← Home ← Back to /pol/

Thread 520177567

136 posts 54 images 78 unique posters /pol/
Anonymous (ID: Uo269p2M) United States No.520177567 [Report] >>520177637 >>520177652 >>520177682 >>520177727 >>520177748 >>520178683 >>520179991 >>520180222 >>520180781 >>520181070 >>520181326 >>520181632 >>520182189 >>520182463 >>520182473 >>520182525 >>520182684 >>520182830 >>520186798 >>520190257 >>520190576 >>520191654 >>520194711 >>520195003 >>520195080 >>520195102 >>520195252 >>520196186 >>520197405 >>520197938 >>520199111 >>520200093 >>520201705 >>520204958
An actual OPSEC guide for /pol/
Gentoo runs way smoother and is actually open source and compatible with most hardware. All you need is hardened Gentoo w/ Secure Boot, a custom open source RISC-V desktop SBC w/ verilog and mainline Linux support / UberDDR3 / MIAOW GPUs / OpenPHY / iCE40 FPGA, an open ath9k 802.11 Wifi PCIe, a Modos paper display and a flash drive w/ decryption key to turn it on. Use VexRiscV chips. Will still need a development board (like a SiFive HiFivePremierP550) for writing and programming the board, and soldering equipment + microscopes.

Also, "fully Libre'd Thinkpads" don't exist. Even if you wiped the firmware to the SoC, you still have the display, which is proprietary, the hard drive which is proprietary (to which there's only one company on Earth that manufactures open source hard drives, and that's Raptor Computing Systems which uses them for their Talos PCs that costs $15,000, and even if you were using an open HD, you'd still need Faraday protection to prevent sidechanneling) and so on.

You will also need:

>Banana Pi BPI-RV2 and Wio Lite RISC-V board integrates a RISC-V microcontroller (VexRiscV, again) for modem/router functionality
>FPGA/Soft-MAC Wi-Fi modules for fully open 802.11 networking experiments; setup includes an FPGA development board (e.g., Lattice iCE40 or TinyFPGA), and software stack such as Open80211, connected via USB or GPIO to SBC and optionally bridged to RISC-V boards
>SiFive FE310 as an open-hardware USB-to-UART/SPI/I2C bridge replacement, plus a Bus Pirate (open-hardware) when you want a flexible serial/GPIO bridge
>Connect your ethernet cables to your proprietary default ISP hardware and you can now use IP over DHCP to establish a private network connection
Anonymous (ID: 9/P/mTu/) Switzerland No.520177629 [Report] >>520182195
Gentooman reporting in
Anonymous (ID: i0Kqxf+e) United States No.520177637 [Report] >>520181071 >>520193324
>>520177567 (OP)
What kind of retard shills the hardest distro to install to noobs. Fuck off you idiot.
Anonymous (ID: 40bf2cfP) United States No.520177652 [Report] >>520180069 >>520181137
>>520177567 (OP)
I've been a windows normie for 5 years. only about a year did ago did I start caring for my privacy. Is it too late? Do (they) already have everything they need?
Not just the jews, by the way.
Anonymous (ID: XndwWoiB) United States No.520177682 [Report] >>520180510 >>520181677
>>520177567 (OP)
Just get a Mac
Anonymous (ID: Uo269p2M) United States No.520177727 [Report] >>520177742 >>520178683 >>520179225 >>520191654 >>520192721 >>520203616
>>520177567 (OP)
You'll also need open source USB keyboards/mouse you can buy that'll match the GPIO mapping (+compatible USB ports) to use for this setup that are safe from assembly-level malware (like STUXNET they used as an exploit in Iranian hardware), or NSA keyloggers. Like Keyboardio Model 01, OLKB / Planck / Preonic / other OLKB boards — open PCB designs that run QMK (battle‑tested open firmware) or many DIY/ortholinear/handwired PCBs from the keeb community w/ a Ploopy (Classic 2 / Classic) mouse or DIY mouse using RP2040 / STM32 / ATmega + open HID firmware — straightforward: buy an optical sensor (e.g., PMW3360), pair with an RP2040, and run an open HID stack (many community projects exist). Libratbag + Piper provide Linux-side configuration for many open-ish gaming mice if you must use existing vendors. Flash via a programmer (e.g., Atmel ICE, JTAG, OpenOCD) — don’t rely on vendor binary updates. QMK and Keyboardio firmware repositories make this straightforward. Use read/verify signatures and sign your firmware images + enforce verification (where the bootloader supports it) before enabling HID. If the MCU/bootloader can be fused to read‑only or locked after flashing, do so. Keep hardware debug interfaces accessible during verification so you can read flash contents and check checksums before locking.
Anonymous (ID: Uo269p2M) United States No.520177742 [Report] >>520177771 >>520191654
>>520177727
To touch up:
>USB filtering / policy: use USBGuard (or an equivalent) on Linux to whitelist only approved USB device classes/vendor:product IDs before accepting HID input. This prevents a malicious composite device from exposing hidden endpoints.
>udev rules: create udev match/deny lists to prevent unexpected USB descriptors from being used.
>Isolate critical input: use a separate, minimal host (a tiny microcontroller you control) as the keyboard-to-host translator; the MCU forwards only standard HID events — no mass‑storage or DFU endpoints. The FE310 as a bridge is perfect here.
>Prefer wired over wireless for security (no RF sniffing/remote firmware attacks).
>Disable unused USB ports in firmware / physically block them with port locks.
Anonymous (ID: Oqa7F7Mp) United States No.520177748 [Report]
>>520177567 (OP)
>Using computers
You nerds are such losers
Anonymous (ID: Uo269p2M) United States No.520177771 [Report] >>520177789 >>520182632 >>520188722 >>520191309 >>520191654
>>520177742
Arch is lightweight, flexible, and rolling-release — which appeals to tinkerers — but at its core it’s still a binary distribution that depends on proprietary firmware, closed-source drivers, and the same opaque hardware layers as any other x86 distro. It’s “minimalist,” not “libre.” Gentoo, by contrast, is genuinely source-based, auditable, and allows you to build a hardened, blob-free system all the way from the compiler flags up.

