Hexbear started during the 2020 BLM protests, where cops were using social media and internet presence to track down activists. They are still doing this, but with less vigor than when police stations were burning down.

This included things like using tattoos on naked bodies, etsy store receipts etc.

Just before the r/cth ban, there was also a problem with chasers and leering objectification, and steps were taken to reduce thirst-posting and the like.

These things combined means that people don’t post selfies or direct identifying information. People post their pets and artwork, but I know I have to make a decision about where and when I post things to make things non-trivial for cops or random chuds. I feel like a unique pet name, breed, and rough region could be enough to track someone down.

Even so, I think I’m bad at it. I feel like if someone knew me and read everything on hexbear they could ID me pretty easily (and I know multiple people in person on hexbear, but we’ve never exchanged usernames).

Idk if there are any hard and fast rules beyond the selfies and direct ID though. I should burn this account.

Edit: removed reference to masculinity

  • ashinadash [she/her]@hexbear.net
    link
    fedilink
    English
    arrow-up
    5
    ·
    6 hours ago

    The space was generally masc,

    Is hexbear a femme space? If hexbear was masc, would that be really bad and perverted innately?

    Sorry, I don’t disagree with the whole post but this lil zinger is just hiding in there all innocuous.

    • keepcarrot [she/her]@hexbear.netOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 hours ago

      Not necessarily, but I think the combination of being 80% dudes and having any horny posting drove women away. Particularly the chasers. I assume that environment also lends itself to unwarranted dms.

      I think it is still mostly masc, but the energy is different. Less posts about how “socialist/rebel woman is hot”. It’s still there, but subdued.

          • ashinadash [she/her]@hexbear.net
            link
            fedilink
            English
            arrow-up
            4
            ·
            2 hours ago

            Because these statements are ascribing “horny and disrespectful and harrassing” as an innately “masculine” behavioural trait. Do masc lesbians do this too??? More broadly though what’s the flipside of this, that “femme” is innately good and non thirsty and benevolent, so we must eradicate all “masc energy” in the space? Is this like when dunking was cishet white man behaviour?

            A little was written about it here because this type of unserious, non-intersectional ‘feminist’ thought is not an uncommon sight, but it’s very silly. It’s just doing gender essentialism again at the end of it, like “masc” seems to actually mean “male” and “femme” actually means “female”, and it’s not cool. I mean, imagine deploying gender essentialism in the apparent interest of keeping the space safe for marginalised people?

            If there’s an alternate explanation for this that doesn’t suck I’d love to hear it, sincerely, but all I see is denoting specific behaviours as innately gendered and describing one binary gender as benevolent and non-oppressive and good, and the other as violent and oppressive and bad.

            • keepcarrot [she/her]@hexbear.netOP
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 hours ago

              OK, I’m not saying that’s innate. I’m saying that that’s what the environment of r/cth was and used a shorthand for it that is pretty well understood. I can change the post to reflect this if you’d like.

              • ashinadash [she/her]@hexbear.net
                link
                fedilink
                English
                arrow-up
                3
                ·
                2 hours ago

                You used “masc” as a shorthand for ‘pornbrained and DM sexual harrassment’? I am being sincere when I ask: do you understand the problem with that?

                • keepcarrot [she/her]@hexbear.netOP
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  2 hours ago

                  Idk, its 2 am here and I’m trying to go to sleep, but now I have to finish this conversation.

                  Yes, ok. What term should I use? You know the kind of dudebro energy I mean, I’m sure. I will change my original post

  • JustSo [she/her, any]@hexbear.net
    link
    fedilink
    English
    arrow-up
    11
    ·
    13 hours ago

    This one hunna. I wish I could show you guys my pet and tell you all about him etc, he’s the best thing in the world and there are so many cool facts to share about him and his type of what he is. I’m very proud of him. But alas, it is not to be.

    Someone prolific and popular here posted about a cringe food item they saw IRL and I immediately knew which country they’re from. Its hard to avoid not leaking your own info if you want to be a normal sociable and fun person on here.

    I try to obfuscate by switching up my language here and there in certain ways but its not enough. my identity could be triangulated by matching metadata to posts linking out to eg youtube on the odd occasion i post a series of songs to the music comm in a given day. Fortunately other than framing Luigi for that time i shot the ceo I never really have to worry about threat vectors with the resources to ID me via that level of sophistication.

    Remember to assess your threat model realistically. Problem is any random chud could recognise my pet without needing to be NSA tier, so while I dont have to be so paranoid as to avoid posting a series of music videos I’m watching, i do have to worry about shit like pets and tattoos and photos of my garden or of irl of any kind. I’m not a threat to anyone with power but my real world area does have natsocs with enough time on their hands to go walking in numbers masked up for shows of force.

