Giters

senden9 / thgtoa

The Hitchhiker’s Guide to Online Anonymity

Home Page:https://anonymousplanet.org

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Welcome.

This is a maintained technical guide that aims to provide introduction to various online tracking techniques, online id verification techniques and guidance to creating and maintaining (truly) anonymous online identities including social media accounts safely and legally. No pre-requisites besides English reading are required. It is written with hope for activists, journalists, scientists, lawyers, whistle-blowers, and good people being oppressed/censored anywhere!

This guide is an open-source non-profit initiative, licensed [Mirror] [Archive.org] under Creative Commons Attribution 4.0 International (cc-by-4.0) and is not sponsored/endorsed by any commercial/governmental entity.

The latest version is 0.9.0, See the CHANGELOG at https://anonymousplanet.org/CHANGELOG.html [Mirror] [Tor Mirror]

Latest Online HTML versions at:

Latests PDF versions at:

The PDF files in this guide have been checked by VirusTotal and Hybrid-Analysis, see the links below (Note that this guide does not endorse VirusTotal/Hybrid-Analysis. Those should be used with extreme caution and never with any sensitive files due to their privacy policies.)

For additional safety; you can always double check them using PDFID which you can download at https://blog.didierstevens.com/programs/pdf-tools/.

(You might be wondering why should trust a random python script? Well it's open-source and well-known. It's probably a safer bet than trusting a random PDF)

  • Install latest 3.9.x version of Python, Download PDFID and run:

python pdfid.py file-to-check.pdf

And you should see the following entries at 0 for safety:

/JS                    0 #This indicates the presence of Javascript which could be malicious
/JavaScript            0 #This indicates the presence of Javascript which could be malicious
/AA                    0 #This indicates the presence of automatic action on opening
/OpenAction            0 #This indicates the presence of automatic action on opening
/AcroForm              0 #This indicates the presence of AcroForm which could contain malicious JavaScript
/JBIG2Decode           0 #This indicates the PDF uses JBIG2 compression which could be used for obfuscating malicious content
/RichMedia             0 #This indicates the presence rich media within the PDF such as Flash
/Launch                0 #This counts the launch actions
/EmbeddedFile          0 #This indicates there are embedded files within the PDF
/XFA                   0 #This indicates the presence of XML Forms within the PDF

SHA256 Checksums of all the PDFs are available here:

SHA256 Checksums and GPG keys of the full repository releases files are available within the checksum file at https://github.com/AnonymousPlanet/thgtoa/releases/latest

The GPG signatures for each PDF file are available here:

To check the SHA256 Checksums please do the following:

Windows:

  • From a command prompt, run certutil -hashfile filename.txt sha256
  • Compare the result with the hash in the online checksum files.

MacOS:

  • From a terminal, run shasum -a 256 /full/path/to/your/file
  • Compare the result with the hash in the online checksum files.

Linux:

  • From a terminal, run sha256sum /full/path/to/your/file
  • Compare the result with the hash in the online checksum files.

All commits and releases on this repository are signed and verified using the same key. Check for the "Verified" tags.

To verify files with GGP signatures, you should first install gpg on your system:

Import the GPG key using the following command from a command prompt or terminal:

gpg --auto-key-locate nodefault,wkd --locate-keys 0xEB16B6AB4AB7BA61F33E2DFD0051E9A589DAB601

If this doesn't work, you can also download/view it directly from here: https://anonymousplanet.org/AnonymousPlanet_0x89DAB601_public.asc [Mirror] [Tor Mirror]

And then import it manually by issuing the following command:

gpg --import AnonymousPlanet_0x89DAB601_public.asc

Finally, verify the asc signature file (links above) by issuing the following commands:

gpg --verify guide.pdf.asc guide.pdf" gpg --verify guide-dark.pdf.asc guide-dark.pdf"

You can verify the authenticity of this GPG signature using:

As well as the published key on (search for the fingerprint):

Using the following GPG fingerprint: 0xEB16B6AB4AB7BA61F33E2DFD0051E9A589DAB601

Feel free to submit issues using Github Issues.

If you'd like to make a donation to this project, you can do so from https://anonymousplanet.org/donations.html [Mirror] [Tor Mirror]

Follow or contact me on:

Discussion Channels (be careful as none of those are actively moderated, or encrypted):

Have a good read and feel free to share it!

About

The Hitchhiker’s Guide to Online Anonymity

https://anonymousplanet.org

License:Creative Commons Attribution 4.0 International

Languages

Language:HTML 84.9%Language:SCSS 15.1%