Simple Security Questions

This is the Simple Security Questions thread for simple questions. If with a simple question and without a suitable thread already existing, post it here and someone will probably try to answer it. Remember to do some research before asking questions. No one wants to answer a question that a simple search can already resolve.

>>18084 How easy is it to do exploit development on OpenBSD? I'm trying to go through the ROPEmporium challenges right now but it looks like they weren't compiled for OpenBSD. Should I finish teaching myself the basics on Linux or dive in to OpenBSD?

How to embed a script in a PDF so that it is automatically executed when file opened in a browser? I found https://bitmiracle.com/pdf-library/ but it seems strange to me to use an entire library to just modify a file. And even so, I would have preferred python over C# or java.

Is it better to only have one account on a desktop or to make two accounts so the main one you use does not have administrator privledges? I've heard arguments for and against having multiple accounts. The argument against I've seen claims it's a larger attack surface and the argument for is not being admin limits what malware can do.

>>18342 >Should I finish teaching myself the basics on Linux or dive in to OpenBSD? I would learn the basics of Linux first, unless you have a strong desire to switch to OpenBSD. If you are looking for resources, read https://linuxcommand.org/tlcl.php (but keep in mind that GNU programs are a bit different to what *BSD has). >>18368 >Is it better to only have one account on a desktop or to make two accounts so the main one you use does not have administrator privledges? Yes.

>>18369 Sorry, you may have misread that. I'm pretty good with the command line. I was talking about exploit development.

>>18369 >Yes To which? Can't have it both ways.

>>18371 It's better to have multiple accounts.

Are DNS queries hashed? If they were then if queried a non-clearnet site (e.g. bad browser configuration) the server wouldn't know which site I wanted to visit

Are there any hopes for someone who is trying to apply his infosec only with an android phone? I am too poor to buy an computer. I have tried to compile libdaq for snort, but it returned an error. I looked up fail2ban, but it adds rules to the firewall. Will anlinux or limbo x86 help?

SWIM wants to buy materials that are associated with criminal activity and has no friends, are there any mail forwarding companies safe to use for this?

Is there any tools you know of to check for changes on in coreutils or something similar on linux? After hearing about some malware that replaces cat with a payload. I imagine it would work like this: you first run an initial check where it logs the hashes probably with signing of some kind to prevent modification. Then it later you would run the command to check hashes for all the files with that hash. I could probably write a script to do that but maybe there would be an existing tool, and it would do things better than I would. I think freebsd has something similar.

>>18509 Tripwire ossec auditd rpm -Va term of art is hids

noob question how should I encrypt my drives? LUKS - it won't work reliably on windows Bitlocker - microshit and won't work reliably on linux veracrypt - ??? works on both but there is so much shilling and on the other hand, shilling against it. used it but had problems (sometimes couldn't access drives after unlocking, very slow) everything else - can't trust it, reviews are all from suspicious websites owned by big companies So how can I encrypt my storage, I need both, working on windows and Linux, but it would be enough if it works only on linux and also VMs with linux run on windows Pls help

>>18559 If you need block level encryption, veracrypt is your only choice. Traditionally, FDE has been platform specific, and you used whatever is on the platform. (I wouldn't even consider non-foss platforms). You can also consider file level encryption like GPG/PGP which is cross platform. You can encrypt ISOs, Compressed Container Files (bzip,gzip,zip), even just .img. Disadvantage is decrypting before use. Linux has encrypted file systems that may work better than LUKS which relies on kernel support, but I don't know because I dont use Windows or WSL.

what are you using these disks for? i just use luks on linux and windows' built in encryption thing on my windows drive. however, this obviously only works because i exclusively use windows for gaming so i dont ever need to access files from one OS on the other. bear in mind also that you can mix and match to an extent. it rarely makes sense to do so, but if for instance you rarely use windows and just need to occasionally access files from your linux storage partition you could probably get away with native FDE on your windows system partition and luks on the storage partition, since presumably the buggy windows luks drivers would be less of an issue if you arent relying on it to keep your OS functioning.

>>18559 >bitlocker most likely spyware, 100% proprietary >LUKS good, but not quite as secure as >veracrypt this is the best solution there is and the closest you can get to "unbreakable" encryption. Also, as pointed out by >>18560 you may want to consider file encryption, or folder encryption even with something like Cryptomator (I think this is a fork of Veracrypt) which is very easy to use.

>>18562 >>18561 >>18560 thanks, thought maybe there are some less known alternatives that are better, but seems like I will have to stick to veracrypt, if I want to encrypt a disk which I want to have access from both, linux and windows (it's a pain to reboot every time to take one file from a disk that is encrypted with another software) main reason is just paranoia, that if someone steals my pc I don't want him to access my personal files (i'm defenseless against light emitting people, so that's not the reason) file encryption would be nice, but sorting every single file (if to encrypt or not) would also be a soykaf job and decrypting whole archives just to take one file also seems retarded vc was the recommended one and I think thread is over, thanks

What's the point of encryption if you decrypt the drive on an insecure OS?

>>18564 OP is obviously not afraid Microsoft is spying on him, or that the government would use Microsoft to spy on him. Its just a different threat model - although I feel the same way.

>>18562 >>LUKS >good, but not quite as secure as >>veracrypt Not trying to be an asshole, but do you have any evidence to back this up?

>>18567 honestly no. It's good to be skeptical and I apologize if I'm being misleading. I am under the impression that the consensus is that LUKS is not quite as secure by default as Veracrypt. I have also seen articles describing how to break LUKS encryption in its default settings https://blog.elcomsoft.com/2020/08/breaking-luks-encryption/ Thanks for pointing it out.

>>18570 Did you read the article? It's just a brute force attack on the password. That might be more feasible with LUKS than with Veracrypt but that's only because Veracrypt has to try every algorithm and configuration combination it supports while LUKS just stores them. It's not a weakness in LUKS.

>>18559 Cool FAQ on Cryptsetup/LUKS >https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions >Abandoned Attempt to get LUKS on Windows >https://github.com/t-d-k/librecrypt >>18570 >>18570 >>18573 All about threat models. LUKS doesn't do hidden partitions for reasons explained in the FAQ above. Veracrypt does for its own reasons. Neither is 'insecure'.

>>18573 I did read it. The idea I got is that when using default settings Veracrypt might be 'more' secure. It's all relative.

>>18564 Well, but if i encrypt the drive of an unsecure OS and then decrypt it to boot, microsoft can spy on me either way

>>18577 The article is a manual for bruteforce software, not a description of particular LUKS vulnerability, it doesn't even give calculated expectations for password lengths. I checked other articles on their password cracking software EDPR, and none of them mention password or hash lengths, just some silly marketing graphs For hashcat there are at least some sparse benchmarks for given applications and password lengths published, e.g. estimates for WPA2 handshakes. In the end, it's that some people choose very soykaf master passwords. >The user’s existing passwords are an excellent starting point. These passwords can be pulled from the user’s Google Account, macOS, iOS or iCloud keychain, Microsoft Account, or simply extracted from the user’s computer. The user’s existing passwords give a hint at what character groups are likely used Using long 7+ not easily recoverable from you through social engineering words-long passphrase and/or destroying the key file with bootloader is secure against brute forced. You really need to memorize a few master passphrases, the rest of so-called "passwords" could be arbitrary strings of maximum lengths allowed by online services and retrieved from encrypted database password manager.

Say I want to hack coupon codes and I know said website is hosted on Wix and has WixStoresWebClient as it's source, how can I do it or where can I learn this?

How about `Tox`? Moving to Tox from xmpp is fine?

Do we have any p2p encrypted video calls alternative to Tox? I have tried Jami (ring) and it is pretty bad. Also xmpp client Dino somehow implemented calls in nightly build, but devs still testing it for more then a year.

what wifi scanner software do you guys prefer using?

Is it possible to completely stop a glowphone from calling home using Faraday Cages? Is aluminum foil enough?

>>18665 don't ask; test. If you are concerned about trying to block specific frequency ranges, get a radio that can work in those ranges and just do the experiment. Its not that hard. Or throw a phone in the area and try to call it from the outside. My experience is that lining an area with single ply aluminium foil has a detectable but not incredible effect on wifi and cellphone signals.

>>18665 >>18666 I remember watching a repairman video on youtube, he checked if phone was sending strong enough signal when making a phone call with RF power meter built into front face of adjustable power supply. So it's either building a crude device like this, or an IMSI catcher from SDR dongle and computer with BTS software. This faraday bag (e.g. not a cage since cage should be grounded) thing seems to be a long running urban legend for which I have not seen any technical proofs, only mentions in fiction literature, artist performances, forum discussions and questionable products offered online. I think Wikipedia is the most any layman would go for sourcing information, and since it's written by amateurs, any hard topic ends up unsolved for decades: https://en.wikipedia.org/wiki/Talk:Faraday_cage

>>18697 Fond the power supply, seems to be clone of other clones: EXCEL PS-1501T SUNSHINE PS-1501T YIHUA PS-1502D

>>18084 Hello anons. I have lost access to an alternative discord account. I changed the email to a keyboard smash@gmail.com before logging out. So, unfortunately, I'm unable to log back in and delete it myself. I tried contacting both discord's security and support teams through email. Security I haven't heard back from yet it's been five days, and support ghosted me immediately after they heard I don't have access to the email the account is currently registered on. What do anons? I want my data deleted for security purposes.

how can i impress hr/internship interviewers? i found out those soykaf-ton books i’ve read and experimented with are not enough. any projects, low-level certificates, anything?

Highly depends, I don't think there's a straight answer. But the best advice I can give you is to research a bit about who you are trying to get a job from. Look into what they are looking for, study a bit of whatever specific field you will be trying for and don't forget, even if you will be having a technical test of some sort, you're gonna be dealing with HR people most of the time, what they are going to really be trying to find is your capability to work with others, adapt to change, etc. Certificates and degrees are only useful to get noticed in your curriculum, to get to the interview part, but they won't land you a job. They are straight out requirements for some jobs and you won't get called for an interview if you don't meet them, but since you asked to deal with HR people I'm guessing it has more to do with the interview than with the curriculum. There are ways to "circumvent" the curriculum part too, but I don't really know much about it, I'm sure some other lainon can help with that better than me

>>18708 Give up. Discord wont help you because theyre too busy being furries or something.

