The Truth About Anonymous Accounts Online

The absolute first two things you need to ask yourself before trying to make an anonymous Facebook account are why do you want one and who are you hiding from? In fact, these two questions drive even the feasibility of your exercise.

A few months ago we published the beginning of what was meant to be a primer on making anonymous accounts on Facebook. For the next few months, we were besieged by people who wanted the second half of that process and thought we were holding out on them. We weren’t; the information is constantly changing, constantly moving and morphing into something even more shadowy than the personalities people wanted to make online. Part of the thing we accept in order to play in this particular section of the pool is the need to learn, to constantly watch for new information that forces a change in how we think, how we act, how we teach. The members of TOWR talk a great deal amongst themselves, about what information we are learning, how it fits into the bigger picture, what the best way to teach it is. Through it all, we have sought to answer one question every single time: Is the information we are teaching correct? If we aren’t going to teach the correct information, if people cannot trust the information we give them, then we shouldn’t be teaching at all.  And while we’d have loved to come out with the second part of the Facebook series immediately, we learned a great deal of information that not only made writing the second piece problematic, but made the first one obsolete.

Sometimes it happens where we all endorse a skill, a device, even a person, and we later find out we were wrong. What should we do? Correct the record? Simply stop teaching the wrong info and hope people figure it out? Make a Facebook group plastering that person’s name all over the place? While social media groups “calling out” people seem to be popular these days, that’s not effective, and it’s not how we work. Those who need to know information we have are given it, using the appropriate channels and the correct process. When it comes to the idea of making anonymous social media accounts, this article is what I’d consider the correct process. So let’s get started.  First of all: ignore the previous article on this subject because it is obsolete.

The absolute first two things you need to ask yourself before trying to make an anonymous Facebook account are why do you want one and who are you hiding from? In fact, these two questions drive even the feasibility of your exercise. Let’s take a look at various purposes for anonymous accounts.

  1. “I run my mouth a lot on Facebook, or I like to talk trash to certain people, and I don’t want them knowing it’s me.” If this is your purpose, you don’t need an anonymous account. You need testicular fortitude, which is outside our wheelhouse, sorry.  If you were sitting across a table from me and actually said this was your purpose, I would get up and leave.
  2. “I want to join patriot groups as a fake name because OPSEC.” Again, this is very high on the list of reasons that should disqualify you from getting taught how to do this for one reason that will become very obvious later.
  3. “I don’t want the government knowing that I’m in patriot groups on Facebook.” This is not possible. In fact, I’ll say it again: It is not possible to hide from the government on Facebook, and I’ll explain this more in a moment because it needs clarification.
  4. “I want to use Facebook without giving up my privacy.” Nope, sorry — if you have a Facebook account, you do not have privacy. It’s that simple.
  5. “I want a second account to use on my phone for patriot activity coordination.” No. Even if you did make a second account and only accessed it from your phone, you’d be dead in the water BECAUSE you accessed it from your phone, and you’d screw every other person you talked to, whether or not you were coordinating with them.

If any of those reasons are why you want an anonymous account, then walk away now because they are not feasible.  Now let’s look at the reasons and ways you can have an anonymous Facebook account.

  1. You want to use Facebook but aren’t comfortable with your boss or coworkers seeing it, or you’re interviewing for a job. This is a perfectly good reason to have an anonymous account. Keep in mind that it will not work if this is a second account; it defeats the purpose. Your best bet, if you really need to do this, is to deactivate your current account and make a fake account with a fake name that sounds reasonable (Jack McCoy, for instance, not Shiggy Sugarbottom or Jane BenghaziJones). The caveat to this is…you guessed it…no politics. Nothing. Puppy videos and likes on food posts. In fact, keep in mind that making that fake account and then adding your family and friends, by nature of the data machine, will automatically identify you anyway, as will using any device or wifi you’re already associated with to access it. You can see the issues already, right?
  2. You want to use the account to infiltrate a leftist group, such as a semi-local Antifa group. Now THIS is doable — but it requires some caveats as well. The people you’re up against often have skills you don’t. If you so much as make the slightest mistake, you’re identified, and then you’re toast.  I say semi-local (or even far off) as opposed to very local because if you join the local group, you may be expected to actually show up in person at an event.  If you have other photos of yourself on the internet (and who really doesn’t at this point) then you are easy to identify as well. This is possibly best done with a two-man team; you get into his local group and he gets into yours, and you never talk on FB, you never talk at all unless you can pull off meatspace or a message drop on some Tor-based or i2p-based message service that follows the protocols below.
  3. You want to use the account to use Facebook without the government knowing what you’re doing. Here’s the problem. Every single device you own, every wifi you have ever connected to with one of those devices OR done any of your normal routines on, every page you’ve ever visited, every like, comment and share you’ve ever done is part of the data package that is you. That means, if you want to be able to use Facebook while hiding from the government, you need to strictly adhere to the following:
    1. Never use a device you have ever used before. Any device you choose MUST only be used for that particular account. So you’re literally talking about purchasing a laptop (has to be a laptop, and a specific kind of laptop, like an old refurb, that’s also been altered for this purpose) just so you can have a Facebook account on it.  Is that worth it to you?