    I guess what I’m saying is be realistic, be reserved and dont get paralysed by the worst case scenario situations. Because we wouldn’t even be posting at all if we engaged in truly serious activities, or thought one day we might do something funny irl.

    Remember they caught dread pirate roberts off a fkn historic old question he asked on stack exchange probably made long before he had any idea his little coding project might potentially attract serious heat. Its probably too late for any of us to scrub accounts and get away with cool hijinx

    If you really mite do a hardcore direct action one day then yes, be paranoid af. Otherwise just make sure a nazi tourist on the site cant ID you because they happen to live nearby and see you on your daily walks with your ferret.

  • Des [she/her, they/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    13
    ·
    18 hours ago

    i can’t give this account up. i have alts but meh.

    had to grab that 3 letter name.

    i don’t communicate like this anywhere else on the web nor have i ever (or have i???)

    so yeah pick a unique style and make it different. also be vague and lie lots.

    there are a few people here i trust. we’ve shared some mutual info so i guess mutually assured destruction or some shit. but yeah i wince every time i see a real life selfie

    here’s an idea: make a selfie but have it be AI generated

    • Nakoichi [they/them]@hexbear.netM
      link
      fedilink
      English
      arrow-up
      10
      ·
      14 hours ago

      I’m pretty cavalier about my opsec just because my IRL activities are wayyyy more likely to land me in hot water than anything I post here, and all the local cops and fash already know I’m a communist because of organizing work and spreading the good word of the immortal science but I also get why we have these rules and try not to set too bad an example (except that one time I posted my halloween makeup because it was too cool not to share)

  • abc [he/him, comrade/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    33
    ·
    1 day ago

    i genuinely hope the cops identify and charge me with terrorism for my hexbear posts because you know what, I think this site DOES need a “stereotypical Hexbear” kind of person that’ll haunt their minds and I’m willing to be that…stay tuned folks

  • HumanBehaviorByBjork [any, undecided]@hexbear.net
    link
    fedilink
    English
    arrow-up
    37
    ·
    edit-2
    1 day ago

    I mean there’s definitely multiple power users here who have posted more than enough to be identified by a moderately determined adversary. I think the de facto rule really is just that users decide their own level of privacy, and the no-selfies policy is mostly useless.

    Anyone who has ever posted any kind of payment service handle to /c/mutual_aid could be identified by the feds if they had a reason, for example.

    • LeylaLove [she/her, love/loves]@hexbear.net
      link
      fedilink
      English
      arrow-up
      14
      ·
      22 hours ago

      Yeah, I could easily be found by feds based on my account here, even admit to the crimes I’ve done on here. I actually know how to do good opsec extremely well, for reasons I don’t want to get into. At some point, I stopped giving a fuck because of the negative experiences that I associate with that level of ospec are REALLY negative.

      I’m also lucky that my life is pretty much protected from doxxing. With the way I live, someone could call my employer right now with everything I’ve ever said on Hexbear and my employer would only ask why they should give a fuck. I don’t have my own lease so all public info on my potential address is wrong and only doxxes my chud parents. I’ll also never get my name legally changed because I don’t trust the state, so that will never concern me

    • invalidusernamelol [he/him]@hexbear.net
      link
      fedilink
      English
      arrow-up
      11
      ·
      1 day ago

      I would definitely be pretty easily identified, but I also don’t post anything here that I wouldn’t say to someone in person or to co-workers on company chats.

      They’re much more likely to use information from an account here to bolster a case against you for some action you took than to pre-crime you from your posts.

      Your biggest threat here likely isn’t feds, but terminally online right wingers who can connect the dots and try to either harm you IRL, or like send your post history here to your boss.

      • Des [she/her, they/them]@hexbear.net
        link
        fedilink
        English
        arrow-up
        4
        ·
        edit-2
        14 hours ago

        “here random boss of some company i have no connection to: here’s an unrelated username to your employee and an IP addresses proving it’s them. maybe some unhinged shit trying to convince you their writing style is the same.”

        but yeah it is a legit threat that’s why don’t put anything solid that can connect you to RL. no address, workplace name, etc. nothing that could be placed on a single page in an email and have the connection be instantly made. no HR department is going to read paragraph after paragraph of DIY OSINT that reads like one of those conspiracy walls with red string

        (unless you work in a high security industry of some sort obviously)

        • invalidusernamelol [he/him]@hexbear.net
          link
          fedilink
          English
          arrow-up
          1
          ·
          6 hours ago

          It’s good to practice opsec for sure, but I don’t think posting on Hexbear will ever get you in any sort of real trouble.

          Even if anti-communism is in full swing, you’re more likely to get popped by someone at your local bar while you’re drunkenly rambling about Karl Marx than you are for posting to an obscure semi-anonymous forum.

          Just remember that if you do end up in court and your posts here are linkable to you, you’ll have them read aloud to a jury.

