opsec guide / help with being doxed

[resteasy3232]

i know people have been worried about being extorted, and doxed online on this site. there was a thread made on the group 764 and i'd like to give the people of sasu some tips on opsec / how to avoid stuff like this.

use secure and encrypted email services. choose a secure email provider that offers end-to-end encryption, like cock.li or tutanota, which do not require personal information for account creation. create accounts anonymously and avoid using your real name or any identifiable information.

account anonymity is crucial. use a strong, unique password for your email account, and consider using a password manager. enable two-factor authentication (2fa) for added security, preferably with a hardware token or an authenticator app.

(i use bitwarden for this, helps me a lot for a password manager)

avoid sharing personal information. limit sensitive data, such as your real name, address, or phone number in public forums (in dms also, and not only on sasu). also, be cautious with social media—use pseudonyms or anonymous accounts and adjust privacy settings to limit who can see your information.

consider using a vpn for more security. always connect through a reputable vpn while accessing accounts or browsing, and choose a vpn that doesn't keep logs and respects user anonymity. (i use mullvad for this)

regularly update your security practices. stay informed about the latest security threats and best practices for maintaining online anonymity. also, regularly change your email and account passwords, especially if you suspect any database leaks / any of your personal information being out there.

use alternative contact methods for secure communication. when discussing sensitive topics, prefer secure messaging apps like signal or telegram instead of discord. create temporary emails for one-time registrations, using services like 10minutemail.com to avoid compromising your main email.

monitor your digital footprint by searching for your name and any associated identifiers online to see what information is publicly accessible. if you find sensitive personal information online, use services that can help remove it from data broker sites.

if you are worried about getting doxed / extorted then please contact me, i'm sure i can help you.

if youve been posted on a site like doxbin, please dm me, especially if its being used against you.

i'm not sure who this will help, but if you ever need anymore please let me know.

and ofc you dont have to do all of these, only if you are worried about stuff like this

<3

 

[moonshyne]

how common is it for users to be doxxed on this site? is it something most people should be worried about?

 

[resteasy3232]

how common is it for users to be doxxed on this site? is it something most people should be worried about?

i dont think its very common, its just in general. SaSu actually has pretty good protection and an amazing staff team. I wouldnt worry about it if you are just using SaSu but theres a lot of bad people that roam sites like this and would use your information against you.

Extortion / Sextortion is a big issue, and will continue to be unfortunately, but I dont think its very common here.

 

[cali22♡]

how common is it for users to be doxxed on this site? is it something most people should be worried about?

It depends on your intilligence. a lot of users are doxxed here because they all make the same mistake: USING THE SAME USERNAME THEY ALWAYS USE. That's fine, but unfortunately some people don't understand the meaning behind it. You just make it easier for these people to find your social media accounts and you get doxxed faster

Fun fact

I got doxxed because I leaked all their methods.
There are many things I would like to add to the VPN provider I would recommend a VPN that does not log.

I can name my 2 personal favorites here

Perfect privacy and Mullvad

Perfect privacy:
(They are from germany but host their site on Ram Servers)
Very well known in the German fraud scene and a reliable provider for years


Mullvad:

Provider from Sweden that is very well known for its low prices and its no-log policy

As a password manager I would only recommend one and that is KeePass
also very reliable

One of the least effective ways to protect yourself from doxxing is NOT ALWAYS USING THE SAME PROFILE PICTURE AND NOT ALWAYS USING THE SAME USER NAME.
The problem with having the same username everywhere is that it is easier to find your accounts

A second security tip is:

Always clean your exif and meta data when you take pictures with your phone and send them.
There are tons of free tools that allow you to do this


Third tip:

Use sites like
https://haveibeenpwned.com/ and see if you have been the victim of a data leak.


###

Personally, I would only use temp mails for forums where I want to have a quick look. Wouldn't recommend using it as your main email... Don't take advantage of your laziness... You can also use protonmail if you need an email quickly


###

Would recommend it as a messenger session if you want anonymity. It's an open source messenger that runs over the Tor network

###

You also forgot to write something important...

It is now possible to have your paste removed on Doxbin by paying a fee to the admins and they will remove the paste.



