TOR network for your entire device, iOS, android, windows, mac, linux etc.
Here are eight of the best VPNs, based on their features, performance, and reputation:
Browsers:
Honestly i recommend google chrome over all other browsers - it has tons of features you can enable and disable, extensions you can add and it's coded well, updated frequently
Google Chrome is a popular web browser that has gained popularity due to several factors. Here are some reasons why Google Chrome is a good browser:
Extensions:
Here are some of the best extensions for security for Chrome:
windows programs:
peerblock:
PeerBlock is a program that blocks incoming and outgoing connections to IP addresses that are known to belong to certain types of organizations or individuals, such as government agencies, corporations, and copyright enforcement agencies. Here are some reasons why PeerBlock may be considered a good program to use on Windows:
malwarebytes:
Malwarebytes is a popular anti-malware program that is designed to detect and remove various types of malware, including viruses, worms, trojans, rootkits, spyware, and adware. Here are some reasons why Malwarebytes is a good program to use:
norton security ultra:
Norton Security Ultra is a comprehensive security program that offers a range of features to protect your devices and data. Here are some reasons why Norton Security Ultra may be considered a good program to use:
comodo firewall:
Comodo Firewall is a popular firewall program that is designed to protect your computer from unauthorized access and malware. Here are some reasons why Comodo Firewall is a good program to use:
mvps hosts file:
The MVPs Hosts file is a free, regularly updated file that contains a list of known ad servers, malicious websites, and other sources of unwanted traffic on the internet. By using the MVPs Hosts file, you can block access to these sites at the DNS level, preventing your computer from connecting to them and potentially exposing your system to malware or unwanted advertising.
Here are some reasons why you should consider using the MVPs Hosts file:
If you are paranoid use MONOTONE-HWID SPOOFER often to change your device HWID, use virtual machine to do all your work online, chatting and playing.
The most important: VERACRYPT
Veracrypt is a free, open-source encryption software that is used to create encrypted partitions, volumes, or entire drives on your computer. It uses industry-standard encryption algorithms to secure your data and prevent unauthorized access.
Here's how Veracrypt works and why it's secure:
When creating a password make a pattern, something super easy to remember.. for example here is an old password i used to unlock my bootloader (it loads before windows.. if u dont have the password u aint getting in!)
password: a1s2D3f4G5l1k2j3h4G5%@552>>beastlover%@>>k935
look at it, its so complex - yet simple. they are patterns on the keyboard - get it? and my PIM was 7045, impossible to guess - the FBI couldn't get into my computer if they tried for 100 years.
Summery and shorter version:
ALWAYS be connected to a VPN, right now i'm on TUXLERVPN because it's a residential VPN - no one can tell that i'm on a vpn and no one can tell where i live if they attempt to find out. Tuxler is the extension i run on chrome but protonvpn secure core is what my PC is connected to, so for me i do localhost -> protonvpn -> tuxlervpn -> internet (it usually doesnt work like this, thats not how the internet is designed, but i made it work!)
ALWAYS use killswitch - never let your IP be exposed to any progam
USE ADGUARD DNS: blocks trackers, ads, agencies, big companies that track you
Use extensions that block trackers and ads, like adguard
always use a secure messenger, my favorite is telegram with its secret chats
BIT LOCKER IS NOT SAFE AND HAS A BACKDOOR - USE VERACRYPT aes-256+pim with a password thats 20-32 characters long include special characters! - DELETE your recovery disk, u dont need it if u can remember ur password - DO NOT WRITE THE PASSWORD DOWN
I do not endorse/not a paid advertiser, just someone who wants to Spread some security.
do not use the same password for every website, if one gets hacked - you may be screwed
use 2factor auth on everything you can and use AUTHY for the vault.
HEY GUYS - 24 years programming experience here, tech guy, just wanted to share some opinions and thoughts when it comes to online security and give people a greater sense of security online. I've done everything you can think of, from white-hat activities to black-hat and all the grey inbetween - beign into beast means you need to stay safe online, and i will help you as best as i can!
