Some of my many opsec mistakes:

 - Buying domains with a credit card
 - Using AWS with my name and credit card
 - Doing KYC with CloudFlare
 - Showing my face at conferences and podcasts
 - Antagonizing KYC Bitcoin companies
 - Not being careful about nostr posts, which cannot be deleted


And these contributed to having nodeless taken down, I suppose?


You live in a commie state, doesn’t matter how good your opsec is


Thank you for your unintended sacrifice. By sharing all this, it serves as a reminder to the community 1) We are firmly in the "they fight you" stage. 2) stay vigilant and 3) continue to practice good opsec.
nostr:nevent1qqs2tcl492f4fcm2jtqsgx9wjh2hxe52qmeekan8y4k9y9zzjtrp7rqprfmhxue69uhkummnw3ezuargv4ekzmt9vdshgtnfduhsyg8zenmu7gzq8ulj5jj4kv50ph3muwz43f747vmr9ld2alrjdswgavpsgqqqqqqsmdj8ag


Thanks for sharing so we may learn.


Just a helpful list in general, this entire thing has convicted me to be way more anxy
nostr:nevent1qqs2tcl492f4fcm2jtqsgx9wjh2hxe52qmeekan8y4k9y9zzjtrp7rqpzpmhxue69uhkummnw3ezuamfdejsyg8zenmu7gzq8ulj5jj4kv50ph3muwz43f747vmr9ld2alrjdswgavpsgqqqqqqsezygq3


First three are easy to avoid, last three not so much


🙏🏽

I’m so sorry this happened.


Thanks for sharing your wisdoms


Your face and name is safe with me 🫂 I have amnesia 😭


How to buy a domain without a credit card please?


I honestly wonder at least a couple times a week if I should stop using my real name and profile pic.
nostr:nevent1qqs2tcl492f4fcm2jtqsgx9wjh2hxe52qmeekan8y4k9y9zzjtrp7rqpzemhxue69uhhqatjwpkx2un9d3shjtnrdakj7q3qutx00neqgqln72j22kej3ux7803c2k986henvvha4thuwfkper4sxpqqqqqqzqqjpt4


my lineage is well dressed skeletons


thank you for posting this


Anon is almost impossible in this day/age.
Great post.


Wait, so you were investigated, not because you are a registered company, but because you were an anon hobbyist that technically self doxxed?


Thank you for the insights. Good lessons for those fortunate enough to learn by observation this time around. Make sure you have a normie profile separate from your OpSec profile as well for all of the everyday items you’ll be doing.


That's my thinking. That if they get me they get me. What can I do. I cannot do anything useful, effective or important to fight the dark side. Just a few notes and comments here and there. What's the point of taking all the precaution?
Or it's my lazyness.


So this is a checklist for anyone who wants to reboot the project.


Do it. Do it.


Yah I am having to reevaluate what I am putting out there on the internet. I did find that some of the hosting platforms actually accept bitcoin.


Another option is buy prepaid CCs with cash in stores with basic or no camera coverage. Then use Tor to visit domain registery.


I worry a bit too , try not to loose any sleep though , what’s done is done 🫂☂


Some of my many opsec mistakes:

 - Buying domains with a credit card
 - Using AWS with my name and credit card
 - Doing KYC with CloudFlare
 - Showing my face at conferences and podcasts
 - Antagonizing KYC Bitcoin companies
 - Not being careful about nostr posts, which cannot be deleted


I doubt it. The timing of his note is likely coincidence.


Well, it would help the authorities know who they had to strong arm. If he was completely undoxxed it would be harder, right? Assuming nodeless was hosted on AWS etc


Rationale behind the second last point?


Not completely sure. I’d speculate authorities could just work backwards through the webhost to shut down services if he did not comply. Maybe all they needed was ip addresses or numeric identifiers from the vendor account. Maybe real name wasn’t needed to shut all his stuff down.


Thanks for sharing so we may learn.

Sad that privacy isn't the default in our world.

Too few normies value privacy, and won't until it's gone. 😥


I think about this, too, but also know it’s easier to trust social media when you see “real” people.

I think it depends on how you want the world to see you and how that affects your ability to interact with it.


Thanks for sharing so people can learn. The inability to delete messages is both a truly excellent feature, while also a little problematic; such as in the instance you described, but also problematic for people who might get unknowingly entangled or snared into copyright/trademark issues/lawsuits for posting an image/text/document without legitimate authorization from copyright/trademark owners or trolls. Without the ability to take the note/post down permanently and comply with the cease/desist orders, this can become a living nightmare for some.


