Simple Security Questions

This is the Simple Security Questions thread for simple questions. If with a simple question and without a suitable thread already existing, post it here and someone will probably try to answer it. Remember to do some research before asking questions. No one wants to answer a question that a simple search can already resolve.

>>11689 I wonder why governments even try to falsify elections at endpoints by bribing people of inconsiderable reliability who always fail spectacularly in front of many cameras when they can simply write any number into exit poll computer and get done with it. //lainchan needs looped sticky threads, current model is retarded, an ended thread does not even indicate it's locked

>>11741 Any voting system that isn't in person, openly supervised and paper is open to abuse. Computer voting is the easiest for a nation state to rig because of the nature of computers but mail voting still has massive holes which make it a lot more open to abuse by smaller factions which is far more of a concern for local elections. The ballot station paper ballot with exceptions for people who physically cannot turn up works well and is fundamentally resistant to abuse by groups of any size so there is little reason to change it.

Does anyone here have updated resources on proper OPSEC practices? The best I've managed to find was on thegruq's website, but he barely writes anything anymore. Anything is appreciated.

>>11782 This was from the HOPE 2020 OSINT workshop. Most of the value was in the chat, but it might serve as a decent starting point for some of what you're looking for.

Also this: https://inteltechniques.com/data/workbook.pdf

>>11782 There was something which I forgot to mention. I was also looking for extremist resources that goes down to the deepest possible level of privacy, anonymity and security. Sorry for not mentioning this earlier. But here's what I've gathered so far: ..:: (Desktop) ::.. Use a Librem 13/14/15 re-installed with Qubes OS for the operating system. Use Whonix VM's for each application so you don't become a victim of single point failure. Obviously use the full-disk encryptions and implement the anti-evil-maid precautions as listed in the Wiki. For Networking it should be like this: Rotating VPN servers with WireGuard (Mullvad/ProtonVPN) -> Tor -> Private Tor exit node bought anonymously I live in a area where there isn't a lot of Tor users, so I actually stand out instead of blending into a larger crowd. I also trust a legal entity more than my ISP. All of the applications should be open-source so you can independently audit anything you see fit, but also to verify things that they might claim .i.e Zero Knowledge encryption. ..:: (Mobile) ::.. A Google Pixel 4/4a flashed with GrapheneOS. Freshly bought with cash and not spotted under any CCTV (legally of course). Here I follow the same principles as before. Only use open-source applications, and don't do something as stupid as rooting your phone. For the SIM-card you should buy a prepaid one with cash. To avoid triangulation by feds use a Faraday cage. I would probably also disassemble the phone here and take out whatever stuff I don't actually need, e.g. microphones For networking I would just use Tor Browser and WireGuard VPN for my other apps. Obviously anything done between these devices should be compartmentalized. ..:: (Physical) ::.. I live in a country without facial recogition and everything is pretty nice here actually. But I tend to avoid CCTV whenever I can. There's probably some other thing's I forgot and this isn't really in-depth. Please with suggestions as to whats missing or something you would change. Thanks.

>>11782 You should consider your threat model too. You may secure something that's not critical now forgetting a big flaw you didn't recognize. >>11843 Anti-tamper glitter with high-res pictures of the phone and other ways to double check for phisical intrusion in you devices. All the server and desktop security, like drduh's guides on github.

>>11855 The threat-model is the alphabet fellas which glow in the dark. Like mentioned before, there is no limit or restrictions to whatever measures as long as they work and are legal.

has anyone ever taken information published in a defcon talk and used it to actually gain shells? I just wanna pop a shell man for real

should I use TAILS 2.12 or Whonix 13 if I need an anonymizing OS on i686? also open to suggestions for an OS that runs everything through tor/i2p/freenet and is similar to tails/whonix

>>11782 https://raptorcs.com/content/BK1B01/intro.html free bios for max security, no proprietary blobs. Coreboot/librem is probably ok too on the hardware side but if u really wanna be safe I would go with raptor.

>>11865 If you're really interested the easiest way is to scan the internet for common vulnerabilities, especially web vulnerabilities. Getting a shell is comparably easy. But if you're asking this here, you're probably going to get caught.

>>11937 Don't use older versions, you open yourself up to known vulnerabilities. Buy a burner laptop locally with cash. Stick with supported architectures. A possible alternative could be Obscurix, but it's still in alpha, so depending on your threat model that might not be an acceptable risk. Then again, considering your threat model, using vulnerable/outdated OS might not be a problem, either.

>>11715 i am a beginner and i don't know much i started using linux a few months ago, learned how to use firejail (--net=none) and i noticed that alot of open source apps would actually phone home redshift will ask geoclue for my location (i think it's done with the ip adress) without my consent my dictionary (goldendict) phone home (to check for updates apparently) how much open source apps does that kind of things really is there a way to stop that or should i just firejail everything? what about xfce tools (like the screenshots) that let you share to imgur why are computers scarry..

I don't have money for a vpn, but i need to use one, so, will using TOR browser be enough? i don't care about speed, i only need to change my ip adress and it would be nice if no one retained my logs/things that i search,send, or recieve

>>12038 Yeah, tor is more than enough just for changing your IP, however, Tor is NOT a VPN, meaning that, don't torrent over tor, you'll make the network slower for everyone and your IP address will get leaked anyways, if you need to torrent anonymously, use I2P Also, if you want to use tor for something else than the browser, just use torify(1) Also, about logs, well, Tor works by routing your traffics by 3 nodes: the first node knows who you are, but not where you're going, the second node does not know where youre going nor who are you, the exit node (third node) knows where you're going but not who you are.

I'm looking to hide my lainchan browsing and personal preferences from my ISP without them knowing that I use a vpn or tor to circumvent them. I'm assuming they have a list of well known ip ranges, Is it impossible? I would also like to drop their dns server as I only browse a couple sites and know their addresses, but how do I connect on a particular vlan? I don't know a lot about dns addressing and I would be grateful if you could point me in the right direction

>>12083 You could just use a SOCKS proxy over an SSH connection, or you could request a bridge for use with Tor. If you want to avoid their DNS, you could always set up your own recursive resolver. Just tag your interface for whatever VLAN you want to use.

Anyone know if TryHackMe is a good tool to learn how cyber security and pen testing? I tried HackTheBox but even the invite was pretty hard.

>>12102 I'd say... TryHackMe has a better difficult curve. If you're struggling with the TryHackMe PicoCTF might be a good fit, since it walks you through the fundamentals The benefit of HTB is that it forces you to use your Google Fu and enumerations skills. Learning the fundamentals is easy, whats hard is being able to encounter a black box, and learning whats underneath it and how it all works.

How can I compare Alpine Linux security with OpenBSD?

>>12145 >how secure is X? How secure is a plank of wood? Against knives and arrows? Pretty good. Against bullets? Not so good. It all depends on your threat model. Without specifying your threat model the only answers you're going to get is from autism suffers who just project their own personal threat models onto you and then fight with each other because they're each making different assumptions.

What sort of malware encoders do you Lains use? I had one that was working well for windows 10 but my hard drive ate the dust :ccccc. Do lains know any way of encoding malware into other programs that still works in the modern day??? Like let normal_program.exe work normally but also run evil_shellcode.asm? Windows has checksums now on some files and it's very sad :|

How can I check if there is personally identifiable information within SVG/PDF files I've made (in Illustrator)? Some guy found that the SVG files he makes in Inkscape have personal info in the metadata or something, and others suggested ways to remove it: https://superuser.com/questions/739525/removing-personal-data-from-svg-file However, I can't figure out where people even find this data. Some online metadata viewers showed nearly nothing on my files, but I'm not sure they were looking for the right things in the formats, since they're usually meant to look for camera info or whatever.

>>11715 I marked up the /sec/ /cyb/ general for installgentoo wiki, it's taken from a general threads pastebin, figured, it's better readable / searchable / has versioncontrol / can be better linked / can be easily ported to other wikis I am by no means a haxx0r, but maybe this can be used as resource for Simple Security questions here's the Wiki Article https://wiki.installgentoo.com/wiki//cyb/_%2B_/sec/_general:_Cybersecurity_%26_Cyberpunk

How do you go about encrypting a multi system disk? I have four partitions and I have an OS on each, what is a recommended way to do this? Any GRUB compatible encryptor, nothing major it could have a backdoor scandal, all I want is to keep simple mortals out.

Has anyone used the encoded payloads in metasploit and how effective are they?

>>11843 Wouldn't this fall apart very quickly the second the VPN host shares timing information, whether willing or because they were pwn'd unawares? It's probably more than enough for dealing with MAFIAA, but I doubt any state actor is going to be meaningfully hindered. Which leads the question I wanted to ask: Other than I2P, are there any functional darknets at the moment, with or without exit nodes? Lots of newer alternatives look like simple coin scams.

Not exactly a question but I kinda wanna propagandize, under the `technical literacy' banner, for everyone's parents to use their children's apps. Anything to drive youth away from the dangers of smartphones, and towards the dangers of privacy-respectant techniques. (Everything's dangerous, but they learn how to be safe.)

>>12422 It would, its the reason that things like Tails strongly advise against using a VPN as it just turns the VPN into either a permanent entry guard or a permanent exit node. If you believe that most entry guards are already compromised then it is also even more likely that all major VPNs have at the very least got global passive adversaries listening where they meet the internet if not just outright logging to some 3 letter agencies server without telling anyone. If you want to avoid the MAFIAA then a decent VPN is enough because if they're compromised they're not going to blow their cover to send you a letter about pirating the latest marvel film plus you don't cause problems for the tor network by torrenting through it.

If I'm comfortable using a CLI and actually prefer to use msfconsole is there any reason to buy metasploit pro? More exploits or something I'm missing?