Encrpytion:
End-to-end encryption (E2EE) is a method of securing communication between two or more devices by encrypting the content of the message at the sender's device, and then decrypting it only at the recipient's device. The encryption keys used to encrypt and decrypt the message are generated on the devices themselves, and are not stored on any servers or third-party systems. This ensures that only the sender and intended recipient can read the contents of the message, even if it is intercepted or accessed by unauthorized parties during transmission.
To understand why end-to-end encryption is better, it's helpful to consider other methods of encryption that are commonly used in communication. One common approach is to encrypt messages using a system where the keys used to encrypt and decrypt messages are stored on a server. This system is known as "client-server encryption." While this method can provide some level of security, it's not as secure as end-to-end encryption because the encryption keys are stored on a server that can potentially be accessed by hackers or other malicious actors.
In contrast, end-to-end encryption provides a higher level of security because the encryption keys are generated and stored only on the devices of the sender and recipient. This means that even if a hacker or government agency were to gain access to the server or the transmission itself, they would not be able to read the message because they do not have the encryption keys.
End-to-end encryption is important for protecting the privacy and security of communication in a variety of settings, including personal conversations, business communication, and political organizing. By using end-to-end encryption, individuals and organizations can communicate more securely and have greater control over their data and information.
Messengers:
There are several messengers online that use encryption for messages. Here are some examples:
- WhatsApp - This popular messaging app uses end-to-end encryption, which means that only the sender and recipient of a message can read it.
- Signal - Signal is a messaging app that uses end-to-end encryption for all messages, calls, and video chats.
- Telegram - Telegram offers end-to-end encryption for secret chats, which are not stored on Telegram's servers and can only be accessed on the devices of the sender and recipient.
- iMessage - iMessage is the default messaging app on iPhones and uses end-to-end encryption for messages between Apple devices.
- Viber - Viber uses end-to-end encryption for all messages, calls, and video chats.
- Wickr - Wickr is a messaging app that uses end-to-end encryption and allows users to set an expiration time for messages, after which they are automatically deleted. (wickr is disabled and is a closed program now, sorry!)
- Threema - Threema is a secure messaging app that uses end-to-end encryption and allows users to verify the identity of their contacts using QR codes.
VPNs:
My favorite vpn by far is PROTONVPN:
ProtonVPN comes with KILLSWITCH, stopping ALL traffic from flowing if it's not connected through the encrypted tunnel - this is the most important part of this thread, honestly!
ProtonVPN's Secure Core system is a feature that provides an additional layer of security and privacy to VPN connections. When you use ProtonVPN's Secure Core, your internet traffic is routed through multiple servers in privacy-friendly countries before it reaches the final destination. This means that if a server in a less secure country were to be compromised, your traffic would still be protected by the other servers in the chain.
Here's how ProtonVPN's Secure Core system works:
- Your internet traffic is encrypted and sent to a Secure Core server located in a privacy-friendly country, such as Switzerland or Iceland.
- The Secure Core server decrypts your traffic and sends it to another Secure Core server in a different privacy-friendly country.
- The process repeats until the traffic reaches the final destination.
It's important to note that while ProtonVPN's Secure Core system can provide an additional layer of security and privacy, it does not guarantee complete anonymity or protection from all threats. It's still important to take other security measures, such as using strong passwords and keeping your software up-to-date, to protect your online privacy and security.
ProtonVPN also lets you connect to the TOR network for your entire device, iOS, android, windows, mac, linux etc.
Here are eight of the best VPNs, based on their features, performance, and reputation:
- ExpressVPN - A popular and reliable VPN with high-speed servers in over 90 countries.
- NordVPN - A feature-rich VPN with strong security and a large network of servers in over 60 countries.
- Surfshark - A fast and affordable VPN with strong encryption and a no-logs policy.
- CyberGhost - A user-friendly VPN with fast servers in over 90 countries and a range of security features.
