1

I have a VPS (although I could easily upgrade to a dedicated server) which I use as a "poor man's VPN" by tunneling through it.

My aim is to improve this server so anyone attempting to track me has a hard a time as possible. Defeating the NSA would be nice, but it's realistically not possible, so as long as regular law enforcement (or adversaries with their capabilities) cannot track me I am satisfied.

My ideas are the following:

  • Run as a Tor and i2p relay, also use freenet so there are always numerous connections making it hard to pinpoint who was using the server (a relay also keeps the IP address clean from black lists)
  • Ensure all logging is off
  • Full disk encrypt
  • Have deep freeze (or a linux equivalent) enabled
  • Run everything from RAM
  • Randomly restart at times I am not using it
  • Perhaps chain 3 different servers together using IPTables or something similar so it takes any investigators through 3 different countries
  • Ensure offshore country with strong privacy laws, and countries which outright hate the country I am hiding from (so if USA then pick Russia etc)
  • Pay anonymously with BTC
  • Linux OS
    • Regularly change servers

The server itself will be secured, updated software, SSH key with long password, nonstandard SSH port etc...

I am aware that even if company honestly keeps no logs their ISP most likely will, however hopefully with the above I can make it very difficult to discover which connection I was.

What else could I add to increase the anonymity of tracking me?

closed as too broad by Steffen Ullrich, Neil Smithline, Xander, Stephane, LvB May 31 '16 at 13:20

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • The only way to ensure anonymity is to not use your computer at all. Use a computer at the public library. Make sure there are no security cameras. Don't tell anyone your real name. Don't log in to any personally-identifiable services on the computer (Facebook, email, SSH to server in your name, etc.) If you suspect someone might have reason to trace the connection, never use that computer again (or any computer in that building). – Dan May 26 '16 at 15:08
  • 1
    @Dan Yes I am aware of that. However, lets focus on this question which is about the SSH. – k1308517 May 26 '16 at 15:10
  • 1
    @Dan So pretend I did what you said, except I still want to use my SSH just to increase the amount of time I have to ermmmm flee the country, or whatever? – k1308517 May 26 '16 at 15:12
  • 1
    @Dan Once again thank you but I am well aware. Server will not be in my name (paid for with BTC too). True I will update. EDIT no actually I clearly explained in description: My aim is to improve this server so anyone attempting to track me has a hard a time as possible. Defeating the NSA would be nice, but it's realistically not possible, so as long as regular law enforcement (or adversaries with their capabilities) cannot track me I am satisfied. – k1308517 May 26 '16 at 15:27
  • 1
    I have to disagree that anonymity is binary. Few things in the real world are binary. Virtually nothing you can do online or IRL leaves absolutely zero forensic traces, it all depends on the resources and motivation level of any attacker(s). So perhaps better to focus on the threat model(s), resourcest needed to address them, and effectiveness of those efforts. – pseudon May 28 '16 at 16:27