+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Networking (https://sinister.ly/Forum-Networking)
+---- Forum: Anonymity (https://sinister.ly/Forum-Anonymity)
+---- Thread: Charon's Encryption & Anonymity guide! (/Thread-Charon-s-Encryption-Anonymity-guide)
RE: Charon's Encryption & Anonymity guide! - w00t - 05-21-2013
(05-21-2013, 09:37 PM)Unmasked Wrote: Very good guide and yes Tor is the most unsafe thing you can possibly use if doing anything bad as anyone can make exit nodes and the FBI has quite a few of them.
Yoooooooou have no clue what you're talking about.
The exit node gets to know what you sent out, not who you are. If you aren't stupid about it, people knowing what you put through the network is useless.
How do you define a lot? There are currently around 800 exit nodes online at any given time. Less than 15% of those are in the USA, and that's being generous. Even if the FBI owned every single one, they still would not control even close to a majority of the traffic.
RE: Charon's Encryption & Anonymity guide! - 3SidedSquare - 05-22-2013
(05-20-2013, 11:51 PM)Charon Wrote: ...
But don't let yourself down, there's a solution: Linux! Linux users are much safer and it's not backdoored except for Ubuntu 11.04 and up,spyware has been found in there.
So if you want to use Ubuntu you should recompile the source of ubuntu, find the back door and remove it. So I really won't be covering Windows much in this tutorial.
...
TOR is really vulnerable if not using correctly, and it has been proven multiple times.
VPNs can also be really vulnerable if your DNS is leaking. Flash will also always give away your real IP. Now you're probably wondering how to prevent this. You can prevent this by using JonDo.
Jondo is like TOR but it encrypts everything and does not relay on exit nodes. The second thing would be using sock5(SSH tunneling) Or use a RDP.
...
Check the links at the end of the tutorial why TOR is vulnerable and where to download JonDo.
Also remember programs will always keep logs no matter what.
...
Can you provide a reference for Ubuntu 11.04+ being backdoored?
Also, in order for tor to be vulnerable, you need to intensionally screw up, TOR comes defaulted with all the security to keep you anonymous; noscript and the like. There's no reason to use one secure cipherspace over another. I'm currently listening to the youtube link you gave in reference, and it's nearly completely baseless. His entire argument relies on a person or orginization haveing nearly all the information on the tor network, and can analyze it. The beauty of the tor network, is that there are just so many nodes that you are lost in the cowd of anonymity.
RE: Charon's Encryption & Anonymity guide! - w00t - 05-22-2013
Ubuntu isn't backdoored. They give an option @install to send data to third party servers. They started sending data to Amazon(i think) from the desktop search thingy. Not a backdoor, but annoyed people.
RE: Charon's Encryption & Anonymity guide! - Genesis - 05-22-2013
An amazing tutorial Charon and right up my street. Thanks for posting them.
RE: Charon's Encryption & Anonymity guide! - yokai_old - 05-28-2013
(05-22-2013, 12:25 PM)Genesis Wrote: An amazing tutorial Charon and right up my street. Thanks for posting them.
Obviously you're retarded, this is a terrible tutorial, even for beginners, it does quite the job @ miseducating, so I guess you enjoy cruising down retard street?
RE: Charon's Encryption & Anonymity guide! - Charon - 05-28-2013
(05-28-2013, 04:54 AM)better_than_you Wrote: Obviously you're retarded, this is a terrible tutorial, even for beginners, it does quite the job @ miseducating, so I guess you enjoy cruising down retard street?
Hey, if you're willing to insult him you also may tell me why it is such a 'terrible tutorial' of course it isn't the best, but why terrible, give some decent arguments please.
RE: Charon's Encryption & Anonymity guide! - ErroraBorealis - 05-28-2013
(05-28-2013, 04:38 PM)Charon Wrote: Hey, if you're willing to insult him you also may tell me why it is such a 'terrible tutorial' of course it isn't the best, but why terrible, give some decent arguments please.
This. And also, I'm sure this is better than just using a web proxy or nothing at all, which he easily could have been doing. There was a point when none of us even knew what a VPN or TOR was.
RE: Charon's Encryption & Anonymity guide! - yokai_old - 05-29-2013
Jondo seems to be alot less reliable than tor, regarding your tor browser crap, use the bundle?? Idk why you would mention verman cipher, it isn't really practical, preventing dns leaks? Just fuckin use google dns/opendns that should take care of that..kali isn't only one that provide you with lvm in the install, debian, ubuntu, etc do too; there was a program I can't remember name atm, similar to truecrypt, it was for linux and uh it supported creating hidden partitions, the browser crap is retarded too. Basically...
you never know, truecrypt could be backdoored (loll), tho it's open src, it hasn't really been re properly, and the details about the devs is unknown (possible cia agents, rofl)
ecrytpfs/dmcrypt (cryptsetup) you should be fine, if you use TC, use whirlpool because we all know the NSA backddored ur sha512
Browser - firefox is fine, use tor bundle if you can't setup a vanilla firefox w/plugins properly - or just compile firefox from src, audit it etc, parnoia++
another thing you could have talked about is donottrackme, googlesharing, etc
always use pgp nigga
RE: Charon's Encryption & Anonymity guide! - Oni - 05-29-2013
(05-29-2013, 06:22 AM)better_than_you Wrote: Jondo seems to be alot less reliable than tor, regarding your tor browser crap, use the bundle?? Idk why you would mention verman cipher, it isn't really practical, preventing dns leaks? Just fuckin use google dns/opendns that should take care of that..kali isn't only one that provide you with lvm in the install, debian, ubuntu, etc do too; there was a program I can't remember name atm, similar to truecrypt, it was for linux and uh it supported creating hidden partitions, the browser crap is retarded too. Basically...
you never know, truecrypt could be backdoored (loll), tho it's open src, it hasn't really been re properly, and the details about the devs is unknown (possible cia agents, rofl)
ecrytpfs/dmcrypt (cryptsetup) you should be fine, if you use TC, use whirlpool because we all know the NSA backddored ur sha512
Browser - firefox is fine, use tor bundle if you can't setup a vanilla firefox w/plugins properly - or just compile firefox from src, audit it etc, parnoia++
another thing you could have talked about is donottrackme, googlesharing, etc
always use pgp nigga
I think you're speaking of Mcrypt?
RE: Charon's Encryption & Anonymity guide! - Foulplay - 05-29-2013
Good guide and I think the entire community can build upon it and update it as it needs so that we can compile a educational and thorough guide.
One suggestion is to add a section for secure removal/deletion of a file.