- ProtonVPN - A privacy-focused VPN with advanced security features, including a Secure Core system and strong encryption.
- IPVanish - A fast and reliable VPN with a large network of servers and strong security features.
- Private Internet Access - A no-logs VPN with fast servers and a range of privacy and security features.
- Hotspot Shield - A fast and reliable VPN with strong encryption and a user-friendly interface.
Browsers:
Honestly i recommend google chrome over all other browsers - it has tons of features you can enable and disable, extensions you can add and it's coded well, updated frequently
Google Chrome is a popular web browser that has gained popularity due to several factors. Here are some reasons why Google Chrome is a good browser:
- Speed: Chrome is known for its speed and efficiency. It has a streamlined user interface that allows users to browse quickly and navigate easily.
- Security: Chrome has several built-in security features that help protect users from malicious websites, phishing attacks, and other online threats. It also regularly updates its security features to stay ahead of new threats.
- Cross-platform compatibility: Chrome is available for multiple platforms, including Windows, Mac, Linux, Android, and iOS, making it a versatile choice for users who use multiple devices.
- Customization: Chrome allows users to customize their browsing experience with a range of extensions and themes, allowing them to personalize the browser to their liking.
- Integration with Google services: Chrome integrates seamlessly with various Google services, such as Google Search, Gmail, and Google Drive, making it a convenient choice for users who use these services frequently.
- Developer-friendly: Chrome is a popular choice for developers due to its built-in developer tools, which make it easy to debug code and test websites.
Extensions:
Here are some of the best extensions for security for Chrome:
- uBlock Origin - A powerful ad-blocker that can also block malicious scripts and trackers.
- HTTPS Everywhere - An extension that automatically encrypts your web traffic with HTTPS to help protect your privacy and security.
- LastPass - A password manager that can help you generate strong, unique passwords for all your accounts and store them securely.
- Ghostery - A privacy-focused extension that blocks trackers and provides detailed information about the companies that are tracking you.
- NoScript - A security extension that allows you to control which scripts are allowed to run on web pages.
- Avast Online Security - A security extension that warns you about potentially malicious websites and provides additional protection against phishing and other online threats.
- Privacy Badger - A privacy-focused extension that blocks trackers and other scripts that could be used to track your online activity.
- Malwarebytes Browser Extension - A security extension that blocks malicious websites and provides additional protection against malware and other online threats
- IronVEST - With this you can MASK your identify online, creating a fake spoofed email for example protected by biometrics whcih forwards to your email, and when you reply.. it's also spoofed!
windows programs:
peerblock:
PeerBlock is a program that blocks incoming and outgoing connections to IP addresses that are known to belong to certain types of organizations or individuals, such as government agencies, corporations, and copyright enforcement agencies. Here are some reasons why PeerBlock may be considered a good program to use on Windows:
- Privacy protection: PeerBlock can help protect your privacy by blocking connections to IP addresses that may be monitoring your online activity or trying to track you.
- Security: PeerBlock can help prevent unauthorized access to your computer by blocking connections to known malicious IP addresses.
- Control: PeerBlock gives you control over which types of connections you want to allow or block, allowing you to customize the program to your specific needs.
- Open source: PeerBlock is open-source software, which means that its source code is freely available and can be inspected and modified by anyone.
malwarebytes:
Malwarebytes is a popular anti-malware program that is designed to detect and remove various types of malware, including viruses, worms, trojans, rootkits, spyware, and adware. Here are some reasons why Malwarebytes is a good program to use:
- Effective malware detection and removal: Malwarebytes uses advanced detection and removal technologies to detect and remove malware that other antivirus programs may miss.
- Real-time protection: Malwarebytes offers real-time protection, which means that it actively monitors your system for malware and other threats, and can stop them before they can cause damage.
- User-friendly interface: Malwarebytes has a user-friendly interface that is easy to navigate, making it accessible even to users who are not technically savvy.
- Free version: Malwarebytes offers a free version of its program that provides basic malware detection and removal capabilities.
