Ozan Özdil
EN

Machine translation from Turkish (Cloudflare Workers AI), not reviewed by the author. Read the Turkish original

← Posts

Digital Resistance Series - Part 8: Cyber Guerrilla Tactics and Advanced Invisibility

Score —

Reducing online traces through network masking, identity spoofing, metadata cleaning, and compartmentalization.

· Updated: · 3 min read
Contents

Summary: In the eighth part of the series, I go beyond protecting data and focus on hiding identity: multi-hop VPN and Tor bridges, email and phone masking, cleaning metadata from files, on-device encryption, and separating different identities from one another (compartmentalization).

"The best defense is not even being known to be there. Being a ghost in the digital world means taking away the system's ability to categorize you."

Introduction: From Passive Defense to Active Invisibility

In the chapters so far, we learned how to protect our data. But for an advanced "resistance fighter," protecting data is not enough; identity must be diverted during the data production process. In this chapter, we will address the Obfuscation techniques and cyber guerrilla tactics that make it impossible for algorithms to recognize us, along with their technical layers.

1. Masking at the Network Level: VPN and Tor Bridges

Your internet service provider (ISP) can see which sites you visit through metadata. A standard VPN only hides this data from the ISP, but hands it over to your VPN provider.

1.1. Multi-Hop and Onion Routing

The cyber guerrilla does not trust a single point. By using a multi-hop VPN, you route your traffic out first through one country and then through another, making it technically impossible to be tracked. At a more advanced stage, by using bridges such as "meek_lite" or "obfs4" from the Tor Project, you can make your traffic look like ordinary HTTPS traffic and bypass deep packet inspection (DPI) devices.

2. Digital Identity Obfuscation

Algorithms recognize you not by your email address or phone number, but by the "relationship map" these data create. To break this map, an Alias architecture is essential.

2.1. Email and Phone Masking

  • SimpleLogin / Addy.io: Create a different email alias for each service. If a service leaks your data or sends spam, you can protect the rest of your digital identity by shutting down only that alias.

  • VOIP and Burner Numbers: Instead of using your real phone number on the services you sign up for, use virtual (VOIP) numbers to break the link between your physical SIM card and your digital identity.

3. File and Metadata Cleaning (ExifStripper)

Even if you store it on your own server (Nextcloud/Immich), the EXIF data embedded in a photo you upload to the internet (GPS coordinates, camera serial number, time of capture) gives you away.

  • Metadata Scrubbing: Cleaning your files with tools such as ExifTool or Metadata Cleaner before sharing them is the fundamental rule for erasing your digital fingerprint.

4. Local Encryption: "At-Rest" Data Security

Against the possibility of your server (Homelab) being physically seized, protecting your disks with ZFS alone is not enough. You must encrypt your disks at the hardware level using LUKS (Linux Unified Key Setup) or VeraCrypt. Every time the server boots, it must be impossible to read the data without manually entering the password (or via a secure key server).

5. Compartmentalization Against Social Engineering

The biggest vulnerability is always the human. The cyber guerrilla tactic requires dividing digital life into completely independent compartments.

  • Official Life: A separate browser profile / a separate VM for government affairs and banking.

  • Social Life: A completely different network (VPN exit) and browser for pseudonymous social media accounts.

  • Technical Life: An isolated environment with telemetry disabled for development and research.

My reading

Invisibility is not a state that ends with installing a piece of software; it is a way of life. As algorithms become smarter every day, we too must update our tactics. Remember; in the cyber world, the safest profile is not the one about which data is collected, but the one whose collected data cannot be linked together.

Chapter 8 Technical Terms Glossary:

  • Obfuscation: Making data unintelligible or misleading.

  • Multi-hop: Relaying traffic through more than one server.

  • DPI (Deep Packet Inspection): In-depth inspection of packet contents.

  • EXIF: Technical metadata embedded in photos.

  • LUKS: The standard disk encryption layer for Linux.

  • Alias: A pseudonym/address that hides the real identity.

  • Compartmentalization: Fully isolating systems from one another.

  • Onion Routing: Transmitting data with layered encryption (Tor).

Sources

  • The Art of Invisibility by Kevin Mitnick.

  • Whonix OS Documentation (Advanced Anonymity).

  • Tor Project: Bridges and Pluggable Transports.

  • Electronic Frontier Foundation (EFF) Surveillance Self-Defense Guide.