Back to Details

sockpuppet-opsec

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Sockpuppet & OPSEC

Sockpuppet & OPSEC

Investigation leaks in both directions: your target can see you back. This covers protecting the investigator and running research personas — for lawful, authorized work only.
调查活动存在双向泄露风险：你的调查对象也可能反向追踪到你。本文内容聚焦于保护调查人员以及管理研究角色——仅适用于合法、获授权的工作场景。

Protect yourself first

优先保护自身安全

  • Separate environment — a dedicated browser profile or VM for research; never mix with personal accounts. Containers/multi-account browsers isolate cookies.
  • Network — a VPN or the Tor Browser hides your IP and rough location from sites that log visitors. Assume every page you load records you.
  • No live interaction from real accounts — viewing a LinkedIn profile logged in tips off the target; viewing a Story marks you as a viewer. Observe from a research account or logged out.
  • Disable link previews in the tools you paste target URLs into — they fetch the URL and can leak to the target.
  • 隔离环境——为研究工作使用专用浏览器配置文件或虚拟机；绝不要与个人账户混用。容器化/多账户浏览器可隔离Cookie。
  • 网络防护——使用VPN或Tor Browser隐藏你的IP地址和大致位置，避免被记录访客信息的网站追踪。假设你加载的每一个页面都会记录你的信息。
  • 切勿使用真实账户进行实时交互——登录状态下查看LinkedIn资料会触发通知，让调查对象察觉；查看Story会留下你的浏览记录。请使用研究账户或在未登录状态下进行观察。
  • 禁用链接预览——在你粘贴目标URL的工具中关闭链接预览功能——这类预览会自动获取URL内容，可能导致你的信息泄露给调查对象。

Research personas (sockpuppets)

研究角色（Sockpuppets）

When observation requires an account:
  • Build a plausible, consistent persona (name, photo, history) that fits the platform. AI-generated faces avoid reverse-image hits — verify they don't.
  • Age it: a brand-new empty account is a red flag and gets banned. Establish normal activity before use.
  • Compartmentalize — a unique email and phone per persona; never cross-link personas or touch them from your real identity.
  • Match the persona's apparent locale (language, timezone) to its backstory.
当观察工作需要账户时：
  • 创建合理且一致的角色（姓名、照片、历史记录），使其符合平台定位。使用AI生成的头像可避免反向图像检索——但要确认这些头像未被他人使用过。
  • “养号”：全新的空账户容易引起怀疑并被封禁。在正式使用前先建立正常的活动记录。
  • 完全隔离——为每个角色使用唯一的邮箱和手机号；绝不要在角色之间建立关联，也不要用真实身份接触这些角色。
  • 角色的显示区域（语言、时区）需与其背景设定匹配。

Rules

规则

  • Sockpuppets are for observation, not for deceiving people into private info, entrapment, or accessing systems — that crosses legal and ethical lines.
  • Many platforms' ToS forbid fake accounts; weigh that against your mandate.
See ../../ETHICS.md. If you can't justify the persona, don't create it.
  • Sockpuppet仅用于观察，不得用于诱骗他人获取私密信息、诱捕或非法访问系统——这些行为违反法律和道德准则。
  • 许多平台的服务条款禁止虚假账户；请在任务需求与平台规则之间权衡。
详见../../ETHICS.md。如果无法为创建角色提供合理依据，请不要创建。