Rate my opsec

General Discussion
6

I’d add to other suggestions - read about other users and learn from
their errors.
Ross Ulbricht was identified at least in part by exactly this kind of
mistake.

I never presume to speak for the Qubes team.
When I comment in the Forum or in the mailing lists I speak for myself.

2 Likes
7

I’ll see to add a I2P & Lokinet into my chain of security, but i’ll get a very bad connection I think

8

  • Get a UPS
    What do you mean by saying UPS?

  • Better to use two sys-net with separate access points.
    I thought of using two different 4g from two phone.

  • I’m assuming you have reviewed the risks of using Tor over VPN
    Well… the only risks I know is that the VPN can snitch you, and in certain case, see your traffic ( Like the exit node ) if the website isn’t encrypted with HTTPS. Using a VPN in my case will give me a better anonymity, but will increase my risks. That’s why I thought of using Tor before and after the VPN. Also, only using a trusted VPN that does not log anything, and pay using Monero.

9

Because i’m not using Dread anymore. I’m not doing anything illegal, so I won’t change my keywords. If I was doing anything illegal, I just want to tell you that you’re a snitch.

10

  • minimal templates and disposable appVMs
    I got VM just as needed.

  • firewall settings / pi-hole
    I tried to setup a pi-hole but it only works with static ip. What if instead I use the sys-firewall and only authorize the app ip i’m actually using? If for exemple i’m using Signal on that appVM, I actually only authorize Signal IP?

  • Lokinet (with exit node)
    Unfortunately I can’t do a sys-lokinet because it only works if you run lokinet in the same appVM than your others apps, so I couldn’t run it with my Anbox ( Discord, Telegram, etc… ) and also in my Whonix wich is already using his own gateway.

11

Here, you have automated pihole installation:

For lokinet, unman asked for feedback and new tools to add. You will get my vote for lokinet :wink:

PS: Your issue is most probably linked to DNS. See Linux troubleshooting - Oxen Docs

12

Both are giving me errors.

The first one give me : Unable to find a match: 3isec-qubes-pihole

and the Lokinet still doesn’t work after that i add the dns line and dl the last version of resolvconf

13

Uninterruptible power supply.
You need to make sure that your two identities cant be correlated with
external events - e.g. power outage (accident or deliberate)

1 Like
14

What have you done?
Have you installed the repository and the tool?

15

Uninterruptible power supply.
I definitely understand now, so they can do a correlation by shutting down the public wifi tho.

16

When i’m doing qubes-task it say usage etc… so it’s successfully downloaded in my dom0, but when i’m doing qubes-task install pihole, it open a white window with sys-firewall as title, and it’s writed : Unable to find a match: 3isec-qubes-pihole

17

I don’t see this.
What happens if you run sudo qubes-dom0-update from command line in dom0?
Do you see the 3isec Qubes dom0 repository being updated?
Are there any errors?

18

got the same error even after updating the bios. can you tell me where I can find the 3isec files from filesystem? I’m at the start

19

Because i’m not using Dread anymore

Of course not, you’re still using Dread.

I’m not doing anything illegal

That’s what you want the DGSE to read when they’ll find evidences by correlating your activities on different forums.
We both know that this is not true, and you’re trying to mitigate the risk of being caught by “LE” since you’re trying to sell things on the Dark net. Note that Qubes OS Team is not responsible for any of your activities.

so I won’t change my keywords

There’s no need to be aggressive, I’m just trying to give you some good advices to improve your OpSec.
Like dear @unman said, we’ve to learn from other mistakes before you are yourself in the category of “others”.

If I was doing anything illegal, I just want to tell you that you’re a snitch.

Thank you! I really appreciate it, it means the world to me LMAO.

4 Likes
20

you unmasked me… :shushing_face:

21

I don’t understand this.

Why have you not answered my questions?

22

@CenUriPaa3378 How did you manage to install andox ? Any tutorial to recommend ?

I tried a while back ago, and was a pretty painful experience

23

What happens if you run sudo qubes-dom0-update from command line in dom0?
Do you see the 3isec Qubes dom0 repository being updated?
Are there any errors?

I don’t get any errors, just a white page that download things, the page close itself, then I got a new line in the terminal.

24

I actually didn’t setup my Anbox yet because i’m already killing my brain trying to install pi-hole

25

Again, you have not answered the question(s).
SO:
Did you follow the instructions at https://qubes.3isec.org/tasks.html?
Specifically:

  1. Did you add the repository definition given there to dom0?
  2. Did you validate my key and import it in to dom0?
  3. Did you import the key to the rpm keyring?
  4. Run qubes-task list - observe result
  5. Run qubes-task install pihole - observe result

Let us know answers to 1-3, and result output from 4 and 5.

I never presume to speak for the Qubes team. When I comment in the Forum or in the mailing lists I speak for myself.