Anonymity & OPSEC

Threat modeling is a structured way to decide what you protect, who threatens it, what they can realistically do, and how bad and how likely a failure would be. The answers form a short written model that every tool choice is checked against.

No. A VPN hides your traffic from the local network and your internet provider and shifts that visibility to the VPN provider. Websites still see your logins, cookies and browser fingerprint, and files you upload still carry their metadata.

No. Private mode mainly stops the browser from keeping history and cookies on your own device after you close the window. Your network, provider and the websites you visit still see your connection as usual.

It depends on your threat model. A VPN moves trust from your ISP to one provider, while Tor spreads it across three relays so no single relay knows both who you are and where you go. Neither protects you if you log in or leak identity through metadata.

Most failures are human: reusing a handle or avatar across identities, logging into a personal account in the same session as a pseudonym, uploading files with author metadata, and choosing tools before defining the adversary.

Usually by combining small linking signals rather than breaking encryption: a shared IP address, the same browser fingerprint, a recovery e-mail or payment method, author names in document metadata, writing quirks and activity times. Each is weak alone, but together they can identify one person, so every class of signal needs its own control.