>>12356 lvm + luks maybe

>>12356 >Is the four partitions encrypted yet? You'll have to start over and wipe the drive because first of all >the data was unencrypted in the first place >it is easily recoverable with recovery tools. >anything can be viewed by anyone, even the repair shop can even take a clear look at your un-overwritten password.txt you deleted few years ago or copy that corrupted firefox.default profile folders and have all your passwords! >or if you happen to give or sell those drives, the data is literally still there plain as day, a marvel of an artifact for the archeologists! >multi system disk Isn't a word. Maybe you mean multiple partitions? Four partitions ring a bell, is it MBR partitions? >GRUB compatible encryptor Doesn't make sense. GRUB does support encrypted partitions that you can decrypt upon boot (even encrypted windows installs). However, if the OS you use is incompatible to GRUB then there's no way to boot it from grub as it is not detected by os-prober (such as reactos) unless you have a UEFI device. Now that UEFI device can support independent boot files but that is if the OS supports UEFI (as example, I think reactos doesn't support UEFI). You can check the arch wiki https:// wiki.archlinux.org/index.php/Dm-crypt https:// wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system

Is it possible to configure proxychains to first use tor before selecting from ProxyList? I'm trying to scrape a site that's refusing tor connections but I don't want to give random proxies my IP. To make matters worse, most if not all of the free proxies seem to be refusing connections, so I can't just use strict_chain.

Infosec Pros: Learn techniques, not tools. Infosec Managers: So, what tools do you know? fuarrrking why?

I am running a site, and am trying to catch someone who is doing something rather nasty and is using tor to get in and post things that are illegal. I can block tor altogether and I intend to, but I would like to first catch the person who is doing this so I can make sure they go away. What are some tor deanonymization techniques? Or things to deanonymize a vpn. Just things I would run in javascript or try to make a script of.

>>12728 Nothing easy. The FBI spends thousands of dollars to deanonymize people. https://www.cnet.com/news/facebook-turned-to-hacking-to-help-the-fbi-catch-a-child-predator/ One thing you can try is to just drop connections from the VPN ip address. Then if he has a bad sense of opsec he might switch to a direct connection just to check if the website is still up.

Hi I am sort of a "n00b" when it comes to infosec. I have VPN and run firefox. I'm wondering, does "Private Browsing" just keep things private from History, or is it a more secure method to 'surf the net.' Thanks, Mark

>>12921 You want to talk about infosec, huh? What kind of information are you securing? Personal information, like your name?

>>12922 Personal info, if private browsing obscures my IP or whatever.

>>12921 >Thanks, Mark No. Use tor. Always assume everything is being recorded

>>12921 Ground rules, Mark: try to avoid using something if you don't know how it works (or, at least learn what it does before assuming). There's an old saying in tech communities: RTFM. People don't write documentation just for fun, it's important. When you open a new tab in Firefox Private Browsing, you probably get a purple screen telling you what Private Browsing is. Do this and read the text, it basically tells you that it just clears makes your history and cookies temporary. This has almost no effect on security and some small effects on privacy since your cookies (small data records often used for saving settings and login data, among other things) wont persist after you close it down and start again. There are still other ways sites can track you if they want to, look into "browser fingerprinting" techniques that private mode does basically nothing to counter. As "Use Tor" anon may have hinted at, some browser like Tor Browser try to make you have a non-unique fingerprint and will use Tor network nodes to proxy (similar effect to a VPN but more randomized.. to oversimplify). However, their is almost no point asking for infosec advice without knowing the answer to this question: who are you securing yourself against? Me? Commercial surveillance (Google, Facebook, etc. tracking) and untargeted dragnet stuff. So I pick tools that make fingerprint tracking useless. Other people may want to protect against an abusive spouse or landlord. My advice wouldn't help them. Other people have been victims of cybercrime. My advice is hardly a solution. >>12924 "Use Tor" is a bad answer, even when it's right. Tor is a tool, not a solution and sometimes it's not a good idea. https://medium.com/@thegrugq/tor-and-its-discontents-ef5164845908 Posted using Tor Browser Bundle, Whonix

>>12923 To answer this: private browsing does literally 0 to hide your IP. That's what your VPN/proxy does. I'm almost certain it doesn't do anything to hide your personal information, that's mostly stuff you type and send to websites. You don't know my first name. I think I know your first name. It's not your browser's fault, you told the website by typing it in and posting it. That kind of openness with information is how most people get doxxed, I've found people whole names and address from an email. Luckily, you're not an idiot who uses the email field when they don't have to. Using things like temporary/throwaway emails and fake names can be useful on websites where you have no real need to use true details. you're not a nazi are you?

Hello lains. I need to log into an account, but the service will ask for verification if I log in using an VPN/TOR/proxy/i2p. It would work fine if I would connect using the same network where the login was successful once. What could I do to maximize anonimity of my device on said network? Changing the MAC adress is one thing, but are there any other concerns? Could my hardware be identified later on?Should I use entirely different os? Any recourses, information would be greatly appreciated.

Can anyone tell me where to find an archive of all the threads from this board? Discovered lain pretty late, I didn’t know it was made in 2017. Would appreciate some help to be honest.

>>12970 >Can anyone tell me where to find an archive of all the threads from this board? There isn't one. Imageboards are meant to be ephemeral. >Discovered lain pretty late, I didn’t know it was made in 2017. Would appreciate some help to be honest. Lainchan was made in 2014, but it was wiped by its previous owner for reasons I won't explain here in 2017, and has carried on from there.

>>12927 I wouldn't really trust someone who uses third-party hosting with lots of javascript and third-party trackers instead of their own website and writes "ppl" in an article to be a person with a worthwhile opinion.

>>12970 There used to be a pre-split lainchan archive hosted at https://archive.lainchan.jp/, what's left of it look here: https://web.archive.org/web/*/https://archive.lainchan.jp/* ,somebody must have that http://lainchan.jp/archive.zip file; there's also a full archive of arisuchan posts between April 2017 and September 2019 hosted here: https://archive.arisuchan.jp Recovering looped scticky threads like this one is probably impossible

Also, this weird page dump from 2016 hosted on neocities: https://lainhackinggeneral4.neocities.org/

This might be a rather childish question, but for those of you working with infosec: do you ever regret it because you're defending the interests of companies rotten to the core? I'm interested in the area but I don't feel comfortable helping those I highly dislike, I'd rather do something more generic just to make a living and keep security as a hobby.

Does anyone know the mpv hotkey to change the audio track? The sub track is "j," but I've never been able to figure out the audio track and you can't find it listed anywhere.

>>13055 its #

So I'm interested in setting up a lab and practicing pentesting, and I'd like to stay as anonymous as possible. Is Kali capable of keeping me relatively anonymous, or do I need to use Tails for everything?

>>13049 Don't work for a soykafty company then. If you think your company isn't doing something net positive then find one that does. Your skills should be in enough demand that you have the ability to choose where you want to work. Biggest trade-off likely will be financial compensation, as sleazy ultra-capitalists tend to have more money to throw around. >>13250 Set up your lab locally. Kali does nothing for anonymity. Why does your "practice" need to be online? Or is this just a thinly veiled cover, about as effective as "SWIM"?

>>12954 What is your threat model?

VPN vs Seedbox for privacy against copyright agencies and ISPs

>>13265 i2p Failing that, finding a VPN or VPS provider that respects your privacy is going to be hard. For VPN I'd say use Mullvad, I don't have any recommendations for VPS.

>>>13266 Actually I am using mullvad currently, my subscription is up so im wondering if I should just get a seedbox explain i2p, I vaguely know what it is, but how would it help me torrent privately

>>13273 I'm pretty sure you can get the basics here https://i2pd.readthedocs.io/en/latest/

>>12927 >who are you securing yourself against? I'm not that anon, but would you be able to give me advice based on thise: "I want to make sure that neither the government nor hackers can get into my pc and look at my stuff or gleam information about me". Right now I'm just doing some quick researh on VPNs because I really don't know anything. I'm looking to download TorGuarrd since apparently that's pretty good. Is this the right course of action for what I want?

anyone remember this one security talk from about five years ago, it was done by some older gentleman, detailing various horrible breaches done by <everyones favorite three-letter-agency>, including them using phrases like <eye out> to detect parental relationships on social networks, using fake cell-phone towers to track phone users, and trying to break solaris (all for the good of fighting the trerrrists ofc), i specifically remember him saying at one point, "how many muslim terrrrists do you think use solaris"? it was a great talk with a lot of info for someone new to the topic, and i've been trying to find it to show to a friend, but i can't find it anywhere.

>>13320 "The government" is a pretty wide net. Are we talking local law enforcement, or three letter agency spooks? If the latter, you're gonna have a bad time, particularly if you have reason to believe that you would be targeted. I like to look at it this way: If whatever you're trying to avoid could result in loss of freedom due to incarceration (or death), you should probably do research proportional to the amount of time you stand to lose. For instance, if you could be put away for 20 years in prison, the least you could do would be to dedicate at least a couple years of research to it. If your average life expectancy leaves you with ~65 years of life left, maybe take five or six of those to research ways to avoid getting executed.

I'm having a hard time describing what I'm looking for. I'm trying to understand how serial number generation works, for instance in something like a key generator. Say there is something that depends on a 16 character alphanumeric string for security. Is it possible to determine the generation algorithm and predict other valid strings given a large enough body of known valid strings? Does anyone know where I could learn more about this practice? Note that this string or serial number is not dependent on any "customer" info, so it doesn't involve any sort of hashing of that for generation. It's all essentially "done at creation" then sent out.

>>13347 I guess I should clarify and indicate that this is for predicting serials or strings outside of software, e.g. for a hardware serial number or something. So there would be no way to do any sort of reversing to determine the algo. Largely dependent on the "known valid" corpus.

How to buy cryptocurrency anonymously?And can u recommend anonymous hosting?

>>13352 LocalMonero or LocalBitcoins.

this isn't really a question i am just big mad HOLY fuarrrkING SHIT I DIDN'T KNOW I NEEDED TO GIVE MY PHONE NUMBER JUST TO PLAY CALL OF DUTY I DOWNLOADED THIS GAME YESTERDAY AND IT KEPT CRASHING. GAME ITSELF SAYS NOTHING ABOUT WHY IT CRASHES. I SEARCHED WHY IT KEPT CLOSING DOWN AND THESE N WORDS SAY THAT IT REQUIRES A PHONE NUMBER TO ELIMINATE SOME KIND OF DUMB fuarrrk BULLSHIT. I'M MAD. AT LEAST ASK FOR MY PHONE NUMBER BEFORE I DOWNLOAD 75 GBs OF SHITTY GRAPHICS. I HAVEN'T BEEN BUYING GAMES FOR A LONG TIME AND FROM NOW ON I'M NOT GOING TO PLAY "FREE" GAMES. IT REQUIRES A PHONE NUMBER I CAN'T COMPREHEND THISSSSSSSSSSSSSSSSSSSSSSSSSSSSS

>>13363

>>13364 I CAN'T btw, do you know how to fix the "document expired" error. i keep getting it on pale moon on my searx instance and i don't know the specific about:config setting i changed. it happens when i click a link then bo back to the searx page.