Guys, I opened a link cause I thought it was a notification about a message from a site I'm registered on. It simply opened a pdf in my browser. I didn't click further than that. I have pdfjs.enablescripting set to false in my Firefox configs. Is there a way they could have bypassed that or something? I'm quite a bit paranoid as I got contacted from my internet service provider that someone tries to sniff data from my network before. The message had the Mac address of the laptop that was attacked and it wasn't mine. I checked later after the call. It was my network provider though cause the number checked out and everything. I'm starting to get paranoid.

>>18807 (((they))) are after you for sure

>>18808 Nah, it's not that I'm paranoid ofrglowies or whatever. It's just that there are frequent attempts at my network to access info. Most seem to be because my brother watches some porn websites since most of these attacks came from sites having sexually related words in their urls. I checked these sites with Tor though and they are empty. Unless that isn't his laptop? His girlfriend pirates games, so maybe that's where these issues arise from? I'll guess I'll dig deeper but for now it seems everything still is fine.

What is the best configuration for a Veracrypt volume? Hash & crypto algorithm, etc.

is getting dns over tor or i2p a good idea? I know acetone.i2p has a dns resolver, but I dont know if i can run a i2p node constantly. Tor seems better, but may be slower. Cloudflare runs a resolver over tor, maybe that would be good bc a major brand is running it, rather than acetone. I've tried their yggdrasil resolver and it was very unreliable, not sure if that was the resolver or yggdrasil itself. Any thoughts?

>>18848 >a good idea? Depends on what constitutes good. If you mean more private, then yes. >Tor seems better, but may be slower. Tor is meant for low latency routing. It generally uses fewer intermediate relays than I2P, so it's likely faster. Be aware that when resolving a domain name, you tend to get the IP of the physically-closest option. That's for speed. With both I2P and Tor, they can no longer do that (within reason). Don't expect your normal connection speed after resolving a domain name over Tor.

>>18848 What are you trying to achieve by resolving DNS through an anonymity network and then making a direct connection to the IP?

What is the safest way to mount a usb drive? Any good tools on linux to avoid autorunning stuff?

Holy soykaf I'm so fuarrrking covered in AIDS. Discord is flagging every fuarrrking alt account I make for sms verification now. What's the best way to buy SIMs in person to get numbers for this soykaf? Can I just do some programming and use an API without getting VoIP numbers?

>>18882 just break it open lmao, if the internals look like a flash drive, it prolly is one

>>18084 What mecanisms do webBrowsers use to make sure that only a website can read the offline stored cookies/cache/metadata for that website? (example, only github.com can read github.com cookies by default). is it encryption? or also something else?

>>18929 The browser just promises to not give the data to other sites. >is it encryption? ??? Of course, not.

>>18713 Certificates are a pretty big deal to employers I think. It's basically stamps to prove you aced a test but it shows them you at least memorized something useful.

Don't know if this is a simple question but I desperately need to know if I/my company've been pwn3d. We recently (had to) let a scumbag of a third party systems' representative do a (rather anxious and hurried) "full system update" on this management software. It's a soykafty program written in VB that the users and company owners love to use due to habit, besides the incredible amount of bloat, errors and inflexible bureaucracy that grows harder every time this asshole "updoots" his crap. So, I had to give him access to a computer so he and his helper could do it, but I couldn't follow through and monitor him because I'm the only IT guy in a fuarrrking 150 PCs company and soykaf was going to hell at the very time. I have reasons to believe he put a back door to our database or at least in a station to monitor and fuarrrk around with our activities. He was personally in the company fiddling with some PC's, under the pretext of helping, but the dude is clearly the edgy coke-snorting control yuppie type. It's impossible to trust him. Something weird happened tho. A user who had personal problems with this guy in the past had her permissions all erased 3 times, exactly in her peak day of month service. I'm sorry if this seems too much of a newbie problem **it probably is** but I've got this overwhelming job with little experience and I can maintain the soykaf working basically rage-fueled, but I have no time left to analyze this properly and I'm expecting some shedding lights from you lainons. I literally can't sleep at night anymore. I know my OSINT knowledge is rudimentary but I'm trying, I have a hardcore job and I'm currently attending college. I want to git gud.

>>18713 >how can i impress hr/internship interviewers? HR people don't usually even know much (or anything at all) about the field, instead they know all the buzzwords and some certs. If you want to get a job that is related to computer security, you really should study networking. All computer security/pentesting companies prefer people who are either sysadmins or people who have a degree. >>18940 >Certificates are a pretty big deal to employers I think. However, try to pick the cert carefully. It's important to keep in mind that most employers won't hire you if you only have a cert, but they probably would hire you if you only had a degree. >>18943 Read logs. Also, check if information has been scrubbed. Are the entries that should be there but they aren't there? Check list of user accounts; Are there any new accounts that shouldn't be there? Is someone using an account while the person who it belongs to isn't working? Check shell history files, if there are any. Check if there are any new firewall rules! Based on your description of the dude, I think he isn't all that knowledgeable and I would guess that he would have installed a VNC program or TeamViewer and use that as a backdoor. >I literally can't sleep at night anymore. You need to fix your sleep as soon as possible, otherwise you might lose your health. idk, perhaps you could try to ask a GP for a Zopiclone prescription? >I want to git gud. When you have time, I recommend you read the following books: * TCP/IP illustrated volume 1 * Gray Hat Hacking * The Linux Command Line: https://linuxcommand.org/tlcl.php * Learn Windows PowerShell in a month of lunches (you really want to know some PowersHell if you are maintaining windoze computers)

>>18944 >>18944 I REALLY appreciate your reply, lainon. Thanks a bunch!

>>18943 >>18944 >* TCP/IP illustrated volume 1 >* Gray Hat Hacking >* The Linux Command Line: https://linuxcommand.org/tlcl.php >* Learn Windows PowerShell in a month of lunches (you really want to know some PowersHell if you are maintaining windoze computers) I would also add UNIX and Linux System Administration Handbook by Trent R. Hein, Evi Nemeth, Garth Snyder, Ben Whaley, Dan Mackin to the list. Get the 4th or 5th edition, the main difference between them is that 4th edition also discusses some older proprietary UNIX systems like HP-UX and AIX, but those systems got dropped in 5th edition and the 5th edition instead focuses on GNU/Linux and FreeBSD. I would definitely get the newest edition, unless you are dealing with HP-UX, AIX or Solaris systems. You should read both The Linux Command Line and UNIX and Linux System Administration Handbook because they teach different things. Read The Linux Command Line first. That being said, however, you should began by reading the PowersHell book if you are maintaining Windoze systems. I would also want to make one (tragic) anti-recommendation. Don't buy Absolute OpenBSD because it is outdated. OpenBSD has changed so much after the Absolute OpenBSD book was released that the book isn't simply worth your time or money anymore. For the record, Absolute OpenBSD used to be the best book on OpenBSD. Thankfully, the OpenBSD FAQs are great and always up-to-date.

Anyone here has ever worked with vfs_virusfilter? I'm using samba 4.13 and can't make it work with clamav on access socket.

Did anyone here try using a NFC reader device? When I put the card in the reader, the light turns from red to green but it should be blue and I got no information from the card so I think the reader does not read the NFC of the card properly and I've tried a lot of different cards. My NFC reader is a ROCKETEK RFID NFC.

I don't know if this is a /sec/ question, but here it goes. Is there any way to set up a keylogger on a PC that can register keystrokes from remote access? I want to monitor exactly everything my 3rd party friends do in my PC.

Noob here looking for a secure laptop. I understand both Intel and AMD have backdoors since about 2013 in the form of windows ME, a separate chip at the physical level that has direct access to blah blah blah, What laptops are safe for punks that want to marry a machine and put on some secure distro? It's so hard to Google something like this because on the clearnet it seems as if this backdooring is obfuscated.

>>19014 >if you don’t explain exactly what you are securing against and how you secure against it, the answers can be assumed to be: “bears” and “not very well”.

>>19014 >windows ME *Intel ME or AMD PSP. >What laptops are safe Anything that can be librebooted and me_cleaned. Otherwise, you should buy a ARM-based laptop.

>>19029 >use tor to cheaply buy insulin or other illegal substances And what makes you think law enforcement has access to a backdoor inside ME?

>>19046 F u, glowie >>19043 Tyvm. Purchased a Thinkpad x200 with libreboot thru a reputable source.

>>19052 I'm just trying to get you to engage some critical thinking instead of running on memes and fud. Anyone with any C ability can write a backdoor coreboot module. So buying a preinstalled libreboot laptop is actually putting you at higher risk. And also if you think your CPU is backdoored then libreboot can't do anything about that anyway.

>>19055 Sorry friend, I'll assume you had the best of intentions. My strategy will be to purchase a libreboot pre-installed rig, then re-install libreboot. That should guarantee the authenticity of the bootloader + ensure the laptop is compatible.

Shower thought, how does Signal's synchronization between devices work? Signal Desktop can still recieve messages when my mobile phone's offline, and the other way around. That means that the devices do not forward the messages to each other, ergo, Signal has to keep the encrypted messages on their servers, right?

>>19087 https://www.signal.org/docs/specifications/sesame/ tl;dr when you message someone, you open an active session for each of their devices and every message you send is actually sent separately to each active session. The encrypted messages are stored on the server until they're delivered to the device or a set time has passed and the server deletes them.

What's a good list of public proxies/how can i search for one? I'm trying to do some web-scrapping but my IP keeps getting rate-limited.

>>19109 how are you getting rate limited? what kind of country enforces DPI and checks if you're content scraping then proceeds to block? any hint if you mind? I think that's more of a thing when your IP is on a blackhole list or maybe even p2p list. check your IP if you're on one (e.g, abuseipdb, p2p blacklists). sometimes the rate limiting is also only limited to cloudflare, you can check speed.cloudflare.com to see if you're actually rate-limited by them, happens a lot actually, they have anti-spam or detection bots that just overreacts at the slightest "advanced" browsing behavior and then they proceed to randomly out of nowhere decide to rate-limit anything cloudflare-protected domains you browse (considering you ran a bot scraper it's probably why). I guess you can just use cf's free vpn. most proxies are kinda lame these days unless it's an abandoned host that you find and make your own ;-)

>>19109 If you are using wget, you should set --limit-rate=512k and --random-wait

>>19109 I only know that ProtonVPN offers a free plan. But I don't know how trustworthy they are.

Is there info on how much does Botnet 10's cortana search spies on you? (I only know that it spies on you, but I don't know exactly how much) What about the artifacts that using the cortana search leaves on your computer? These artifacts could be also used by attacker. >https://github.com/ForensicArtifacts/artifacts/blob/main/data/windows.yaml >https://github.com/Bhupipal/Cortana-Forensics

>>18084 What's a decent DNS Server to choose from?