    2. Never use an internet connection you’ve used before. That means every time you log into that account, it needs to be from a new place. This is true for tradecraft reasons as well as technical. You don’t want to get on a first name basis with the barista at the Starbucks two blocks from your house.

    3. Never drive your own vehicle to your connection point. Also, don’t take any means that can be tracked back to you. That means, don’t get in an Uber, etc.

    4. Never take a phone with you of any kind. No burners, no flip phone, no smartphone, nothing. Don’t wear your Apple watch or FitBit (why do you have either of those anyway, if you care about privacy so much that you need an anonymous Facebook account?)

    5. Never dress in a way that will stand out in the specific venue and area that you’re choosing for that particular outing. In fact, put some thought into your choices of venue. If you’re 50 years old, 300 pounds, and bearded in a non-hipster way, don’t choose a venue in a trendy millennial area because you WILL stick out no matter what you wear. Be honest with yourself about what you can pull off.

    6. Never use your debit card on these trips. In fact, I wouldn’t even take them — or anything else that can identify you.

    7. Never connect without a VPN. We’ve covered those elsewhere; if you’re not already familiar, you’re sorely behind.

    8. Never connect to anything you normally look at. Don’t check your email. Don’t check the hits on your website. Don’t go to websites you normally frequent. And for the love of all that’s holy, don’t sign into your regular Facebook account. There is no such thing as “just doing one thing quick.” You’re done.

    9. Never join Facebook groups or like pages that your regular account is associated with. And while it should be freaking obvious, don’t go to that group and announce to everyone that this is your new account. Don’t message people, don’t do anything but lurk.

    10. Never tell anyone that you have another account. For any reason, at any time. No one needs to know about it.

    11. Never use that Facebook account to coordinate any activity, mention any areas, or mention any fact about yourself. If you need to use the internet to coordinate activity, then you are working with people who are too far away — and you don’t know them well enough to do anything with them.

    12. Never visit any websites AT ALL while logged in to your Facebook. Don’t keep it open in a tab while you surf.

    13. Never use a browser that is not set up to block scripts, etc. Tor is good, if you’re already following the rest of these protocols.

    14. Never stay online any longer than you absolutely have to, in order to do the things you signed in to do.

You’ve probably read through this list and thought, “Man, what a pain!” Yup. It is a pain. If you had some idea that you could sit in your recliner naked while eating cheetos and wreak havoc on the enemy, then I’m glad I could burst your bubble, because anyone who is making Facebook accounts and has violated even one of the precepts above has not only identified himself, he’s also endangered everyone he talks to. I mentioned earlier that it’s impossible to hide on Facebook from the government. That’s true. It is, however, possible to become someone else, if you are willing to put the work in and can compartmentalize to the extent necessary.  We cover this in the Internet Privacy webinar, and to some extent I’ve just explained it above.

While the list above may seem overly paranoid, it’s not. If you’ve read the Vault7 disclosures (and actually read THEM, not just read the quick summaries the establishment ‘media’ put out), or if you’ve read the rest of the Wikileaks information on the subject, then you should already be aware that the list above is the bare minimum. In fact, I wouldn’t even guarantee your anonymity if you follow the list exactly, because their capability is always changing, new surveillance cameras are always going up, and depending on where you live, you can be seen on camera more than sixty times a day. That’s not counting license plate readers, facial recognition, touch DNA, or anything else. Like it or not, the surveillance state is total, and it is oppressive, and unless you are willing to do the work, you won’t get anywhere.

In short, the question isn’t really how to set up an anonymous Facebook account; it’s whether your particular purpose is worth the money, time, and aggravation of doing it. I can’t make that decision for you; if you’ve read through this list and you are willing to make that commitment, then more power to you. If you think you can do some of the list and ignore others, then God help whoever you’re talking to, because you just put your own laziness above their safety.

If you’ve gotten all the way through and are still wondering how to make yourself an anonymous account, read it again. The “how” is in there.

New Webinar Offering: Countering Infiltration for Individuals and Small Groups

If there is a lesson to be learned in the movement/cause/whatever from the last year, it’s that infiltration is rampant.  Whether we want to admit it or not, the feds have the money, the personnel, and the training to not only infiltrate our groups and actions, but in some instances even pull off operations that run a lot longer and endanger a lot more people.

What is to be done about this? It’s pretty simple: Folks need to learn how to better recognize an infiltration when they see one.

