The Anonymity Playbook
Digital Survival for Whistleblowers, Journalists, Activists, and Everyone Else
By Kubilay Tunca · Second Edition
For People Who Cannot Afford to Get Privacy Wrong
A practitioner’s field manual for journalists protecting sources, whistleblowers, and activists. It explains how the surveillance actually works, what each technique costs you, and exactly where it fails.
Buy on AmazonAs an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
About this book
Privacy writing tends to arrive as a list of tools. Install this browser, use that messenger, buy a VPN. Tool lists are what get people caught, because a tool only helps against a specific adversary doing a specific thing, and nobody tells you which one.
The Anonymity Playbook is built around the adversary instead. It explains how the surveillance actually works — what metadata survives when content does not, how correlation defeats compartmentalisation, where the network layer leaks — and only then discusses what to do about it.
Every technique is costed. Each one is followed by what it takes from you in convenience, in speed, in who you can still talk to, and by an explicit account of the conditions under which it stops working. Techniques with failure modes you cannot live with are marked as such rather than recommended anyway.
What you will learn
- How to build a threat model you can actually act on, rather than defending against everything at once
- What metadata reveals when the content itself is encrypted, and which tools leak it anyway
- How compartmentalisation works, how correlation breaks it, and how to keep identities genuinely separate
- How to receive material from a source without either of you leaving a trail
- Where Tor, VPNs, and secure messengers each stop protecting you, stated plainly
Read this if
- You are a journalist and someone is about to trust you with their career.
- You are considering disclosure and want to understand your exposure before you act, not after.
- You organise, campaign, or research in a place where that attracts attention.
- You are leaving a situation where another person has had access to your devices and accounts.
Skip this if
This is not a manual for evading a lawful investigation, and it does not pretend to be one. It assumes a lawful reader with a legitimate need for privacy, and it is explicit throughout about where each technique fails — including against adversaries it cannot defeat.
Topics covered
- operational security
- threat modelling
- metadata
- Tor
- source protection
- whistleblowing
- anonymity
- surveillance
- secure communications
Reader reviews
No reader reviews yet — this book is new. Nothing is quoted here until a real reader has written it and it can be linked back to its source.
If you have read it, leaving a review on Amazon is the single most useful thing you can do for it.
Read the author first
These free articles cover the same ground as The Anonymity Playbook. If the writing works for you here, the book is more of it.
- If Apple Sends a Spyware Warning, Preserve the Evidence Before You Reset
Apple sent mercenary-spyware warnings across 110 countries, and investigators saw a record response. Here is how to verify the alert, reduce exposure, protect other people, and get expert help without destroying useful evidence.
- The New US Private Cyber Program Needs Public Boundaries
The White House has ordered a federal program for supervised private cyber operations against foreign criminal groups. The useful question is whether its still-unwritten rules can keep targeting, authority, evidence, and accountability inside clear boundaries.
- Flock Cut Retention to Seven Days. Your Town Still Holds the Real Switch
Flock Safety has promised shorter default storage and stronger checks on police searches. The useful parts deserve credit, but your privacy still depends on local rules, warrants, sharing limits, and public oversight.
- Private Relay Has Three Side Doors: What Safari's IP Leaks Mean
Researchers found three WebKit paths that can send traffic outside iCloud Private Relay and browser-level proxies. Here is what leaks, who should change course, and why a privacy tool needs a clearly drawn edge.
Questions
- Who is The Anonymity Playbook for?
- You are a journalist and someone is about to trust you with their career. You are considering disclosure and want to understand your exposure before you act, not after. You organise, campaign, or research in a place where that attracts attention. You are leaving a situation where another person has had access to your devices and accounts. This is not a manual for evading a lawful investigation, and it does not pretend to be one. It assumes a lawful reader with a legitimate need for privacy, and it is explicit throughout about where each technique fails — including against adversaries it cannot defeat.
- What will I learn from The Anonymity Playbook?
- How to build a threat model you can actually act on, rather than defending against everything at once. What metadata reveals when the content itself is encrypted, and which tools leak it anyway. How compartmentalisation works, how correlation breaks it, and how to keep identities genuinely separate. How to receive material from a source without either of you leaving a trail. Where Tor, VPNs, and secure messengers each stop protecting you, stated plainly.
- Who wrote The Anonymity Playbook?
- Kubilay Tunca, Security Engineer and Author. Writes about cybersecurity for readers ranging from non-technical beginners to working practitioners, and is the author of five books on security, privacy, secure development, and AI systems.
- Where can I buy The Anonymity Playbook?
- The Anonymity Playbook is available on Amazon (Second Edition). The listing is linked from this page.
For People Who Cannot Afford to Get Privacy Wrong
A practitioner’s field manual for journalists protecting sources, whistleblowers, and activists. It explains how the surveillance actually works, what each technique costs you, and exactly where it fails.
Buy on AmazonAs an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.