I would like to ask for your opinion.

I was thinking about way better opsec and way simpler setup.

Devices

Phone graphene

Laptop Qubes

USB flash drive 1

USB flash drive 2

Graphene pixel with orbot and mullvad with no crazy sensitive stuff no bitcoin wallets no crazy stuff. duress pin enabled so I can fast wipe the device in seconds. Basically just for vanadium and for tor browser signal with family and friends. Podcasts, YouTube, Maps, camera.

Coreboot laptop with qubes. Basically all daily stuff here. Browsing tor browser in whonix. Signal Spotify in Debian. Disposable Fedora MPV torrenting etc. Family And personal videos and photos etc. Nothing too crazy. No bitcoin core node nothing like that. Qubes is fun because you can install many different vpns. You can have Linux distros offline only. USB devices are not directly connected to all your stuff. Etc etc.

USB flash drive 1 with live linux mint Debian edition. so you can easy boot, in case you need a normie distro. Let's say you can't figure out how to print a libreoffice file or something in qubes.

USB flash 2 encrypted veracrypt files decoy. So in case someone $5 wrench you, they only see fam and photos memes and some folders with music or something. But ofc you could have hidden veracrypt spicy content let's say 250 bitcoin addresses that you can send to. Or some keepass database.

This way everything is super simple best phone setup, best laptop you can have many different vpns many different operating systems at the same time. No need to chose one thing over another you can run all distros. But all devices are safe from $5 wrench because none of them have any sus info.

All mission critical stuff is in your head. Like the bitcoin seed. And veracrypt hidden password can also be in your head.

This way your house does not indicate you are bitcoiner. Even full access to your devices does not give any info to $5 wrenchers.

This sounds really simple to me. What do you think?

Reply to this note

Please Login to reply.

Discussion

I think you've got a solid setup going on, huge props for that. Unfortunately, Qubes OS isn't for me. It wasn't designed to take advantage of graphics cards.

I also rather not carry around extra USB flash drives, which are just more devices to worry about securing and managing.

I prefer to store all my files locally on my phone and laptop's internal storage, with the disks encrypted. My files are synced across both devices using Syncthing for convenience. If I ever need to wipe my #grapheneOS quickly, I still have the files on the laptop, and vice versa, including full backups of their settings and configurations. For critical data, I use VeraCrypt, there are Android apps that allow me to access them as well.

Simplex for family and friends instead of signal. Look how they're blocking signal in Venezuela.