2 ms·

This is going to sound antiquated and tedious, so please bear with me. Rather than using a VPN/Tor/etc. which can be easily detected or requires a lot of OpSec

This is going to sound antiquated and tedious, so please bear with me. Rather than using a VPN/Tor/etc. which can be easily detected or requires a lot of OpSec to get right, consider having people in other countries that can help bundle archives of data for you. Ship the data back and forth over something non conspicuous and not subject to MITM proxies such as SFTP to AWS or one of the low-rent VPS providers. Use a ram based linux distribution in India to create the posts, tar the data up, SFTP to another country. A friend in that country outside of India pulls down the tarball and posts text and videos to social media for you. When you are done uploading your tarball, reboot, and all the data is gone from your end. You can boot back into whatever government approved OS image is acceptable. If you set the filesystem permissions right on the SFTP server, then even if they beat the username / pw out of you, then all they will find is cat videos on the chroot SFTP server. Your friend will see the tarball of objectionable content in a hidden directory. Remember to sanitize EXIF data from pictures first as that has your GPS location and in some cases your cell phone serial number. Someone will suggest ssh keys over password, but they should not in this case. No data must be persisted on the India side of this scenario. I will be the first to admit, this process is tedious. I am only suggesting it as a last resort when all else fails.

vbezhenar 7y ago
ssh could be used for proxy, so it might be marked as a VPN by ISP hardware. Better way would be to use something very popular like Gmail or Google Drive. I hope that chances are small for Google to co-operate with Indian government.
- LinuxBender 7y ago
  One of the reasons I suggest SFTP is that contractors in India are very often asked to transfer data to US and EU companies this way. It is often required for contractors to do their job. You can disable port forwarding on the SFTP server in the event that government officials want to verify it is not a proxy. If the VPS used is AWS, it is even less conspicuous. The admins of the account for the VM must be outside of India. The server can even contain work related files to make it legit. This process is predicated on the idea that you want to get the word out about things occurring in your country and that you do not need to take credit for it.

vbezhenar 7y ago

ssh could be used for proxy, so it might be marked as a VPN by ISP hardware. Better way would be to use something very popular like Gmail or Google Drive. I hope that chances are small for Google to co-operate with Indian government.

LinuxBender 7y ago
One of the reasons I suggest SFTP is that contractors in India are very often asked to transfer data to US and EU companies this way. It is often required for contractors to do their job. You can disable port forwarding on the SFTP server in the event that government officials want to verify it is not a proxy. If the VPS used is AWS, it is even less conspicuous. The admins of the account for the VM must be outside of India. The server can even contain work related files to make it legit. This process is predicated on the idea that you want to get the word out about things occurring in your country and that you do not need to take credit for it.