Gentoo wins because it's fully source-based, you can inspect, patch, or rebuild everything with your own toolchain, uses USE flags that have fine-grained control over features and dependencies (you can strip out nonfree firmware), uses hardened profiles with hardened-sources, PaX, SELinux, and PIE/SSP, you can actually lock it down to military-grade standards and has architectural freedom, since Gentoo supports cross-compiling for RISC-V, ARM, MIPS, and more — not just x86_64.

Also, Faraday cage is not needed for this setup (especially since attackers can modulate the frequency and still get you even if behind Faraday protection). If you control firmware and hardware (open RISC‑V, audited boot chain, no closed blobs), your risk of a competent attacker intentionally creating stealthy emissions is much lower, but not zero—mainly if they somehow obtain control of firmware or insert an implant.

Faraday shielding helps, but the real weak points are conducted paths and unfiltered feedthroughs. For best defense, combine a modest metallic chassis with filtered power inputs, fiber external links (or none), galvanic isolation, and strict firmware provenance. That combination is far more practical and effective than an expensive full Faraday cage.

Then just install packages like iptables, clamav, rkhunter, kvm/qemu, firejail, pyshark, use a custom GNU Ice Cat profile, and run all connections through a custom SOCKS5 proxy you scripted in Python w/ ChaCha20, Poly1305, X25519 and Kyber and now you're fully set.
Anonymous (ID: Uo269p2M) United States No.520177789 [Report] >>520177804 >>520191654
>>520177771
https://www.gnu.org/distros/common-distros.en.html

Also

> Gentoo includes installation recipes for a number of nonfree programs in its primary package system.

While Gentoo’s main tree does include ebuilds for some non-free/proprietary software and firmware, but Gentoo marks licenses in each ebuild and gives you tools to refuse those packages. You don’t have to install them if you don’t want to.
Anonymous (ID: Uo269p2M) United States No.520177804 [Report] >>520191654 >>520193987
>>520177789
Also, Consider adding measured boot (TPM replacement) using an open hardware root-of-trust MCU (e.g., Tillitis TKey or Nitrokey 3 running Trussed) for remote attestation if you ever network this system.

You could also flash QMK with reproducible builds (using dfu-programmer with SHA256 verification), to ensure byte-for-byte consistency between source and flashed firmware.

Integrate OpenWrt on RISC-V as your router firmware for total visibility and easily scriptable packet-level filtering.

You could add software-encrypted ephemeral root (tmpfs + overlayfs) to limit persistence even further.
Anonymous (ID: etVObUEU) United States No.520178683 [Report]
>>520177567 (OP)
>>520177727

>word salad garbage written by a schizo moron
Anonymous (ID: omcF94vp) United States No.520179225 [Report] >>520180161 >>520180314 >>520181965 >>520182574
>>520177727
How do you fix the compromised hardware backdoors?

