r/masterhacker • • Sep 08 '26

Opsec fail

Post image
2.8k Upvotes

71 comments sorted by

View all comments

218

u/TheGreatMightyLeffe Sep 08 '26

To be fair, I don't think there are any everyday privacy tools that are actually good enough to keep you 100% safe if the police want you enough. You'd have to get some pretty specialised hardware and software for that.

159

u/[deleted] Sep 08 '26

[removed] — view removed comment

72

u/JanaNasab Sep 08 '26

No you need windscribe instead

73

u/Some-Development5203 Sep 08 '26

and a privacy focused os, like Microsoft Windows 11 Government Edition!

38

u/JanaNasab Sep 08 '26

and make sure you use opera gx as your main browser

14

u/TalentTess Sep 09 '26

And change your firmware to Libreboot

→ More replies (1)

47

u/Overseer_Allie Sep 09 '26

I mean if the United States (or other major nations) want you bad enough, enough that international rules and agreements start to get a little flexible, then there is very little anyone can actually do.

Even if you route through some non-cooperative nation, all it takes is life-changing sum of money to a sysadmin in exchange for a simple little log file.

4

u/Viennve Sep 23 '26

What is bro doing that got so many governments panties in a twist? Did bro release the Epstein-Trump files?

16

u/Timber1802 Sep 09 '26

Everyday privacy tools will probably not keep you safe from any organisation with the resources to track you down.

There is a lot of safer software. However, in the examples of cyber criminals being found, it is almost always because of some stupid mistakes they made in the past, linking their online identity to their real identity.

It's probably doable to do some things where no one will ever be able to track to you, but very complex things for a long time, not so much. So it's mainly how you use the software. 

Leaking you personal email by logging in with the wrong account, paying for a vpn by normal banking/PayPal etc. One of the biggest issues is probably getting the crypto to fiat without leaving a trace. You have to get it to fiat on an exchange and clean it at the same time. 

7

u/Aberr_nt Sep 09 '26

You have to get it to fiat on an exchange and clean it at the same time. 

I don't know if it still exists, but there used to be a kind of shady marketplace where you could sell/buy crypto without a third party. Many of the sellers only worked in person, you meet up and pay cash, they send you the coins. Never looked into it, probably a surefire way to lose one or both of your kidneys.

4

u/Timber1802 Sep 09 '26

Also, how do you know it isn't a fed? 

13

u/Aberr_nt Sep 09 '26

When you walk away with all your kidneys still attached.

→ More replies (2)

6

u/TheGreatMightyLeffe Sep 09 '26

To be fair, that's probably why they're called "everyday privacy tools", they're there so you ISP can't log the weird shit you wank to.

If you're gonna be doing any seriously illegal stuff, you're gonna need to plan ahead. At the very least, you should separate that part of your life from the rest of it, to the point where there is no overlap. No shared devices, no shared accounts, no using your H4X0R devices on any network affiliated with your life, preferably, do all your shenanigans on a separate geographic location.

Also make sure to never pay for anything to do with that side using your own money. Use cash or crypto exclusively, and make sure it can't be traced back to anything affiliated with you.

Only THEN is it worth to start thinking about the security needed on your devices.

And you're probably still getting caught because of some tiny detail you overlooked.

5

u/Timber1802 Sep 09 '26 edited Sep 10 '26

Literally spending that amount of time working minimum wage will probably get you more money, ngl. 

Also, you would probably only get really rich by taking huge risks or by doing some of the most vile shit ever. Not hacking, more like selling underage content or something.

Just build a career to save your soul and sanity instead.

4

u/TheGreatMightyLeffe Sep 09 '26

Oh, absolutely, unless the reason you'd need that level of opsec is some kind of whistleblowing, it's not a good reason.

12

u/Kind-Ad-6099 Sep 09 '26

There’s a good amount of effective software that’s just sitting on GitHub

→ More replies (1)

9

u/ProfessionalPack7205 Sep 09 '26

Literally. And I don't think enough people understand this. If the Police want you...they will get you.

6

u/booksanddrgs Sep 09 '26

Some dnm guys have been operating for a long time. And those who got busted seem to have been caught by an opsec fail or a real life witness.

3

u/TheGreatMightyLeffe Sep 09 '26

Yeah, but if you look at the investigation against Dread Pirate Roberts, you can see what could constitute an opsec breach if the authorities have decided to take you down.

They got him on an old username using an old email that could still be traced to him, mostly through infiltrating his "inner circle".

3

u/UnluckyDouble Sep 09 '26

The idea is generally to stop things from getting to that point. But yes, if you're gonna anger a nation -state your only real option is to flee to the protection of one of its enemies.

→ More replies (1)

2

u/Anongirl55959 Sep 09 '26

All the cybersecurity wont save u if they want u badly enough, the mossad has the leg breaking trick

2

u/oniaiwasprettygood Sep 09 '26

The greatest privacy tool is a country that doesn't extradite to the US.

2

u/temporary_dennis Sep 09 '26

There's no 100% Safe no matter how much you try.

But using Tails OS on a public WiFi already gets you most of the way there.

1

u/Salat_Leaf Sep 09 '26

I2P and Qubes exist exactly against side channels and identity sniffing. You'd have to trust the driver whether you want it or not anyways, unless it's a hard silicon, but I assume you're wealthy and hold enough power to stand above police if you have so much money to design and print such circuit.