[varispeed]

Modern operating system, ready to face challenges of today political landscape, should natively support "hidden" encrypted containers, that is you would log in to completely different, separate environment depending on password. So that when under threat could disclose a password to an environment you are willing to share and attacker would have no way of proving there is any other environment present.

[LavenderDay3544]

The only thing political about this project so far is that I insist on it being free software and also free from tivoization. Well that and not going to insane lengths to support hardware whose vendors are clearly hostile to third party operating systems and free software in general like Apple and Qualcomm.

[Razengan]

It would be easy to tell for anyone seriously after you: If I kidnap you and make you log into your computer, and you log into the decoy state, it'd be obvious to see that the last time you visited any website etc. was over a month ago and so on.

[LavenderDay3544]

Like those sports cars where you need a fingerprint to start it and some thieves in a third world country cut off the owner's finger to steal the car.

[varispeed]

For sure you'd have to use it from time to time.

[Razengan]

Something I thought about long ago was that it would be better/easier to divide user accounts into "personas": different sets of public-facing IDs, settings etc.

This could be done at every level: the operating system, the browser, websites..

So if you don't care about the website knowing it's the same person, instead of having multiple user accounts on HN, Reddit, you could log into a single account, then choose from a set of different usernames each with their own post history, karma, etc.

If you want to have different usernames on each website, switch the browser persona.

At the OS level, people could have different "decoy" personas if they're at risk of state/partner spying or wrench-based decryption, and so on.

[mixmastamyk]

Or, write a login script to touch files at random.

[Razengan]

That won't mask your online interaction history etc.

Maybe an LLM agent posting crap at random? lol

[varispeed]

Could also be a "cross-over", so your real account could mount certain parts of other file systems as an overlay. So if you could have a browser that would be the same across two environments. That way the throwaway account could be seen as real, but it wouldn't show things you don't want to be compromised.