Safety in internet (BLACK-HAT STYLE)

=== 15. Installing Torchat (optional) ===

*** This section is entirely optional. If you are not interested in installing Torchat, skip this section. ***

Torchat is a program you can use to communicate securely and anonymously with other Torchat users. It is only useful if you already know someone who is using it. If you do not know someone using Torchat, then it is best to skip this section and come back to it in the future when you want to install Torchat.

These instructions work for Ubuntu 10.10.

First, installing Torchat is a bit tricky because Ubuntu does not include Tor by default in its repositories. Tor is a requirement for torchat, and therefore we have to first install Tor on Ubuntu. Doing so is not too difficult.

1. First, go to “Applications” -> “Accessories” -> “Terminal”. You will see a new window appear with a prompt that looks like this:

mainuser@mainuser-VirtualBox:~$

2. Now, type exactly as shown below, and hit enter:

sudo bash

3. After entering your password, you will be at a new prompt which looks like this:

root@mainuser-VirtualBox:~#

4. Now, either type or copy-paste the below text into this window and then hit enter:

echo “deb http://deb.torproject.org/torproject.org experimental-lucid main” | sudo tee -a /etc/apt/sources.list
sudo apt-key adv –keyserver keyserver.ubuntu.com –recv-keys 886DDD89

5. After you do this, you should see the following at the bottom of your window:

gpg: Total number processed: 1
gpg: imported: 1 (RSA: 1)

6. Now, we should be able to install tor. In this same window, type the following commands, one at a time:

apt-get update
apt-get install vidalia privoxy tor

7. (press Y and enter when prompted)

Now we need to obtain the Torchat installation file, follow these steps:

8. In firefox on Ubuntu, go to the following URL: http://code.google.com/p/torchat

9. On the left under where it says “Downloads”

10. One of the files listed will end in .deb, for example torchat-0.9.9.deb. Click on that file name.

11. On the next page, again click on the file name. This should begin the file download.

12. By default, Ubuntu wants to open this file using the “Ubuntu Software Center”. This is correct.

Now wait until the file finishes downloading, and then the “Ubuntu Software Center” will appear. Follow these steps:

1. Press “Install”

2. Type in your password when prompted.

After a short wait, Torchat will be installed.

To start Torchat, go to “Applications” -> “Internet” -> “Torchat Instant Messenger”

=== 16. Creating TOR-Only Internet Environment ===

Up until now, we have been using our Virtual Machine to access the internet directly. This was necessary so that we could install updates, software, and
get a feel for how to use Ubuntu.

Now it is time to force Ubuntu to connect to the internet using TOR Only. At the end of this phase, your Ubuntu virtual machine will be usable as a secure and anonymous TOR based browsing environment. It will be *impossible* for you to access the internet except through TOR, and therefore you can rest assured that anything at all you do online through the Ubuntu virtual machine will be through TOR.

First, we need to shut down any running virtual machines. If “Primary” is running, click the ‘X’ in the top right to close it. Select “Send shutdown signal”
and then select “Shut Down” when prompted. If “Firewall” is running, go ahead and close it in the same way, but choose “Power off”.

After a minute or so, you should be back to your VirtualBox Manager, with neither virtual machine running.

1. Right click on “Primary, Powered Off” and go to “Settings”

2. Select “Network” from the menu on the left.

3. Next to “Attached to” is a pull down menu. Right now it is set to “NAT”. Choose “Internal Network” and click “Ok”

4. Click “Firewall” to highlight it, and then click on “Snapshots (1)” in the top right.

5. Right click on “Snapshot 1″ and then select “Restore Snapshot”. Select “Restore” if prompted.

6. Right click “Firewall” and click “Start”

Now your Firewall will be resumed exactly where it had been previously set up. The last command entered should still be visible.

Before you proceed, make sure that TOR is running on your main Windows computer. If it is, you will see an “Onion” icon visible in your task bar. Click on that icon and you should see the “Vidalia Control Panel”. Make sure that it says “Connected to the TOR Network”. If so, you are ready to proceed. If not then please see section 2 : “Using and Testing Tor Browser for the first time” to re-start TOR. Once TOR is running, proceed.