>>19168 >What's a decent DNS Server OpenNIC https://www.opennic.org/

How to send money from crypto to fiat? I understand how to withdraw money in cash, but how to use it if I want to buy a car, a house? Im from EU

>>19192 Sell your crypto to others, use something decentralised like bisq or sell to people cash in hand if you can, then exchanges which don't require id like localmonero.co, and your last resort is big markets like binance.com

>>19193 I mean if i want buy some big(car,house) i cant buy it from crypto money because goverment ask "wait your salary 500 euro where a from this money?"

have you actually tried to make such purchses and been ruined by the fact that you only make 500 euro ? Very likely at this point your government will expect you to document your cyrpto gainz and pay them their cut. Not too weird to get rich off investments. You just made the right calls.

Looking to become DoD 8140/8750 IAT Level II certified. I already picked up Sec+ and now just need an OS certification to finish up. I was thinking about picking up RHCE. Going off DISA STIGs; Solaris, SUSE, WIN10, Oracle Linux, and Windows Server 201X seem to be what the the DoD also wants and what they want their contractors to have. Are there any other options that might be better? Especially if I don't end up working for DoD?

>>18950 I have, physically, The Linux Bible and Forouzan & Mosharraf's Computer Networks - A top-down approach. I have studied some chapters of them, but to grind the extension of theory before getting into something I could "get my hands on" was too much in my current 'demandy' context. I dunno, maybe I should just finish college before engaging the specific parts. (My course is pathetic tho - it's a meme 2,5 years "cybersecurity" grad. I don't like rushing my studies like this, but I'm already old and hasn't accomplished much) I'll do the Powershell lunch course on youtube then. I need to rush this since it's much needed in my current all-in-one job. Then, I'm going to do step-by-step learning like a human being. Again, I enormously appreciate your reply.

>>18084 Is there any resources on access(2) ? https://www.man7.org/linux/man-pages/man2/access.2.html The man page indicates that it is possible to use the time between the access() call and the open() call to manipulate a file and I'm trying to do exactly that but I'm having a hard time figuring how and the function having a name that's so common doesn't help.

>>19258 If you are talking about the warning under Notes section, I think it's about someone else (user or another process) can chmod (etc.) the file. >resources: Check APUE, and: https://pubs.opengroup.org/onlinepubs/9699919799/functions/access.html https://man7.org/linux/man-pages/man3/access.3p.html

>>19259 >If you are talking about the warning under Notes section Yeah that's what I'm talking about. I should have precised, I have an executable with and effective uid that can read a specific file I want but it checks the rights with access() before opening it when I pass that file to the binary.

>>19260 >>19259 >>19258 Well the solution is very simple in the end, just make a symbolic link to some random file you have access to, execute the binary on the link then change the link to point to the file before the binary gets to the open() function. I feel dumb for not finding this.

Is there a working alternative to proxybroker repo?

I'm about to install opnsense on an old scavenged HP desktop. 8GB of the messiest RAM and a 3GHz core2duo. Probably not the most power efficient. There is a lot of reference to HP remote management and intel ME in the BIOS, which I updated to the latest from 2017. If I avoid using the onboard NIC and use 2 other pci NICs does that reduce vulnerability to HP and ME remote management? Any best practice guides for leaving a dedicated LTE lineage phone connected permanently as a data backup?

>>19267 The phone would be usb tethered.

So I got an adapter, ran kismet, and after a few hours of passive monitoring I've captured some handshakes. What's the best option at the moment for hashing the handshakes files? I don't want to upload them to an unknown cloud server and there's no processing power here to run hashcat. maybe the best option is to just get a cheap ex mining card from ali and hash it myself?

>>19265 replying to myself here...installed proxy-scraper from it's repo it worked as expected.

>https://darknetlive.com/post/psa-security-vuln-in-tor-browser/ Is Lainchan safe?

>>19369 >ensure you have JavaScript Disabled in Tor Browser at all times, as always Yes.

Does anybody know if there is any search engine that ignores robots.txt? I wanted to use "google dorking" to collect info about a website, but it turned out that said website has blocked web scrapers by the use of robots.txt, so there are no logs to "dork out". Unless I can find one that ignores this nonsense.

Noob question about basic encryption and backups: Since now I'm using a laptop, I'm trying to learn a thing or two about infosec. I'm using a Linux distribution encrypted on a LUKS drive, and I keep my bigger files on an external LUKS drive. This is out of fear that someone steals my laptop or drive while on public. I'm not some hacker, activist or lawyer that fears some LEA, just an average joe. I'm also using pass (https://passwordstore.org) only on my laptop (I don't trust my phone that much) for managing my passwords and accounts. It requires you to use a GPG private key and encrypts every file that has a password stored. As a backup for my regular files I'm just backing them up on an unencrypted external drive which I try to never move or take out in public. I stored all my passwords (encrypted with my GPG key using pass) and my GPG keys (which need a password to be used) in plaintext on a 7zip file using AES256 encryption and a strong passphrase. You can't see the contents of the 7z without first entering the right password. I saved that file on a LUKS encrypted flash drive in case something like loosing my laptop happens. Would it be safe to store the AES256 7z file on https://mega.nz? Can you provide any advice or point out things I'm missing when it comes to this setup and making backups? (Thanks for taking the time to read)

>>19412 >Would it be safe to store the AES256 7z file on https://mega.nz? >Can you provide any advice or point out things I'm missing when it comes to this setup and making backups? I would use GPG to encrypt the archive (or .tar file) with --symmetric key.

>19267 Still looking for answers on this lains, there's nothing about best practices for USB tethering a dedicated lineage phone out there. Whyyy are seach engines so soykaf now? Where should I be looking, or asking?

>>19413 Thanks lainon. I'll use --symmetric. For anyone interested, I read about it here: https://manpages.org/gpg https://tutonics.com/2012/11/gpg-encryption-guide-part-4-symmetric.html

>>18084 Not sure if this is simple enough to ask in the simple questions thread, but it felt very /sec/ and wasn't sure if it merited a thread. I'm trying to set up a VPN so I can talk to my home network on my mobile devices (phone + laptop). I'll use OpenVPN. I have a VPS which the OpenVPN server will run on, all my physical devices will talk to it as clients. I hamfisted my way through this process in the past and had a working VPN which did the above, but I didn't really get the networking behind it. I'm mainly a DSP engineer with little networking experience. I want to actually understand the networking and security behind what I'm doing. Most of the resources I've found through googling are either one-shot tutorials that get you set up but still leave you clueless as to what you just did, and thus less confident that your soykaf is secure. I don't have time to RTFM for all of OpenVPN but I'm willing to read through relevant sections if it's needed. Basically I'm looking for a proper guide which starts with the goal of setting up a VPN between your clients and explains what you're doing as well as the security measures taken. Last time I did this it felt like I was writing a bunch of incantations that magically made my computers talk to each other over the ether, help me rectify this

>>19538 https://dope.gay/lain/net-diag.html

What's a good usb 3.0 wifi dongle that supports injecting frames and ap mode? >>19538 If you don't have the time to autistically dedicate to it, I suggest giving up on understanding openvpn. Just use the setup script from github and move on to something else. Do you absolutely have to have it to talk to your machines at home? ssh does everything already, and probably a lot safer with less room for error.

If I can understand IKE/IPSec then you can understand OpenVPN, but if you'd rather fire-and-forget then look into Tailscale (it doesn't deduct ur geek cred to not obsessively know the detail of everything you use, honest)

Most secure distro to host some stuff? No systemd BS, openrc only and terminal only, something similar to gentoo or alpine, but maybe there is gentoo already compiled iso or fork that allows terminal?

>>19677 I would use Alpine Linux , see >>>/Ω/56699

>>19678 >>>/Ω/56699 forgot to mention that you can also install the system in a "diskless" mode were the entire thing would be loaded into memory, this would be a good choice for a server that serves just a static webpage, since modifications to the server would be thrown out the moment it reboots, installing software and updating is also no problem since alpine offers utlitys for that.

What is easy way to remove metadata on android devices? people tell Scrambled Exif usually. But it only works when sharing photo with Telegram or Whatsapp for example. I use this on desktop https://gitlab.com/rmnvgr/metadata-cleaner What is alternative of this on mobile?

Is there any danger from browsing non-SSL/TLS sites on Tor as long as I have Javascript disabled? Just talking about getting pwned, not opsec.

>>19699 Don't download or parse any files.

>>19693 https://f-droid.org/en/packages/com.termux/ https://wiki.termux.com/wiki/Termux-setup-storage https://wiki.termux.com/wiki/Package_Management https://linux.die.net/man/1/exiftool

>>19702 oh come on... there must be easy way I ain't doing these command line stuff

>>19703 Usually, metadata is removed from images when sharing them. I believe that's why Scrambled Exif behaves that way. I expected it to provide a save to gallery/files option but it doesn't in my case. Using exiftool in Termux is the best option it seems.

>>19700 >or parse any files Does that include viewing (automatically loaded) images?

how do you get around websites that don't allow viewing from vpns?

>>19709 Use archive.is or web.archive.org via.hypothes.is/example.com could also work. Or try if Tor works.

How do I reset my password on Google Plus?

like explain to retard, how can I use this tool? https://0xacab.org/jvoisin/mat2 I don't know why they make it complicated...

>>19725 1. Install Arch/Artix or Gentoo (1.5 if you are on Gentoo, add the GURU overlay and unmask the mat2 package.) 2. pacman -S mat2 || emerge mat2 3. mat2 file1 You can also use python setup.py install to install mat2 but it's inferior method.

>>19727 I use Debian, "mat2 file" command just works. Thanks man. I don't know why they don't share that information. Basically I learned how to clean exif without installing their soykafty flatpak GUI program today.

Are there any telegram channels where I can find copies of breach data?

Hi, Lain. I've been a dev for the past 10 years, i have a stable job but i'd like to shift into infosec. I don't really have any deadline, so i'd like to learn the fundamentals and make my way from there, what books or courses would you recommend? Right now i'm filling the gaps in my knowledge, starting with computer networks from tanenbaum, from there i might move on to operating system design. But that's just general computer science. If you guys have any recommendations they will be very welcome.

>>19738 Have a look at CompTIA certifications and their requirements. Since you've been a dev for a long time, certification might be a fast and simple way to shift you career path.

