Serious Basic OPSEC tips for dummies

[AsiaCel]

Lots of people in incel spaces get hacked or give their identifies out, so I am gonna offer you some OPSEC tips today.

I am a software developer, so I know something about computers, but if you want something more sophisticated, you will have to look elsewhere.

I believe the best OPSEC relies on threat assessment, i.e. what are realistic threats to you.

These tips are designed against civilian level threats; if the state wants to find you, there is not much you can do — so don't give the state a reason to! Post like the feds are already there and watching (FBI monitors this forum anyway)!

The burner phones, VM, and multiple VPN (TOR) approaches are costly (performance and money) and overkill for posting in an incel forum.

So let's begin:

1. Get rid of your old phones, buy a reputable brand with long software security support (I recommend Samsung A line/Google Pixel). The reason is because no matter how well you secure other things, if your root level is vulnerable, other OPSEC tips are useless.

2. Do not use your real life names and selfies

3. Do not link your real social media in discord and others.

4. Compartmentize your medias. For example, if in Instagram you said "I am beast123", then don't use this name on an incel or controversial platforms.

4. Do not talk about your birthday; if you have to, wait for few weeks so no one knows your real birthday; lots of platforms use birthdays.

5. Do not connect to this site on school or work wifi. Turn off the work wifi before connecting to this site by using your mobile data.

6. If you have to share a link from social media, take off the share link params like igsh= and YouTube pp/si on URLs. An Indonesian incel was doxxed and reported to his university because of this.

7. Stop making overly threats like "I will go ER".

8. Don't bother with super secure OPSEC like burner phones; if you don't know what you are doing, it could burn you badly. Use a VPN if you're from countries like Singapore or Turkey; one with good reputation and won't hand data to authoritarian governments.

9. Do not install more than one antivirus.

If you have any more tips to share, feel free to do so!

 

[5ft7Rice]

1. Get rid of your old phones, buy a reputable brand with long software security support (I recommend Samsung A line/Google Pixel). The reason is because no matter how well you secure other things, if your root level is vulnerable, other OPSEC tips are useless.

iphone 17 pro max ?

 

[AsiaCel]

iphone 17 pro max ?

Mainstream phones are good enough with long software update are good enough, you're mostly evading the adware/malware, not state level actors

 

[St3v3Cel]

The best OPSEC is to not use the internet. The next best thing if you have to or want to use the internet would be to make a conscious effort to avoid being the type of person bad people would like to victimise. The feds can and will get you if they want you, like you said.

 

[ANTAGONIST]

Do not connect to this site on school or work wifi. Turn off the work wifi before connecting to this site by using your mobile data.

Does it really matter? If the wifi assigns you a new ip everytime anyway (dhcp) and they can't see what you do or what's your account if the site is https. They can only see that someone is on the url but not what he is doing. Using a school or work computer is a different thing, obviously but connecting to the wifi with your phone isn't gonna do anything unless they have a target on your back.

 

[4sez]

Use Qubes OS with Whonix VMs.

Along with that, also use Mullvad VPN, and make sure to have a kill switch on your computer.

In addition, if you're doing sensitive activities, make sure it never links back to you. There will always be a trace, no matter how hard you try to clean it up, so your best bet is to make sure it's extremely difficult for your threat model to trace it back to.

Also, stylometry. Use AI LLMs (such as that one penguin LLM I forgot the name of) to rewrite what you want to say. Or better yet, run your own LLM. Depending on your threat model, they can and have deanonymized people based solely on their writing style.

 

[4sez]

If you have a low-end computer, use Tails.

 

[AtrociousCitizen]

they can and have deanonymized people based solely on their writing style.

Wasn't that how Ted Kaczynski ended up getting caught?

 

[4sez]

Wasn't that how Ted Kaczynski ended up getting caught?

Yes, by his own brother, if i remember correctly.

 

[AtrociousCitizen]

Yes, by his own brother, if i remember correctly.

Brutal

 

[LeFrenchCel]

The best OPSEC is to not use the internet.

Extreme solution but should work tbh

 

[Last2025cel]

Use a VPN if you're from countries like Singapore or Turkey; one with good reputation and won't hand data to authoritarian governments.

Proton and Mullvad are two good ones. Or you could just use TOR which is free.

 

[AsiaCel]

Does it really matter? If the wifi assigns you a new ip everytime anyway (dhcp) and they can't see what you do or what's your account if the site is https. They can only see that someone is on the url but not what he is doing. Using a school or work computer is a different thing, obviously but connecting to the wifi with your phone isn't gonna do anything unless they have a target on your back.

This one is about your employer. You won't want to let them see you going on a incel forum.