To that end, we’ll be offering a webinar on infiltration, focusing on how it’s done, why it’s effective, and how to guard against it.  It’s not going to give you a list of names, or some kind of magic formula. What it WILL do, is teach you how to think through the process, and recognize the signs. In addition, I’ll show you how to avoid putting yourself into already existing operations — and there are many.

In addition, I’ll talk about some of the current tactics that people are using to find and expose informants and agents, and why they’re ineffective.  We will go over several cases of known informants, and explain how they were able to get in, and why they were able to stay so long.

Our hope is that after this webinar, you’ll be a lot more cognizant of things that don’t fit, and you may find yourself looking at things much differently. In fact, the whole purpose is exactly that — to teach you how to think in a way that will keep you and your groups safe.

We hope to offer this course starting next month; stay tuned for details.

Update on Sparks31 Comms Class

New Update: There are a few spots remaining. We are expecting a full class, and the longer you wait to register the more expensive it will be. If you register today you will have a full 30 days to send in payment; we will hold your spot for that time.

DATE: June 3-4, 2017
LOCATION: Seattle area
COST:
EARLY BIRD: Now until March 31: $200
April 1 – May 31: $250
After June 1 and at the door: $350

Email us at towr@hushmail.com to reserve your spot. You WILL receive an answer within 24 hours; the email issue has been rectified.

See below for original post.
————————

 

There’s no easy way for us to say this, but we screwed up. With the move to Montana, things got left in the dust for a bit in favor of ‘real’ life — and unfortunately, that meant the TOWR email didn’t get answered for a while.

I am personally answering them all today; if you’ve requested information or a registration for the Sparks31 class, you’ll get that today (Sunday). All registrations will be honored for the date of original email, not today.  That means if you emailed us to register two weeks ago, you’ll get the early bird rate as expected.

I will post remaining spots available — if there are any — once I finish answering the existing reservations. First come, first served.

Again, I’m sorry.  We dropped the ball.

How to Run an Anonymous Twitter Account

The Intercept has a fantastic write-up from front to back on how to create and maintain an anonymous Twitter account. Take special note of the warnings about leaking your identity.

A lot of folks prefer not to use social media at all, and that’s fine.  For those staying completely under radar (as in, not posting anywhere), that’s no big deal. For those who understand the principles of propaganda and information operations, however, this is excellent information. Run several of them.

Social media like Facebook and Twitter, for agitators and activists, can be one of the more productive battlespaces — not for the standard chest-beating and trash-talking, but for more underhanded tactics of thread takeovers, topic steering, and other fun activities. Learn how to do it right, then go do it. Just make sure you’re covering your rear end.

Hint: The other side has been doing it effectively for decades. Take a page from their playbook. Just because they hate you doesn’t mean they have nothing to teach you.

This piece was first published on Patrick Henry Society.

Your Anonymous Browsing May Still Identify You

A disturbing study reported on the The Atlantic highlights something we already know: Human nature will screw us every single time; in short, you screw yourself.

If you’re on Twitter, chances are that even if you are browsing anonymously, your history will identify you. Why? Because of how you — and all other humans — behave in a normal setting.

Here’s how the de-anonymization system works: The researchers figured that a person is more likely to click a link that was shared on social media by a friend—or a friend of a friend—than any other random link on the internet. (Their model controls for the baseline popularity of each website.) With that in mind, and the details of an anonymous person’s browser history in hand, the researchers can compute the probability that any one Twitter user created that browsing history. People’s basic tendency to follow links they come across on Twitter unmasks them—and it usually takes less than a minute.

Granted, this was in a test environment. But notice something very critical about the statement the researchers make:

Ultimately, if you want to use Twitter under your own name, there’s little you can do to thwart this de-anonymization technique. “Our deanonymization attack didn’t use any easily-fixed flaw in the Twitter service,” said Ansh Shukla, a graduate student at Stanford and one of the paper’s authors. “Users behaving normally revealed everything we need to know. As such, the research strongly implies that open social networks, detailed logging, and privacy are at odds; you can simultaneously have only two.”

Pay attention. If you tweet (or use Facebook) under your own name, there is no such thing as privacy. While he states you can have two out of the three, note that there are very few ways to stop the detailed logging and still use social media sites because they are designed from the ground up to log and track everything you do. In other words, your only other option is to create a separate everything. Get a throwaway refurbished laptop, run Linux on it, get a VPN, use TAILS, and use that particular laptop away from your home for reading your various stuff, buying your sensitive items, whatever. Save the Windows laptop in your recliner for puppy pics, paper towel orders on Amazon, and answering your grandmother’s messages about whether you’re going to the family campout.

While you’re at it, go to MyShadow.org and take a look at what traces you are leaving.