OpSec and Hexbear
OpSec and Hexbear
Hexbear started during the 2020 BLM protests, where cops were using social media and internet presence to track down activists. They are still doing this, but with less vigor than when police stations were burning down.
This included things like using tattoos on naked bodies, etsy store receipts etc.
Just before the r/cth ban, there was also a problem with chasers and leering objectification, and steps were taken to reduce thirst-posting and the like.
These things combined means that people don't post selfies or direct identifying information. People post their pets and artwork, but I know I have to make a decision about where and when I post things to make things non-trivial for cops or random chuds. I feel like a unique pet name, breed, and rough region could be enough to track someone down.
Even so, I think I'm bad at it. I feel like if someone knew me and read everything on hexbear they could ID me pretty easily (and I know multiple people in person on hexbear, but we've never exchanged usernames).
Idk if there are any hard and fast rules beyond the selfies and direct ID though. I should burn this account.
Edit: removed reference to masculinity
You're viewing a single thread.
I mean there's definitely multiple power users here who have posted more than enough to be identified by a moderately determined adversary. I think the de facto rule really is just that users decide their own level of privacy, and the no-selfies policy is mostly useless.
Anyone who has ever posted any kind of payment service handle to /c/mutual_aid could be identified by the feds if they had a reason, for example.
Yeah, I could easily be found by feds based on my account here, even admit to the crimes I've done on here. I actually know how to do good opsec extremely well, for reasons I don't want to get into. At some point, I stopped giving a fuck because of the negative experiences that I associate with that level of ospec are REALLY negative.
I'm also lucky that my life is pretty much protected from doxxing. With the way I live, someone could call my employer right now with everything I've ever said on Hexbear and my employer would only ask why they should give a fuck. I don't have my own lease so all public info on my potential address is wrong and only doxxes my chud parents. I'll also never get my name legally changed because I don't trust the state, so that will never concern me
I would definitely be pretty easily identified, but I also don't post anything here that I wouldn't say to someone in person or to co-workers on company chats.
They're much more likely to use information from an account here to bolster a case against you for some action you took than to pre-crime you from your posts.
Your biggest threat here likely isn't feds, but terminally online right wingers who can connect the dots and try to either harm you IRL, or like send your post history here to your boss.
"here random boss of some company i have no connection to: here's an unrelated username to your employee and an IP addresses proving it's them. maybe some unhinged shit trying to convince you their writing style is the same."
but yeah it is a legit threat that's why don't put anything solid that can connect you to RL. no address, workplace name, etc. nothing that could be placed on a single page in an email and have the connection be instantly made. no HR department is going to read paragraph after paragraph of DIY OSINT that reads like one of those conspiracy walls with red string
(unless you work in a high security industry of some sort obviously)
It's good to practice opsec for sure, but I don't think posting on Hexbear will ever get you in any sort of real trouble.
Even if anti-communism is in full swing, you're more likely to get popped by someone at your local bar while you're drunkenly rambling about Karl Marx than you are for posting to an obscure semi-anonymous forum.
Just remember that if you do end up in court and your posts here are linkable to you, you'll have them read aloud to a jury.