I have no idea if this is a simple sec question but I'll try this before making a thread. I think I have something weird in my home. I did an nmap scan on my network and there's a device I don't recognize. It's running linux, it has 4 open ports, and nmap reports the mac address as unknown. I think I read once about a device or something capable of scanning from where a wifi signal is coming/going though. Can anyone recommend me anything to that avail? What I want is to find the goddamned physical device at my home. Any recommendations? Thanks in advance!

>>13457 Not sure how to trace a wifi signal, but in the meantime you can: 1. Set your router to only permit access from a whitelist of mac addresses. Good idea in any case. 2. Turn off and unplug all your IoT devices and see if it gpes away. IoT was a mistake.

Learning more about how Tor works. Doesn't it make me more suspicious for my ISP, since with Tor they don't know what I'm doing, but they know that I'm a Tor user? Doesn't it defeat the purpose of anonymity? Someone correct me if my understanding of the network is wrong.

>>13477 You are in 2 important ways. First, knowing you are a user is nothing similar to knowing what you're doing. Tor promises to help with the second one. The second, is that you can work around that knowledge by using an obfuscating bridge, which for most actors (ISPs in particular) will shield them from knowing you're even a user.

>>13477 Using Tor doesn't make you "suspicious". Lots of people use it for normal internet access. Also, in addition to the previous post, if you use a vpn and Tor simultaneously, Tor is wrapped inside the vpn. Your isp will only see you using a vpn. Your end destination will only see you using Tor.

>>13477 Normalize Tor traffic by using it wherever possible. I do all of my F-Droid updates over Tor.

>>11715 Does the tor browser contain nonfree dependencies because the only way i was able to install it was adding contrib to my sources.list

>>13506 Shouldn't contain any nonfree code. The contrib repo is usually for anything that CentOS/Red Hat doesn't directly support (so, community supported). I have never tried it, but the only thing that would be strictly nonfree would be DRM. If that's included, I would be genuinely surprised since doing any kind of streaming over tor would be insanely painful.

>>13515 *centos or any other OS that calls a repo "contrib"

>>13506 You don't need to install Tor browser from any repo. Just download it from https://torproject.org, unpack it somewhere you want it to live, and run it. This is the safest way to do it.

Is it possible to delete a signature from the browser CA? i want to untrust cloudflare's certs by default. I use pale moon btw

How in Bob Saget's name do you post anonymously to lainchan? Is Tor posting possible, or do I need to buy a bunch of VPS instances in various regions and pay for them with ballcoin? What is your process?

>>13746 I rail an 8-ball of cocaine and then glue my testicles to my chair, spin around until I don't know where I am, and proceed to log in via the clearnet. From there, I sober up and stop acting like a fuarrrking retard and go to >>>/q/ where my fuarrrking question was already answered many times.

>>13746 Tor posting works fine on Lainchan. Just don't abuse it please. Mods seem to do a decent job of making it work by being vigilant.

What would be a good tool on a *nix system to track everything my computer is connecting to, and specifically, which process is managing which connection, i'm using tcpdump right now, and it's showing that i'm connecting to some google and amazon AWS services, even though i don't have any site open that requests resources from them, but i can't tell what process is causing it, it's not always clear what port is even being used, but even if it was, i would rather have the process info imediately written in a dump, so i can solve the problem, rather than having to separately check a list of processes which have that port currently open and guessing. I know i'm probably misunderstanding at least some of the info, as i don't know much about networking, and can't find any useful resources that specifically have to do with securing your device from unexpected requests.

>>13770 OpenSnitch might work for your needa, but I think it is still considered alpha at this point. I'm wanting to look at implementing it on personal machines soon.

>>13770 ntop alternatives: https://alternativeto.net/software/ntop/ for more heavyweight stuff you might look into zabbix, nagios, snort, wireshark, etc etc.

Where do I start in infosec? Should I read reverse engineering books? How can I study about security in Windows/Linux? God I really don't know where and how to start but I'm literally craving knowledge

>>13782 You could start by learning how tcp/ip works and how networking works. Then play wth some simple commandline tools, both offensive and defensive. Augment that with a good grounding in opsec.

While I was looking at my BIOS settings to check if virtualization was enabled I found that there was an option to disable the Intel ME. If I disable it, will that cause problems? My processor is an Intel i3-7100. I've always heard that (at least in modern computers) we had no accessible way to disable it except by maybe using ME cleaner, but I mean, it is in my BIOS settings, one would assume that if it caused problems it wouldn't be there.

Is it possible to run OpenBSD as a hidden operating system in one of Veracrypt's hidden partitions? I'd assume it is, but I've heard that OpenBSD runs its own native forms of cryptography, so I'm not sure if this would interfere at all. I'd like to run Linux as my main and have OpenBSD as a hidden partition on my computer.

>>13822 hidden partitions are snakeoil lurk https://www.openbsd.org/faq/faq14.html#softraidFDE

>>13822 Only as a VM after opening the Veracrypt volume.

is running Qubes with only 8 gigs of RAM easily useable?

>>13824 That link doesn't seem to go into much depth, but I see that it's the official OpenBSD team saying it's not supported. I think that's a shame I don't see how it explains how Hidden Partitions are snakeoil. They offer plausible deniability to some degree. Sure, they can beat me with a wrench like in that XKCD comic, but I might genuinely forget the password in a panic or they might bash me over the skull too many times with a wrench and kill me. Either way, no one accesses my files or ever truly knows there's a hidden partition. >>13826 Could you expand on why that's the case? My understanding of OpenBSD's encryption systems are rather lacking and I'm fairly new to some of this but I'm trying to learn.

>tfw u fill a hard drive with random noise and CIA goons beat you up demanding to know the password

>>13819 Switching that option shouldn't cause you any problems, but I doubt it disables ME completely, it likely only disables your access to ME "features".

>>13822 >>13824 >>13826 Is it possible to run FreeBSD in a Veracrypt Hidden Partition then?

>>13910 No but Dragonfly BSD certainly can via tcplay https://leaf.dragonflybsd.org/cgi/web-man?command=initrd

>>11843 what measures should i take if im not doing anything extremely illegal, just a little fringe? I'm thinking just being smart with linking information is enough for now, but seeing the direction censorship is going I want to be safer.

>>13836 Update: in short at the start at the end everything was going well until some things happened and it started rebooting too much before starting, my computer was by no means unusable but since it was inconvenient I turned it back on. Thank you for the answer nonetheless.

>>13915 Why is it not possible for me to run freebsd in a veracrypt hidden partition?

Is it possible to hide my local username when joining irc channels? I have a different nickname set.

If I use the DuckDuckGo onion link to do my searches it doesn't really matter if it logs "my" IP, right?

>>14149 >If I use the DuckDuckGo onion link to do my searches it doesn't really matter if it logs "my" IP, right? As long as there's no other identifiable information that could be linked to your real identity. Like if you use some browser with a unique fingerprint with and without Tor then the website can link those two sessions together. That's the reason tor browser is recommended. >>14129 >Is it possible to hide my local username when joining irc channels? I have a different nickname set. There should be an option in your irc client. You could also just create another user account with a generic name and use that. >>14078 >Why is it not possible for me to run freebsd in a veracrypt hidden partition? Because the FreeBSD bootloader doesn't support veracrypt. So you need to boot an OS that does support it to do the decryption. And once another OS is running you can't just switch to FreeBSD. What you can do is keep a FreeBSD virtual machine image in the hidden partition though. Or just use FreeBSD's native disk encryption (called geli or something).

how common is video and image malware? not like hotsex.avi.exe but actual exploits

im looking to run everything through the tor network in a vm with qubes. will virtualbox work fine for this? also does running virtualbox with windows 10 add any risk of my ip being leaked while using the vm?

I'm wanting to compartmentalize my general hackery from day-to-day digital activities. Given that I'm running 32-bit Linux, running a veracrypt hidden OS is out of the question given veracrypt's lack of a non-windows supported hidden OS feature. But (correct me if I'm wrong) I'll still be able to make a generic hidden volume, just not run another OS inside of it. So my question is whether or not it's possible to completely isolate programs to within the hidden volume or not. If I compile hashcat off git and run it from within the hidden volume, no one will know I have hashcat, right? Would it be possible to chroot into the hidden volume without leaving a trace on the device that I entered it and then have some kind of internal PATH variable exclusive to the domain of the hidden volume? Thus compartmentalizing all my 'hacky-hackhack' programs? If none of that's possible I guess I'd have to just use a custom liveusb for " D I G I T A L F U N " but I'd really prefer having it all compartmentalized by software, not hardware as a USBkey or liveUSB can just turn into another thing to worry about losing/leaving in your pocket before you put your pants in the washing machine.

You are clearly not ready to anything serious work with your level of knowledge.

Maybe put it all in a virtual machine. Or else, look into profiles in Guix.

>>14354 What makes you think that, anon?

Is smb safe to use In 2021? Would nfs be safer?

>>14350 >>14354 The point is that I'll have a relatively secure environment to learn in, simulating a somewhat realistic compartmentalization scheme so I'll have gotten used to it for a while before I engage in any serious work. It's all about habituating good practices, lainon. I didn't mean to imply that I plan on engaging in D I G I T A L F U N recklessly before I'm suitably prepared. I'm well aware I have about a year or two of serious self-study before I'll be effective, like any reasonable lainon, I'm aware of my current limits and plan on breaking them. Now, will you answer my original question? Or will you continue to gatekeep on suspicion of my being a dirty skid?

Do I risk my ISP seeing what I am doing if it is through the tor network, despite using the ISP provided router and default router settings? In the US.

