Some webmasters in the X site cluster wanted to discuss security advice for running X sites from within the country. At first, I refused because I immigrated many years ago and have been living abroad, so I am not very familiar with the current state of the internet and regulations in the country. However, with the influx of many novice webmasters asking more and more questions about security, I referenced some opinions and wrote this article.
The content of this article is for reference only and should not be considered a complete execution plan. If there are any inaccuracies, please feel free to point them out.
Hardware#
The mobile phones and computers used for work must be separate from those used in daily life. Don't think that using a virtual machine or a phone clone will solve the problem; you have no idea which program will read your hardware code. Once something goes wrong, these are all solid evidence.
Mobile Phone#
First, regarding mobile phones, X webmasters should absolutely not use any domestic or domestically branded phones! It is said that the level of surveillance has reached the hardware level. Regardless of the truth of this "report," for safety, try not to be tempted by low prices.
The recommended phone is the Google Pixel series, which has a native Google system and is Google's own product. You can purchase it through domestic platforms like Xianyu, Pinduoduo, or Taobao. You don't need to buy a high-spec model; a phone with 8GB of RAM and 128/256GB of storage is sufficient. Next, I recommend international versions of Samsung, LG, Sony, etc. If your budget is really tight, you can buy Xiaomi, Redmi, OnePlus, and other phones released before 2018 and flash a third-party ROM (any international version of domestic brands won't work; you need to flash the native Pixel system). You can find detailed tutorials for flashing on domestic Bilibili. As for Apple phones, do not buy them! Apple's data is stored in Guizhou! But if you must use an Apple phone, keep it under a VPN network at all times; otherwise, there are risks.
Computer#
For computers, it is recommended to use a USB drive system for work. Install a Windows system on the USB drive, and each time you enter the BIOS, just set the boot order. Make sure the system on the USB drive has a VPN installed. Each time you enter the system, connect to the VPN, and then remotely connect to the jump server.
SIM Card#
Hong Kong and Macau SIM cards have the ability to bypass restrictions in the country, allowing direct access to YouTube, and the IP address will also be registered as Hong Kong or Macau. You can ask about real-name registration issues in the group; there are brothers in the group who specialize in real-name registration services, with a deposit required, but they are reliable!
You can also buy a backup UK GG card or a US GV number; both are virtual numbers that can be used to apply for various foreign platforms. I personally recommend the GG card, which can be found on domestic e-commerce platforms. An empty card costs around 20-30 RMB, and you can activate it with a credit card. This is essential for registering TG accounts, FB, TK, YouTube, etc. Of course, you can also directly buy a US GV number, which is linked to a Google email and does not require activation, making it very convenient.
I am not very familiar with cards from other countries, but I will add more information here when I know.
If you want absolute safety, then buy an overseas data card (there are many such cards in Hong Kong and Macau, but they are expensive and require real-name registration). Share the mobile hotspot with your laptop, boot the laptop into the USB drive system, open the VPN on the USB drive system, and then connect to the jump server via 3389.
Jump Server#
If you want to use a highly secure jump server, I recommend using a fortress system, which can be purchased here: https://xzhan.xlog.app/nextcli
If the fortress system is too expensive, you can do this: choose a low-cost IDC, buy two 2H2G Windows system servers, and ensure that these two servers have low latency and fast connection speeds to your local machine (we will refer to these two machines as "A" and "B"). Then buy a Windows system server in the US to act as the operating machine (machine "C"). Generally, a configuration of 2H4G is sufficient for the operating machine.
First, connect to jump server A from your local USB drive system, then connect A to B, and B to C. All website building, maintenance, and TG operations can be done on machine C. Do not purchase servers that require annual payments; opt for monthly payments instead, as you will need to change them frequently.
Software#
On the operating machine and jump server, try not to install any domestic software, especially those ridiculous ones like 360 Security Guard; they are definitely tools that will get you caught! Choose open-source software whenever possible. Some foreign open-source software may require payment, and if you find it useful, paying is fine. However, avoid using domestic software whenever possible while working!
VPN#
It is recommended that webmasters build their own long-term, stable VPN for bypassing restrictions. You can also buy some cheap VPN services. The VPN should mainly be used on the operating machine, and foreign brand VPNs are preferred. Avoid Chinese brands like KuaiLian. Do not believe in the so-called "we respect user privacy and do not collect user data" nonsense! This is just a trick to fool children; almost all software collects user information. The difference lies in where the collected information is stored and which country controls it. Using domestic software means your data is controlled domestically, while foreign software means your data is controlled abroad. As an X webmaster, it doesn't matter if some of your data is collected abroad while running an adult site; they won't have time to bother you. Of course, the premise is that you must not engage in underage pornography!
Other Software#
Most of the software that X webmasters use daily has open-source alternatives. If there are no open-source options, look for foreign alternatives.
Email#
X webmasters often need to receive emails, and the first choice is definitely Gmail, as many platforms allow direct login with Gmail.
For communication, it is recommended to use encrypted email services like PROTON.
Wallet#
I do not recommend domestic wallets like Bitpie or TP; X webmasters must be very careful with financial transactions. Do not be tempted to use domestic wallets just because you learned a few English words. I personally recommend Exodus wallet, which now has a Chinese version and is very convenient to use.
You can receive USDT on TG using the wallet from Jisou or OKpay; I use both and find them very convenient. I will also write a separate article on financial security for X webmasters for reference.
Credit Card#
X webmasters generally only use credit cards for purchasing servers, software, and other online services. Payments for these should not be made with real-name credit cards, so a U card that does not require KYC is the best choice, with minimal fees that are basically negligible.
Daily Precautions for X Webmasters#
- Do not discuss politics or complain about anything on any platform.
- Remember, you are here to make money by bypassing restrictions, not to complain. Avoid doing anything that might affect your earnings; instead of wasting time complaining, spend more time figuring out how to make money.
- Do not post photos or videos taken with your phone on any platform. Especially your photos, which may contain GPS location information. Even if they don't, try not to publish them.
- Be low-key; if you can't stand something, just ignore it. There are many idiots online, and there's no need to waste your energy arguing with others. Focusing on making money is the most important thing.
- Do not meet in person, do not have face-to-face meetings, and do not overly disclose your real situation. As an X webmaster, these are things you must remember.
- If anyone sends you files on TG, open them in Google Drive or other cloud storage. Images, server quotes, text files, all should be opened in cloud storage, not locally, as it is very easy to get caught.
- Do not set up an X site studio in the country. Do not think that asking someone you know well for help will be safe; nothing is reliable in the face of interests and risks. Take your time to do it yourself; don't rush. The X site industry is a necessity, and it can still be profitable for at least the next ten years.
- If the money you earn from the X site does not match your offline income, or if you suddenly buy a car while working full-time on the X site, before showing off your wealth, take a trip to Macau and come back claiming you won money there. Do not flaunt your wealth blindly; that is the most foolish behavior. Also, do not deposit all your earnings back into the country; keep some cryptocurrency as a precaution.
- Never, ever engage in underage pornography. Once you do, no one can save you. Any internet platform will hand over your information without reservation, regardless of how many layers of jump servers you have.