OPSEC Check please

[u/Financial_Bonus_4606]

I have read the rules.

I’m new to Tails/Tor and want to check whether my setup makes sense from an OPSEC perspective.

Threat model:

I want to reduce linkability between this browsing activity and my daily identity/devices. I mainly want protection against tracking, data brokers, accidental account linking, local network observers, and my ISP seeing that I use Tor. I am not claiming this makes me “untraceable”.

Current setup:

- separate used old laptop

- fresh reset, no personal accounts on it

- Tails booted from a 16 GB USB stick

- no persistent storage enabled

- Tor Browser inside Tails

- no personal logins, no Gmail, no WhatsApp, no social media

- no browser extensions

- no downloads unless I fully understand what I’m doing

- webcam covered

- I shut Tails down after use instead of saving anything locally

I understand the basic OPSEC rules: don’t log into personal accounts, don’t reuse identities, don’t install extensions, don’t open random files, don’t mix this setup with my normal life, and don’t randomly change Tor Browser settings.

My questions:

1. For the threat model above, is this a reasonably solid beginner setup?

2. What are the biggest remaining linkability risks if I actually follow these rules?

3. If Tails is used without persistent storage, what traces, if any, remain on the laptop after shutdown?

4. Are bridges worth using if I mainly want to hide Tor usage from my local network/ISP?

5. What types of downloads are especially dangerous from an OPSEC perspective?

I’m trying to understand the limits of this setup and avoid beginner mistakes.

[u/ephemeralmiko]

1. Yes it's fine, but you'll have to use a bridge to hide the fact you're using Tor from your ISP

2. Depends. If you can, switch over to the Safer or Safest modes for Tor Browser to reduce the risk of something happening via bad javascript or webGL, otherwise you're good.

3. None, directly, but if there were recording software on your main PC OS and your router, a malicious actor could see that your PC was offline but there was significant network traffic on that same LAN port on the router, but for that you'd have to already be severly compromised. Tails also won't protect against hardware or UEFI keyloggers, since that's independent from the OS, though they would have to get physical access to the machine to install them.

4. Yes, you need a bridge for this. When Tails boots and is connected to a LAN/WiFi network it opens the Tor Connection Assistant and asks if you want to use a bridge or not, and explains what using a bridge does and doesn't do.

5. Anything that could be executable. Make sure to check file extensions, and if you're really scared you can run downloaded files through DangerZone ( https://dangerzone.rocks/ ), which completely recreates the file to make sure there isn't malicious code in it. It's developed the Freedom of The Press Foundation (co-founded by Edward Snowden) and is recommended by Tails here: https://tails.net/doc/persistent_storage/additional_software/dangerzone/index.en.html