I'm personally thinking of just waiting until homemade electronics reach 90s tier and just hop onto the decentralized internet homemade network with stuxnet 2.0 when that happens.
Anonymous (ID: IAAGpmX0) United States No.520179991 [Report] >>520180324
>>520177567 (OP)
unless you're making your own mobo and router and never connect to the Internet this is sort of kind of performative bullshit tbqhwy, HOWEVER COMMA, this is a stepup from being a wangblows user and with common sense pro is a reasonable degree of separation.
Anonymous (ID: IAAGpmX0) United States No.520180069 [Report] >>520180324 >>520192751
>>520177652
odds are if you have a smartphone they have it anyways, unless you're doing legitimate criminal activity that would warrant such actions I wouldn't personally worry about. just don't Google "pressure cooker and backpack" back to back.
Anonymous (ID: IAAGpmX0) United States No.520180161 [Report]
>>520179225
this
Anonymous (ID: /q6qA+Mt) Latvia No.520180222 [Report] >>520180642
>>520177567 (OP)
I've actually installed gentoo.
99% of you are too stupid to get that far.
Don't fall for the /g/ meme.
Anonymous (ID: /q6qA+Mt) Latvia No.520180314 [Report] >>520180564
>>520179225
>with stuxnet 2.0
Israeli Spyware exploiting backdoors in Windows put there by Microsoft at the order of the NSA to destroy nuclear weapons fuel enrichment centrifuges?
Anonymous (ID: omcF94vp) United States No.520180324 [Report] >>520180392
>>520179991
>>520180069
Only reliable method I know of is disposable used computers in public wifi setting that you only use once before trashing equipped with the right software setup(usually through a flash drive). The same is true for phones. Until the hardware backdoor problem is fixed your options are extremely limited. Not saying its a bad idea but...well it comes down to the backdoors. Always.
Anonymous (ID: /q6qA+Mt) Latvia No.520180392 [Report] >>520180564
>>520180324
ALL American and allied nation equipment is backdoored at the hardware level.
All.
Chinese shit is just backdoored in a different manner.
Anonymous (ID: jP81rdDz) India No.520180510 [Report] >>520181677
>>520177682
poorfags cant into mac. most will have to start compiling icefox today to browse in 2 week.
sage (ID: xM2QK36y) Germany No.520180516 [Report]
people have scammed millions without any of this opsec garbage ... all you need to do is sit in russia/india/similar garbage nation. hacking in the west is just not worth it.
Anonymous (ID: omcF94vp) United States No.520180564 [Report]
>>520180314
Homebrew decentralized internet with homemade electronics serving as decentralized hubs and homebrew computers requiring 90s tier electronics that are clean to pull off. The plans have existed for over a decade but nobody could source the clean hardware to make it happen. Its not like there is just one plan. Its been considered, tinkered with, and debated upon since...Snowden it got taken seriously?

Been a long while since I last checked in. Figured I would wait until the means to make homemade eletronics reached 90s tier before I would research everything all over again and decide what I want to go with.

>>520180392
Exactly my point and why its single time used only from a pre owned computer that is bought with cash probably from a pawn shop or something. Hang onto to it for enough months that the seller forgets about it and recordings get wiped than you're fine. Basic bitch shit like that. Only ever works once though is the catch.

Its why hackers nowadays if they don't wanna get fucked by glowniggers have to use that setup and contract out to computer or server farms whenever they need to bruteforce something. Paying out the ass for a special setup won't save your sorry ass in this environment.
Anonymous (ID: xM2QK36y) Germany No.520180642 [Report] >>520180929 >>520180939 >>520191096 >>520200475
>>520180222
>too stupid to get that far.
anon ... wasting endless hours on linux is not a smart thing to do ... its autistic.
99% dont use linux not because theyre "too stupid" but because they simple dont have the time. linux is a giant retarded time sink for very little gain. everyone realizes this ... except you.
Anonymous (ID: jnF/APlD) United Kingdom No.520180781 [Report]
>>520177567 (OP)
...meanwhile the cia uses amazon infrastructure
Anonymous (ID: /q6qA+Mt) Latvia No.520180929 [Report] >>520181200 >>520182332
>>520180642
I worked decades in tech making over $100k per year so learning Linux was hardly a burden but rather a part of my profession.
Anonymous (ID: nICTdUIt) United States No.520180939 [Report]
>>520180642
Really Anon? My wife loves it
Anonymous (ID: i0ck6fc7) United States No.520180988 [Report] >>520181474
At what point were back doors introduced? Weren’t computers too weak and slow to do tasks and log activity? Also are computers slowed down by these back doors or monitoring activity, and is there unusable additional power under the hood?
Anonymous (ID: dtyIOL1I) United States No.520181070 [Report]
>>520177567 (OP)
>Finally I can watch Crunchyroll without the CIA knowing
Anonymous (ID: F4EeyymQ) Slovakia No.520181071 [Report] >>520181200 >>520195170
>>520177637
You install it exactly once, and it consists of repeating instructions from a manual. A monkey could do it if it could read
Anonymous (ID: B/l3D/n0) United Kingdom No.520181137 [Report]
>>520177652
Its never too late to start caring. Think longterm, which is better, having everything you're doing recorded or having a dead profile from 5 years ago
Anonymous (ID: xM2QK36y) Germany No.520181200 [Report]
>>520180929
ok mr 100k, you think copy pasting commands by hand into a console to install an operating system is a hard skill eh ... hmmm
>>520181071
sage (ID: gyL9DwgB) United States No.520181326 [Report]
>>520177567 (OP)

