awesome-security-hardening VS tor-relay-docker

If you want to go extreme, I remember from many years ago, there used to be a publicly released document by Australia's cyber security agency, made largely for Windows, which used to list attack vectors on a complex scale. I used to follow their listed possible vectors to formulate threat models as a kid for my Windows computer. Back in the day they used to provide PDF, now its webpages (https://www.cyber.gov.au/acsc/view-all-content/advice/guidelines-system-hardening). This also exists (https://github.com/decalage2/awesome-security-hardening), a bit more wide coverage of OSes and practices.

Maybe these two repos can help you, I've used them both from time to time to look up stuff I have no idea about as a frontend main: https://github.com/imthenachoman/How-To-Secure-A-Linux-Server https://github.com/decalage2/awesome-security-hardening

here is a collection of hardening guides This will get you started in the right direction.

This is called system hardening. Try looking for CIS Benchmarks, awesome hardening (github), STIG's ,mitre baseline, hardening kitty, hardening checklist

See Configuration and syntax changes and Special packages. The latter this time includes changes around NextCloud 23 and Tor Browser prior to 12.5, both of which should be upgraded beforehand.

That stuff is exactly what the Tor Browser is for: <https://www.torproject.org/download/>. No need for any of that other stuff.

Then you're using it wrong. GPG isn't adding anything to this that SHA256 wouldn't, and you're just relying on the SSL certificate.

Look at your list of CAs sometime. There's multiple national organizations there. Controlled by a government.

And any of those will be deemed as valid, so if you go to https://www.torproject.org/download/ and it's signed by a Chinese CA for some reason, to your browser that's perfectly fine.

> What are the chances the official site AND the archive were both compromised?

You're talking about a piece of software that's designed to hide stuff from state level actors. If you're in actual need of such a thing, that threat is pretty damn serious.

Download the Tor app here

First if you know nothing about the darkweb and darknet markets, the first step is getting the tor browser here- www.torproject.org/download/

You need Git, Docker, and a browser that's able to handle .onion addresses (e.g., Tor Browser or Brave).

Install Tor Browser.

Anonymous has released the following press release, encouraging whistleblowers to leak information about UAPs, UFOs and NHIs. YouTube Video: https://youtu.be/DqDOz5UJ83A Disclosure leak website: https://disclosure.youranon.news Tor Browser: https://www.torproject.org/download/ Tails OS: https://tails.net/install/download/ Onion Links may be updated as necessary on the Disclosure Website. We may install multiple links depending on traffic. We ask that only serious people who have information send files! Thank you! _______________________________________________________________

Tor browser: https://www.torproject.org/download/