From: nostr:npub1e2rd2k45ym2jmctnysfadxumrvrr57vqj69ck6trt2y62c40r0kqs9lx8t


These are fair points and I believe the success of Nostr Plebs and my travels speaking about Nostr at various conferences has benefited from being doxxed. I could be wrong.


Split online personalities is highly recommended nowadays, when we're living through the privacy apocalypse, we probably can't make it through but at least we have to try.
Befriend the shadows.

nostr:nevent1qqs2tcl492f4fcm2jtqsgx9wjh2hxe52qmeekan8y4k9y9zzjtrp7rqppamhxue69uhkummnw3ezumt0d5pzpckv7l8jqspl8u4y54dn9rcduwlrs4v2040nxce0m2h0cunvrj8tqvzqqqqqqywsu8cq


At this point, consider yourself observed also on Nostr. Consider to completely stop sharing until you've spoken to a lawyer about the situation. They try to put as much dirt on you as possible, don't give them any (more).
Best of luck 🙏


I think the not being able to delete posts is one of the strongest reasons to use a nym. We’re constantly seeing people’s old tweets being dug up from 10+ years ago when the tweeting culture was completely different from what it is now. So imagine 10 years from now, if nostr has a super strong search function and has become big enough where people dig up old posts…will the culture that’s the norm here currently still hold up then? Hard to say.


Please don't regret posting honesty on nostr. Honest is a brave way to be sometimes.


How is Wikileaks even online in spite of state attacks?


More trouble than I feel it's worth taking. Until I figure out how to truly unplug from the matrix I'll just keep shit posting. And letting the government know how much I hate their guts.


Even if nots could could be deleted - internet doesnt forget.


Your post is making an impact.
Added to the https://nostraco.in/hot feed


Some of my many opsec mistakes:

 - Buying domains with a credit card
 - Using AWS with my name and credit card
 - Doing KYC with CloudFlare
 - Showing my face at conferences and podcasts
 - Antagonizing KYC Bitcoin companies
 - Not being careful about nostr posts, which cannot be deleted


Most Bitcoiners can add to that:

Not utilising #Monero when it is literally made for an adversarial environment.

nostr:nevent1qqs2tcl492f4fcm2jtqsgx9wjh2hxe52qmeekan8y4k9y9zzjtrp7rqppamhxue69uhkummnw3ezumt0d5pzpckv7l8jqspl8u4y54dn9rcduwlrs4v2040nxce0m2h0cunvrj8tqvzqqqqqqywsu8cq


Who in their right mind would be thinking of trying such a thing???


It’s similar to people preferring to meet up in person with someone using Facebook rather than Craigslist.


Those who live in a less communist jurisdiction than Canada


What interesting domains you got lately?🤓


Yea man with all that being said, ur still being shafted wrongly.


RE: Cloudflare https://gitea.slowb.ro/dCF/deCloudflare/src/branch/master/readme/en.md


🫡
Thanks for the honesty and postmortem (mid-mortem?). So, what can we learn from this?
0) If you want to make a difference, regardless of how right or moral you are, you should probably be more paranoid and careful than you are now. Things could get more authoritarian than they seem now.
1) Hosting: some options
https://www.privacytools.io/private-hosting
2) Use a reseller or see #1
3) I can understand the legitimate reasons why people use cloud flare, but they are an anathema to privacy and are taking over the web. We need better ways to combat problematic users without the CF goblin.
4) Either go nostr:npub1j8y6tcdfw3q3f3h794s6un0gyc5742s0k5h5s2yqj0r70cpklqeqjavrvg and cover face (though voice matching is trivial these days) or disassociate your developer self from your legal/official self (though this might preclude invites to conferences—a paradox?)
5) I dunno what to say here. They suck and probably deserve antagonism
6) Think before you post. Always use a VPN/Tor. Carefully screen images for unintended content and strip metadata for what you post

⚡🫡💪 thanks for being open. You are on the front lines currently but we are in this together


The prison is not designed for you to escape it.
nostr:nevent1qqs2tcl492f4fcm2jtqsgx9wjh2hxe52qmeekan8y4k9y9zzjtrp7rqpr3mhxue69uhkummnw3ezucnfw33k76twv4ezuum0vd5kzmqzyr3vea70ypqr70e2ff2mx28smca78p2c5l2lxd3jlk4wl3exc8ywkqcyqqqqqqg84wcn6


I regret leaking that I am a cat. Now everyone thinks I’m a pussy.


