The Anonymity Playbook
Digital Survival for Whistleblowers, Journalists, Activists, and Everyone Else
By Kubilay Tunca · Second Edition
For People Who Cannot Afford to Get Privacy Wrong
A practitioner’s field manual for journalists protecting sources, whistleblowers, and activists. It explains how the surveillance actually works, what each technique costs you, and exactly where it fails.
Buy on AmazonAs an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.
About this book
Privacy writing tends to arrive as a list of tools. Install this browser, use that messenger, buy a VPN. Tool lists are what get people caught, because a tool only helps against a specific adversary doing a specific thing, and nobody tells you which one.
The Anonymity Playbook is built around the adversary instead. It explains how the surveillance actually works — what metadata survives when content does not, how correlation defeats compartmentalisation, where the network layer leaks — and only then discusses what to do about it.
Every technique is costed. Each one is followed by what it takes from you in convenience, in speed, in who you can still talk to, and by an explicit account of the conditions under which it stops working. Techniques with failure modes you cannot live with are marked as such rather than recommended anyway.
What you will learn
- How to build a threat model you can actually act on, rather than defending against everything at once
- What metadata reveals when the content itself is encrypted, and which tools leak it anyway
- How compartmentalisation works, how correlation breaks it, and how to keep identities genuinely separate
- How to receive material from a source without either of you leaving a trail
- Where Tor, VPNs, and secure messengers each stop protecting you, stated plainly
Read this if
- You are a journalist and someone is about to trust you with their career.
- You are considering disclosure and want to understand your exposure before you act, not after.
- You organise, campaign, or research in a place where that attracts attention.
- You are leaving a situation where another person has had access to your devices and accounts.
Skip this if
This is not a manual for evading a lawful investigation, and it does not pretend to be one. It assumes a lawful reader with a legitimate need for privacy, and it is explicit throughout about where each technique fails — including against adversaries it cannot defeat.
Topics covered
- operational security
- threat modelling
- metadata
- Tor
- source protection
- whistleblowing
- anonymity
- surveillance
- secure communications
Reader reviews
No reader reviews yet — this book is new. Nothing is quoted here until a real reader has written it and it can be linked back to its source.
If you have read it, leaving a review on Amazon is the single most useful thing you can do for it.
Read the author first
These free articles cover the same ground as The Anonymity Playbook. If the writing works for you here, the book is more of it.
- Five States Banned the Sale of Precise Location Data. The Edges Still Matter
Connecticut, Maryland, New Jersey, Oregon, and Virginia now restrict the sale of precise location data. Here is what those laws close, what they leave open, and what you can do about the trail your phone creates.
- Android 17 Hides the Site Name, Not the Whole Journey
Android 17 brings Encrypted Client Hello to mobile connections. It closes a revealing gap beside HTTPS, but the address, timing, app, and destination can still leave clues.
- AliExpress Used Silent Audio to Read a Browser Fingerprint
A shopping page ran an inaudible audio test that helped describe a visitor’s device. Here is what the finding proves, what it does not prove, and how to make browser tracking less reliable.
- A Face Scan Lasts Seconds. The Public Rule Must Last Longer
Nottinghamshire Police has begun scanning faces in public against a watchlist. Here is what the system does, what deletion cannot undo, and which records the public should demand before the next deployment.
Questions
- Who is The Anonymity Playbook for?
- You are a journalist and someone is about to trust you with their career. You are considering disclosure and want to understand your exposure before you act, not after. You organise, campaign, or research in a place where that attracts attention. You are leaving a situation where another person has had access to your devices and accounts. This is not a manual for evading a lawful investigation, and it does not pretend to be one. It assumes a lawful reader with a legitimate need for privacy, and it is explicit throughout about where each technique fails — including against adversaries it cannot defeat.
- What will I learn from The Anonymity Playbook?
- How to build a threat model you can actually act on, rather than defending against everything at once. What metadata reveals when the content itself is encrypted, and which tools leak it anyway. How compartmentalisation works, how correlation breaks it, and how to keep identities genuinely separate. How to receive material from a source without either of you leaving a trail. Where Tor, VPNs, and secure messengers each stop protecting you, stated plainly.
- Who wrote The Anonymity Playbook?
- Kubilay Tunca, Senior Full Stack Developer and Author. Founded Cyber Security in Plain English to translate complex security concepts into clear, practical advice, and writes the accompanying books on security, privacy, secure development, and AI systems.
- Where can I buy The Anonymity Playbook?
- The Anonymity Playbook is available on Amazon (Second Edition). The listing is linked from this page.
For People Who Cannot Afford to Get Privacy Wrong
A practitioner’s field manual for journalists protecting sources, whistleblowers, and activists. It explains how the surveillance actually works, what each technique costs you, and exactly where it fails.
Buy on AmazonAs an Amazon Associate I earn from qualifying purchases. Buying through these links costs you nothing extra and helps pay for the blog.