>>14375 No, that's the point of Tor. Everything from your computer to the exit node (or hidden service) is always encrypted.

>>14357 Use sshfs/sftp if you can.

Considering it's so old, would I still be targetted in the wild web if I were using say, netscape navigator, or windows 2k, or windows 98?

What is the best type of disk encryption to use on *nix? I mainly wish to guard against falling victim of data planting (bad soykaf embedded in files, files planted by third parties) as well as my personal life online.

>>14419 BUKS, the BSD Unified Key Setup Or if, you're a more sophisticated user: PUKS, Plan 9 Unified Key Setup.

>>14422 thanks

I'm using CDE (Common Desktop Environment) on fedora, i hear it's pretty insecure anyway to help? cde is like the only de i like using

how do i avoid being caught when breaking into private wireless networks? ideally I'd be using them after that, bridging it over Ethernet then making a vlan, and connecting to a vpn after that it'd probably be just residential networks

when i connect to a network, it tends to know a lot about my computer my motherboard name, sometimes my os and also my hostname can i spoof any of this?

>>14448 macchanger + persec/opsec. >>14449 Let me know when you figure out how to spoof all that information. It would be really useful to know.

>>14341 Not quite an exploit but this came to mind: https://www.vice.com/en/article/gyyxb3/the-fbi-booby-trapped-a-video-to-catch-a-suspected-tor-sextortionist

>>14341 I know storing shellcode in images is becoming more common as an av evasion technique.

How can I exploit an uninitialized variable? It is comoared to a constant before being initialized and I have to make the comparison be true

as a Linux desktop user running untrusted software, how can i protect myself? steam, chrome, games

>>14487

>>14436 https://github.com/NsCDE/NsCDE NsCDE is likely your best bet.

>>14487 Stop using software you don't trust. Doubt you will want to stop gaming, but you can at least use a different browser. Assuming you don't want change, then compartmentalize. Preferably at the hardware level, dedicated hardware for untrusted stuff. If that's not possible then dual boot.

>>14511 I should mention on the dual boot it should be different encrypted volumes with different passwords. Don't recycle creds.

>>14448 >>14449 Hey, its >>14451 So, I learned a little bit more. If you use macchanger, you can make your device look like an entirely different device. You can also use SELinux to block certain requests, but I am not sure how much of this information would stop you from being able to connect. You need to also edit identifiers: >user@host instead of some pretty, custom username/hostname. >timezone: UTC You also want to edit your machine-id like Whonix does. Make it generic... Or just steal someone elses if you can find it. Block ICMP requests using net.ipv4.tcp_timestamps=0 in sysctl. Use something like kloak to fix your keystroke fingerprinting. That kind of thing is all I have for now.

Hey guys just looking for some links/keywords to search for here. I was reading a book on the Long Range Reconnaissance Patrols (LRRP's or "lurps") in Vietnam and read an interesting tidbit. Apparently the patrols were sent into the bush to wiretap Viet Cong communications lines. The tap, according to the book, consisted of a device that "hugged" the line (presumably to infer the signals via EMI). So far, nothing crazy. What interests me is that 1) the device stored the data in a parseable format back before computers were the size of a conference room, and 2) the device also transferred its data via burst transimission to aircraft that would periodically come to check on it. I think this is really cool and I'd like to replicate the technology in my free time. Just don't know where to get started--especially with regard to device longevity and data storage/transmission. Anybody have links or words I can rabbit-hole? Thanks. Pic related, the book.

So, I know that multiple encryption using the same cipher can actually weaken the overall efectiveness, but what about putting encrypted files in tar.gz archive, and then encrypting that archive? Logically, it should be the same, since compressing already encrypted data doesn't change much, but figured I'd ask anyway. I'm asking because I wanted to encrypt my unix pass password storage, which is encrypted with a default gnupg private key (I assume AES256?). Should I create another key with a different cipher, and use that to encrypt the password directory instead? If so, what cipher would you recommend?

>>14587 Chaining together ciphers is exactly how VeraCrypt operates. You can have it operate in a cascading encryption scheme, all with their own independent keys. For example, it will chain together AES(Twofish(Serpent)). You can customize the order in which it operates to maximize throughput based on hardware benchmarks that it runs on your machine. It's super intuitive how they set it up, check it out. If you don't want to use VeraCrypt, you can do something similar by chaining GnuPG, scrypt, etc.

How well is Matrix doing nowadays? Can the main instance (matrix.org) be trusted?

So today I was checking my spam folder and in it was an email from about 10 or so days with my password in it saying that they had vids of me watching porn and where gonna send it to my Facebook friends or whatever. This is obviously a scam for a whole bunch of reasons, (OpenBSD doesn't activate webcams out of the box). But they do have my password, I mean I haven't used it in a while and its not my login for anything important but It's still scary. I realized today that I have spent so much time securing my actually pc that I've forgotten to secure the things outside of it. I've had my current email since like middleschool and I've signed up for so much soykaf over the years it's insane. How should I go about cleaning this up? I plan to get a new email and migrate over only my most important accounts and delete as much else as possible. Can I just delete my old email and forget about it or should I delete all my old accounts one by one. At this point I'm not even sure that's possible but I don't want to leave my old accounts just floating out there. If anyone could sorda guide me through the process I'd appreciate it a lot. I'm still really new to a lot of this stuff. picture not really related, I just thought it might be useful to someone

>>14617 >picture not really related, I just thought it might be useful to someone Thanks, but why does the author of the pic try to present his autism diagnosis as a legitimate argument against uMatrix/uBlock Origin?

>>14618 Man I really have no idea. It was some guy on 8kun's /cyb/ board who posted it and he was a little...odd lol. He had some interesting thoughts on security though.

couldn't find a good place to ask this so i guess ill ask it here. I'm getting myself familiar with hydra and so I'm practicing on different sites.( I'm only using it on my own accounts with 10 line lists as to not make anyone angry). well every time i try brute-force a test Instagram account it returns all valid passwords. I put the real password in the list so i know this is wrong. I think this is to do with the prompt i gave the syntax when it fails a login. does anyone know how i would trouble shoot this/how to solve. >picrelated

if i understand correctly, the tor browser isolates cookies between tabs, right? doesn't that mean that it's not really needed to delete cookies at all? and if not, what about:config options would i need to change to allow certain domains to store cookies without deleting them? i think i tried the lifetime policy options and such, but the rules set in preferences would just restart automatically

>>11715 where do you go to find leaked password hashes

>>14341 how does this even work, how do you get infected?

Is there a tool for anonymizing your source code (countering the source code stylometry)? If there isn't, how effective would changing the source code formatting be? I know it's only one of the ways to identify people from the source code, but do you think it would make any difference?

>>14617 im going thru the same soykaf rn actually lol. I'm going to my old email and finding what rando services have sent me emails. I go to their website and find a way to log in, delete all my posts, change my info (name, username, bio) even if it isnt my real info, check all the privacy boxes I can quickly find, and delete the account. Each site takes about 5-15 min. Very few services dont actually allow u to delete ur acct, which is nice. I was surprised to find a PUBLIC pinterest account I made in middle school with PUBLIC hentai posts I made to get around my devices' parental controls. So yes, it definitely is worth it to do it for every account you can find. But after you're done, be sure not to connect your new accts to the old ones in any way. Also, there's no reason that u should use the same name or username on different sites. Additionally, dont assiocate with the same people if you can. Google + Fb have ai's that're rly good at relationship mapping, which is how cheating spouses get caught all the time. The ai thinks the cheating husband + mistress must be rly close irl for all the chatting they're doing, so it starts trying to get the wife to interact with the mistress. and if im forgetting anything, pls lmk

>>14642 >I was surprised to find a PUBLIC pinterest account I made in middle school with PUBLIC hentai posts I made to get around my devices' parental controls. So yes, it definitely is worth it to do it for every account you can find. Thats funny. Woulda sucked if someone found it before you did though..... >But after you're done, be sure not to connect your new accts to the old ones in any way. Also, there's no reason that u should use the same name or username on different sites. Additionally, dont assiocate with the same people if you can. Google + Fb have ai's that're rly good at relationship mapping, which is how cheating spouses get caught all the time. The ai thinks the cheating husband + mistress must be rly close irl for all the chatting they're doing, so it starts trying to get the wife to interact with the mistress. Bro imagine getting ratted out by a fuarrking ai

>>14611 Depends on your threat model.

>>11715 Not sure if this is a security question, but I didn't want to create a thread to ask it. But are there any livestreams or footage of an actual website being hacked? I know that bug bounty videos are similar, but it'd just be interesting to see something like that in action.

>>14646 >Thats funny. Woulda sucked if someone found it before you did though..... apparently i wasnt the only one w/ the pinterest porn idea lol, some pics i posted got added to other ppl's porn boards which was funny. My real name wasn't anywhere on it but it was linked to the email which did. If someone rly dug deep they mightve found it but still, soykaf like that is why im on lain lol

What does a port scan look like on the server's side? and is it fine to just go around scanning random websites if I don't follow up with anything?

>>14877 Depends on the server. Most commercial servers will have some form of system that detects a port scan (after all you are querying a large number of ports suddenly) and reports it. If you don't follow up you're probably fine as its not worth the effort to actually try and follow up the countless attack surface scans that a public web server will get every day. If you're paranoid do it from tor.

>>14880 Thank you, I'll use tor or a vpn next time, I was scanning some small websites(A few hundred users at most) out of curiosity. I know that most ISPs specify in their TOS that you aren't allowed to do it, so it's probably better to lean on the safe side, even if it's most likely legal.