Let’s restart Ubuntu:

7. Right click “Primary” and click Start. Log in as normal.

8. After fully logged in, open “Firefox” by clicking the orange “Firefox” logo at the top, next to “System”.

9. Try to go to any website, such as http://www.google.com. Try at least 3-5 different websites. You should not be able to connect to any of them.

Note: If you attempt to go to websites you have already been to using Ubuntu, they may appear to load because they are cached.

10. In Firefox on Ubuntu, go to “Edit” and “Preferences”

11. Click on the “Advanced” icon

12. Click on the “Network” tab

13. Under “Connection” it says “Configure how Firefox connects to the internet”. To the right of that is a “Settings” button. Click that button.

14. Select “Manual proxy configuration”

15. Next to both “HTTP Proxy” and “SSL Proxy” type in: 127.0.0.1

16. Set the port to 8118 for both “HTTP Proxy” and “SSL Proxy”

17. Next to “SOCKS Host” type: 127.0.0.1

18. Set the port for “SOCKS Host” to 9050

19. Make sure that “SOCKS v5″ is selected at the bottom.

20. Click “Ok” and then “Close”

Now we have instructed Firefox to use TOR. However, Firefox cannot use TOR yet. Right now, Ubuntu is completely unable to connect to the Internet. We
are going to change that.

21. Go to “Applications” -> “Accessories” -> “Terminal”

22. Type in: sudo bash (and hit enter)

23. Type in your password if prompted.

24. Type in the following commands exactly as shown below (or copy paste them):

ifconfig eth0 10.0.3.2
/etc/init.d/polipo stop
/etc/init.d/tor stop
/etc/init.d/privoxy stop

(Note: the last three commands, those beginning with /etc/ are only necessary if you installed Torchat)

Now you have told your Ubuntu machine to join the same network that your Firewall is on. Now we can establish a tunnel for TOR data to flow from our Ubuntu machine, through the Firewall, into your Windows guest machine. We need to establish two such tunnels.

The first tunnel for port 9050 data, and the second tunnel for port 8118 data. When these two tunnels are set up, it will be possible for you to use your Ubuntu machine to access any website using TOR. Further, it is still completely impossible for your Ubuntu machine to access the Internet in any other way.

25. Your terminal window should still be open. Type in the following command exactly as shown (or copy paste it):

ssh -N -L 9050:10.0.2.2:9050 root@10.0.3.1

26. Type “yes” if prompted. When prompted for the password, give your Firewall password. Not your Ubuntu password.

After you hit enter, you will see the cursor go to a blank line and nothing else happens. This simply means the connection you requested is active. If the connection were to stop for any reason, you would return to a command prompt. If you want to terminate the connection yourself, simply hit CTRL+C. You can type in the same ssh command again if you need to re-open the tunnel.

27. Now we are going to open the second tunnel. In your terminal window, go to “File” and “Open Tab”. This will open up a tab for a second terminal without affecting the first.

28. Now, type exactly as shown below to open the second tunnel:

ssh -N -L 8118:10.0.2.2:8118 root@10.0.3.1

29. Return to Firefox. Go to the “File” menu and uncheck “Work Offline” if it is checked.

30. Go to the URL: http://check.torproject.org

If you see the text: “Congratulations. Your browser is configured to use Tor” then you are all set! Your Ubuntu virtual machine is now NOT connected to the
internet in any way. However, you can browse any website using TOR, even Youtube. You do not have to be afraid of javascript or Flash. Any files you save
onto your virtual machine will automatically be saved in the encrypted truecrypt volume you set up earlier. In fact, everything the virtual machine does will be contained within that truecrypt volume.

Further, even if someone somehow managed to remotely gain full root access to your Ubuntu machine (absurdly unlikely to happen), they would still not be able to see *anything* about who you are, or what your real IP address is, or even that you are using a Virtual Machine. To them, it would appear that the Ubuntu machine is your main computer. They would be totally unable to compromise your identity based on this alone.

However, keep the following in mind. If someone were to gain access to your Ubuntu machine, they WOULD be able to see anything you have used it for or any files you have saved. Therefore, I recommend for the sake of absolute security, do not store anything on your Ubuntu virtual machine that identifies you. This is just a precaution. It is virtually impossible that someone would manage to remotely gain access to your Ubuntu machine.

