<story><title>Twitter Activist Security</title><url>https://medium.com/@thegrugq/twitter-activist-security-7c806bae9cb0#.881ljtvmr</url></story><parent_chain></parent_chain><comment><author>angry_octet</author><text>Because it is always possible you will fail your Tor discipline, I would add some defense-in-depth aspects, in case your browser is compromised and your network address is revealed.&lt;p&gt;- Use separate hardware. A cheap laptop and a cheap phone.&lt;p&gt;- Burn the receipt and chuck the packaging.&lt;p&gt;- Cash. Pay in cash.&lt;p&gt;- Buy from small stores with no CCTV, or better yet, from people like migrant workers.&lt;p&gt;- You can buy stored value cards (debit cards) without ID, and some you can load with cash at ATMs. (Also good to buy from travellers.)&lt;p&gt;- Once you have a debit card you can pay for data without going to a store.&lt;p&gt;- If you turn on your Wifi tethering and other devices are in range you have created an event in their logs. Just use a cable. If you must, change the SSID regularly and use Android 6 which has MAC randomisation. Never have any other SSIDs saved, especially not your home network.&lt;p&gt;- Turn the phone off when not in use. Removing the battery is advisable.&lt;p&gt;- Don&amp;#x27;t connect to 3G near your home or work or where there is pervasive CCTV or not many people.&lt;p&gt;- If your commute is logged (via your cellphone, number plate recognition &amp;#x2F; tolling, personally identified public transport like Oyster cards) then your location can be correlated against when your persona was online.&lt;p&gt;- It might seem that transmitting from different locations is a good idea. But not really, it gives a more unique history.&lt;p&gt;- Run Tor on the laptop. Run &lt;i&gt;nothing&lt;/i&gt; on the phone, its just a radio.&lt;p&gt;- If you want to use Signal, get another burner phone.&lt;p&gt;- Invest in some numbered wafer seals or tamper bags. Keep your kit in them when cached.&lt;p&gt;- Don&amp;#x27;t tell fibs to federal agents. Record all interactions with them.</text></comment>
<story><title>Twitter Activist Security</title><url>https://medium.com/@thegrugq/twitter-activist-security-7c806bae9cb0#.881ljtvmr</url></story><parent_chain></parent_chain><comment><author>Perceptes</author><text>One comment and two questions:&lt;p&gt;I wish I had something important enough to say to be able to put this advice to use!&lt;p&gt;How important is the physical location you work from? Should you religiously avoid working out of a place that is associated with you, such as your home or office? Should you avoid places that are near where you live, and if so, how far should you go? Or is Tor sufficient for masking your physical location in all cases?&lt;p&gt;I&amp;#x27;m very interested in how the grugq is able to have had such a public persona for so long and remain anonymous—including speaking at conferences in person, I understand. Obviously, he is an expert, but that doesn&amp;#x27;t really explain _how_. He writes prolifically on Twitter and sometimes other mediums. How is this large body of content not subject to stylistic analysis? Information is known about him, such as where he lives and what he does for a living. That seems extremely revealing. How has he been able to speak at conferences, quite literally tying his physical identity to this anonymous persona, let alone traveling to the conference in the first place?</text></comment>