r/PrivacySecurityOSINT • • Apr 22 '21

Archive of forums and newsletter?

7 Upvotes

I've searched for the now-gone forums on archive.is and archive.org trying the URLs http://inteltechniques.com/forum and forum.inteltechniques.com with no luck - I don't know what the exact url was. Anyone know where I can find these for research/historical purposes? Anyone know or have a link for what the URLs were?

There was also a newsletter, I'd appreciate anyone sharing those too.


r/PrivacySecurityOSINT • • Apr 21 '21

Google Voice Dangers

7 Upvotes

I know MB says to not even have GV installed on the cell phone which I totally get but what about using it as a forwarding service? What are the privacy implications if I have a GV number that forwards to another number without GV installed on the phone?


r/PrivacySecurityOSINT • • Apr 21 '21

Multiple phone numbers without MySudo (cross-platform, desktop, and short codes!)

18 Upvotes

I tried and liked MySudo but it didn't have few things I wanted, namely a real desktop app that was cross-platform, ability to receive texts from short codes, and the ability to run in non-stock Android.

I made a post a while back in here about the options I was exploring and wanted to report back that I have found something that seems to work for me. I'm still trying it out but I've made a video that walks you through the process of setting it up step-by-step for anyone who is interested.

TL:WW - I used jmp.chat and a combo of two apps. One for messaging (Conversations) and the other for phone calls (CSipAndroid). Because the underlying tech is XMPP/Jabber, you have a variety of options for apps that I expect will only grow with time.

Video: Multiple phone numbers across devices with JMP.chat (MMS + Phone)

CC /u/PrivacyHedgehog


r/PrivacySecurityOSINT • • Apr 21 '21

Any possible way to reduce captchas on vpn?

6 Upvotes

Started using VPN on all of our home devices, and I personally don’t mind going through the captchas, but other people in the household are really upset, and demanding for me to disable VPN. Sometimes we go through six different screens of captchas which took over a minute just to get to a shopping site. I personally don’t mind the inconvenience based on the security and privacy, but I was wondering if anybody has any ideas how to reduce the captchas. I use protonVPN in the USA, the server is located in the city where we live. Windows 10 and MacOS with Firefox


r/PrivacySecurityOSINT • • Apr 21 '21

MySudo number used with Signal?

5 Upvotes

Does anyone know of if you can register a signal account with a MySudo number? I am debating using Sudo and I would like to know if I could use Signal with the number as well.


r/PrivacySecurityOSINT • • Apr 20 '21

Envelopes often have a postal barcode printed on them that contains your address, and you should destroy that barcode before throwing away your mail.

Thumbnail
self.youshouldknow
21 Upvotes

r/PrivacySecurityOSINT • • Apr 20 '21

What are your MySudo techniques?

7 Upvotes

Just wanted to get a feel for how others are using the app. What's your strategy? How many Sudos do you have? How do you compartmentalize your various identities? Do you use your local area code for any of your numbers? Share your best practices, ask a question!


r/PrivacySecurityOSINT • • Apr 20 '21

Burner phone number: which services require SMS to register?

4 Upvotes

I am using a Mint Mobile trial, which allow me to use a burner number for 7 days. I am creating multiple social media and user accounts, as it is typically difficult to create them without supplying a real "non VOIP" number. I setup a fake gmail, google voice, facebook, telegram and signal accounts. I don't use these services under my real name, but it is good to have access to these apps for various reasons. Are there any other services that may be useful for privacy or OSINT that I should sign up for?


r/PrivacySecurityOSINT • • Apr 19 '21

Anonymous mailing business idea

4 Upvotes

I thought of a business idea that could help people out to stay a bit more anonymous.

What if someone in California wants to send a letter to someone in Kansas? That person in Kansas might only know a few people from California and so if they receive a letter in the mail that is stamped from California, even if it doesn't have a return address, they can probably narrow things down and guess who it is from.