>>14641 first, just dont ever put a name to ur code and have good opsec. even if someone realizes that certain code is coming from the same person, if they cant find ur irl info u shouldnt have to worry if uve been compromised already, u might look into an ai that rewrites code. ik that theres ai that are dicey on inventing code, so u should be able to redirect that to just recreate your code. This obviously completely wrecks the entire purpose of u writing the code in the first place tho lol

>>12728 Block tor (etc), allow public and vpn ip. This means the spammer would likely downgrade to any of the two just to keep trolling you and you can then send the necessary info+tip to the rightful authorities. >>13347 It's probably "salted" Only I can think of is reverse engineering if you have physical access. If you only have the alphanumeric strings maybe cryptanalysis. Other way is to find a info leak about it, >>13477 It does. I've heard two anons on 4chan/g say something about getting a c&d order for just browsing paranormal sites and downloading books. Maybe they became an exit node and set it up like a noob. I don't use it nor recommend on using it. Even downloading that ISO or the browser may even get you flagged immediately. The User agent that tbb uses is also known to trigger middlebox anti-fraud detection systems. >ISP will see that your traffic is coming from known tor nodes which they might flag in a ISP middlebox. >anyone can publicly check if your public IP became an exit at some point (https://ipduh.com/ip/tor-exit/) >tor exits can be compromised and are usually datacenters >>13479 >Your isp will only see you using a vpn. Your end destination will only see you using Tor. I've also heard in a few chans that there were people who used VPNs like that and found out their trusted provider was actually a sub-company of another company and the rest is history.

>>11843 Products in general such as SIM are tracked per store/location which region the box or batch were sold in case of recalls or specific cases (like perishable products with contamination needing recalls or even fire hazard batteries). Most convenience stores also take footage (even having dedicated cctv to the SIM-card section) and really look out for people who buy these on cash. There was a time when a lady somehow went missing and the last time she was seen is buying a dumb phone and prepaid SIM on a convenience store. She even went as far as to go to a remote gas station store but there was a footage, I think she somehow won the lottery and her boyfriend/relative/hunter probably was probably after the ticket. >triangulation This is usually done passively with historical data and when done actively there's no way to avoid other than being offline. Each towers have multiple frequencies of different providers and each air interface (3G/4G/5G) have specific multiple bands (and whose cellid may differ per tower) which they calculate the signal strength and have a general idea of possible locations out of nearby towers. Most phones don't have a way to disable air interfaces or even limit to a single band while also cellid/tower handover is automatic so the device will be seeking what ever is the closest (which could be an active triangulation in which case a legally compliant gear or a fake IMSI on wheels is sweeping the street). Sadly, phones cannot know if it's fake or legitimate since they've never even updated the standards for that.

Anybody know some software like this as alternative? pimeyes dot com I don't care if it's FOSS or Paid Proprietary I just need something that could reverse image search faces very well. Also use this if you want to obscure pictures of yourself. sandlab dot cs dot uchicago dot edu slash fawkes

I'm using samsung galaxy note 10 plus now. I can't flash any custom roms because of knox. But i disabled almost google apps like gmail, youtube etc; but webview wasn't). So is my privacy can be more increased than before even though i'm using one ui with some pre-installed google apps which can't delete without adb or root?

any decent multi port NICs i can buy and flash custom firmware to or remove the management bullshit from?

last week i got mail about me getting a national insurance number , today i get a call about it from a weird auto message (very obviously a scam , hung up the second it spoke)and it just baffles me how they got to me. ive had my number for less than a year , only given it to a few family member and absolutely no one else. how the fuarrk do they know my name and my phone number??

I want to find out what are another imageboard's secret boards, which I know exist, do I need to come up with a crawler or something like that to do this? I assume I wouldn't be able to access their file tree unless I did something like an injection, but I might be talking bs because I have no clue. After looking up quick solutions, I tried using robots.txt but it didn't return any results.

>>15099 just guess, it won't be in robots and they probably filter mentions.

>>15099 Look into google dork or skipfish

which email provider should i use? i've been using proton as main and gmail as secondary. And i heard some issues about protonmail that makes me want to move another email provider. I consider to move disroot. Is that enough? or please suggest me any better email provider.

>>15197 The problem with protonmail is that all the fancy encryption they do means you can't just connect a mail client like thunderbird to it, you are forced to use their web interface. There is a bridge application apparently but it's for paid users only and it's all theater anyway. It's as if your mailman put your letters into a locked box and then carries the box and the key to the other end and opens it again. It doesn't make a difference if you trust the mailman to not read your letter or you trust the mailman to not use the key to open the box and then read your letter. If you want private emails which only the recipient can read then you need to use gpg to encrypt it with the recipient's public key.

I am a sheep and I use windows and chrome and facebook and that sort of thing. What is the best thing I could do right now to improve my security and privacy? At least on a "personal" level, what can I do to protect myself from viruses, rootkid, wi-fi invaders and and so.

>>15239 dont use facebook, just dont. Get a good antivirus and swap some of your software.

>>15241 By software you mean the entire operative system, right? I hear a lot of good things about Ubuntu but I don't know what distro would allow me to carry out a home office job and online shopping as safely and privately as it can get.

>>15242 Ubuntu's probably fine, because stuff just works. It's not the best for privacy, but it should suit your use case. I've also heard good things about Redcore Linux for home office use.

>>15239 >wi-fi invaders Figure out how to get into your router admin panel and change the default wifi password. Just add some numbers or characters to the existing one. And if you see an option for wps, turn that off as well. Those are the two easiest ways to get into someone's wifi network. >viruses Only run software from websites you trust. If you want to run pirated things then buy another computer just for that and keep it separate from your personal data. You can also go the other way, buy another computer for important things like online banking and only use it for that.

does anyone know where i can get some decent anon proxy lists? everything i've found so far is absolute trash

All music streaming services are bad at privacy and security? if yes, which is better thing i can choose?

Should I be worried? Earlier this day I was downloading a torrent (not illegal). About 5 or so hours later my internet slowed down to a crawl. I checked wireshark and an IP from the bumfuck balkans was relentlessly spamming connections, I think he was trying to port scan me or something. The IP was also a peer on the torrent connection earlier (which I had already closed). I only have a couple ports forward that I use for hosting games, though the router uses proprietary software so I suppose there could be more.

How do I bypass or subvert SMS verification on Discord and other services? Can I buy SIMs in bulk in cash somewhere and properly activate them in the US without spending $30 a pop at walmart?

>>15287 I've had good results with http://pubproxy.com/api/proxy To grab a single SOCKS proxy: curl "http://pubproxy.com/api/proxy?format=txt&limit=1&type=socks"

Realistically speaking, what is the most "secure" that I can make a laptop without flat out desoldering everything that could reasonably connect to the outside? I'm probably gonna get a small chromebook soon and I want to use it as kindof a secure laptop for things like ssh as well as keeping other keys on.

>>15421 I'm pretty retarded at this stuff so hopefully someone will come correct the mistakes I make. If you're not willing to mess with hardware then just cover the webcam, disable bluetooth, use an encrypted drive and disable the mic. Obviously if you could disable bluetooth in the kernel and physically disable the mic that would be better but I assume that might be too high effort. There are secure distros and stuff too but I'm not great on that so you'd have to do your research. Some people recommend BSD stuff but to me that seems old and to rely too much on security by obscurity when an exploit could easily be lying undetected that would make it vulnerable. Obviously stuff like disabling wifi, never connecting to the internet etc. would help too but that's a bit drastic for the goal here I'd assume. If you're using ssh there are lots of security risks and stuff to manage there too but I'm not great on those. Other than that there are tools to check how vulnerable a linux install is software wise you can use to try and reduce outside attack sources.

how does tech noob into security? I don't know c++ or anything relevant that can help with reverse engineering and stuff like that

>>15421 https://en.wikipedia.org/wiki/Threat_model Without a threat model, any recommendations are just people guessing.

>>15504 The single most important thing is OSINT. So, learn OSINT. It does not matter where you want to go from here, learn OSINT. You do not know OSINT, I know 100% this to be true. So, learn OSINT. Next: You already know a specialization, so look into Reverse Engineering for Beginners by Dennis Yurichev

>>15507 How can I into OSINT and why is OSINT so useful?

>>15621 Learn out to research is your core skill set in OSINT. It will be the core skill set to find surface area of your target, (ip range, what services are running on servers, who works where for phishing, etc). All without touching or minimal touching of the network so it won't raise suspicion.

>Glances at gf's computer >Strange, the webcam light is on >Open up task manager >Steady upload rate >Start closing browsers and soykaf to figure out which process might be using it >Everythings closed, lights still on. >Unplug the webcam >Upload stops How does one secure a gf's computer without her complaining about it, and how do i quarantine her computer from the rest of the network.

>>15672 Stop it asshole, i need my fap material

I am trying to use youtube-dl through torsocks, but I keep getting a connection refused message. I am using Fedora, so maybe this is a problem with SELinux?

>>15676 It's either a problem with youtube-dl or torsocks because I've tried it last week too on debian and it didn't work

>>15676 Youtube (among others) like to block some Tor exits. You might also get HTTP 429 (Too Many Requests) quite frequently. The workarounds are either telling youtube-dl to infinitely retry (see the man page), or by running it in a loop like so: . torsocks on; while ! youtube-dl ...; do sleep 0; done

With PGP for Email, I add my ID to a keyserver, but what happens if I lose that key and need to make a new one. If I submit it, will it overwrite the key already on the keyserver when I submit the new one? Anything else to be aware of with PGP keys for email? Also what is the best keyserver to use?

What cli tool is suggested for cleaning pdfs?

>>15672 the fuarrrk. tell her that someone might be taking creepvideos of her and that she's at high risk? you mention task manager so i'm guessing you're on windows? Here's what I would do (but i'm a noob and other more experienced lainons can suggest better alternatives). 1. sit down with your gf and ask her if anyone not trusted other than her has had access to her machine. or if she downloaded anything suspicious recently. 2. tell her to avoid doing anything that might expose her in front of the cam. meanwhile monitor processes that use the video components of the OS? your best bet imo would be to monitor outgoing traffic and keep a log of UDP traffic being sent out to an IP when no internet activity is being done on the machine. check logs and suspicious programs installed on the computer. record everything. 3. the simplest and ultimately the most important thing would be to nuke the OS and do a fresh install. --- >without her complaining about it i mean "someone could be watching you waiting to record something to blackmail you with" should be a pretty convincing reason. if not, then you're just impeding her exhibitionist kink.