- Additional features: Malwarebytes also offers additional features, such as web protection, ransomware protection, and exploit protection, that can help enhance your overall security.
- Reputation: Malwarebytes has a reputation for being a reliable and effective anti-malware program, and is often recommended by security experts and IT professionals.
norton security ultra:
Norton Security Ultra is a comprehensive security program that offers a range of features to protect your devices and data. Here are some reasons why Norton Security Ultra may be considered a good program to use:
- Robust antivirus protection: Norton Security Ultra provides powerful antivirus protection against a wide range of threats, including viruses, spyware, ransomware, and other types of malware.
- Multi-device protection: Norton Security Ultra offers protection for up to 10 devices, including Windows, Mac, Android, and iOS devices, making it a versatile choice for users with multiple devices.
- Secure VPN: Norton Security Ultra includes a secure VPN that can help protect your online privacy by encrypting your internet connection and hiding your IP address.
- Password manager: Norton Security Ultra includes a password manager that can help you generate strong, unique passwords and securely store them.
- Parental controls: Norton Security Ultra includes parental controls that allow you to block inappropriate content and set limits on your child's internet usage.
- Backup and recovery: Norton Security Ultra includes backup and recovery features that can help protect your important files and data in the event of a system failure or other disaster.
comodo firewall:
Comodo Firewall is a popular firewall program that is designed to protect your computer from unauthorized access and malware. Here are some reasons why Comodo Firewall is a good program to use:
- Comprehensive protection: Comodo Firewall provides comprehensive protection against various types of threats, including viruses, spyware, trojans, and other types of malware.
- User-friendly interface: Comodo Firewall has a user-friendly interface that is easy to navigate, making it accessible even to users who are not technically savvy.
- Advanced settings: Comodo Firewall allows users to customize their firewall settings, providing more advanced users with greater control over their computer's security.
- Real-time protection: Comodo Firewall offers real-time protection, which means that it actively monitors your system for threats and can stop them before they can cause damage.
- Automatic updates: Comodo Firewall receives regular updates that help ensure that it stays up-to-date with the latest threats and security vulnerabilities.
- Free version: Comodo Firewall offers a free version of its program that provides basic firewall protection.
mvps hosts file:
The MVPs Hosts file is a free, regularly updated file that contains a list of known ad servers, malicious websites, and other sources of unwanted traffic on the internet. By using the MVPs Hosts file, you can block access to these sites at the DNS level, preventing your computer from connecting to them and potentially exposing your system to malware or unwanted advertising.
Here are some reasons why you should consider using the MVPs Hosts file:
- Block ads and unwanted content: The MVPs Hosts file can block access to ad servers and other sources of unwanted content, making your browsing experience faster and more pleasant.
- Increase privacy: The MVPs Hosts file can help protect your privacy by blocking access to tracking websites and preventing them from collecting data about your online activity.
- Improve security: The MVPs Hosts file can help prevent malware infections by blocking access to known malicious websites and preventing your system from connecting to them.
- Easy to use: The MVPs Hosts file is easy to install and requires no special technical knowledge or configuration.
- Regularly updated: The MVPs Hosts file is regularly updated to include new sources of unwanted traffic on the internet, ensuring that you stay protected against the latest threats.
If you are paranoid use MONOTONE-HWID SPOOFER often to change your device HWID, use virtual machine to do all your work online, chatting and playing.
The most important: VERACRYPT
Veracrypt is a free, open-source encryption software that is used to create encrypted partitions, volumes, or entire drives on your computer. It uses industry-standard encryption algorithms to secure your data and prevent unauthorized access.
Here's how Veracrypt works and why it's secure:
- Encryption Algorithms: Veracrypt uses strong encryption algorithms, including AES, Serpent, and Twofish, to encrypt your data. These algorithms are known for their ability to resist attacks and ensure that your data remains secure.
- Secure Key Derivation: Veracrypt uses a key derivation function called PBKDF2 to generate the encryption key from your password. This function slows down the key derivation process, making it harder for attackers to guess your password and access your data.
