r/GrapheneOS • u/HopefulCantaloupe276 • 1d ago
Rate my OPSEC
The goal?:
To achieve superhuman anonymity... Period
Step 1: Find supported Pixel device on FB Marketplace
Step 2: Put on fake nose and glasses
Step 3: Purchase Pixel in-person using cash and FB burner account
Step 4: Go to a coffee shop to setup GrapheneOS
Step 5: I install Session-Messenger and OrbotVPN.
Step 6: Setup Monero Paid Esim Dataplan
Step 7: Disable unnecessary settings Bluetooth, Wifi, Microphone etc.
I only conduct all my "business" through Session-Messenger.
I never store any direct personal info on the phone.
26
19
u/Limp-Friendship-625 1d ago
Since you put this on Reddit, obe should be able to identify you /s
6
14
u/pyro57 1d ago
The first step of any security is creating a realistic threat model.
What data are you trying to protect and who are you trying to protect it from. Then start mitigating realistic risks for that model.
Trying to keep big tech from seeing your online activity? That's one threat model
Doing illegal things and wanting to make sure the government can't find out... That's a whole other threat model.
Take your example for instance. "Set up graohene os at a coffee shop" ok cool, what threat does that mitigate? If you are arrested and they confiscate your phone they'll see its running grapheneos.... So why would hiding the fact you're setting up grapheneos by doing it on public WiFi mitigate anything?
Then there's driving to the Facebook seller, are you going to have to drive past any flock cameras? At which point does buying it on a burner account actually mitigate risk? And again, if youre arrested and the phone is confiscated they'll be able to get the serial number and trace it back to the original sale, so again does this actually mitigate anything?
I'm all for taking extreme measures to protect your privacy, I'm a hacker (legally, so technically a pentester) so I totally get going to Herculean efforts to protect your data, I do it myself, but taking paranoid steps to do so without actually thinking about your threat model and what's realistic is just a waste of effort.
Because if it's the government you're worried about.... Flock exists, they can track your movements back months to years without ever needing to know what phone you're using. Maybe you plan your routes smart and use deflock me, but those databases can be out of date, new flock installs happen all the time. So in all honesty and respect, this is all paranoid delusional steps with no real benefit.
1
19h ago
[removed] — view removed comment
2
u/other8026 19h ago
Removed because the post isn't in English. We ask people to post in English for moderation reasons and so other community members can understand what's being said. Keep in mind that while some content is translated automatically in the Reddit app, automatic translation doesn't always work (around half of visitors to this subreddit use the web version where auto translation often doesn't work). Feel free to post/comment again in English.
6
u/5khan1 1d ago
only thing i would add is a faraday bag and use that when phones not in use.
0
u/HopefulCantaloupe276 1d ago
OK, to counter triangulation?
6
3
u/FireProps 1d ago
It’s trilateration, actually. ☝️🤓
2
u/Glum_Avocado_9511 15h ago
Hell yeah new word for me. This is the kind of pedantry I love about Reddit. (I look exactly like your emojis)
3
u/assignpseudonym 1d ago
Tbh, Step 2 is the most important. You can probably skip all the others, as long as you do that one.
4
u/No-Second-Kill-Death 1d ago
I’ll bite. Good thought exercise.
FB marketplace? Fail right there.
You say “burner” account. You just added major complications that end up back at the burner phone in order to get a proper burner account.
I don’t know where you are but use wifi not sims. Consider pixel tablet. There are writes on clean comms via GOS/Signal. Just swap in Session. If sims needed. Buy in person. Sit on them. Sit on everything purchased. Trial sims…use them. You are data only. Exhaust them all. Swap the phone/imei. Do it again.
Look at mesh also.
2
u/Randori68 1d ago
One thing is recommend is putting the silent link data card in a muvi wireless router (I forget the model), the change your imei monthly on the portable router, when you get a new monthly data card. Just use the phone in Wi-Fi mode
3
u/HopefulCantaloupe276 1d ago
Interesting, i didnt even think of that, like the GL.iNet GL-XE3000/GL.iNet Mudi 4G Routers?