Are you the same nigger spamming all these AI threads?
Anonymous (ID: omcF94vp) United States No.520181474 [Report]
>>520180988
Mid to late 00s. They were fucking everywhere and inescapable by the early 10s. Even 'apple' isn't an exception or any foreign source. Keep in mind that the worst backdoors were hardware related as they are impossible to circumvent. That is why even the Free Data crowd gave up on it until they could make their own homemade electronics. Estimates stated they needed 90s tier as that was the minimum requirement to establish a new decentralized internet.
Anonymous (ID: xDAo/C/E) Nepal No.520181627 [Report]
I use arch btw.
Anonymous (ID: l4Hh5p1a) Poland No.520181632 [Report]
>>520177567 (OP)
My guy, I use Linux, but I'm not autistic enough to set up and maintain Gentoo. Miss me with that shit. I actually want to do shit with my computer.
Anonymous (ID: xDAo/C/E) Nepal No.520181677 [Report]
>>520177682
>>520180510
mac is for pajeets as confirmed by these comments.
Anonymous (ID: P6Jx0Nyo) Mexico No.520181965 [Report]
>>520179225
How much longer until this happens?
Anonymous (ID: Us4hqcPH) Hungary No.520182189 [Report] >>520182247
>>520177567 (OP)
Gentoo is shit because it doesn't have a system to audit the source code before and after compilation of each installed package.
Therefore if someone at the other end serves a malicious tarball just for you you're fucked.
>Nooo but he can't just sign it
What if the author is the bad actor of some friend if his, or he was hacked?
Also, if such system existed I could just quickly modify anything if past sources and build in an instant, which is also a cool feature.
Until this gets implemented I rather use Debian.
Anonymous (ID: CggDXUtt) India No.520182195 [Report] >>520182735
>>520177629
kys pratyush dalit
Anonymous (ID: CggDXUtt) India No.520182247 [Report] >>520182333
>>520182189
That applies to every other distro.
Anonymous (ID: mmJ7bsA/) Sweden No.520182332 [Report] >>520183774 >>520189839 >>520201426
>>520180929
How do you make >$100k/year in IT in Latvia of all places? I make $70k/year as a senior expert.
Anonymous (ID: Us4hqcPH) Hungary No.520182333 [Report]
>>520182247
Exactly. Therefore Gentoo does not worth it. But for some packages I can still do manual build on Debian if I feel like it.
Anonymous (ID: kEPaSecR) Serbia No.520182341 [Report]
jeetux will never be taken seriously because of faggots like op kek
Anonymous (ID: I6tOJKAv) United States No.520182463 [Report]
>>520177567 (OP)
none of your acronyms matter to me. Not a single one of them.
Anonymous (ID: CMcVwblK) Australia No.520182473 [Report]
>>520177567 (OP)
>inb4 dumbass chuds list their cope reasons as to why they """need""" w*ndows
Anonymous (ID: CNvXTMm3) Finland No.520182525 [Report] >>520182564 >>520196458
>>520177567 (OP)
Protip; dont post shit on 4chan. You are already on the list.
Anonymous (ID: CMcVwblK) Australia No.520182564 [Report]
>>520182525
This shithole didn't even have HTTPS until recently
Anonymous (ID: CggDXUtt) India No.520182574 [Report] >>520196057 >>520201998
>>520179225
Impossible. The best opsec is not to put important stuffs on computer.
1. cryto one time masterkey. but that too is vulnerable because it is your cpu that first receive those codes.
2. You plans. Like if you are doing mass shooting or something, never put a thought about it or traces of thought about it on computer/phone.
3. hoard everything and obfuscate your focus points.

but truly with panopticon in place it's impossible to no compromise yourself because if they want you they can pilpul anything you have or do or have done into a naughty act. You sure didn't download any brook shield porno in any of the computer you bought ever in your life?
Anonymous (ID: gkMs/xK5) Portugal No.520182632 [Report]
>>520177771
>allows you to build a hardened, blob-free system all the way from the compiler flags up.
Compilers use previous compilers to work. They all report back to a compiler from the the 1970s that was created by the CIA. You cannot escape the glowniggers.
Anonymous (ID: Cyyh1vHU) Germany No.520182684 [Report]
>>520177567 (OP)
Shut up with your guerilla marketing
Anonymous (ID: tjOTGSYF) Finland No.520182735 [Report] >>520182759
>>520182195
I hope you get fired from your microshitter tech support job
Anonymous (ID: CggDXUtt) India No.520182741 [Report] >>520193315
Also this is not an actual opsec OP. We are all on the list. Whitney slightly nudges about palatir's priority over "anonymous board" which only means 4han/8ch. So expect them to have your history. You still have defense like "I only post satire on 4chan" but that works only if you hire a very powerful jewish lawyer for which you have to be jewish yourself.
Anonymous (ID: CggDXUtt) India No.520182759 [Report] >>520182912
>>520182735
>job
i am not dalit
Anonymous (ID: VKMqr1g8) United States No.520182830 [Report] >>520183109 >>520188479
>>520177567 (OP)
why do all that shit, when you can just throw away your cell phone. get rid of your lap top.
live in a faraday cage.
and carry a cell phone jammer out in public.
or just have something that emits some sort of strong emp pulse

being an aggressive luddite seems less complicated than jumping through a bajillion hoops in order to shit post without the feeling of becoming a tracked target.