>>19738 Some resources I recommend: >https://insecure.org/stf/smashstack.html >The newest edition of Gray Hat Hacking >Hacking: The Art of Exploitation, 2nd Edition >Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software

>>19739 Oh, i'm really not looking to do it fast, i'd like to understand the fundamentals. I'd be satisfied making a career change in 2024. Right now i'm really comfortable, working short hours and making more than enough money. >>19740 Thanks!

would using tor and some bridges be enough to prevent--without some reasonable effort such as a targeted attack--my identity from being compromised on irc?

>>19744 Consider this: Tor circuits have a chance of being correlated if an entity can measure bandwidth patterns of both the entry stream and the exit stream, (any router between you and entry, and machine between exist and host, including host) right? However, a requirement for doing this is to first identify that a stream is associated with a Tor circuit, which is easy because relays are public. Another requirement is that the bandwidth patterns match- if you make a stream of fake traffic to a bridge that you control, the correlation would not longer work. So perhaps if one chooses a private bridge under their control in a less-monitored country like Russia, forces the bridge's outbound traffic through another proxy in the same country, and then out through the rest of the circuit, and if the bandwidth pattern is completely different from the exit stream, your anonymity is now much stronger. If someone wanted to correlate this, they would first have to discover that the connection is 'originating' in [country], and would then have to assemble a table of all data streams going into that country with >= X KB/s to build their very large anonymity set, and wait for this to decrease over time. When it comes to anything spicy you can improve your odds by going into a densely populated area and tunneling through public WiFi with a directional antenna. Out of view of cameras, also keep satellites in mind so make the antenna look inconspicuous from above. Avoiding use of the same IP may also frustrate some correlation attempts and prevent someone from staking out some place to triangulate you.

I'm about to go to a new college and at this one I will be living in the dorms with my PC and everything there. They specifically state that any extra routers or anything like that are not allowed. What can I do to keep my data away from my college's eyes? I'm not very knowledgable about sec, but recently I've become increasingly paranoid about privacy and it's fuarrking me up thinking about this.

>>19754 They're not allowed because idiots keep pointing rogue DHCP servers back into the network and fuarrrking soykaf up. Just don't fuarrrk soykaf up and nobody will know or care if you have a router or switch or whatever to share a wall jack or firewall some stuff. What device were you going to use to keep data away from their eyes, are you trying to do VPN on the gateway for the whole LAN or something?

>>19754 You could use something like Mullvad VPN or ProtonVPN (they also offer a free plan, so you can test it) to hide your online activities from your school (but I don't think your college cares if you browse Lainchan, though). Also, Install GNU/Linux if you aren't using it already (I recommend you start with either Xubuntu or Debian), and use ufw.

>>19755 >>19756 thanks for the replies >Just don't fuarrrk soykaf up and nobody will know or care if you have a router I don't have much experience with routers in generally, I knew someone else who dealt with that before. >are you trying to do VPN >You could use something like Mullvad VPN or ProtonVPN If a VPN is enough, then I could definitely just use that. I have ProtonVPN free version but I never use it because it's soykaf. I have looked into Mullvad but annoyingly they don't accept card payments right now (I have a prepaid on standby). Don't really want to setup a wallet for Monero or whatever or send a fuarrking letter full of cash. >I don't think your college cares if you browse Lainchan, though Well, I like to look at soykaf on onion sites (just privacy autists nothing gross) to try and learn soykaf, and I imagine they would be suspect of Tor connections. The bigger issue is that I torrent soykaf sometimes or get music from slsk. I have paid Socks5 proxies for torrenting and sonarr/radarr/jackett set up and those have kept my ISP away surprisingly, no warnings or anything. I don't pirate prolifically or anything just a few things here and there. >Install GNU/Linux (I recommend you start with either Xubuntu or Debian), and use ufw. I'm on windoze 10 currently like a dumbass but I was planning on setting up a laptop with Void Linux to try things out. Is Void really difficult to setup for a Linux noob?

If a person were to hypothetically want to transfer data from a work laptop running W10 to a usb drive or simmilar unnoticed, what should said person be aware of? Assuming no suspicious processes are seen running and the computer is disconnected from the internet. Hypothetically speaking of course.

>>19757 Sorry for the long reply. >Is Void really difficult to setup for a Linux noob? No, but the installer installs very basic OS (for example no GUI). The Void Linux team also had some internal drama with the original project leader leaving. Also, the musl version is not as good as the glibc variant (as a beginner you really want the glibc version anyway). I recommend you dual-boot Botnet 10 and GNU/Linux. The easiest way is to first use Windows disk management tools to shrink the Windows partition and then just install the GNU/Linux distro of your choice on the newly reclaimed space. Use Rufus to create a bootable USB flash drive that contains your distro. When picking the distro, I recommend you choose something that has had a good track record and something that's popular enough. Void is a pretty good choice, but personally I think it may not be the best choice for a beginner. You can practice installing a distro using Virtualbox VM. If you are new to Linux, I recommend you use this as reference: https://linuxcommand.org/tlcl.php You also should learn how to use NeoVim or Gnu Emacs. The best way to make the choice is to try both of the editors and see which one you like better. Go trough the tutorial (C = ctrl, Meta (or M) = Alt, Super = windows key.): > Gnu Emacs: Start emacs and type C-h t > NeoVim: Start nvim and type :Tutor You can use GNU nano at first but later, you should try both GNU Emacs and NeoVim. Void Linux and Arch Linux (or Artix) are as hard(er) to use than Debian or Xubuntu. I recommend you actually pick either Debian or Arch. The reason for this is that it's easier to get documentation about using Systemd (but using Runit or OpenRC is not hard and there are docs, but Google can find Systemd documentation more easily). Debian is easier to install than Arch or Void, but most power users prefer Arch/Artix, Void or Gentoo (But everyone uses Debian stable on their servers, though). I personally recommend that you start with Arch if you are willing to read the wiki. Installing and using Debian first can be a good choice if you are worried about messing it up or not being able to use the system after you install it. But keep in mind that Debian stable has pretty old packages (you only get security updates but no feature updates) but Debian stable never breaks. If you decide to go with Debian, you may need to upgrade to testing relese (the tl;dr version is that you need to replace "stable" and "bullseye" to "testing" in /etc/apt/sources.list config file). If you decide to install Debian, be sure to use the installation iso that contains non-free firmware: https://cdimage.debian.org/cdimage/unofficial/non-free/cd-including-firmware/current/amd64/iso-cd/ Be sure to set windows to use UTC time before installing Linux: https://wiki.archlinux.org/title/System_time#UTC_in_Microsoft_Windows Some Arch/Artix tips: I highly recommend that you try installing Arch (systemd) or Artix (no systemd) on a VM first. Also, use the rua AUR helper (You need to review the PKGBUILD scripts when installing anything from AUR and rua allows you to do it easily), and install base-devel package before installing anything from AUR. Arch has an installer (archinstall, read the wiki page) nowadays but I think installing Arch manually can be perhaps easier? When installing/using Arch, be sure to look up everything on the Archwiki. The Arch installation guide (https://wiki.archlinux.org/title/Installation_guide) is pretty clear, but you need to figure out a few thing on your own after running arch-chroot. You need to: >set up networking either use NetworkManager (for wi-fi) or (if you have only ethernet cable) just install dhcpcd and run systemctl enable dhcpcd@eth0.service (use ip link to get the name of the interface and replace "eth0" with the actual interface. >enable NTP install and enable OpenNTPD or use the timedatectl command (be sure to set windows to use UTC time before installing Linux: https://wiki.archlinux.org/title/System_time#UTC_in_Microsoft_Windows) >add user account for daily use (don't use Root for normal use!) useradd -m -G users,wheel,audio,video,games lain and set up sudo (read the wiki page, in short you need to run EDITOR=nano visudo to edit the sudo config file and allow your user aka "lain") >install firmware and microcode updates install linux-firmware and intel-ucode/amd-ucode >install grub (the recommended bootloader). Read the Archwiki page: https://wiki.archlinux.org/title/GRUB Also, do not create another EFI System Partition. Use the existing one if you dual-boot! The EFI System Partition is usually the first or the second partition on the disk and it has type EF00 and the size is usually 100-550 Megs and it's formatted as FAT32 (be sure to mount it at /boot/efi before generating fstab and chrooting). After you reboot into your newly installed Arch/Artix/Void system, be sure to read this wiki page: https://wiki.archlinux.org/title/General_recommendations If you decide to install Arch or Artix, here is a relevant copypasta that you should read: https://dpaste.com/5N3CPJ2GX The tl;dr version is that you need to at least install UFW/Pulseaudio and Xorg+DE/WM+DM: #this whole process is similar on Void, too... pacman -S ufw ufw enable systemctl enable ufw systemctl start ufw ufw default deny systemctl restart ufw # Don't enable the service! Audio works fine without. But you need to unmute it first. pacman -S pulseaudio pulseaudio-alsa pamixer pavucontrol pacman -S xorg-server xorg-xinit xorg-xrdb xorg-xset xorg-setxkbmap xorg-xkill lightdm lightdm-gtk-greeter ttf-dejavu xf86-input-libinput xf86-video-vesa feh rofi xfce4 xfce4-goodies systemctl start lightdm.service #test that it works systemctl enable lightdm.service localectl set-x11-keymap eo After this, you need to run pacman -Syu a few times a week to keep your system up-to-date. Also, be sure to follow the Arch Linux news RSS feed (also Artix news RSS feed, if you install it). >>19758 Your work computer may have a logger software that can log USB devices. I don't know if windows keeps record of inserted USB flash drives (I think it does because of driver letters, like C drive etc.).

>>19759 >Sorry for the long reply. No, thank you for it. These links and commands should help speed up my learning process. I'm going to copy it to my system for later reference. >I recommend you dual-boot Botnet 10 and GNU/Linux. Since I was planning on initially doing this on an ancient laptop I have, is it any harder/worse to have it be a dual-boot Botnet 7 instead of 10? Either way I'll probably try everything on a VM first now that you've mentioned it. >Artix Thanks for this recommendation. I hadn't heard of Artix before (probably shows my lack of knowledge), and was just looking into Void because I'd heard it was a good non-systemd distro. If Artix is the same deal but with better support and docs it's definitely a better option for me as a beginner. >follow the Arch Linux news RSS feed (also Artix One last question for /sec/ in general, what are the best options for an RSS reader? Never really wanted to look into one before but I guess I will now that I'm going all in on Linux soykaf. Thanks.