>>15680 https://0xacab.org/jvoisin/mat2 This doesn't remove watermarking. Also be aware that some orgs will produce different versions of documents to track down the source of a leak. These can include changes in wording, formatting, sentence structure, etc.

was toying around with protonvpn free service. upon connecting there is often sudden inbound traffic. sometimes common ip addresses like microsoft google amazon etc. sometimes many random ip addresses like what one might see in a torrent swarm. what might account for this? could new connections to their service be inheriting a subnet used by a previous connection and receiving packets intended for another user? is that common with vpns? when sharing linux isos over other vpns i never noticed so much of this odd traffic but that is not something i do often so my experience is limited. if that is what is happening what sort of security or privacy risks might that open up? wondering if anyone itt with more knowledge of networking and vpns might care to comment.

>>15678 You can also start multiple Tor clients on different ports and just cycle through them until one works. >telling youtube-dl to infinitely retry (see the man page), or by running it in a loop Won't that just give the same error for 10 minutes until the circuit changes and you get a new exit?

On startup my laptop runs a few tasks >connects to Nextcloud >starts Tor >starts I2P >connects to my mail server Next when I open my browser the first page it loads is my preferred searx instance. All this because of "convenience" but I do realize it makes for a very identifiable behavior if someone would be monitoring the network, especially when using public networks. Since I already put in effort to randomize my hostname and macaddress on every boot, would it make sense to also disable these functions? I'm running Devuan GNU+Linux, are there any other calls to the outside world I should be worried about?

>>15899 >I do realize it makes for a very identifiable behavior if someone would be monitoring the network, Not just the local network. Anyone monitoring the i2p network can correlate your IP address joining and leaving with any torrents you're seeding or eepsites you're hosting to deanonymize you. With Tor that's less of a problem because you are not forced to act as a relay. The way i2p (and Tor relays) are intended to be used is on a server with 24/7 uptime, not portable devices that keep joining and disconnecting.

i've got a pdf with a user password is there any way to get into it in a reasonable span of time and if so how could i do it?

>>15869 You're right. I forgot to mention you should also set MaxCircuitDirtiness to a much lower value (0 gets automatically raised to the minimum).

>>15923 pdfcrack ? https://sourceforge.net/projects/pdfcrack/

>>14617 Check the website "haveibeenpwned" with your email, I got the same spam email, I think its a bot that goes through well known leaks/dumps and spamming the mails trying to phish them.

I'm a noob. Should I run my main os that I use a web browser in inside a virtual machine? If I want to be super secure is this a better option? Also if I run a BSD as a host, is there any way to create a vm that can run xorg? I've heard of jails but not sure if they're what I'm looking for.

>>16011 >Should I run my main os that I use a web browser in inside a virtual machine? If all your passwords and personal information goes through the browser then why does it matter if it's in a vm. >I've heard of jails but not sure if they're what I'm looking for. FreeBSD jails can only run FreeBSD. A virtual machine can run any operating system.

Possible a stupid question, but just to be sure. Can ISP see what I message I post on site? (both if on http and https) For example lainchan. It's has https version, so, while using it can my ISP really understand if I'm here in readonly or if I'm an active poster here? I guess that on http ISP can clearly see if I send a POST message or something

>>16042 HTTP: yes, your ISP will see everything. HTTPS: your ISP shouldn't see anything. However, there are some tricks that your ISP can use to get around that: 1. upgrade denial: your browser initiates an HTTP connection, the servers says "use HTTPS instead", and a man in the middle (like your ISP) keeps the "use HTTPS instead" message from ever reaching your browser. Modern browsers attempt to mitigate this by automatically trying HTTPS first, unless HTTP is explicitly requested (when a URL is prefixed with "http://"). 2. downgrading: you have an HTTPS connection, and an attacker tells your browser (and/or the server) to downgrade HTTPS to regular HTTP or something like it (see https://github.com/moxie0/sslstrip). 3. certificate spoofing: your browser tries to initiate HTTPS with the server, a man in the middle gives your browser a fake certificate which it then uses to make its HTTPS connection, then the man in the middle proxies your requests to the legitimate server. The mitigations include not trusting self-signed certificates (which modern browsers do, though this doesn't provide total protection), and manually adding trusted certificates to your local certificate authority.

>>15964 tried that but either i am too stupid or it just doesn't work anymore

>>16042 >For example lainchan. It's has https version, so, while using it can my ISP really understand if I'm here in readonly or if I'm an active poster here? Download wireshark and try it. My expectation is that the POST packets will be bigger and therefor a clue that you are writing and not just reading.

What web crawling tools are better or more common to use? The book I`m reading takes a professional paid web spidering tool but I`m not feeling that it`s a thing most lainons use. I don`t even know if it`s better to use software for this or just basic tools.

>>11715 Is there a decent guide to home network security anywhere? How do I make sure my home network is secure?

>>16042 Outgoing traffic will be different in size any case whether you request page download by clicking links or after sending message. For small websites that don't share CDN IP addresses with others, or are used by a too small amount of your ISP's clients and therefore rarely updated, they can even know what you post over https. It's called traffic fingerprinting, all needed is to compare timestamp and size of your outgoing data with newly appearing answers on any given thread to confirm it were you. In this sense, for non-american ISP your posting history is more private on Facebook than on lainchan.

I am doing labs on portsperson whose company I enjoy and I couldn't solve this one (details below), so I checked the solution and I still don't understand why it works. Lab: Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped. form.png The lab itself contains a blog post and a comment section and you have to trigger alert() function to solve it. You do it by injecting code into website field. alert.png alert() function triggers when you click on author's name. I understand &apos;-alert(1)-&apos; is equal to '-alert(1)-' , but why does it actually call alert() function if it's a string? And why doesn't it work when i remove minuses (-), so it looks like this 'alert(1)' ?

>>16150 I see, I see. I guess ISP will start tracking my traffic to let's say lainchain only I somehow will get in their sight, right? Until then it's unknown what posts were made by me (without contacting lainchain admin) Oh, wait... If i'm only one IP (even if dynamic) that uses lainchain.org then it's easy to find my even my previous posts by timestamps, isn't it?

How do i play games without getting owned by skiddies?

How to avoid deanonymization through filenames of image uploads?

>>16187 Rename the fuarrrking files?

>>16188 How would you rename them? I try to use the original name if possible, but using the same name multiple times or using an outstanding naming scheme will easily alert the feds.

>>16189 before uploading, name them either: 1. something different (timestamp.extension, random.extension) 2. something fixed (fixed.extension)

>>16187 >rename the file >change a single pixel >upload >rename it again >change the another pixel >manipulate timestamps on file

>>16187 Look at chans that show filenames to learn what generic names are: - ClipboardImage-[10-digit number].png <- notice capital I - videoplayback.mp4 - maxresdefault.jpg <- Youtube thumbnails - images (4) <- add bracketed numbers to show how you hoard stuff in your downloads folder - iPhone-created filenames that look like this: 912D271C-CBAD-4F1F-A63A-29D21C629A97 - Filename according to DCF specification if you want to make it look like made with digital camera: https://en.wikipedia.org/wiki/Design_rule_for_Camera_File_system - Add a dozen of uncompressed megabytes on top to show your technical ineptitude and disrespect to server admins and readers on slow connection - Unix timestamp <- most files from chans - A hash of a file as it's filename is also a good option for generic filename, especially if you want to mimic it's download from a certain chan (look up source code for algorithms used, then reproduce on several files) - 20210616_170757 <- Date and time YYMMDD_HHMMSS - IMG_20210616_170757 - VID_20210616_170757_674 <- not sure what the last three numbers mean - Capitalized file extensions .JPG .JPEG - Some messaging programs like whatsapp create their own filenames, might as well mimic that - Every frog picture has it's own ukrainian name on kohlchan >>16192 >Change single pixel on a popular pic >Make your posts identifiable by unique file

Where can I learn about sec and whatnot? What books to read, for example? I'm not looking for a job on it, just for my own interest.

>>16208 Offensive or defensive?

>>16222 Defensive, obviously.

Simple question, lains. Why is there a freenet java process constantly running on background and restarting even when I kill it? Is there a reason to be concerned here? I've read the documentation but can't figure out what it actually does.

Seeing a lot of questions asking about defense, I'd recommend checking out stuff from Michael Bazzell. He has some books as well as a podcast that are a great source of info surrounding OSINT, privacy, and security.

>>16231 Investigate its ancestry. Start by learning about the parent process that's spawning it (on Unix-like systems: ps -Al , then find the row/column corresponding to the java process and its PPID, then get the parent's info ps PPID ). If that isn't helpful, repeat the process to find the grandparent, etc.

I'm looking for info on circumventing an android device's user lock. Or at the very least extract data from an unencrypted, locked device. I guess flashing a recovery and then dirty flashing a different ROM could work. But are there easier, more reliable solutions?

are their any security differences between p2p and client-server if im using a vpn and my threat model is copyright trolls? or are both suitable?

>>16231 Imagine doing C&C via freenet.

>>16231 >>16252 yes, check the ancestry, tip: you can do it even more intuitively with sudo htop then toggle tree view with F5

>>16439 have never played with freenet, but if it's stable and small enough don't see why not, i bet it's not filtered by firewalls as much as tor or namecoin dns

>>16439 >>16500 java java java java jvav

>>16187 >>16188 >>16189 >>16191 >>16192 >>16193 This discussion reminds me of something I considered taking a little time to do, but, not being a high priority for me personally, never got around to. Thought it might be useful to write a script or something that would create randomized file names based upon some of the templates mentioned here. If one was to rename files for reposting regularly, like the OP of this question was curious about, then the process might as well be automated. Maybe something like that already exists and is floating around on GitHub or somewhere? It wouldn't be difficult to incorporate some command line program, like exiftool, to remove/alter meta data as well. I wonder if there would be any interest from other anons in sharing a script or simple program that would rename files in such a way?

How good are shodan's price plans? Is the one time payment usable let's say for finding tens of devices with default credentials? How would censys and zoomeye compare with price vs usability comparison?