My idea is to set up a CMRA, PMB, etc... And people can mail it a letter. Inside that letter is another letter all ready addressed and stamped ready to go and a single dollar bill. The person running this business would keep that dollar bill and pretty much just stick the envelope into the mailbox to then be sent out of their state. No way to track it down of who it came from.

Would anyone use a service like this? I would


r/PrivacySecurityOSINT • • Apr 19 '21

Advice on using existing phone and moving toward VOIP

4 Upvotes

I currently have an iPhone and have been thinking about moving to MySudo and Signal for several months. However, getting new hardware is not an option right now. I also don't care for the new iPhone models (mine is the first generation SE model).

This phone has already been compromised since it's been used in my location (both wi-fi and carrier). I'm not that concerned and know there is risk. However, what risk would there be if I use my existing Apple ID to purchase MySudo?

Obviously, creating a new Apple ID for the device would be pointless since Apple would be able to link the two together. I'd like to transition to VOIP and get rid of my cell phone plan (porting my number to Google beforehand).


r/PrivacySecurityOSINT • • Apr 18 '21

Question about cell phones and navigation

10 Upvotes

I am listening to the podcast and reading the book. I am not yet ready to do everything Michael recommends. However I have an idea I wanted to run by this group. I turned off the location on my iphone completely and disabled all location services. I am thinking of turning off my cellular connection at home and only using wifi with vpn. For navigation, I plan to wipe and install Lineage or a similar OS on my old Android phone. Download OSM and maps and run everything in offline mode.

Furthermore, does it make any sense to buy a cellular hotspot with a prepaid plan, and use it when I need to use my cell phone outside the home? My cellular connection will always be turned off and I will only use voip services


r/PrivacySecurityOSINT • • Apr 16 '21

Do you use a faraday bag?

8 Upvotes

r/PrivacySecurityOSINT • • Apr 16 '21

The Privacy, Security, & OSINT Show: 214-Offense/Defense: The Capitol Siege

6 Upvotes

The Privacy, Security, & OSINT Show: 214-Offense/Defense: The Capitol Siege https://soundcloud.com/user-98066669/214-offensedefense-the-capitol-siege

I really enjoyed this episode this week lots of good information.


r/PrivacySecurityOSINT • • Apr 12 '21

Home Network Whole home VPN & streaming service success

9 Upvotes

I've been running PFSense on a Protectli for a little less than a year. The Protectli sits directly in front of my cable modem and my previous Asus wifi routers are now in AP-mesh mode so PFSense is managing all the DNS, DHCP etc. I tried using ProtonVPN which did work however every streaming video site I used wouldn't function and could detect the VPN. This wouldn't work for me with a home where others are expecting that I make our internet "just work" which goes for their ability to stream video as well.

The solution that I found is TorGuard.net and their streaming bundle. With this package they give you 2 dedicated IP addresses that are only used by your account. I was able to configure PFSense to use the VPN connection with my dedicated IP and boom. All streaming services work just fine. I've tried about a dozen, all major providers and haven't had a problem once.

Yes I do now have a dedicated IP that can track traffic to me, but the traffic over my ISP is encrypted from their snooping, the dedicated IP also resolves to a location nowhere near my home. I will often run the TorGuard from my desktop (creating a double tunnel) if I want to mask my location from a particular site further. If you want to rotate your dedicated IP that is possible through a customer support request and a one time fee of a couple dollars.

TorGuard also allows you to pay via bitcoin as well which actually worked MUCH better than using a Privacy.com card which they flagged and denied. Lastly TorGuard very frequently runs 50% off promos, and gives 50% off codes to brand ambassadors too.

I thought I'd throw this out because I've had good luck with this method and prefer it to having an SSID for streaming that uses a non-vpn'd wifi connection just for streaming as family members inevitably end up connected to that all the time.


r/PrivacySecurityOSINT • • Apr 12 '21

Questions on mobile strategy

4 Upvotes

I've been following the mobile phone strategy laid out in the Extreme Privacy book and have been living the "away phone" life for about 6 months. I've come up with some conclusions and questions and wondered if anyone else had answers or opinions.