>>19760 >is it any harder/worse to have it be a dual-boot Botnet 7 instead of 10? No, the process can be actually simpler, if you don't use UEFI. I think Windows 7 only supports BIOS and MBR partition table. This means you don't have to worry about EFI System Partition (or /boot/efi dir). You just need to run grub-install /dev/sda to install the Grub bootloader (replace /dev/sda with your actual HDD/SDD; use lsblk command, also don't forget to generate the config for Grub: grub-mkconfig -o /boot/grub/grub.cfg). >Artix Artix Linux is just Arch Linux but it doesn't have Systemd. Also, a tip: you need to add the universe repo to get Arch Linux repos: https://wiki.artixlinux.org/Main/Repositories I recommend you don't add other repos (except Universe and Arch repositories). >If Artix is the same deal but with better support and docs it's definitely a better option for me as a beginner. To be more clear, I meant that it's easier to get help with Systemd than with other init systems (which is why I recommended Arch Linux). If you decide to use distro that doesn't have Systemd, then both Artix and Void have good docs. Regardless which distro you choose, you should use Arch Linux wiki as reference whenever you need help with something. The copypasta (https://dpaste.com/5N3CPJ2GX) explains the basic usage+Post installation of Artix and OpenRC. The Void Linux handbook explains how to use Runit: https://docs.voidlinux.org/config/services/index.html You can get help with OpenRC on Archwiki and Gentoowiki: https://wiki.archlinux.org/title/OpenRC & https://wiki.gentoo.org/wiki/OpenRC >what are the best options for an RSS reader? Liferea, Newsboat or Emacs+elfeed. I recommend starting with Liferea (it has a GUI). Also, if you decide to install Artix Linux, you need to follow both Arch Linux news and Artix Linux news (unless, you only use Artix Linux repos): >https://artixlinux.org/feed.php >https://archlinux.org/feeds/news/

>>19757 >They specifically state that any extra routers or anything like that are not allowed. What can I do to keep my data away from my college's eyes? Is there something you were thinking of doing that is hindered by this policy?

Any good service for buying virtual number?I need for telegram

My school has put a new policy in place that prohibits the usage of personal electronic devices such as laptops, cell-phones, etc. To enforce this, they've reworked their entire WiFi system and no longer allow access to students on personal equipment. Of course, the school-provided laptops/computers are full of spyware as well as the fact that well, the laptops and computers are just slow and suck. I'm not going to program on Windows. I intend to continue to use my laptop, however, I have minimal to no pentesting experience... and my school uses 802.1x security. I know basic opsec to prevent identifying myself, but I'm far from perfect. If anyone could share some potentially useful resources that would be greatly appreciated! Thanks Lains!

You dont need internet to code. Use your laptop in bathrooms. Remember, if you do illegal things, use opsec, and remember basic rule. DONT fuarrrk IT UP ;) If you really wanna use your school wifi, use NMAP. If you cant use your laptop at a given moment, use "Port Authority" on android, its from fdroid. Make a group, of friends, trusted people, that can help you. Pick tech savvy guys. Two minds are better than one, and more is even better. Teach them that they cant stop you from using the internet. If the wifi is still up, that means it must be used for something right? Find that thing, get its mac adress. Then de-auth (use Aircrack-ng) it from a network. Then spoof your mac with that mac adress. That shoud give you access to a network. If that fails, try school pc's. Printers are a good target, as schools shoud have a lot of them, and they are insecure as fuuurak. Read on protocols used for them. There is also a physical vector. When i was in high school, as our teachers were tech-illiterate, i was the one to set up projectors, sound systems for events etc. That gave me access to maintence room, that had school's internet hub. And bam, root access granted. Once you get access to school wifi, i recomend sharing your method with everyone, by annonymous channels (for example notes left in classroms or smh), so the autorities cant trace it to you. I cant give you a method how to do this, more immportantly, i dont wanna. Learn how to break passwords, extract hashes. And then learn more. Have fun!

It sounds super cool to hack into their wifi, but isn’t it easier to just use a prepaid SIM card with LTE?

aircrack-ng suite this belongs in the simple questions thread.

How bluetooth protocol is weak? Do I must avoid to use bluetooth related technologies like TWS or File Sharing etc because of security vulnerabilities?

Rolled 3 I want to hide a raspi/nuc somewhere public as an alternative to hosting a server on aws/sporestack where I have to pay for it. Is there some well-known type of building that usually already has port forwarding enabled beyond the gateway that may be a good target for this? I was thinking public library, school system, etc. Think dilapidated, stagnant, where a device could be plugged in and not fuaaarkeeed with for decades.

>>19875 You don't need to forward a port if this is for your personal use. Use of Tor, I2P, Yggdrasil, a VPN, can all let you interface with the device without controlling the local network. As for a location, I immediately thought libraries or schools. There are plenty of nooks and crannies in these places that don't get checked too often that could be viable. Oh and they have computers- what if you hid the pi INSIDE one of their computer cases? You would have to observe them to guess at how often they perform maintenance on devices. Has anyone ever powered a pi with a solar panel? If so, perhaps the higher points of a small tree are worth considering. If it's a building whose roof is unlikely to be seen by anyone then the roof may be worth considering, if you can get one up there.

>>19876 *Tall tree. And it does appear that many people have gone about running a pi with solar panels. Anon is in luck! However I am very confused about why you can't host the server in your own home. Will you always be accessing it locally by going outside, or will you use your home connection to access it? Puzzled about the utility of such a thing, unless the idea is specifically the ability to access a local network that you have no physical control over, remotely.

>>19693 https://f-droid.org/en/packages/de.kaffeemitkoffein.imagepipe/ >>19693

How should one scan ports, securely? Im guessing proxychains over Tor, any better ideas?

>>19892 I would not recommend having the scanning actually be done over your anonymized connection, because the traffic pattern actually goes through that tunnel directly from you to destination. This could make it a lot easier for anyone watching logs of those tunnels to correlate. Also Tor wouldn't let you scan as easily, it only allows you to make fully-formed TCP connections and nothing else. You won't be able to do IP spoofing, UDP scanning, half-open connections, ICMP, various things like traceroutes, zombie scanning, etc. Control a box via SSH.

>>19903 makes sense. I guess I have to find a FREE box service that allows Tor connections that isnt a honeypot. At some point, one feels like a criminal, even if I'm only going to try and catch myself.

>>19905 I've seen some rather rowdy IRCs where anons offer boxes to others in each others' good graces. The one I saw was known to have several actual feds watching their chats, and paying with your reputation is still a form of cost. Always be skeptical of publicly-accessible, central organizations that exceed a certain scale- like an abandoned warehouse with a sign outside advertising 'criminals welcome!'. So you either need to buy a box from someone (many VPS providers accept crypto), or seize a few yourself.

>>18428 Good question. I too want to know. >>18443 I can't directly answer your question but consider that there are some dirt cheap computers business typically sell in batches, then resellers sell for very cheap. You can get a decent computer for $100 USD or less. If you are in a country where it is more difficult to acquire a PC like those then consider buying something as old as a core2duo if you need a PC. As long as you install a very lightweight OS like Bunsenlabs you can make it usable. >>18665 I agree with >>18666 that you should test instead of asking but I have tried using a faraday bag off an online retailer and it was successful at blocking wifi and bluetooth but I have the suspicion that your typical RFID blocking bag will let other frequencies bleed through

>>19905 You can rent a vps for around $4 a month with bitcoin and just fill in fake information. Like the other lain said when you're scanning ports you need to be able to send a bunch of different types of packets. Since tor only makes tcp connections you can't send udp or other things and im not really sure you could do syn scanning anything other than soykafty full connect port scanning.

What's the most efficient way to get temp emails and phone numbers for accounts that require 2fa. I'm sick of having my real phone number on multiple accounts or having the same email attached multiple websites too.

>>20054 You could use something like https://app.anonaddy.com/ or https://simplelogin.io you're limited to the number of aliases you can create so I use both. For the phone.. idk. I've seen those really cheap SIP accounts and it sounds neat.

>>20057 when I tried it last time it was cheaper to just buy prior 2fa'd accounts in bulk you can get like 20 discord accounts that have phone numbers for the price of one phone number

>>20058 Can you receive sms through discord? I've never been on it.

>>20059 discord requires a phone number linked to your account in certain situations, but its much cheaper to just buy hundreds of accounts with numbers attached vs buying numbers one by one to auth accounts

If I want to do full disk encryption, should I use an HDD? Isn't it bad to write random data to an SSD (since they have limited writes)?

>>20091 >If I want to do full disk encryption, should I use an HDD? Isn't it bad to write random data to an SSD (since they have limited writes)? TrueCrypt advises against SSDs because the firmware redirects writes to the least used physical blocks to extend the life of the device (wear leveling). This means if you change your password, you cannot guarantee the decryption header for the old password has really been deleted. If someone knows your old password they may be able to pull the old header from a "deleted" block and decrypt your drive. It's kind of a niche problem when you get down to it. It's not something I worry about. https://veracrypt.eu/en/Wear-Leveling.html

The recent onslaught against Kiwi Farms, ordered from the walled gardens of social media, has been kind of a wake up call for me with regards to security. Are there any absolute essentials that everybody should be practicing? I've started using tor as default, I have nordvpn but I'm not sure if using these two things in conjuction makes me any more 'secure'. I also use the software 'freetube' rather than youtube, how much difference does watching videos through a front end make?