im not knocking what youre doing if you understand what you are doing.
but alot of people don't.
most people have to pay wix or whatever to make a website instead of making their own.

just like blow up some cell towers
Anonymous (ID: tjOTGSYF) Finland No.520182912 [Report]
>>520182759
>post attached to dalitdia flag
Doubt
Anonymous (ID: Pt/zqUAZ) United States No.520183109 [Report]
>>520182830
I work with a guy who refuses to get a cell phone. I think he spends all his spare time on his desktop computer, thoughbeit.
Anonymous (ID: /q6qA+Mt) Latvia No.520183774 [Report]
>>520182332
Who says I'm Latvian?
Anonymous (ID: 1sSTMUn1) Germany No.520184282 [Report] >>520184766
based
Anonymous (ID: 2kpNbDx9) United States No.520184766 [Report]
>>520184282
Anonymous (ID: MODWKVk+) France No.520186116 [Report] >>520186805 >>520191777
Gentooman here. Excellent thread. How do you do isolation with this setup. KVM/Qemu is the only easy, maybe containers for a light alternative?
For example, to achieve this I like QubesOS and their dispVM because it's super convenient. I am working on a similar setup with hardened Gentoo as dom0 (and VM template).
Anonymous (ID: /nVHVVox) Germany No.520186798 [Report]
>>520177567 (OP)
You can buy a libre booted ThinkPad directly from a tranny here
https://minifree.org/
Anonymous (ID: 1sSTMUn1) Germany No.520186805 [Report] >>520187872
>>520186116
I use LXC containers for some things. The way I do it is I find out which files a service needs (binaries, shared libraries, stuff in /etc, /usr/share, /var/, etc.) and bind-mount that into the container, if possible read-only/noexec/nosuid/etc. It's all very hand-rolled, but with a few scripts to make it less of a hassle. This means I install and unpdate everything on the host as usual, but run it in LXC.
Anonymous (ID: aKck9R94) Australia No.520187236 [Report]
if they want to come after you they will just frame you. all this OPSEC shit is great at avoid the pleb tier parts of the government apparatus. since 95 when I got dial up at home no cunt has bothered me about what I do online. I never signed up for kike media. I am sure anyone that really wants to come fuck me up the arsehole will if I do anything too bad
Anonymous (ID: MODWKVk+) France No.520187872 [Report] >>520188505
>>520186805
That's not a bad idea, but it would need quite a bit of customization depending on what you're doing. With ZFS or BTRFS, couldn't you boot from a snapshot (and you discard any change)? With `lxc.rootfs` and `lxc.rootfs.backend = dir`.

I don't think we'd lose anything security wise, or?
Anonymous (ID: /nVHVVox) Germany No.520188275 [Report]
bump
Anonymous (ID: aKck9R94) Australia No.520188479 [Report]
>>520182830
depends what you are doing. I think most of it is pointless. many people give themselves away through some simple mistake they made. If anything I am just glad no one says anything when I say poof, fag, homo, gay, retard, mong, spastic IRL anymore
Anonymous (ID: 1sSTMUn1) Germany No.520188505 [Report] >>520189335
>>520187872
You can set up the bind mounts directly within the lxc configuration file like so
>lxc.mount.entry = /etc/foo.conf etc/foo.conf none bind,ro,nodev,nosuid,noexec,create=file 0 0
>lxc.mount.entry = /usr/bin/foo usr/bin/foo none bind,ro,nodev,nosuid,create=file 0 0
which binds the files /usr/bin/foo /etc/foo.conf into the container as read only with various additional restrictions.

Yes, you can also use snapshots of your / and discard everything later, but you still probably want to filter some things from appearing in the container (at least your /home, probably) and also perhaps keep some state across runs. But if you do it that way there's basically a full OS in the container which at least to me defeats the purpose.
Anonymous (ID: PoOelP3k) Germany No.520188722 [Report]
>>520177771
>Faraday shielding helps
kek this is why you guys still life in the basement and dont have sex
Anonymous (ID: MODWKVk+) France No.520189335 [Report] >>520190097 >>520190414
>>520188505
Yes, the mounts allow to reach that purpose, the main problem is if the program you are isolating is sprawling with files everywhere in the directory.

Well I see what you mean, you don't want to expose anything too identifiable with your full setup in the container for example. That's not a bad point.
I was thinking mostly in terms of protecting your host while trying things in a little sandbox.

