Hello! what is the best setup for creating content without compromising my privacy? i am aware of most opsec stuff but i have some questions:

  • how do i use 2FA without giving YouTube my phone number?
  • how big of an identifier is my voice? should i use a voice filter?

thanks.

  •  jet   ( @jet@hackertalks.com ) 
    cake
    link
    fedilink
    English
    17
    edit-2
    5 days ago

    You can use a hardware security key, like a yubi key, or a software fido2 equivalent.

    That way it satisfies the two factor requirement, without using a phone number.

    For initial registration you can use an SMS service like SMS pool or the others, you pay a little money, you receive a real text message to a real phone number. You just don’t have access to that number in the future

    Your voice, vocabulary choice, lighting conditions, power interference frequency, can all give away parts of your location and identity. You have to choose what level of paranoia is sufficient

    The most anonymous, would be to have a v-tuber like model, respond and parrot LLM generated voice audio, from a script that’s been translated a few times. Or pay a voice actor from Fiverr to read your script.

    Of course this whole time, using a VPN.

  • Who are you protecting your privacy against here?

    Because if it’s Google, then why on earth would you want to upload content to YouTube in the first place?

    OK, let’s say you didn’t give them your phone number and masked your voice. If you’re not connecting over a VPN or something like Tor, they still have your IP address.

    OK, you now use a VPN, but your browser can still be very effectively fingerprinted and that fingerprint could be nearly unique.

    And so on and so on. And this isn’t even going into metadata in & about your video files that could be used to fingerprint the system they were done on.

    • Who are you protecting your privacy against here?

      viewers and potential malicious hackers.

      Because if it’s Google, then why on earth would you want to upload content to YouTube in the first place?

      I understand everyone wanting me to use PeerTube, but i can’t see my content being successful there.

      And so on and so on. And this isn’t even going into metadata in & about your video files that could be used to fingerprint the system they were done on.

      i confess i didnt consider this. but i think there are tools to remove all metadata from videos. in the end, i dont need to hide myself from google or anything of the sort. i just want my information to be harder to find.

      • If you want to protect your privacy against viewers of your videos, how you upload them to YouTube makes more or less no difference. With this scenario the question is how much information are you leaking in your content, and that’d cover everything from writing style idiosyncracies to anything that can be used to potentially identify eg. where you live and so on.

        If you’re worried about “malicious hackers”, then the question is who are these potential hackers you’re protecting against? Would they be attacking Google or you? If it’s you, then how you upload things to YT is again completely meaningless. If they’re attacking Google and get far enough to actually exfil data, what they’d actually be able to get out of it is anybody’s guess. Using a VPN and a throwaway email is probably good enough in any case.

      • Here’s the deal, YouTube belongs to Google, which makes the content inherently easy to find, unless YouTube doesn’t want it to be. That removes any possibility of you controlling who can see and who can’t.

        Peertube is a completely different animal, you have much more control on who has access, in special if you self host.

        My confusion with you post is that you say you want it to be hard to find, but at the same time you want it to be “successful”, what do you mean by that? What would make it successful for you?

        • My confusion with you post is that you say you want it to be hard to find, but at the same time you want it to be “successful”, what do you mean by that? What would make it successful for you?

          sorry! bad phrasing. if one is to assume there is no way to 100% hide your identity from google, then at least make it “harder to find”.as in instead of giving google my info on a golden plate it would require a bit more effort. that is what i meant. ideally i would like my content to reach as many people as possible.

          • In that case, and please anyone correct me if you think I’m wrong, I would create a user just for that, entirely divorced from real life “me”, including, but not limited to, different country, gender, age, all demographics, and use this persona exclusively for this purpose.

            Know that if you are expecting to monetize directly from YouTube, this is most likely an exercise in futility, but if you you’re not concerned with that, you’re golden.

            I would make sure to upload always over a VPN, just for good measure.

  • Pay some random guy on the internet to upload for you. Yes, your voice will get you identified. Keep in mind that even a voice filter won’t be enough to protect you from authorities. Some people use AI voices instead of theirs to stay anonymous

    • Adding to this, uploading audio/video instead of text means a lot more info and metadata for future adversaries to chew on and discover what you might be hiding. There are instances of people being traced to their country/city based on tiny details like the electrical outlets on the wall, geographical features and noises from nearby electronics like national news broadcasts.

  • you can use something like smspool.net to verify the account with a one time use #. then google will allow you to link an authenticator app to the account. removing the # from the account afterwards does not remove the TOTP code either.