she/her

  • 5 Posts
  • 1.06K Comments
Joined 2 years ago
cake
Cake day: August 3rd, 2023

help-circle
  • How is it that manifestos are either the ramblings of a lunatic or the most heart wrenching, poignant text you’ve ever read?

    I remember reading Willem Van Spronsen’s manifesto days after he got shot while firebombing ICE busses. I remember how I cried, read it again, cried again. He saw the writing on the wall, and took action. Godspeed!

    There’s wrong and there’s right.
    It’s time to take action against the forces of evil.

    Evil says one life is worth less than another.
    Evil says the flow of commerce is our purpose here.
    Evil says concentration camps for folks deemed lesser are necessary.
    The handmaid of evil says the concentration camps should be more humane.
    Beware the centrist.

    I have a father’s broken heart
    I have a broken down body
    And I have an unshakable abhorrence for injustice
    That is what brings me here.
    This is my clear opportunity to try to make a difference, I’d be an ingrate to be waiting for a more obvious invitation.





  • You’re right, and I’m sorry if I came over as condescending. The thing is, with projects like these, you need to front load a lot of the safety concerns if you are going to be the one actually hosting the content. It’d be an easier entry to contribute to existing structures, staying more low-key and learning along the way. Many established projects are open-source and need programmers and hackers to help improve and secure their codebases, for example.

    That said, if you wanted to start something of your own, I think Anna’s blog is a nice starting point, before you delve into the technical nitty-gritty:

    https://annas-archive.org/blog/blog-how-to-become-a-pirate-archivist.html

    https://annas-archive.org/blog/how-to-run-a-shadow-library.html

    Then, for the actual hosting process, much depends on the stack you use. Never pay for anything in a way that can be traced, which basically only leaves cash or anonymous crypto like Monero. Don’t use any account names, emails, passwords, etc that you’ve ever used before. Never, ever go boasting to strangers, or even worse, friends, about what you’re doing. Do all the standard things of hardening your servers, but always plan around some or all of them being shut down it seized. Even “bulletproof hosting” providers get raided every once in a while. That means decentralization, and don’t put convenience over safety.

    Now, while shadow libraries and other forms of media piracies certainly are sought-after targets, you’re likely not going to be anyone’s number one priority, while there’s still rings of child abusers and terrorists on the web. But once you reach a certain size, state actors will come after you, like they did after z-lib a while ago. I don’t have any comprehensive guides on Opsec (and I’m no expert on it, by any measure), but most of it boils down to common sense and keeping your mouth shut, anyways. Most people that get busted don’t have missed some technical vulnerability, but because they’ve talked about their illegal projects on accounts linked to their real name, or something similarly trivial.





  • that’s not how it works. the code and website may live on, but you are committing a crime right now (nothing wrong with that). If law enforcement comes after you, it won’t matter if you’ve ‘stepped away’ in the mean time. You can either go the route of Anna, keep very tight Opsec and make sure nothing seeps through the cracks. Or you go the way of Alexandra Elbakyan, make your piracy public, to make a point. That means you willingly accept never being able to travel anywhere that has enforced copyright laws. If you half-ass it somewhere in between, you will get caught, and you will face prison time or hefty fines (potentially millions). Are you aware of that?




  • putting aside the obvious glowie talk someone else raised, you should really, really reconsider your opsec. And I mean, really. Using discord to communicate? And spamming Reddit, from a non-dedicated account, no less? Posting PII to justify downtimes? If this gets any traction at all, you’re in deep shit. There’s a good reason Anna is as anonymous as she is. Cat is out of the bag at this point, I’d recommend shutting it down. You could always continue developing the code for it, the frontend looks pretty good. But please, reconsider if you have the dedication and knowledge it takes to run a shadow library and not be caught.









  • It’s about the certainty to have what you want, where you want it, reliably. I run NixOS with Impermanence, which means I reset my root partion on every boot, and have what state I need specifically opt-in. And I run a shared config over multiple devices (home PC and Laptop), so installing something on one also installs it on the other, next time I rebuild. It certainly takes time getting used to, but I’ve been really enjoying it so far