>>14617 don't delete your old email address, anon. Your email provider already has all that data, and there is a small chance that you might need it in the future (say you forgot the password to an old account and want to reset it or whatever)

>>14857 lol I thought I was the only guy who fuarrrked around with pinterest when I was young. Normal porn used to disgust me (was late primary or middle school) but I had noticed that pinterest had some great softcore porn so I used to do searches like 'site:pinterest.com nude sexy' on google images to find porn I liked jacking off to. Still have access to my pinterest account from back then

are there any options for online kyc-less crypto exchanging apart from bisq

Right now I'm working through The Shellcoder's Handbook I'm stuck on trying to do a return to libc attack. First of all, I wrote a vulnerable program: #include <stdio.h> #include <string.h> void demo_vuln(char *exploit) { char buf[10]; memcpy(buf, shellcode, strlen(exploit)); return; } int main(int argc, char **argv) { demo_vuln(argv[1]); return 0; } Then I compiled the program and got the addresses of system and exit with x system and x exit in gdb (address of the functions are the leftmost number so I know I'm not wrong there). I exported an environment variable, SHELL2, as the string "/bin/sh". I got the address of the variable through a program I wrote (I turned off ASLR just so that I could demonstrate it). Now I wanted to construct the exploit- and do it on x32 and x64. Yes, I know that I need to do different things to make it work on each architecture. On x32: address of system address of exit address of SHELL2 How I write this exploit: 14 bytes of junk data (overflow the buffer and %ebp ) and the addresses in that order (bytes arranged little-endian style). On x64: address of system address of exit The address of SHELL2 should be in the %rdi as that is the first function argument register in x64. I think it should be similar to x32, but the main issue with that is that it is not possible (to my knowledge) to overflow into %rdi.

Why do people crack hashes instead of cracking hashes and generating rainbow tables along the way? If blindly cracking a specific hash took one day, next time you need to do it again you can save one day of computing hashes, no?

>>16645 >f blindly cracking a specific hash took one day, next time you need to do it again you can save one day of computing hashes, no? Only if the hashes are not salted. WPA handshakes for example are created with the password and the WIFI network name (the salt). So a rainbow table is only valid for the network it was generated for. Login pages do the same thing with user passwords. The hash is not just the password is it time + password or username + password so a rainbow table is only valid for a single time or username.

>>16643 The first step to learn the basics is to only overwrite the return address and jump to a target function. This is the one I used to learn https://ropemporium.com/challenge/ret2win.html >I think it should be similar to x32, but the main issue with that is that it is not possible (to my knowledge) to overflow into %rdi. To get a shell is actually more complicated because "/bin/sh" is a string and doesn't fit inside RDI. You need to put "/bin/sh" somewhere in memory (like the stack you just overflowed) and then RDI is the address of that memory location (a pointer). That is covered in challenge 4 https://ropemporium.com/challenge/write4.html To get data into RDI you need what's called return oriented program. When you overwrite the return address on the stack you point it to the end of an existing function in the program. Point it to an instruction like pop RDI, and then when that function returns it will pop the next return address off the stack you have smashed and jump where you tell it to go next. That's how you can piece together your exploit using code already inside the exploited program and having control of only the stack. I think challenge 2 covers that https://ropemporium.com/challenge/split.html Good luck.

I'm coming from windows managers that didn't applied themes to tor browser, now wthat I'm on a DE I notice that tor browser uses the default gtk theme (in my case, a dark one.) Could that be used to compromise me? If so, how can I prevent tor browser from loading the system's appearence?

>>16736 >Could that be used to compromise me? no, that's all on your end and tor browser won't expose how your de is configured in regards to gtk and/or qt theming. >...loading the system's appearance? here's a decent entry on the arch wiki that covers the topic of gtk/qt theming if you are curious about how it's implemented. the information here is good starting point and is relevant to both arch based and non arch based distros. https://wiki.archlinux.org/title/Uniform_look_for_Qt_and_GTK_applications#Styles_for_both_Qt_and_GTK

What are some of the best c2 servers?

Not sure if this is the right thread but did someone saved the magnet containing the facebook leak? The thread got deleted.

The UK is clamping down on dissidence. They include owning "extremist" content like The Anarchists Cookbook (which you can buy in bookstores here) to be a chargeable offence. To be on the safe side I am removing all such controversial content from my computer and uploading it to Mega. For accessing Mega I can't use a password manager as that would leave a trace and be accessible if my computer were seized. I am thinking of instead using a random number generator with an easy to remember pin as the seed to generate a strong password. Will this alongside a VPN be enough to protect me from police forensics? Also is Mega a good choice?

>>16788 That's a good idea lainon. >For accessing Mega I can't use a password manager as that would leave a trace and be accessible if my computer were seized. I am thinking of instead using a random number generator with an easy to remember pin as the seed to generate a strong password. You can use steghide or gifshuffle to store the credentials in images, just find a jpg/gif and use the strongest passphrase you can reasonably remember >Will this alongside a VPN be enough to protect me from police forensics? Tor would be better >Also is Mega a good choice? If you can login into your account every 3 months, mega deletes free accounts after that period. Additionally you should consider using megatools which work with tor since their website is ridden with javascript (I've always assumed it generates over 9000 fingerprints which can be linked to your other activities, who knows what it does on this particular site)

>>16790 Thanks for the advice lainon. I'm leaning towards the number generator for the password as I then don't have to store the password at all - the code to generate the password would be small and quick to write up.

Should i use tor every time? I do not use the botnet often, so i was never worried about. But i see some people using it even in safe websites like lainchan.

>>16794 Using something with a proper key derivation function would be much, much stronger, especially with regard to bruteforce. Why do people insist on rolling their own algos?

>>16788 Your books are already backed up by library genesis.

>>16818 It's the age old problem of needing to remember a strong password which you don't want to have written down or stored anywhere. I don't think it's actually a bad idea given how uncommon it is. You would just need to remember a pin (seed) and the steps to generate the password. Though you would want to make the algo multi-step rather than using the rng directly.

>>16821 You're literally describing the functions of a key derivation function and key stretching. THIS ALREADY EXISTS STOP ROLLING YOUR OWN CRYPTO GOD DAMN IT

>>16788 >>16821 >>16842 What's worse, the simple password generator is now stored on his computer. Let's expect a short PIN too.

>>16749 aren't you supposed to run your own c2 server?

>>16853 >>16842 > the code to generate the password would be small and quick to write up. I had understood this as typing out the code to generate the password when you need it. So the code wouldn't get stored on the computer. This isn't rolling your own crypto, this is being fancy about how you remember your password.

>>16818 >>16842 I imagine the point of rolling your own crypto here is to gain some security through obscurity (since security through remembering a strong password is impossible) and hope they won't catch onto it

>>16856 >>16857 >https://en.wikipedia.org/wiki/Diceware Diceware could also work as it produces a memorable password.

In Tor one node doesn't know what nodes before the previous and following nodes are, right? But if I connect to Tor and the one node is forwarding to the next, what prevents it from taking the ip of the previous node and sending it to the next, or to a specific website address, and so on for all of the nodes?

>>16965 You're dependent on the Tor nodes not being malicious. Otherwise, with enough nodes, an attacker is able to perform traffic correlation to determine what you're doing. I2P is slightly better in this regard, but unfortunately until a real mixnet solution like Nym becomes viable, there's always some level of risk.

>>16971 >with enough nodes, an attacker is able to perform traffic correlation to determine what you're doing. I2P is slightly better in this regard Tor directory severs can (and do) remove malicious nodes from the network. I2P is fully decentralized so there's nothing you can do against malicious nodes taking over.

>>16974 How would they know that a node is malicious? By passive logging and sharing I mean.

>>16991 >How would they know that a node is malicious? They test exit nodes to check if they strip ssl or redirect dns. And when lots of nodes all join at the same time or have very similar configurations (like operating system and torrc and stuff) then the mailing list has a little panic.

Is there something like "Tsun Tzu The Art of War" for information warfare/infosec/opsec/osint? Any good books on any of those topics would be appreciated.

>>11715 Hey, I've recently been brushing up on security by going through the portsperson whose company I enjoy course, which from what I can tell is solid and is from the same guys who made the The Web Application Hacker's Handbook, but my issue lies in tools. Because everything I do is through the burp suite. Should I continue doing their exercises, or should I learn something more bare bones to get a better understanding? Or put other way, how much difficulty will I have in using other tools besides burp?

>>17004 So all they need to do is observe and log traffic, not tamper. And slowly trickle in new nodes amongst various popular hosting services. If you think intel agencies aren't already doing this, then I've got a bridge to sell you. Another issue with Tor nodes is lack of geographic diversity. By far the largest concentrations of nodes are in the US and Germany. I2P is better than Tor, but is still susceptible to Sybil attacks. >>17130 > portsperson whose company I enjoy course Is this some weird word filter?

>>17147 it's portsperson whose company I enjoy. I'm guessing if that gets filtered, replace 'person who's company I enjoy' to n-word but replace n with w

>>17154 You could also check out websploit. https://websploit.org/

not sure if this is the right thread to ask, but what would lainons suggest to someone who wants to get into cryptography? I'm a fairly competent programmer, but I don't know soykaf about advanced math stuff beyond like formal logic and some set theory if those count and want to learn cryptography to try implementing some algorithms in common lisp everyone seems to just suggest Applied Cryptography but should I study discrete math before trying to get into cryptography?

>>17162 >I'm a fairly competent programmer >should I study discrete math You should already know discrete math... Yes learn discrete mathematics first, do yourself a favor and learn calculus. This is a field where you actually use it. That goes for pretty much everything mathematics. You can just really learn anything. You'll want to look into Number Theory as well.

Is there any point in salting passwords in a service if you know for a fact the clients will only use strong passwords (512 bit)?

>>17288 Yes, it's called defense in depth. Unless they'll always generate passwords straight from a CSPRNG, there's always the possibility of an insecure password/hash collision. Remember: users are prone to make mistakes, and your system should do its best to account for that.

does it matter which filesystem u use on linux in terms of security? i don't mean securing data against curruption/lost but rather vulnerabilties. or should one just use simplest one so probably xfs ?

>>17301 i think your vulnerabilities are usually going to be on layers above the file system

I want my ISP to see normal traffic with porn, kitties, and social networks, and not look for suspicious activity in it. Where can I get plausible browser histories to mimic such behavior?