So from what we discussed, I see 2 ways of going about it:
- if isolating a single/few program installed via gentoo, then actually mounting all the files reported via `equery f package` is maybe not so painful and easy to automate?
- if isolating often the same (set) of programs, creating template with a subvolume is maybe more convenient. At the cost of having to update them from time to time.
Anonymous (ID: D3fm+5m6) United States No.520189645 [Report]
haha toshiba with win7 goes wooooo click click clack
Anonymous (ID: qCxP2sCP) United States No.520189756 [Report]
Its gotten to the point where using the internet at all, despite your best efforts to remain out of sight, is not the way anymore. Just completely unplug, throw your computer away, unhook your modem, and start working out and hunting and growing your own food. Not only will you not show up on anyones radar, you will be better off both mentally and physically.
Anonymous (ID: F4EeyymQ) Slovakia No.520189839 [Report]
>>520182332
By lying or glowing
Anonymous (ID: 1sSTMUn1) Germany No.520190097 [Report] >>520190414
>>520189335
Yes, I do it this way for running individual services like tor. If you just want to to prevent some program from spewing files everywhere it's not the way to go.
>mounting all the files reported via `equery f package` is maybe not so painful and easy to automate?
That works, but will usually mount many files unnecessarily, like things from /usr/share/doc, for example. If that doesn't bother you it's mostly harmless, though. I have a script that prints out all the shared libraries required to run specific binaries. Other than that it's usually just configs in /etc or a few directories in /usr/lib or /var that need to be mounted for things to run so it's not too bad to do this semi-manually. Maybe one day I'll write some code to automate it more. In principle it's a nice way to manage container services.
Echo Man (ID: zQ4vLllm) United States No.520190257 [Report]
>>520177567 (OP) (OP)
You missed that regardless of your hardware, without purchasing the most recent GRE kernel patches, which have to be purchased from a for-profit research group now, the Gentoo hardened kernel is still compromised. Gentoo is also now part of the network of linux distros who's orgs financials are managed by a non-profit that "invests" donations for them, allowing "sponsors" to purchase ingress insertion into mainline releases, so you have to use a release from before they accepted the arrangement.
Anonymous (ID: PoOelP3k) Germany No.520190414 [Report]
>>520189335
>>520190097
>equery f package
easier done with #emerge --root=/container/dist package --ask
Anonymous (ID: s5Bhx/ch) Netherlands No.520190576 [Report] >>520190847
>>520177567 (OP)
>be me
>go out
>see 10/10 qt3.14
> adjust my Arch Linux hoodie, swallow hard
>"hey, uh… you look like someone who appreciates… freedom."
>rizz her smoother than a pacman -Syu with --noconfirm
>"i have a hardened Gentoo rig at home. RISC-V. custom kernel. No proprietary blobs. Also, I compile my own mesa."
>fast forward to my room, RGB off (real users don’t need RGB), CRT humming like a 90s dial-up
>"Holy shit, is that a HiFive Premier? You’re not just using it, you’re..."
>"Writing u-boot from scratch, yeah."
> she shudders as she looks at my Faraday protected open hard drives.
>"You cross-compiled your toaster, didn’t you."
> she can’t wait to fuck me by now
> "Show me your make.conf," she demands
> she jumps me
> cum buckets
> shitwassocash.jpg
Anonymous (ID: dw/77rM9) United States No.520190847 [Report]
>>520190576
lol'd
Anonymous (ID: qwkU+pEc) United States No.520191096 [Report] >>520194098
>>520180642
Distros like Ubuntu and Mint are so easy and automated, even a black woman could do it over a weekend.
>Not secure or entirely FOSS
Yes, but it's not Windows
Anonymous (ID: sQ2j4RtK) Turkey No.520191309 [Report] >>520191375
>>520177771
Is this you?
>muh Faraday protection
go touch some grass you retard
Anonymous (ID: lOoDXrPj) United States No.520191375 [Report]
>>520191309
would
Anonymous (ID: Qpks9HMa) No.520191654 [Report] >>520191867
>>520177567 (OP)
>>520177727
>>520177742
>>520177771
>>520177789
>>520177804
Great story bruh. If you think I understood what you wrote, then you're greatly mistaken, nerd.
Anonymous (ID: CggDXUtt) India No.520191777 [Report] >>520192212
>>520186116
post it.
>inb4 only retards compile/use chromium
Anonymous (ID: dw/77rM9) United States No.520191867 [Report] >>520193051
>>520191654
>bruh
niggers need not apply.
Anonymous (ID: MODWKVk+) France No.520192212 [Report] >>520198227
>>520191777
Factually, only retards use chromium. Also use distcc and eventually make your binpkg of shit like this.
Anonymous (ID: 8WKoFxyo) Austria No.520192721 [Report]
>>520177727
Uuhm. So is there like an App?
Anonymous (ID: rMaHD/vP) United States No.520192751 [Report]
>>520180069