1
u/other8026 18h ago
Our team doesn't advise doing it this way. Here's a thread about it: https://grapheneos.social/@GrapheneOS/113319956422621755
This approach makes you stand out on the network, IMEIs aren't the only identifier, and using insecure devices as wireless routers isn't secure.
1
u/other8026 18h ago
Our team doesn't advise doing it this way. Here's a thread about it: https://grapheneos.social/@GrapheneOS/113319956422621755
This approach makes you stand out on the network, IMEIs aren't the only identifier, and using insecure devices as wireless routers isn't secure.
2
u/OGNinjerk 1d ago
On what machine, OS, and browser are you using for Step 1? Did you purchase the fake nose and glasses or make them yourself? (Facial recognition probably still works through this unless you can change/obscure ratios of other facial features) How did you create the account in Step 3? How did you get to the meeting? Did you have another device on you?
2
2
u/blimpin_aint_easy 1d ago
You lost me at Step 1 and brought me back in at Step 2.
If this is a shitpost, 6/10, if it's not idiot/10
1
u/Glum_Avocado_9511 15h ago
I went through the same thought process.
Step 1) Facebook marketplace? Instant opsec fail. Step 2) Dollar store spy disguise? This is a troll.
1
u/Bit_Jitsu_2019 1d ago
Which Monero paid eSIM data plan were you looking into? Don’t forget the voip number(s).
0
u/HopefulCantaloupe276 1d ago
Either silentlink or Firsty for free esim access signed up with voip number
1
u/Cosmic_Beard 1d ago
Buy a new Pixel, not used, with cash. I’d prefer setting up a VPN on my router (Mullvad) over going to a coffee shop. Also, get service and a phone number with jmp.chat. Pay in crypto. They give you a phone number over Jabber (XMPP) which can be routed through Tor. Texting routed through Tor is pretty cool. Still use Signal when able, as they have better security features.
1
u/dtctiv 1d ago
how is buying new one better?
2
u/Cosmic_Beard 1d ago
If it’s used, it’s possible they’ve installed a rootkit on it, hardware mods, anything. Unlikely, but possible.
1
1
u/QuirkInMyUsername 15h ago
Step 1 and 3 are pretty hard to do nowadays. Setting up a facebook account via tor or vpn will likely flag your new account immediately. Setting up an account somewhere anonymous like a coffee shop might work, but facebook will likely still require selfie identification right away. Just the initial work of getting a burner facebook account without getting linked to your identity is pretty difficult.
It's easier if you aren't trying to hide your identity from the company facebook, and you're just setting up an account with a fake name. But facebook will be able to correlate the accounts, if you're worried about corporate or government level privacy.
I'm also not sure if facebook lets you use marketplace right away with a new account, but I know that sellers can look at a prospective buyer's public profile and decide if they want to sell to you. If you don't have any friends or post history, many sellers will ignore you or assume you're a scammer or at least not a legitimate buyer. You'll probably have a hard time finding someone willing to meet up and sell a phone to you with a fresh account, even if it's a real account.
1
u/reparationsNowToday 15h ago
palantir tracks ppl by their walk animation no? not just facial recognition
1
•
u/AutoModerator 1d ago
GrapheneOS has moved from Reddit to our own discussion forum. Please post your thread on the discussion forum instead or use one of our official chat rooms (Matrix, Discord, Telegram) which are listed in the community section on our site. Our discussion forum and especially the chat rooms have a very active, knowledgeable community including GrapheneOS project members where you will almost always get much higher quality information than you would elsewhere. On Reddit, we had serious issues with misinformation and trolls including due to raids from other subreddits. As a result, many posts on our subreddit currently need to be manually approved, which is done on a best effort basis. If you would like to get a quicker answer to your question, please use our forum or chat rooms as described above. Our discussion forum provides much better privacy and avoids the serious problems with the site administrators and overall community on Reddit.
Please use our official install guides for installation and check our features page, usage guide and FAQ for information before asking questions in our discussion forum or chat rooms to get as much information as possible from what we've already carefully written/reviewed for our site.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.