/biz/ - Business & Finance

>Where do we start? (cont'd)

If you're a normal everyday user and are not concerned about LE or Gov, your threat model is vastly different from that of a DMN vendor or a dissident of an oppressive regime. While the lowest threat models would also benefit from taking the most extreme measures, it is a daunting task, and many users would simply give up from the burden of all the extra steps and learning required. We don't want the pursuit of perfection to become the adversary of achieving the basics. Consider your activities and what the consequences of a breech of your opsec might look like. If you're thinking it would not be the end of the world, you may have a lax threat model, on the other hand, if a breech would result in your imprisonment, loss of life or have serious ramifications, you have a high threat model and you need to tailor your practises to meet that threat assessment.
Now that we know what were protecting, and the degree of scrutiny that needs to be applied, we can begin exploring how we implement the process.

>Segregation

There are a wide array of items that we need to segregate in this process, so lets have a quick look at some of the most important/common ones:
-Username
-Email address
-PGP keys
-IP address
-Method of access(tor,i2p)
-Device used
-Writing style/slang
-Cryptocurrency wallet addresses (pseudo-anonymous currencies)
Segregation requires us to not only to focus on the information we use to create the accounts, but also the content we post. if you follow the process in great detail, but then post a BTC address that is linked to your name, or a PGP key that is associated to your DN persona, you have undone that hard work and linked those accounts.