Thank you

I hope i could help you a bit

</3

i know people have been worried about being extorted, and doxed online on this site. there was a thread made on the group 764 and i'd like to give the people of sasu some tips on opsec / how to avoid stuff like this.

use secure and encrypted email services. choose a secure email provider that offers end-to-end encryption, like cock.li or tutanota, which do not require personal information for account creation. create accounts anonymously and avoid using your real name or any identifiable information.

account anonymity is crucial. use a strong, unique password for your email account, and consider using a password manager. enable two-factor authentication (2fa) for added security, preferably with a hardware token or an authenticator app.

(i use bitwarden for this, helps me a lot for a password manager)

avoid sharing personal information. limit sensitive data, such as your real name, address, or phone number in public forums (in dms also, and not only on sasu). also, be cautious with social media—use pseudonyms or anonymous accounts and adjust privacy settings to limit who can see your information.

consider using a vpn for more security. always connect through a reputable vpn while accessing accounts or browsing, and choose a vpn that doesn't keep logs and respects user anonymity. (i use mullvad for this)

regularly update your security practices. stay informed about the latest security threats and best practices for maintaining online anonymity. also, regularly change your email and account passwords, especially if you suspect any database leaks / any of your personal information being out there.

use alternative contact methods for secure communication. when discussing sensitive topics, prefer secure messaging apps like signal or telegram instead of discord. create temporary emails for one-time registrations, using services like 10minutemail.com to avoid compromising your main email.

monitor your digital footprint by searching for your name and any associated identifiers online to see what information is publicly accessible. if you find sensitive personal information online, use services that can help remove it from data broker sites.

if you are worried about getting doxed / extorted then please contact me, i'm sure i can help you.

if youve been posted on a site like doxbin, please dm me, especially if its being used against you.

i'm not sure who this will help, but if you ever need anymore please let me know.

and ofc you dont have to do all of these, only if you are worried about stuff like this

<3

And another information...

COCK.LI IS OFFLINE

 

[resteasy3232]

It depends on your intilligence. a lot of users are doxxed here because they all make the same mistake: USING THE SAME USERNAME THEY ALWAYS USE. That's fine, but unfortunately some people don't understand the meaning behind it. You just make it easier for these people to find your social media accounts and you get doxxed faster

Fun fact

I got doxxed because I leaked all their methods.
There are many things I would like to add to the VPN provider I would recommend a VPN that does not log.

I can name my 2 personal favorites here

Perfect privacy and Mullvad

Perfect privacy:

Very well known in the German fraud scene and a reliable provider for years


Mullvad:

Provider from Sweden that is very well known for its low prices and its no-log policy

As a password manager I would only recommend one and that is KeePass
also very reliable

One of the least effective ways to protect yourself from doxxing is NOT ALWAYS USING THE SAME PROFILE PICTURE AND NOT ALWAYS USING THE SAME USER NAME.
The problem with having the same username everywhere is that it is easier to find your accounts

A second security tip is:

Always clean your exif and meta data when you take pictures with your phone and send them.
There are tons of free tools that allow you to do this


Third tip:

Use sites like
https://haveibeenpwned.com/ and see if you have been the victim of a data leak.


###

Personally, I would only use temp mails for forums where I want to have a quick look. Wouldn't recommend using it as your main email... Don't take advantage of your laziness... You can also use protonmail if you need an email quickly


###

Would recommend it as a messenger session if you want anonymity. It's an open source messenger that runs over the Tor network

###

You also forgot to write something important...

It is now possible to have your paste removed on Doxbin by paying a fee to the admins and they will remove the paste.



Thank you

I hope i could help you a bit

</3

And another information...

COCK.LI IS OFFLINE

cock.li isnt offline, they went off red alert ( they should be allowing registration soon )


and no you dont have to pay the owners if you go through me, no need to do that especially if you are getting extorted because of it

 

[cali22♡]

cock.li isnt offline, they went off red alert ( they should be allowing registration soon )


and no you dont have to pay the owners if you go through me, no need to do that especially if you are getting extorted because of it

So are you offering a service here? or how am I supposed to understand that?

 

[resteasy3232]

So are you offering a service here? or how am I supposed to understand that?

dm me

 

[moonshyne]

It depends on your intilligence. a lot of users are doxxed here because they all make the same mistake: USING THE SAME USERNAME THEY ALWAYS USE. That's fine, but unfortunately some people don't understand the meaning behind it. You just make it easier for these people to find your social media accounts and you get doxxed faster

i feel like this is a no brainer but im sure some people still do it lol
even if doxxing wasnt an issue why would you want anyone from this site finding your personal accounts, and vice versa?