=== 17. General Daily Usage ===

Much of this guide has involved detailed one-time setup processes. From now on, all you have to do when you want to use TOR from your Ubuntu virtual machine is to follow these steps. Every step listed is a step you have already done, so feel free to re-visit earlier sections if you need help.

1. Start TrueCrypt, and mount your hidden volume which contains your virtual machine.

2. Start VirtualBox

3. Start TorBrowser Bundle.

4. Click “Firewall” to highlight it, and then click on “Snapshots (1)” in the top right.

5. Right click on “Snapshot 1″ and then select “Restore Snapshot”. Select “Restore” if prompted.

6. Right click “Firewall” and click “Start”

7. Right click “Primary” and click Start. Log in as normal.

8. Go to “Applications” -> “Accessories” -> “Terminal”

9. Type in: sudo bash (and hit enter)

10. Type in your password if prompted.

11. Type in the following commands exactly as shown below (or copy paste them):

ifconfig eth0 10.0.3.2
/etc/init.d/polipo stop
/etc/init.d/tor stop
/etc/init.d/privoxy stop

(Note: the last three commands, those beginning with /etc/ are only necessary if you installed Torchat)

12. Your terminal window should still be open. Type in the following command exactly as shown (or copy paste it):

ssh -N -L 9050:10.0.2.2:9050 root@10.0.3.1

13. Type “yes” if prompted. When prompted for the password, give your Firewall password. Not your Ubuntu password.

14. In your terminal window, go to “File” and “Open Tab”.

15. Now, type exactly as shown below to open the second tunnel:

ssh -N -L 8118:10.0.2.2:8118 root@10.0.3.1

16. Return to Firefox. Go to the “File” menu and uncheck “Work Offline” if it is checked.

17. Go to the URL: http://check.torproject.org

If you see the text: “Congratulations. Your browser is configured to use Tor” then you are all set!

Enjoy!

Phew, now i have it complete ! I admit its quite extensive, not to say enourmous, but its the best how-to on anonymity and other safety procedures i have found so far. It secures your sys black-hat style^^ :

http://en.wikipedia.org/wiki/Black_Hat_Briefings (for those of you who dont know black hat ^^)

You dont have to do all steps at once. You can do a little of it every time you have an hour or two to spare. I think for the whole procedure you will need roughly 8-12 hours. I think its written in a way everybody should be able to follow. If there are still steps unclear just ask, i will see if i can help you. btw this is written for noobs, but the tips here are interesting for allmost everybody.

P.S.: Once you have installed TOR you can get access to TOR hidden services and other interesting deep-web pages. If you want some links for your first steps into this hidden part of the internet just ask me. If there is a lot of requests i will write an extra thread with the most important websites in the deepweb. One thing before you get started : most deepweb pages arent online 24/7. So if you cant reach a certain website be patient and try again and again till you get access. Another thing : you will find websites that are pretty shocking and disturbing. In 99.5% you will see beforehand what you find on those sites, so if you dont want to see certain things dont klick on the links.

Now that you have a really secure system, you should know what to do when the shit hits the fan and you are arrested or your home gets searched. SYour system, is secured in a way they cant break, so the only thing that can incriminate you now is your testimony.
These 2 youtube videos are 2 lectures on behaviour towards the police in such situations. Part one is done by a criminal defense attorney, part 2 by a very experienced police officer. They both tell you about the tricks the police uses and how you should react :


;tl,dw : say nothing and ask for a lawyer, ALLWAYS ! You cannot improve your situation with anything you say (this is counterintuitive, but the attorney here has in his whole carrer NEVER heared of single case where a suspect could help his case by talking to the police, but he could name many cases where they made matters way worse) but you can make it a lot worse, so shut the hell up and wait for your lawyer.

Even him being a defense lawyer wouldnt talk to the police under any circumstances. You can tell your story before court AND NEVER, UNDER NO CIRCUMSTANCES, BEFORE THAT ! Even the cop in lecture 2 says NEVER TALK TO THE POLICE !!!!!

--------------
Note from rencista: this tutorial is back up copy. I'm not autor of tutorial.