>start torrenting
>internet sends me letters to stop or consequences
>not open letters
>download terabytes of vidya from the russians
>letters saying theyre gonna turn off my unternet
>not read them
>internet was turned off for 1 hour at 4 am
>letter informing me they upgraded my internet plan for free
>i now have faster internet
Anonymous (ID: Qpks9HMa) No.520193051 [Report] >>520193442
>>520191867
LFS > Gentoo anyway, noob.
Anonymous (ID: 8WKoFxyo) Austria No.520193315 [Report] >>520198144
>>520182741
I said the N word once here. Is it over?
Anonymous (ID: V45Xj3rS) United States No.520193324 [Report] >>520199276 >>520205226
>>520177637
This, also I’m not doing that level of opsec just to say nigger, kike, and troll glowies on a Mongolian fiip book appreciation website. I’ll rawdog it with an iFag because I want them to know just how much I hate them from the bottom of my soul.
Anonymous (ID: dw/77rM9) United States No.520193442 [Report] >>520193617
>>520193051
lmao ok "bruh"
Anonymous (ID: Qpks9HMa) No.520193617 [Report]
>>520193442
Check mate, mate.
Anonymous (ID: rbnGNht0) United States No.520193987 [Report]
>>520177804
WHY DO YOUR POSTS READ LIKE CHATGPT
Anonymous (ID: aKck9R94) Australia No.520194098 [Report]
>>520191096
it's still not good enough last time I installed mint. I just use it so I can run glftpd with minimal effort. still using the GUI to install shit instal always the great
Anonymous (ID: JlFhwWLt) United States No.520194466 [Report]
Or, you could keep your politically sensitive beliefs/actions in the real world, which is virtually untraceable by comparison
Anonymous (ID: arKPQME7) United States No.520194711 [Report]
>>520177567 (OP)
Excellent effort by op.
Anonymous (ID: +797wJlN) Finland No.520194835 [Report]
Gentoo is the only linux distro I consider any good. Other distros are just houses of cards held together by super glue. I use gentoo for my computing needs and there is nothing special about it, the meme "install gentoo" is stupid too I think installing gentoo is easy and simple. Gentoo literally just works while other distros break all the time.
Anonymous (ID: +cP3d1u7) Mexico No.520195003 [Report]
>>520177567 (OP)
They sounds annoying. I'll rather just ai and barely login to anything :(
Anonymous (ID: Fe0u3CwM) Brazil No.520195080 [Report]
>>520177567 (OP)
I have been running devuan runit for the past decade, i dont wanna go full schitzo plus you probably stick out like a sore thumb to glowies if you jump so many hoops just to shitpost and draw dicks on gimp
Anonymous (ID: FN7uCqql) United Kingdom No.520195102 [Report] >>520195345 >>520195385
>>520177567 (OP)
Rate my OPSEC
Anonymous (ID: bq5gxKCh) United States No.520195170 [Report]
>>520181071
that work for that set of hardware
its not like you ever run into issues
just works, like an apple product, just copy and past
simple
dumb fucking faggot
Anonymous (ID: HIsQcsQ8) France No.520195252 [Report]
>>520177567 (OP)
Bah I'm good, all I need from a computer is to run FL Studio and VSTs without headaches
Anonymous (ID: 3sptjTUs) Hungary No.520195344 [Report]
>open scource
>the only actual opsec it has is that there is not enough users to steal data out
Stellar.
Anonymous (ID: /OGOJEP1) United States No.520195345 [Report] >>520196008
>>520195102
looks good to me fren. i have the same except using windows xp
Anonymous (ID: qtqLWQR9) United States No.520195385 [Report] >>520196008
>>520195102
>location services ON
ew
Anonymous (ID: FN7uCqql) United Kingdom No.520196008 [Report] >>520196065
>>520195345
>>520195385
Interesting, the printscreen key is disabled while I have the taskmanager processes open, I was gonna show you guys
Anonymous (ID: qTivanQ4) United States No.520196057 [Report] >>520197977
>>520182574
so if i had a chunk of crypto worth stealing, as soon as i plug in my wallet i could be going ass forward in a corn field?
Anonymous (ID: FN7uCqql) United Kingdom No.520196065 [Report] >>520196776
>>520196008
uhhhh guys
Anonymous (ID: 85XBjg7Z) Italy No.520196186 [Report]
>>520177567 (OP)
Nigger i spent so much time on Windows with spyware installed that the Jews probably know how many ass hair i've got
Anonymous (ID: qTivanQ4) United States No.520196458 [Report]
>>520182525
Anonymous (ID: FN7uCqql) United Kingdom No.520196776 [Report] >>520197308 >>520197536
>>520196065
haha suck it bill fag, you little kike goblin
Anonymous (ID: qTivanQ4) United States No.520197308 [Report] >>520197428
>>520196776
you use edge?
Anonymous (ID: 1dh+RkP9) United States No.520197405 [Report] >>520198197
>>520177567 (OP)
Great guide for people out and about, but this is /g/, we're all retards here, we need technical solutions for the retarded, so I will make a brief summary as the local technomancer (who is also a retard codelet) on how to be safe from prying eyes in a simple way, for retards like myself

>Faraday your pc and use a wired connection out to a secured router
I don't remember how you secure your router because it's been like 2 years, but this is important, your router is at this point the one middleman between you and the internet, so make sure it's clean

>Connect from that router to public wifi via a wifi extender, or any connection you have access to that is not your own, and does not identify you

With these two steps you are anonymous on the internet, now here's some other shit to do if you are serious and on someones shitlist

>have metal walled home
the vast majority of weird spy hoodoo does not work through metal walls

