[Fan1k]

Hello! Would you guys be so kind to please rate my opsec setup and carding strategy so that I can see what changes do I have to do before starting to card?
Carding laptop: Buy a used lap top for cash and format it. Install Linux OS (maybe Ubuntu?) never ever connect that laptop to my personal wifi nor login to any of my personal websites. This is a strictly business laptop.
Carding setup: install Linux in a USB stick to use it as a live OS non persistent. When starting the carding operation change the hostname and change the mac address BEFORE connecting to any wifi. Then install a VPN (maybe nordvpn?) and install and clean residential RDP matching the CHs location.
Do my magic, disconnect from the wifi, change again the hostname and change the mac address and shutdown the laptop (all the information will be wiped out as it was a live OS).
What do you guys think about this strategy?
**I won't use a VM because VMs burn the cards right?
** I won't use Socks5 because the RDP gives me a different IP address so it is not necessary to use Socks5 if I use RDP right?
**I won't encrypt using veracrypt because I am using a live OS and having an encripted volume is very suspicious if LE gets my laptop right?
And now one of the most important questions: where do I card? Do I go to a public place like a shopping mall and connect to a wifi? That has been bothering me for a long time now, I don't know where to card.