>>20147 >Are there any absolute essentials that everybody should be practicing? * Use GNU/Linux (https://xubuntu.org/). The best way is to dual-boot windows and Linux (use Windows disk management tools to shrink a partition and reserve at least ~20GB for Linux). * Have at least 2 emails: use 1 only for your real identity and use the other for your pseudonyms (Ideally your each pseudonym would have its own email). For example, use Outlook/Gmail for your real identity and use ProtonMail/CockMail for your pseudonyms. Encrypt your emails using GPG and copy+paste the encrypted text into the webmail, if you can. >https://digdeeper.club/articles/email.xhtml >https://emailselfdefense.fsf.org/en/ * Mullvad is the only VPN company that hasn't done anything bad (yet). Tor and I2P are superior to VPNs. Don't use Tor tabs (Brave browser) or Tor Buttons. It's best to use Tor Browser with the highest security level to browse using Tor (Whonix and Tails are also good. QubesOS is pure autism but good). When you use Tor, do not log in to any sites (important!) * Use uBlock Origin (can be used to disable JS by default) and NoScript (Firefox-only but better for blocking JS) on your regular browser. * Avoid using smartphones. They are tracking devices (a lot of sensors, GPS, microphone/cameras, they usually run non-free OS and the apps are usually non-free). * Don't reuse same passwords (if there is a breach, you can lose many accounts, if you reuse passwords!). If you want to use a password manager use keepassxc. Never ever save passwords in browsers (they don't store them securely and they can leak the passwords). Use 2FA if you can. * Encrypt your devices using LUKS (more important for Laptops). * Encrypt individual files with GnuPG+Symmetric key (it's best to use tar to make .tar files and encrypt it using gpg --symmetric). * Use DBAN to erase your old HDDs and SSDs. * Use ExifTool (and/or mat2) to delete meta-data from your pictures and videos. * Don't use social media or proprietary messaging services like Discord (instead use Signal, emails with GPG encryption, Mumble or XMPP). IRC is also good if you connect to it through Tor (but don't expect it to be encrypted!) * Provide as little info on yourself as you can (For example, normal people post everything on their public social media profiles, including when they are on a holiday trip. This kind of info can be useful for burglars). * Try to doxx yourself using Google and ask Google to remove the results that come up. * Delete any profiles/accounts you don't use anymore. >but I'm not sure if using these two things in conjuction makes me any more 'secure'. I It depends on whether you connect VPN => Tor or Tor => VPN (this is a bad idea). If you use VPN => Tor, then your ISP doesn't know that you use Tor (but your VPN provider does know it). I think you shouldn't use any VPNs if you use Tor. >freetube I have always used invidious: https://api.invidious.io > how much difference does watching videos through a front end make? Less analytics (unless the instance is malicious).

>>20157 I had to look a couple of these things up, so I'm already encountering some new ideas. Some of the boxes I've already got ticked, separate e mails, no social media etc. I suppose my VPN provider knowing I use Tor over my ISP might be preferable? I think freetube is invidious, just on desktop.

does NSA, CIA, FBI, DoD use qubes os? I've seen DoD using windows, NSA too. FBI uses kali to break encryption.

>>20018 Can you name a particular vps company for this? The ones I've rented in the past have usually wanted to have some ID and phone verification.

Can we have a serious and factual answer to how dangerous/problematic blobs can be? Some days ago a very "agitated" dude on 4/g/ kept insisting how GrapheneOS is compromised and backdoor (on purpose, even) due to it using some closed-source/non-free code. The same went for coreboot, heads, or QubesOS, while also use some non-free code (for instance, the microcode against Spectre and Meltdown). Does he have a point? Could these be backdoored and have network access? Only respond if you know what you're talking about, please.

>>20229 Sometimes on the internet people tell lies just to watch your reaction.

>>20229 >Could these be backdoored and have network access? Dude have you been living under a rock since the current year or something? All Intel CPUs have a co-processor (called "Intel Management Engine") that runs a modified MINIX and it has its own TCP/IP stack. AMD has similar thing called "AMD Platform Security Processor" (PSP) but even less is known about it. CPU microcode updates are nothing compared to Intel ME or AMD PSP (and you should patch the CPU bugs, anyway).

>>20241 I already know very well about Intel ME and how it can be removed/neutered thanks to me_cleaner. Even with that out of the equation, there are still the other blobs to consider (such as, again, the CPU microcode), which popoular projects like coreboot, heads and QubesOS use. As far as I've seen (but do correct me if I'm wrong), there is no conclusive research on whether these blobs are backdoored or not - and perhaps there won't ever be. So those projects essentially have no choice but to trust them, if they want security. Here's what is mentioned on the QubesOS website: https://www.qubes-os.org/faq/ https://forum.qubes-os.org/t/building-out-documentation-on-non-free-code-orca-project-1/13242 Maybe one could try analyzing the network by setting up a firewall with a router, but even that wouldn't really be conclusive. I'm less informed on the mobile world, so I have nothing to say about that.

>>20243 Heads' website actually has a nice page describing various parties that, to some degree, we are forced to trust: https://osresearch.net/Heads-threat-model/ https://osresearch.net/FAQ/#should-we-be-concerned-about-the-binary-blobs Hopefully RISC-V will become popoular one day.

sorry for the pastebin link and if my post sounds rather rude https://pastebin.com/A62qp6ZP can anybody help me here **dunno why my posts are getting language-enhanced**

>>20255 ignore this one i managed to overcome the language enhancer (thanks admin) **sorry if this belongs on /tech/ but it felt fitting here hopefully you guys know a thing or two about cloaking virtual machines also why does lainchan mark me as spammer** im going to need a bit of help here how the heck do you hide or rename the VMware svga 3d adapter on device manager the game detects it on the options page? so basically i bought some soykaf lewd indie game with rainbows themes on patronite so far it works fine in the the hypervisor without internet and i have not noticed any DRM at all but im rather tempted to file a bug claim since it crashes on certain levels i can edit the output log easily but the creator asked for the unity dmp file i dont wanna get caught redhanded and potentially public barred in their artists beware list since ill be sharing this afterwards on a pirated forum just to spite that POS off sheesh why do creators there tend to be very toxic these days i heard that some even go as far as uncovering the IP and emails of art leakers as a part of their vendetta this is the closest thing i could find on leddit https://archive.is/1eG1L i dont wanna add some dirt on my work pc while its not the most important thing in the world but i would really appreciate it in the long run since my other burner pc broke i dont have the money to buy one of these decent intel NUCs at the moment back then i used to ask this same question for virtualbox in a malware analysis YT channel but they somehow they got too clever and instead called me "roblox hacker kiddo" even though i tried my best to blend in as a novice security student without compromising my identity i even added a indian accent and resisted the urge to bite their bait but nothing worked in the end god i fuarrking hate this sector so much its unreal why are security researchers like this? no wonder why most people would rather side with black hats instead in the long run really makes you think hopefully hating on furries isn't bannable

>>20255 >>20258 >i managed to overcome the language enhancer You are supposed to not do that. language enhancers are a fun feature!

Lately I have been attempting to break into the network of the local court (personal reasons, irrelevant to the topic at hand). Anyway, my plan is to send them an e-mail with malware attachment, so what I need to do is to craft an e-mail that would sound as legit as possible, in order to fool them into downloading the malware. My first attempt was basically trying to hand-craft a very formal sounding (EU style) mail. Not sure how successful I was, you can judge yourself from the example below: This is a notice concerning the last rendition of union law regarding the regulation of data protection and privacy in the European Union at an extra-national level (Regulation 2022/1193 from 23/09/2022), as approved by the European Commission and verified by the European Court of Justice, serving as an extension of the Data Protection Directive (Directive 95/46/EC from 24/10/1995) and the General Data Protection Regulation (Regulation 2016/679 from 14/04/2016). As a legally binding document, every member-state institution within the European Union and/or the European Economic Area is required to revise their internal implementation of the Civil Code as well as all its physical copies still in use to comply with this mandatory rendition of the legislation. The recipient of this notice is expected to incorporate the extension in question into its legal order and merge its implementation with the national Civil Code as soon as possible, but not later than 31/10/2022, to prevent a discrepancy with the legal code on an extra-regional and/or extra-national level, in order to avoid legal and/or extralegal complaints from natural persons and legal entities alike, as well as objections from the general public. So far, this was all hand-crafted... but then I though: Wait a minute... It's 2022, everything is about AI nowadays. Why don't I use some free AI tool to help me with the task? And so I've searched for "AI Article Generators" and "Blog writing AIs" online. And expectedly there are such tools out there, many of them can even be used for free to some extent. From the few that I tried I liked Sonic Editor (GPT-3) from writesonic.com the best, at least for my purposes. But there are many many others. I would post an example of I got from the AI, but I'm afraid this post is already long enough and I won't be able to fit it in. I'll probably post it as an attached picture instead. So... what do you think Lainons? Is using "content writing AIs" the future of social engineering? Did you try using something similar yourself?

>>20302 Question, are you getting them to install a browser extension? If so, what is your goal with that- to replace the next file they download with an executable? Or are you getting them to download some 'tool' outright?

>>20306 >malicious browser extension that drops malware I'm not the same anon but can you provide any links or more info on this technique?

>>20307 Extensions seem to be capable of reading browser data, altering HTML, CSS, JS, whatever they want? So when someone clicks to download a file... could it be replaced? Redirected to a link that is identical to that installer/exe, but with malicious bytes injected into it? That's what I was thinking.

Are there any PGP or AGE like tools that use hybrid encryption with one of the post quantum KEMs? I wanted to learn more about cryptography, so I wrote a simple tool that is basically AGE but with Kyber768 (kyber kem to exchange a key instead of 25519, then the same key derivation and cha-cha stream encryption as AGE, but less features). It would be really simple to implement a hybrid protocol on top of (simple thought is to just xor the shared keys from kyber and 25519 to create the input to the key derivativation function) which seems to be inline with a lot of hybrid protocols I've seen published, so wondering if anyone has done it and had it audited?

Are programs like sudo/doas actually a security risk? I remember the article on how poor linux security is mentioning that it's a privesc vulnerability, but I find this a bit strange considering how widespread tools like sudo and doas are, you can find it on pretty much every unix-like system.

>>20390 sudo has had some vulnerabilities (https://www.sudo.ws/security/advisories/) in the past and if you only use su - to become root, your regular user(s) can't (literally) run things as root anymore. On my systems, I usually install and configure doas and lock the root account (passwd --lock root). I'm more comfortable with doas since it does what I need and it has smaller codebase than sudo. But note that if you lock the root account, you can't enter into a rescue shell using bootloader. But using a liveCD (like SystemRescueCD) is better anyway.

>>20341 There's Codecrypt. It uses McEliece. Some guy talked about it in the Cock.li invite-begging thread. I ought to make my own because Codecrypt's ciphertext is very large and I kinda wanna learn, as you do.

How long does it generally take for the hacker world to go from a "there's a potential problem in Component X" advisory to a workable exploit? A day? A week?

How do I pass OSCP in a month? Assuming i've had cybersec experience afew years ago but neve got the cert then and am planning to relearn everything.

>>20492 your not gonna pass it in a month, sec experience from a few years ago is basically obsolete.

How do I go about downloading testing tools from github? I am unironically beyond a brainl*t when it comes to security but I am trying to learn - is it automatically assumed that the user is using linux?

>>20503 Install git, then on the project's github page, click the code drop down and copy the clone url (it ends in .git), then run `git clone [the clone url]`. Then read the README file, look for a requirements or install text file and read those. Most projects include all the install and usage information you need in the repo or will link to their docs in their readme. >is it automatically assumed that the user is using linux? Depends on the tools, but usually not. Which projects are you looking at?