>Do not have your home office in a room with a window
Feds can read the vibrations of the window to gain information from inside

>Do regular bug sweeps of your home
Just common sense shit really, there is no guarantee you will actually pick them up, but it's worth trying

And in my opinion the most important of all of this
>PHYSICAL SECURITY
all these tech measures mean jack shit if officer fat can just walk into your home and look at your files, lock your door nigger, lock the room its in, have a happy little bookcase that opens into somewhere hidden, install pc components caseless under the rafters of your floor, get creative, without physical security cyber security is useless, at least to the lay man, because retards like us will never have full control of our system and must assume it is compromised in some way

Oh and use a secure OS like Qubes or something
Anonymous (ID: FN7uCqql) United Kingdom No.520197428 [Report]
>>520197308
Yeah, I have nothing to hide. Can you decipher these cryptic texts?
Anonymous (ID: 85XBjg7Z) Italy No.520197536 [Report] >>520197878
>>520196776
>Intel CPU
It's over britbro, they are already cooking your brain with their havana weapons
Anonymous (ID: FN7uCqql) United Kingdom No.520197878 [Report]
>>520197536
Feds can't do shit, they have no power here. I'm maxxing and still the lord protects me. THEY RAPE AND MURDER CHILDREN IN SATANIC RITUALS, EVERYONE IS ENSLAVED
Anonymous (ID: 1GLK/U7M) Brazil No.520197938 [Report]
>>520177567 (OP)
kek

sounds like what a jeet will go through to hide his shameful scat fetish browsing (as if people wouldn't already assume he has a scat fetish for being a jeet)
Anonymous (ID: CggDXUtt) India No.520197977 [Report] >>520198781
>>520196057
Steal the cpu/computer. Plug it to hacked wifi. Do you crypto stealing. Hopefully it's not a big/important sum and they ignore you.
Anonymous (ID: CggDXUtt) India No.520198144 [Report]
>>520193315
It's not that bad. Pornos and lustful images are risky as you can't verify the age but they can assign an age.
Anonymous (ID: 1dh+RkP9) United States No.520198197 [Report]
>>520197405
>This is /g/
Correction, this is *not* /g/
(also fuck /g/ they hate real tech threads)

I want hex maniac to give me her milkies
Anonymous (ID: CggDXUtt) India No.520198227 [Report] >>520199024
>>520192212
I have 1030 tabs open. Firefox, librewolf could not handle even the half of it.
Anonymous (ID: qTivanQ4) United States No.520198781 [Report]
>>520197977
i don't want it stolen from ME
i never keep large chunks to avoid attention but...time got away from me
Anonymous (ID: Qpks9HMa) No.520199024 [Report]
>>520198227
>1030 tabs open
Holy, how many redeemings are you trying to stop?
Anonymous (ID: g0bM4Ka9) No.520199111 [Report]
>>520177567 (OP)
Noobs
Anonymous (ID: Q3aHHuxA) United States No.520199276 [Report]
>>520193324
based

they can chug my dirty 1st amendment balls
Anonymous (ID: R4w0BYDq) No.520200093 [Report] >>520201135 >>520201269
>>520177567 (OP)
Linux is backdoored. Computers aren't safe at all. You want real privacy? Touch grass.
Anonymous (ID: A3hzYg2P) Canada No.520200475 [Report] >>520201074
>>520180642
the fallacy here is you waste all your time shitposting on 4chan and consider it productive. Just admit you were filtered or you're a lazy faggot, no one will really care that much but obvious lies aren't cutting it
Anonymous (ID: 1dh+RkP9) United States No.520201074 [Report]
>>520200475
>It's not very productive
For you
Anonymous (ID: 85XBjg7Z) Italy No.520201135 [Report]
>>520200093
If you have an Intel CPU or a post 2015 AMD you're being spied by Mossad anyway, you might as well just install Windows 11 and turn on all the widgets
Anonymous (ID: pK1zSZNW) No.520201269 [Report]
>>520200093
This. Linux has rsyslog and filebeat
Anonymous (ID: pK1zSZNW) No.520201426 [Report]
>>520182332
You’re in a socialist gibsmedat shithole. At least you got that free healthcare
Anonymous (ID: LuN1yYtg) Greece No.520201705 [Report]
>>520177567 (OP)
>all you need is wifi to shrink your testicles
nty
Anonymous (ID: 8RLv3283) Romania No.520201998 [Report]
>>520182574
>stuffs
good morning sirs
Anonymous (ID: 5GHAHvdF) Australia No.520203616 [Report]
>>520177727
Brother just buying a few of these components will get a glownigger into your house and cameras installed.
Anonymous (ID: HTNNON25) No.520204958 [Report]
>>520177567 (OP)
@grok provide a detailed parts and todo list, tailored to my context. Also give an assessment of that anon's statements, are they useful?
Anonymous (ID: KiQO/9u2) United States No.520205226 [Report]
>>520193324

Based

Hell yeah brudder