- Hidden Operating System: Veracrypt allows you to create a hidden operating system within the encrypted partition. This hidden operating system is accessed through a separate password and is completely hidden from the regular operating system, making it even more secure.
- Plausible Deniability: Veracrypt also provides plausible deniability, which means that you can create an encrypted partition that appears to be empty, even if it contains data. This can be useful if you're forced to disclose your password to an attacker or authority.
- Open-Source: Veracrypt is open-source, which means that its source code is available for anyone to inspect and audit. This allows experts to verify its security and identify any vulnerabilities or weaknesses.
- Protect Sensitive Data: Veracrypt allows you to encrypt sensitive data on your computer, ensuring that it remains secure and protected from unauthorized access.
- Secure Communication: Veracrypt can also be used to encrypt emails, documents, and other files, ensuring that they are protected during transmission.
- Compliance Requirements: Veracrypt can help you meet compliance requirements for data encryption, which may be required by your organization or industry.
- Open-Source: The fact that Veracrypt is open-source allows for transparency and verification of its security by experts, making it a trusted encryption software.
When creating a password make a pattern, something super easy to remember.. for example here is an old password i used to unlock my bootloader (it loads before windows.. if u dont have the password u aint getting in!)
password: a1s2D3f4G5l1k2j3h4G5%@552>>beastlover%@>>k935
look at it, its so complex - yet simple. they are patterns on the keyboard - get it? and my PIM was 7045, impossible to guess - the FBI couldn't get into my computer if they tried for 100 years.
Summery and shorter version:
ALWAYS be connected to a VPN, right now i'm on TUXLERVPN because it's a residential VPN - no one can tell that i'm on a vpn and no one can tell where i live if they attempt to find out. Tuxler is the extension i run on chrome but protonvpn secure core is what my PC is connected to, so for me i do localhost -> protonvpn -> tuxlervpn -> internet (it usually doesnt work like this, thats not how the internet is designed, but i made it work!)
ALWAYS use killswitch - never let your IP be exposed to any progam
USE ADGUARD DNS: blocks trackers, ads, agencies, big companies that track you
Use extensions that block trackers and ads, like adguard
always use a secure messenger, my favorite is telegram with its secret chats
BIT LOCKER IS NOT SAFE AND HAS A BACKDOOR - USE VERACRYPT aes-256+pim with a password thats 20-32 characters long include special characters! - DELETE your recovery disk, u dont need it if u can remember ur password - DO NOT WRITE THE PASSWORD DOWN
I do not endorse/not a paid advertiser, just someone who wants to Spread some security.
do not use the same password for every website, if one gets hacked - you may be screwed
use 2factor auth on everything you can and use AUTHY for the vault.
I only took a quick look at mvps hosts site, but was wondering do you think there's away of adding this to Pfsense to prevent lan computers from connecting? Such as if I use snort for example? Currently, DNS is forwarded to places like Quad9, and a few other no logs, DNSSEC, TLS dns servers. Plus experimenting with Snort again.
Jtiller997
Tourist
used peerblock imo - u can block all bogon, which includes LAN ips
Jtiller997
Tourist
do you use dnscrypt?
Yep, assuming you're meaning the .info site and also using dnscrypt.ca.
candychameleon
Zooville Settler
So if I’m using an iPhone, and then download Tor, is that pretty good to use or no?
candychameleon
Zooville Settler
I *think* that most of it is for those who show proof that they have done sex acts with animals or are doing so currently because it’s illegal in many places.
Jtiller997
Tourist
yeah, those are great!
tor is great yes, but anyone at the end of the tunnel and the beginning can see the unencrypted traffic.
Theunis323
Esteemed Citizen of ZV
Why want to deactivate your account? Only notifying a Mod or Admin to delete your posts.
justanotheronethanks
Lurker
this is al really useful thanks
discreteirishman
Lurker
Thank you for this helpful information!