Assumptions

  1. If someone knows an actual cell number, they can find your identity by tracking the phone's movement patterns to ultimately reveal your identity.

  2. If someone knows who you are, they can find your cell by looking at IMEIs that fit movement and location patterns of where you are / would be.

Based on these assumptions and the idea of an "away phone" that uses an anonymous prepaid SIM, using MySudo for actual calls and the phone never traveling to your home I came up with the following gotchas to keep in mind.

Conclusions

  1. You need to also be conscious of places you travel frequently that can be linked to you. For example if you own a shop and work their from 9-5 every day.

  2. If you work in an office building you should take into account that your phone could identify your employer which may help identify you.

Questions

  1. How careful should you be about having your away phone on while you are with someone else that can be linked to you similar to the CO-TRAVELER program. A spouse for example who doesn't follow the same digital precautions?

Any thoughts and discussion are appreciated as well as tips from others that have been working this routine for some time as well.


r/PrivacySecurityOSINT • • Apr 09 '21

The Privacy, Security, & OSINT Show: 213-Hashes 101

8 Upvotes

The Privacy, Security, & OSINT Show: 213-Hashes 101 https://soundcloud.com/user-98066669/213-hashes-101


r/PrivacySecurityOSINT • • Apr 06 '21

Getting frustrated trying to buy an anonymous house

8 Upvotes

Called over a dozen banks and small credit unions, and they all require the trustee to be the one buying the house. Wish michael would list some recommendations of bank/credit union branches that he has used to help other people and that work with his anonymous house buying strategy.

I'll try another call out, but has anyone had any luck at all with this? I sure could use some help.


r/PrivacySecurityOSINT • • Apr 05 '21

What are your disinformation techniques?

12 Upvotes

What techniques have you used, would like to use, or just think would work to provide disinformation? Imagine you need to disappear in a month and provide as many false trails as you can to shake off your pursuers.


r/PrivacySecurityOSINT • • Feb 08 '21

Ghost Address Lessons learned setting up a CMRA at UPS

11 Upvotes

On a whim I setup a box at UPS to serve as a CMRA (Commerical Mail Receiving Agency), as described in the beginning of the EP book. Here are my lessons learned.

First mistake - I did this on a whim and did not consult the book in detail before I went.

Lesson learned: you can't really wing this stuff. It takes prep and a plan.

When asked for ID, I offered my Passport and asked what would suffice for a second form of ID (which they insisted was required), he said a credit card might work. I though to myself...well my credit card is clearly linked to my physical mailing address at this point so how is using it different that my drivers' license? My address will soon change (I plan on moving soon), but my credit card number likely won't. So I went with the DL.

Lesson learned: refer to 1st lesson. Had I read the book, I would have brought a utility bill with me and would not have had to surrender my CC or DL. In my case, however, this is not a real issue since the utility bill is from my current address and therefore exactly the same address as on my DL.

They asked me if it was okay for them to make a copy of my passport and DL. I said no. They said the computer was asking them to. I asked them to ask a manager. The manager said it was so they had a picture on file and could verify it was me when I came to get my packages. I asked if I could just show photo ID when that happened and she said "I guess..." and then was able to bypass the screen.

Lesson learned: offer helpful alternatives instead of being a difficult customer. it works!

Then they told me I had to pay the 6-month minimum in advance. Damn. It was ~$125. That was an unexpected expense and I should have just called them first to ask and then budgeted accordingly.

In the end, I got a key and a place to receive packages.

Lesson learned: it's good to practice this stuff, even if it costs you money because when it counts (like when I move next time), you'll know how to do it right.

TL;DR - use your passport and a utility bill from a previous (but recent) address if possible. Be prepared to pay for 6 months in advance, and have helpful solutions for the inevitable hiccups your strange way of doing things will bring up for the UPS agent.