  • Acute_Engles [he/him, any]@hexbear.net
    link
    fedilink
    English
    arrow-up
    11
    ·
    1 day ago

    This account is the only one with this name but there are a couple users, i believe, who know my other handle. I’ve definitely got holes in my opsec but I’m pretty confident I’m low on the list of potential political prisoners.

    I’m more worried about my cellphone data being used to track my IRL crimes so I usually just leave it at home

  • FumpyAer [any, comrade/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    16
    ·
    edit-2
    1 day ago

    One thing that I’ve thought about:

    My phone and many others automatically sync their photos and downloaded images to my Apple or Google account. If the feds thought an account was yours, that would be an easy way to confirm it.

  • Assian_Candor [comrade/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    24
    ·
    edit-2
    1 day ago

    Imo it’s good to raze the account every year or so. I’ve been lazy and have let this one go for way too long

    The thing that creeps me out most now is the availability to feed all our posts into LLMs. The tech exists now most likely to tie burner accounts together and form a more complete profile, so it’s not just what you put in an individual account but all of them. Not for chuds but for cops. I’m not even doing anything illegal but if at any point there’s a commie roundup, well…

    I think I’m gonna join the bureaucracy next for another layer of opsec.

  • glans [it/its]@hexbear.net
    link
    fedilink
    English
    arrow-up
    28
    ·
    1 day ago

    Electronic Frontier Foundation has a good collection of articles and guides that are not just practical but teach you how to think about your own particular situation: Surveillance Self-Defense

    First thing is you need to think about your “threat model”. Which means what information are you trying to protect, and why? There is no universally “best” way to do anything. Tactics that might increase security/privacy in one situation might impair it in another. Like if you are trying to avoid getting doxxed by random internet people who take a dislike to you that’s one thing, but if you are trying to avoid government (which government(s)?) spying that’s another. If you are trying to avoid government spying, is it to avoid legal prosecution, or to avoid covert interference in your organizing (ala COINTELPRO)? They can be totally different kinds of surveillance so you need to have different strategies to avoid them.

    Also need to consider that making an extremely elaborate or onerous plan that you will never bother to actually enact, or requires a high degree of technical skill or perfect execution might not be practical. They might interfere with your purpose too much.

    This page covers the basics of how to think about your own goals, fears and priorities. It’s very generic but is a good overview. It’s really key to think about this ongoing to avoid falling into the trap of following advise that might be perfectly reasonable for another person but counter productive for yourself.

  • DickFuckarelli [he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    30
    ·
    edit-2
    1 day ago
    1. Use a VPN
    2. Limit personal identifying content that can be cross referenced. Example: I just got a plane ticket on Sunday to go to Bora Bora.
    3. Never post self identifying material. Example: here’s my new tattoo!
    4. If you post something time related that can lead to 2 or 3, change details. Basically, lie. Example: last week I went to Bora Bora. Really it was Fiji 3 months ago.
    5. Don’t give them a reason to want to investigate you. There’s plenty of Left leaning folk (some of whom probably are pretty far up in corporate and/or government spaces) who quite frankly aren’t worth going after. The time and energy it would take to round up people who just think differently, the opposition doesn’t have (most likely).
    6. Change your profile on the reg. Personally I don’t do this, or do I? (SEE #4)
    7. Go periods of time without posting. The more you post, the more you will likely have a signature in the way you post, what you post about, and who you interact with.
    8. Delete posts (not sure how effective this is but if I feel like my posts are rearing too close to #2 or #3 I’ll go back and delete them).

    Anyhow I just booked my trip to Uzbekistan via cruise liner where I intend on instigating the revolution by introducing vegan pilaf. During this time I will only post Kelly emoji to convey my progress. o7 o7 o7

    • AcidSmiley [she/her]@hexbear.net
      link
      fedilink
      English
      arrow-up
      27
      ·
      1 day ago

      Go periods of time without posting.

      the-deserter I have no superiors to relieve me of my duty. You bulldozed them all to a mass grave for trying to free humanity.

    • DragonBallZinn [he/him]@hexbear.net
      link
      fedilink
      English
      arrow-up
      30
      ·
      1 day ago

      Go periods of time without posting. The more you post, the more you will likely have a signature in the way you post, what you post about, and who you interact with.

      Nice try mods, you will never make me touch grass.

  • propter_hog [any, any]@hexbear.net
    link
    fedilink
    English
    arrow-up
    15
    ·
    1 day ago

    In addition to this (and because of the inevitably of just flat being honest when posting) I have a tendency to 1.) add deliberate misinformation occasionally to poison the info (like saying I grew up on the west side of Philly, just spending most of my childhood days shooting basketball with the boys), and 2.) burn accounts after enough time has passed. My current one is long overdue for that treatment.