Here puss puss 😂


I regret leaking I’m a wolf. Now everyone thinks I sniff asses.


But you actually do 😂


Only wet assess


I regret leaking I’m a frog. Now everyone thinks I’m a French Canadian


But now everyone knows


You’re not?


I said too much already 🤐🤣🤣


😂 I’ve got my suspicions 🤔😜


Watch this mf be straight outta Montreal.


Big if true.


Not getting voice synthesizer is one of my biggest regret, hoping tech gets better for the future.


It’s probably too late at this point.


Doxbook


Just cloned all 15 repositories off of GitHub. You never know what they will censor next


Time for a new identity


I'm afraid our dog did some similar mistakes... Maybe I should stop abusing his accounts, but not quite yet!


Let's be honest for a second here. Sure, not doing any of that would have delayed the detection, but can one otherwise truly hide their identity while being relatively active on social networks, developing a project, or providing an online service?

I'm not talking to you, Satoshi. You might have actually made it, but that is an exception.

nostr:note15h3l225n2n3k4ykpqsv2a9w4wdng5phnndmxwftv2g2y9ykxruxqa7z9q3


Some of my many opsec mistakes:

 - Buying domains with a credit card
 - Using AWS with my name and credit card
 - Doing KYC with CloudFlare
 - Showing my face at conferences and podcasts
 - Antagonizing KYC Bitcoin companies
 - Not being careful about nostr posts, which cannot be deleted


Nice actionable stuffs. <3


All good points. I guess it also depends on the conference, which ones were they?


I think if one is seriously concerned about opsec, they should pull the plug on everything and start all over.

Then, as a genral rule, treat everything as if it’s compromised.

This is also coming from someone with bad opsec. My paranoia can only go so far.


Stopped posting on nostr because of this. Its their wet dream to be able to hang you in 15y because you did some wrongspeak. Not being able to delete your words and its echo living on together with most likely IP adresses ect,
 is the major flaw of Nostr.


Serious question: How does one buy domains without a credit card...?


Nostr is the worst platform for privacy ;)


Fuck me.

I typed them all out and almost hit send.


Just pay the tax and get back to your roots.  BTC needs your voice today more than ever.


Uvita, Costa Rica
Miami, Florida
Toronto, Canada
Riga, Latvia

😁


I wonder what those conferences were all about… 🤔


the LARP video you made about a relay was hilarious, “just click yes”

you just have to be like Bruce Wayne / Batman

Have a public profile if you want to grow in normie land

and have an opsec identity


I'm heading to Uvita for Xmas, I'll do some scouting if you like.


Snort lets you delete posts, but it's not perfect. Honestly, even if it was perfect, screenshots last forever. https://snort.social/


Dog, but same. I'd neeeeeeever do that...


there are some mastodon instances with IP cleanup from their servers every 24 hrs


maybe comes handy to someone else in this scenario https://bitcoin-vps.com/


Use a prepaid debit card?


I hate the credit card/ internet transaction opsec issues. Lots of inconveniences


Some of my many opsec mistakes:

 - Buying domains with a credit card
 - Using AWS with my name and credit card
 - Doing KYC with CloudFlare
 - Showing my face at conferences and podcasts
 - Antagonizing KYC Bitcoin companies
 - Not being careful about nostr posts, which cannot be deleted


BTCco prepaid Visa cards


Thank you for this list of missteps...

I am so sorry about your current consequent struggles... No one deserves the state boot heel.😠😡🤬


From: nostr:npub1kmu9dl7qda4360xxl0h8tt0l4mfy0qjm2zujnudaxjp6vk63nc6qf305ep


Anyone know what happened to nostr:npub1utx00neqgqln72j22kej3ux7803c2k986henvvha4thuwfkper4s7r50e8 ?

nostr:nevent1qqs2tcl492f4fcm2jtqsgx9wjh2hxe52qmeekan8y4k9y9zzjtrp7rqpz3mhxue69uhhyetvv9ujuerpd46hxtnfdupzpckv7l8jqspl8u4y54dn9rcduwlrs4v2040nxce0m2h0cunvrj8tqvzqqqqqqyenmsk8