They can absolutely see the domain name.

From what I know, unless they use a custom SSL or fool your browser by using HTTP, they can't see what exactly you are sending out or your name.

But it won't be hard to guess if you sent some posts, because that would be some spike in upload data.

 

[AsiaCel]

Use Qubes OS with Whonix VMs.

Along with that, also use Mullvad VPN, and make sure to have a kill switch on your computer.

In addition, if you're doing sensitive activities, make sure it never links back to you. There will always be a trace, no matter how hard you try to clean it up, so your best bet is to make sure it's extremely difficult for your threat model to trace it back to.

Also, stylometry. Use AI LLMs (such as that one penguin LLM I forgot the name of) to rewrite what you want to say. Or better yet, run your own LLM. Depending on your threat model, they can and have deanonymized people based solely on their writing style.

This is OPSEC against the state type of thing.

Good if you have not committed a crime yet in some authoritarian countries.

The problem is, if you actually committed a crime, and live like that, it is actually very difficult to sustain.

You will have to be constantly on the move and forgo all normal services like Gmail.

No usage of any services involving your credit card or anything that ties back to your ID.

If you use a fake credit card (assuming it worked, which it won't), that just made things so much worse when you eventually get caught (you will have to pay back the money and face additional charges)

In fact, even if you are perfectly secure with OPSEC, the feds have other ways of getting to you.

What about your parents, friends? Surely they know something about you? Won't tell? The feds can use "enhanced interrogation tactics" on them to make them speak.

Got a random ID check? Well yeah about this one....

 

[WastedPotential]

Top tier thread, should be perma pinned tbh or must read content.

6. If you have to share a link from social media, take off the share link params like igsh= and YouTube pp/si on URLs. An Indonesian incel was doxxed and reported to his university because of this.

This one I don't quite understand how that would happen.

 

[4sez]

This is OPSEC against the state type of thing.

Good if you have not committed a crime yet in some authoritarian countries.

The problem is, if you actually committed a crime, and live like that, it is actually very difficult to sustain.

You will have to be constantly on the move and forgo all normal services like Gmail.

No usage of any services involving your credit card or anything that ties back to your ID.

If you use a fake credit card (assuming it worked, which it won't), that just made things so much worse when you eventually get caught (you will have to pay back the money and face additional charges)

In fact, even if you are perfectly secure with OPSEC, the feds have other ways of getting to you.

What about your parents, friends? Surely they know something about you? Won't tell? The feds can use "enhanced interrogation tactics" on them to make them speak.

Got a random ID check? Well yeah about this one....

Check your chat.*

 

[4sez]

Proton and Mullvad are two good ones. Or you could just use TOR which is free.

Proton VPN sucks, just stick to Mullvad.

 

[goyim next door]

Proton VPN sucks, just stick to Mullvad.

What's wrong with Proton? I see people keep recommending Proton.

 

[4sez]

What's wrong with Proton? I see people keep recommending Proton.

They comply with LE.

 

[Spice]

I hate how paranoid you have to be nowadays, what a shitty timeline to be in

 

[AsiaCel]

I hate how paranoid you have to be nowadays, what a shitty timeline to be in

These aren't even paranoid tips but very basic internet Hygeine

 

[proudweeb]

so basically just don't use social media

as an incel I don't understand the point of social media anyway

 

[Freetard]

I don't care about opsec. I'm open to new friends in New Jersey. We can hang out and have fun.

 

[Last2025cel]

They comply with LE.

Oh, sorry. Didn't know that.

 

[4sez]

I don't care about opsec. I'm open to new friends in New Jersey. We can hang out and have fun.

Ok officer.

 

[Oldcel_Narutofan]

Ok officer.

funny, but real talk: are you just going to hide for the rest of ur life? I cant accept that. I want to proudly proclaim my inceldom IRL

 

[4sez]

funny, but real talk: are you just going to hide for the rest of ur life?

if i have to.

I cant accept that.

accept what?

I want to proudly proclaim my inceldom IRL

We're considered 'extremists'. I'm pretty sure if you outed yourself as one, you would most likely get harassed/attacked frequently.

 

[Oldcel_Narutofan]

if i have to.

accept what?

We're considered 'extremists'. I'm pretty sure if you outed yourself as one, you would most likely get harassed/attacked frequently.

Well we need to fight back dude

 

[Extern]

Based. Been meaning to make a thread like this.
If any IP from your list of IP addresses is one linkable to you, absolutely DO NO fedpost

 

[Spice]

These aren't even paranoid tips but very basic internet Hygeine

I know but nowadays its not even about basic OPSEC but rather trying not to get hacked every second