Skip to main content

03 Operating Systems and Hygiene

CAUTION

This material is provided for educational purposes, authorized security testing, and personal privacy research only. Do not use any technique or tool described here against systems, networks, or individuals without explicit written authorization. You are solely responsible for complying with all applicable laws in your jurisdiction.

Hands-on guides for privacy-focused operating systems and the day-to-day hygiene that keeps them useful. Anonymity networks (Tor, I2P) and messengers (Session, SimpleX) fail if the underlying OS leaks your identity, and no OS can protect you if you leave metadata in every file you touch.

This subcategory is part of the ANONYMITY-PRIVACY-OPSEC category. All files follow the Hands-on format (13 sections, ending with Legal and Ethical Notes instead of OSCP Notes).

Scope​

This subcategory covers:

  • Tails - amnesic live OS that routes everything through Tor and leaves no trace on the host.
  • Qubes / Whonix - compartmentalized OS and Tor gateway VM for separation of identities.
  • Data Destruction - secure wipe, SSD caveats, and the limits of "delete".
  • Metadata - what your files reveal, how to strip it, and how to avoid leaking it in the first place.

Threat Model Summary​

Tool / TopicProtects againstDoes NOT protect againstPersistence
TailsHost compromise, disk forensics, IP leaksFirmware implants, hardware keyloggers, global passive adversaryNone (amnesic by design)
Qubes / WhonixCross-identity contamination, VM escape (mostly)Firmware implants, physical access, endpoint compromise of the hostYes (per-VM)
Data DestructionRecovery of deleted files on HDD/SSDAlready-leaked data, cloud copies, backupsN/A
MetadataFile-level identity leakageNetwork-level metadata, stylometryN/A

Files​

#FileFocus
01TailsAmnesic live OS with Tor by default
02Qubes / WhonixCompartmentalization and Tor gateway
03Data DestructionSecure wipe and SSD caveats
04MetadataFile metadata stripping and hygiene
  • 01 Anonymous Networks - Tor, I2P, Lokinet, VPN chains (transport layer).
  • 02 Secure Communications - Session, SimpleX, XMPP/OMEMO, anonymous email, PGP.

Privacy-focused operating systems are legal to use in most jurisdictions. However:

  • Some countries restrict or ban the use of Tor, Tails, and similar tools. Check your local law before installing or using them.
  • Using these tools to plan or commit a crime is illegal everywhere. Anonymity is not a defense against the underlying offense.
  • Corporate policy may forbid them. On a work device, using Tails, Qubes, or Tor may violate acceptable-use policy.
  • Do not use these tools to harass, stalk, defraud, or harm any person.
  • Authorized use only. In a professional context, use these tools only within the scope of an authorized engagement or for your own personal privacy.

References​