问 HN：如何保持匿名，以对抗国家级行动者？
3 分•作者: adamanteye•6 个月前
距离阮晓寰（https://en.wikipedia.org/wiki/Ruan_Xiaohuan）于 2021 年 5 月被中国当局逮捕，已经过去了将近五年。对于不熟悉的人来说，他运营了十多年的传奇匿名博客“编程随想”（https://program-think.blogspot.com/）。
让我感到困扰的是，尽管他拥有精英背景，他的身份还是被泄露了。他曾是 2008 年北京奥运会网络安全系统的总工程师。他的 OPSEC（操作安全）非常严谨：他只使用现金，避免所有电子商务，并且从未与任何人讨论他的数字生活，包括他的妻子，她直到他失踪后才知道他的“第二人生”。
尽管他拥有专业知识，但他的匿名身份是如何被去匿名化的，仍然是个谜。
作为一名中国的黑客，我对你关于长期维持真正匿名身份的可行性的看法很感兴趣。在必须 100% 完美，而对手只需要找到一个漏洞的“战斗”中，是否有可能获胜？
在这种高级威胁模型中，最有可能的失败点是什么？
查看原文
It has been nearly five years since Ruan Xiaohuan (https://en.wikipedia.org/wiki/Ruan_Xiaohuan) was arrested by Chinese authorities in May 2021. For those unfamiliar, he ran the legendary anonymous blog Program-Think (https://program-think.blogspot.com/) for over a decade.<p>What haunts me is that his identity was compromised despite his elite background. He was the chief engineer for the 2008 Beijing Olympics network security system. His OPSEC was rigorous: he operated on a cash-only basis, avoided all e-commerce, and never discussed his digital life with anyone, including his wife, who only learned of his "second life" after his disappearance.<p>Despite his expertise, it's still a mystery how his anonymous persona was deanonymized.<p>As a hacker in China, I’m interested in your thoughts on the feasibility of maintaining a truly anonymous identity long-term. Is it even possible to win a "battle" where you have to be perfect 100% of the time, while the adversary only needs to find one leak?<p>What are the most likely failure points in a high-level threat model like this?