>>17322 Browser histories are local. If you want your ISP to see certain kinds of traffic, you will have to create that traffic. >and not look for suspicious activity in it They will see any suspicious activity regardless of your normal traffic. The normal advice is "use Tor", but in your case you should learn the absolute basics of how the internet works first.

>>17328 OK, again. My ISP can't see most of my traffic, partially because of Tor. So I want to imitate usual behavior with script checking weather and kittens. That is why I need some actual browser's history to work with.

>>17329 Okay, again, you don't need a browser history, you need something that is actually generating requests for the cover traffic. Browser history is just a local log file that tracks what pages your browser has visited. Words have meaning. You might be able to automate browsing to different sites using a headless browser like Selenium, but unless you're changing things up from time to time then it will be pretty easy to recognize the same patterns of requests to the same sites over and over.

My computer has been making requests to subdomains of a website in the form of "a23-202-xxx-xxx.deploy.static.akamaitechnologies.com" where the x can be any number. Running 'ss -par' showed me that dhcpcd opened it. However when I tried this later I found 2 different addresses in the above format opened by my browser. Is this something standard or should I be worried?

so, i checked the tor logs and i saw this. i googled the issue and a link on reddit that better represent my case (https://old.reddit.com/r/TOR/comments/lg668m/received_warning_guard_is_falling_an_extremely/) said that it might be a MITM attack, as well as connection issues. i tried pinging 1.1.1.1 with and without proxychains and i received 0% packet loss. this is the only time i saw such error. 1) what is the probability of being only a connection issue or a MITM? 2) in the two recent cellphones i had, the connection restarts at random times. i am not the only who uses the network, but this only happens with me. does it have to do with a mitm attack? i only download apks at apkpure - that i remember checking one of the apks on virustotal - and fdroid, as well as pictures on mainstream sites, and in both phones i installed the same applications, - hacker's keyboard, telegram, simple gallery, those stuff - so if it is a MITM attack it must be a very skilled hacker that managed to invade a mainstream site - like wikipedia - and pwn it's users. 3) most of my traffic is over tor. if it is a MITM attack, does the mf can see my traffic anyway? 4) is there something i can do besides telling my ISP? i am not the owner of the network.

Does a masters degree (ie C a r n e g i ) help aid in one’s knowledge if I’m already autistic enough to read and learn all the material in cyber security out there? I feel like it’s a waste of money and someone having a degree in something like that opens you up to falling to osint lookups by bad guys; like someone knowing you know cyber security by contacting universities. Any opinions?

what's the best way of creating a lookup service for downloaded databases? grep takes a good minute when in the tb range

>>17443 > downloaded databases > not using the native query language

>>17443 sql is gr8 m8 i r8 8/8 learn sql k8?

If there is an encrypted message that uses a block cipher, a byte is changed within one of the encrypted blocks, and a skilled attacker falsely believes the message isn't corrupted at all, does the whole block, and only that block, become undecryptable if the attacker has the capability to perform a successful key brute-force attack? (it's an academic question, I'm not rolling my own crypto lol)

What kind of tech do I need to get into security? Like computer/laptop specs; type of phones; is a gpd mini worth it, etc

>>17443 >>17461 To clarify, searching downloaded breaches / combos. I would just combine everything and sort alphabetically but that would only work for looking up emails or whatever happened to be the first item in the list. Some local version of however weleakinfo dehashed etc do it.

>>17477 try xsv if sqlite still seems bloat and you want keep plaintext run xsv index list.txt to build the index for fast access

How to secure my linux distro more assuming I don't just run random binaries and other pebkac activities? I'm also thinking of doing some wine/vm and how do I isolate it from internet connection? How to isolate certain linux programs I've installed from using the internet? Is setting up a fake global proxy with no internet for the system the way or there's a per-app internet isolation solution on linux without relying on appimage or similar?

If X.org is a rootkit that allows literally any app (as far as I unserstand) to log any keystrokes then what is to be done about it? Wayland will hopefully fix this but for now, how does one protect against it? Also, is Xenocara also affected by this?

>>17483 The only ideas I have is that maybe firejail can limit internet access (i don't know if it can) or you can setup a fake proxy in proxychains-ng and run apps through that

I have to study a few law related topics for my school. I get links to government .pdf's, is there a chance for soykaf in there. Also on the law website you can chose to look it raw. Is copy pasting a safe thing to do? I do block trackers. But still what if bad JS. (Some sites disable right mouse button) Would the website notice JS blocking?

Anyone have guides on opsec for non tor darknets? i2p freenet etc

>open my web browser (firefox) >computer instantly makes 10 different connections what can I do to prevent this? i already use the usual extensions like ublock, privacy badger, Flagfox geotool

>>17497 about:config setup, either copypaste spyware neocities part or arkenfox (for more tweaks), the latter doesnt disable goolag phishing/malware/downloads (((protection))) so you have to toggle them manually or use icecat also, remove privacy badger, useless. Realistically ublock origin should be the only thing you need, look ip medium/hard mode un ubO wiki on github too

Is there a difference between KVM and Xen hypervisors in terms of features/support? Are they both suitable for reverse engineering and malware analysis?

How much Bluetooth's security is worse? I'd got a TWS and Smartwatch, But I can't use it now cuz of concerning about security. Am I too paranoid?

Does removing "default" and "supl" from APN type settings on a smartphone disable GPS functionality or just make it less accurate at least? Couldn't "default" be replaced with something like "internet,mms,hipri,fota" and "supl" removed without breaking other functions than GPS? Or is this entirely dependant on the network on what can be accepted to work?

>>17554 I think APN is more of a SIM dependent thing which changes settings per SIM and typically do not influence your GPS setting UNLESS you have network location services or precise location turned on which require APN data, WiFi, and Bluetooth. The APN setting also depends on the cell network, some network can just ignore all your changes and doesn't read anything in there anyways, some have specific settings for specific use-cases and actually read the APN setting but the APN is for cellular network. Although I could be wrong as I think I remember seeing GPS settings chucked in along with the APN settings in java dumbphones. https:// productioncommunity.publicmobile.ca /t5/Using-Your-Service/Does-GPS-use-data/td-p/56424 If you have a "java S-series/S40 smartphone with gps", there should be a option with the GPS to be turned off somewhere around the internet settings (or in the browser app). These older phones typically do not keep those wireless turned on for longer, and even gprs/3g usually times out after 30 seconds of inactivity. Actually new smartphones? You're probably out of luck, as apps can turn GPS-on on its own, mystery phone calls can also turn on data/gps/bluetooth on its own and install a zero-click backdoor, or even the fact that your new smartypants phone has built in Exposure Notification which will occasionaly turn on wifi/bt/gps ~ sending out and reading in stray beacons containing information of devices that had been around you or your information along with your locations, and even receiving information from other devices the same way.

>>17497 librefox with disabled safebrowsing (about:config, search "safebrowse" and tick everything boolean to False) I think there's still something deep in the code which you can't change with aboutconfig/userjs which now exist in firefox (pic related). "f.s.s .m. c.q jz 9zk" is usually a "find and replace" method of debotnetting a code which is also how ungoogled chromium does things because the domains are literally hardcoded into the official source. even that blob debian chromium accidentally downloaded once (hotword or something microphone related) which I think is detected as malware by clamAV (which rightfully IT IS one). librefox is not perfect though, I've had a few early versions still connecting to amazon and mozilla location services for some reason but that was some 10 versions ago. >>17513 just install librewolf which is firefox with arkenfox but I think it's compiled by a build bot so maybe occasionally there will be telemetry or harmful stuff that will slip past through it and arkenfox isn't necessarily a "nightly" project. since these aren't trustable some few 10 versions ago, I recommend using wireshark to truly monitor everything. so far ungoogled chromium hasn't done unintended behavior maybe it's more mature than librefox or the fact that there's actually more telemetry with vanilla firefox than there is with vanilla chromium which will also end official support of sync for unsigned builds which further makes it much better for the linux community (and security wise better for goole).

>>17556 SUPL in APN settings stands for Secure User Plane Location which apparently has to do with the GPS somehow. I'm not sure based on what I read from phrasing but I think while it probably won't prevent apps turning GPS on or prevent the network being able to access coordinates. Rather it sounds as if this being removed would prevent apps from retrieving the GPS coordinates the network aquires from the phone which would be a big improvement. Default is a general APN type that covers everything supposedly so that probably also includes the SUPL function so I was thinking maybe "internet" as a replacement may not include supl but I can't be sure as this APN type is harder to find info on. Unfortunately I know it may be possible "internet" could just be another version of "default" in which "supl" would be included if that were the case, that is if "internet" is even a real APN type but Ive seen various sites mention it here and there but not all of them. Or perhaps I am still not quite sure what supl is actually supposed to do but this is what makes sense to me what I was able to deduce.

What's the point of SATA security passwords? Is there any benefit in setting one for your drive or is it just security theater?

>have ISP install your network >ISP's router with it's default settings >have GNU/Linux installed in your PC >standard network setup with wi-fi >default DNS provider Is there any /sec/ recommended path or source on how to secure my home network, lainons? Would really appreciate some tips on this. I want to configure a firewall and keep my privacy/security as much as I can but don't know where to start and don't know some reliable technology I can trust. Is it enough to configure ufw in my main desktop or do I need another machine to run the firewall so it can wrap all the nodes? I'm lost, frens.

>>17606 Ufw on your main desktop is ok if you don't plan to use any other device and should be considered as bare minimum. Can you do anything to the router admin interface or is it locked down by ISP with their defaults? Do you use or expect to use any other network devices in your home network such as phone, second pc etc.? One general tip, if you are unsure of ISP provided hardware, then you might want to start with getting your own router or even some old PC with additional network card and pfsense, opnsense or one of many other router/firewall oriented distro. There are also commercially available router models that take well to flashing openWRT/ddWRT on them to replace vendor soykafware. Whatever the choice, connect it to ISP and shift border of your home network to this piece - other devices never connect to ISP router directly. Enable NAT,iptables on your bastion router, ISP should only see this one device communicating directly with them. Having set boundary for your home network, you could next set up piHole as internal DNS to keep tabs on queries your devices make and as a nice bonus cut out a lot of ads with built-in blacklists. It should be a decent upgrade and scale well in case you add another pc, some printer etc. to the home network.