>>20495 even 2017-2019? that's obsolete now?

>>20503 >is it automatically assumed that the user is using linux? That's often the case. Why don't you dual-boot windows and linux? Use windows disk management tools to shrink a partition (reserve at least 30GB for Linux). Then you need a empty 4+GB flash drive. Download Rufus (https://rufus.ie/en/) and Linux Mint iso (https://linuxmint.com/). I recommend getting the Mate edition or the xfce4 edition. Then insert the flash drive to USB slot and use Rufus to copy the iso to your flash drive. Then just reboot and use UEFI/BIOS menu to select your USB flash drive as boot device and install Mint to the newly reclaimed free space. Then you can use UEFI/BIOS menu to choose which OS you want to boot or you can set Linux Mint as the default boot option and boot either Windows or Linux Mint from Grub (bootloader) menu. P.S. Read this book if you want to learn to use the command-line ---> https://linuxcommand.org/tlcl.php

>>20504 Requirements are colorama simplejson argparse dnspython pip3 What software do I use to download? >>20506 Thanks mate, could I also use wsl?

>>20507 >What software do I use to download? You should take a look at Linux Mint (or Kali Linux) repositories and see if the program is packaged. Don't actually install Kali Linux on your PC. It's best to use it as LiveUSB OS (i.e. just boot it from a flash drive). Kali Linux is designed to be accessed from a flash drive. The easiest way to see if Linux Mint has the program is to just use the LiveUSB flash drive and boot the Linux Mint live environment and then use terminal & apt: apt search my_program_here >Thanks mate, could I also use wsl? Probably, but it's inferior to actual Linux installation. I have used MSYS2 and Cygwin in the past. I heard that running X11 (GUI) applications under wsl is not as good as using CLI applications. Also, trying Linux Mint is free. Why not just try it and see if you like it?

>>20507 Link the project you're looking at, please. Some will require you to install via your distro's package manager (or manually if you're on windows), but some will expect you to use a language specific tool. Since pip is listed, you may need to have it and python installed and use pip to manage the requirements. Some projects will also have their own installation scripts written for getting and building dependencies. We cannot tell you for certain without knowing what project you're installing.

What woulde be a good alternative to dumpster diving in 2022? I thought about buying an used phone from a pawn shop and then use some kind of software to restore deleted files.

Any good alternatives to Protonmail beyond self-hosting or getting an invite to a private host?

>>20517 There are none. Protonmail is the best mainstream email service (but if you should use GPG to encrypt your mail and then copy+paste it to the webmail). The only better options are to get cock.li/riseup invite or self-host email (https://landchad.net). But self-hosting can get your email address derezzed (sadly) and you need to trust cock.li/riseup (or protonmail) if you use their services.

>>18084 How do people into corporate cyber espionage? I know IP theft has to be happening between companies, but how would one be recruited? I doubt companies would go to their own internal redteams, unless maybe the boss somehow had a very close outside of work relationship with one of the redteamers. You'd think they'd be afraid of employees ratting. Do they go to outside sources for things like this? If so where/how? I'm on a redteam now and making good $ so I don't think I'd accept, but it's fun to imagine some corpo coming to me with a mission lol.

>>20193 If you're talking about for offensive purposes OS does not matter at all. You can do all the same techniques on every OS nowadays.

Does requesting a FOIA report on yourself draw suspicion onto yourself?

How bad is it that I don't update my linux kernel anymore? I somehow only get my proprietary nvidia driver working with linux 5.18; otherwise I get random freezups. I keep all my other packages up to date.

>>20525 Pretty bad (basically, you need to monitor the public security advisors of your distro or Linux kernel (if you got it from kernel.org). A better approach is to just use the LTS version of the Linux kernel.

This happened on my android phone. I think I fell for a phishing email. I clicked on a link in an email that brought me to a website on the Firefox browser. The web page was blank and I got a pop up requesting to download a file with a .bin extension. Obviously, I clicked the x to close the box and closed the tab the website was on. I put my phone on airplane mode and ran an anti-virus on it. Nothing came back positive. And I checked my downloads folder for the file, which wasn't there. Am I safe? What else should I do?

>>20534 Next time, post to the Q&A thread. >Am I safe? What else should I do? Reset factory settings if you are really worried. Also, start running Ublock Origin and NoScript (or block JS using UBlock Origin).

>>20536 >Reset factory settings Isn't that just settings though? Would it actually re-image the whole phone / remove malware? (not OP)

i have a simple question, is bitwarden a good and reliable password manager

>>20562 >bitwarden >opensource >free version does not have a limit of accounts or devices >widely available on different platforms >is bitwarden a good and reliable password manager yes

How do you learn hacking? I want to make some money doing pentesting so I started doing smashthestack challenges but I got stuck in blowfish level 2. I have tried for some days, but I have no idea what to do and the help I received in their irc wasn't helpful. So, what can I do in a situation like this?

>>20598 >How do you learn hacking? First, you need to learn some theory. Get a copy of Gray Hat Hacking (idk what's the newest edition, use a web search). Another book that I can recommend is Hacking: The Art Of Exploitation (it teaches you the basics of stack overflow attacks, basic crypto and basic network/socket programming). If you want to learn cypto, learn some basic number theory and read The Code Book. Also, watch some conference (Defcon, rC3, etc.) talks BUT do not waste a lot of time with them (their primary function is to motivate you). I highly recommend you also learn some Linux skills. I recommend that you install Linux Mint. You can either use VirtualBox (VM) or you can dual-boot (use windows disk management tools to shrink a partition and reserve at least ~30 GB for Linux. Then download the installation iso and use Rufus to make a bootable USB flash drive and install your distro to the newly reclaimed free space). Once you have set up your Linux environment, read https://linuxcommand.org/tlcl.php and use ArchWiki if you encounter problems. Some say that Kali Linux is good but it's only designed to be used as LiveUSB OS (i.e. you boot the live environment from a flash drive). It's better to install a regular distro and then use the package manager to install the tools you need. I recommend Linux Mint, Arch, Void or Gentoo (Mint is the easiest of these). If you want a separate computer for running Linux, I recommend you buy a Raspberry Pi (which costs about $50) or used ThinkPad. Be sure to set up a lab (that's not connected to the Internet, instead buy another router!). You will need a (second) router and 2 PCs (or 1 PC and 1 Raspberry Pi). You need to also learn to program. I recommend you learn either Python or Ruby (both are as easy but Ruby has better support for OOP and Gems is better than Pip, but Python is more popular). I recommend you read the Pickaxe Book for learning Ruby or read https://automatetheboringstuff.com and books by Mark Lutz for learning Python. The choice doesn't matter much because both are good languages for beginners. Perhaps look a couple of code examples from Rosetta Code and see whether you like Ruby or Python more. Do not learn C or C++ (or Java/C#, PHP or JavaScript) as your first language. They are good second languages (But avoid PHP if you can!). The problem with C is that you need to be very careful to not shoot yourself to the foot with memory management or pointers, also it doesn't provide immediate feedback (unlike Python and Ruby) and C has very bare-bones standard library. On the other hand, C++ is ridiculously large and complex language, so learning it as a 1st language is not a good idea (I think this applies to Java/C# as well but to lesser degree). Lastly, PHP and JavaScript allow you to make very stupid mistakes that are hard to find/debug and these both languages are very inconsistent. For learning C, I recommend you read C: The Modern Approach (also, be sure to use GCC or Clang compiler). APUE or The Linux Programming Interface are a good reference to have when you are working on more advanced C code (and don't forget the man-pages!).

What packet inspection software can detect teamviewer, remoteconnect, and logmein traffic? Since it usually goes in to 443 it makes the process a bitch, but there has to be some identifiable header to differentiate it in a firewall or at least detect the requests.

>>20601 You could just see what they each look like in wireshark and pick up patterns, for example https://techtalk.gfi.com/undetected-threats-logmein/ You can see easily in this one the DNS lookups, but you could also derive from this the pattern of a DNS lookup, a three-way handshake, one HTTP payload (fetching the node to use?) another DNS lookup and 3-way now on 443... And then after that, what do the payload bearing packets look like? Save a packet in and out and compare them to a packet in and out on 443 from browsing the web, what differences can you find in flags, sizes, etc.?

>>20603 >you could also derive from this the pattern of a DNS lookup, a three-way handshake, one HTTP payload (fetching the node to use?) another DNS lookup and 3-way now on 443... Every website in the world does this to redirect http to https. >And then after that, what do the payload bearing packets look like? Same as every other encrypted packet.

>>20599 Thanks for the info anon. I downloaded Gray hat hacking

what is the difference between wsl and linux? are things that I can only download via linux also available via wsl?

>>20625 >what is the difference between wsl and linux? If you use WSL, you will still be running Windows and subject to its spyware features. WSL doesn't support all distros either and idk if (e.g.) wifi hacking tools will work. WSL has worse performance vs booting into a Linux distro. Also, using GUI apps is not as easy (it's not even officially supported), and the only implementations of X11 (needed for GUI) that I trust are Xorg and Xenocara. I'm pretty sure that WSL doesn't support Wayland at all. Linux also has tiling window managers (like Sway) that many users prefer to use. Here is an example: https://swaywm.org (check out the vid) More examples: >>>/Ω/61601 and https://wiki.archlinux.org/title/Window_manager I recommend you dual-booting Linux. Download something like Linux Mint or Xubuntu. Use the Windows disk management tools to shrink a partition and reserve about ~30GB (or more) for Linux. Next, you need to download Rufus and use it to make a bootable flash drive that can be used to test or install the Linux distro of your choice. >inb4 Botnet 10/Botnet 11 isn't a big deal Read: https://www.gnu.org/philosophy/free-software-even-more-important.html https://www.gnu.org/proprietary/malware-microsoft.html https://www.gnu.org/philosophy/can-you-trust.html http://www.loper-os.org/?p=284 The tl;dr version is: * Windows is not free software, meaning you can't be sure what it does and you can't tinker with it (or change the way it works). No 4 freedoms. * Windows has spyware features

anyone have any bad actor ips to block like this set?

>>20634 Badness enumeration is usually a sign your vulnerable anyway. In the age of IPv6 and NAT, i don't think they would be very effective.

How safe is Hack The Box? I've been using my dedicated thinkpad on my home network loaded only with kali to pentest it. there isn't any sensitive info on the thinkpad aside from me logging into the htb website, but say i've left the thinkpad and htb-box on overnight to continue the next day, am I in danger of someone exploiting my box and then pwning my dedicated thinkpad?

How does modern video game hacking work in general?

>>20640 HTB is safe from my experience. They boot up temporary docker containers for the puzzles. But you should always take the necessary precautions anyway when connecting to a remote machine, use a VM, reverse shell firewall, and if you're really worried, a vpn

Is 4chanX private enough combined with something like Privacy Redirect and NoScript rules to block Js from YouTube and Google? https://github.com/ccd0/4chan-x/wiki/Privacy If you don't think so, how do you get updates in threads you posted? You just open one by one?

>>18084 is danwin1210 a good email provider? i'm currently using protonmail and they don't allow for third party clients unless if i pay for it. even gmail allows clients without paying. i know protonmail is sus, but it's better than gmail in my view. https://danwin1210.de/mail/

>>20818 they do: https://github.com/emersion/hydroxide

How to mitigate never-fully-secure despair? Lynix says I'm a 50' hardened. I feel stabbed every time I think about it. I can't get anywhere in terms of this and also all the metasploits and openVAS and vulns and soykaf which go apt install → apt purge very quickly It makes me hate myself so fast

Can web browsers be fingerprinted by the bookmarks tab? Also whats are good ways to avoid canvas & webgl fingerprinting? A search finds webgl randomizers, but the best I can find on canvas is just disabling javascript. Are there alternatives?

>>20889 From my understanding, no. The only way that I personally know of that can fuarrrk you up with bookmarking is when you use a sync feature with a browser.

>>20889 >>20892 At one point I noticed that Firefox was reloading favicons from the internet when it started up. Always connecting to the same bunch of sites at the same time might be fingerprintable? I don't know if it still does this. Doesn't Firefox ask for permission when a site tries to use canvas?

>>20894 I mean always the same bunch of sites, I can't remember if it actually reloaded the favicons every time it started.

Hello /Ω/, i'm looking to either build or buy the semi-ultimate schizoid computer setup and would like input. (i apologize if this is the wrong place for this,) Even though i know that no matter what you do, the NSA has already won, I would just like to indulge in my inner security autism a bit. i am hoping to make a system that can achieve the following: - no intel ME (either pre me or neutered) - some form of libre firmware (libreboot, coreboot, etc) - powerful enough to run qubes os (no need for the vm's to be able to do anything too crazy, but obviously the more power, the better) i am more than willing learn how to do the first to myself, but i am currently looking at the Librem mini by purism. https://puri.sm/products/librem-mini/ Should i go with that or should i do something else? More importantly, what might i be failing to consider in terms of security?

>>20906 >/Ω/ oh whoops. ignore that. i changed my mind about which board this was for after writing it and forgot to change that.

If i have a website or service available on both i2p and tor, would be be more secure to use the tor one or the i2p one? I've just been seeing more and more services which have eepsites these days and was wondering.

>>20982 it's not really known and depends on your threat model. eepsites are theoretically more secure against certain attacks, but not nearly as well studied as tor hidden services. There are no known feasible attacks at the protocol level for deanonymizing arbitrary users of either. Increase in eepsites is partially due to increase in DoS attacks on hidden services. The current hidden service protocol makes DoSing hidden services easy, but the Tor project are getting close to releasing a fix.

>>20986 Oh, well, I was mostly concerned about deanonymization, but I assumed that i2p would be much less scrutiny and less people who wanted to compromise you on the network

Hi lain, I'm looking at re-encryption proxies. Are there standard methods for identity-based (talk x509) re-encryption proxies where one party (A) wants to send data to a second party and **have** the proxy see the plaintext, alter it and re-encrypt it with A's identity? The main goal would be to not split identity of A or duplicate it (have two identities which are virtually the same in the application layer). Re-encryption proxies seem to be the answer but they're focused on altering only the ciphertext. I don't want to re-invent anything

>>20982 tor + tor browser, well actually I favor none if there are more than one true way to connect to the their servers. See what SSL libraries clients use for connecting to i2p services and how request headers are ordered and such but im not pro on such matters. Better keep silent and not share anything while using a website or service.

>>21033 Check the python library from mitmproxy.

>>18450 >SWIM wants to buy materials that are associated with criminal activity and has no friends, are there any mail forwarding companies safe to use for this? No, don't be retarded. Dead drop or don't do it.

Is there any cheap and decent VPS hoster that can be paid in monero? I want to host an imageboard without the annoying detail that I might be held responsible for its contents if I don't moderate it 24/7 so an anonymous way to get a server would be necessary.

>>20873 >I can't get anywhere in terms of this and also all the metasploits and openVAS and vulns and soykaf which go just because some vulns are not on metasploit, doesn't mean that they can't be exploited. You can do it the proper way, do a threat model, check our security posture based on it. Vulnerability scanners don't give you much, I would say that most security problems are not picked up by a scanner at all. Go deeper into proper security management, tooling is a second step, forget for a while about tools. Example, what is the worth of someone getting root on a device that has nothing useful, is not connected to anything useful, etc...? Compare it with someone being able just to get code execution (not admin) in a browser, of a rich banker, and be able to dump all his last pass credentials? The first scenario is technically more elevated the privilege, but it gets nothing done. The second scenario you can lock up a lot of soykaf and the impact basically can mean someone's life ruined. Focus on this. Understand your threat model, and work on this, remember that people can't hack what doesn't exist. People can't steal information that is not stored anywhere. People can't steal from who has nothing.

Wasnt sure if I should bother making a thread on this so posting here for now. Is it reasonable to assume ISPs and DNS servers have a limit on how many websites a user visits get logged? They have limited server space so surely there must be a limit for each IP, right? So in theory if a large number of mundane sites get requested it would purge off past content eventually? Is there already programs that do this? Obviously not practical for a primary protection but most people before they get privacy conscious already have a history recorded by their ISP and the DNS server so it would make sense to think about how this may be purged instead of just relying on a time basis which could easily be false information on when logs get purged if ever on a specific time. If this would work how many sites do you think have to go through before last real site visited is kicked off? Does anyone know? What would someone have to do to avoid the ISP detecting these high number of requests and thinking you're a bot and terminating service or prevent just overloading their system? Or is there no limit they have set up so their system is flawed in functionality?

>>21066 Storage is very cheap, the value of the data would be much higher as those logs don't need that much of it either. I would rather consider local laws to evalute how likely it is that your traffic gets stored indefinitely, but of course laws will also be disregarded whenever intelligence agencies are involved. This really wouldn't have qualified as a thread btw

Is it safe to use bflix.to? I have bought things online, using this computer, I don't want them to gank my banking info

Question to security professionals on here, what’s going to stop someone from telling the I C T W O that they already have 5 yrs of internship/work exp in order to get the C.I.S.S.P title after completing the exam? Assuming you have a friend or relative willing to vouch for your participation in their company.

>>21067 Perhaps yes but would every user really be considered equally importan data? From a financial motive wouldn't they focus on people who's habits indicate they are wealthy or influential which is a better place to allocate resources to storing the data of over a bunch of low income users whos data wont sell? Even if they kept everyone's data is there a way to push them to purge it? Yes it could be expected they could violate the law but say for example it's a US based ISP if you suggest to them the data is of someone under 13 would that mean they have to by law remove the data or is that law on not collecting data of minors under 13 not encompasing enough it could be exploited that way? If not then what would one do aside from just waiting it out? Send random quests anyway so you poison the well making the data worthless to sell even if it doesnt purge anything real from logs? Yeah i only considered possability of needing a thread due to the highly speculative nature of this which could have lead to a discussion in itself even though it seems simple on the surface.

Is there any security benefit of using MicroSDHC vs USB flash storage when connecting to lots of devices? USB is susceptible to BadUSB attacks, overwriting the firmware of the USB stick HW. I read that this isn't possible for MicroSDHC, is that true? Based on the previous assumption would there be any real world benefit of using a MicroSDHC card if you have to connect it via an USB Card adapter, since this in turn would theoretically again be susceptible to a BadUSB attack (although probably more secure through simple obfuscation).

>>21088 The person endorsing you has to hold a cert from ISC2 and they are held thereby to a standard of ethics. Endorsing you means agreeing to various statements such as "The candidate is competent to render professional service to principals without supervision." Nobody who is genuinely qualified to hold a CISSP or other ISC2 cert is interested in helping create "paper CISSPs" to be let loose in their relatively small, tight-knit, reputation-driven industry. You have to attest relevant work experience and provide proof in addition to finding someone willing to endorse you (if you don't know anyone, you can submit your information to ISC2 for direct endorsement). Random audits are conducted: former supervisors are emailed to request confirmation of work history and extra details about job history and work duties are demanded. They give themselves six weeks to complete review of an endorsement request and they will gladly use all of it, so there's little to no room for slipping any trickery past.

>>21093 Aside from work exp, the person or institution endorsing you would be endorsing you on good faith and right after doing a thorough background check; I understand that completely. And the reason I’m asking the question about work exp is because it seems and sounds ridiculously easy to lie about that. If I claim I interned at John/Jane Smith’s company for 5 years straight and provided their contact info; there’s nothing stopping them from saying anon did worked at their company.

im a highschool drop out and I don't know how to use a computer and have no passion for them but I gotta get a job. it is what it is

Does "blackhat" hackers team has an Security teams? Like, SOC, for example, security monitoring of their c2 servers, fileshares and etc.

>>18084 I need someone more knowledgeable than me explain the deeper benifits/downsides of SSL filtering by security products. As I understand it many hardware firewalls and software security products actively scan and filter https traffic. They do this by playing many in the middle and forging certificates. This is done so malware that is sent via encrypted channel can be scrutinized before reaching the recipient. Downside is that you give your security product access to all encrypted traffic. Should you worry about your data privacy/integrity when using SSL scanning?

>>21100 it would be trivial(ish) to see in packet capture (or even network interface stats if everything is being mirrored off) and reputation of the product is ruined 4evar

Hi, I have a router from an old isp that I want to use as a second router. I want to ssh into it to configure the 0.0.0.0 route, but I don't have the credential to log in Is there something I could do? Thanks

Hi everyone! I have a question. Are certificates so important to get a job, if i have an 3 year experience in SOC (Tier2/Tier3/IR). (company in which im working right now is famous in cybersec buisness). I gonna leave my country and wanna work in USA (CA in priority, not Silicon Valley, maybe LA or Fresno or something else), relocate is very importan

I want to avoid IP, DNS, etc. leaks to a particular website. My questions are retarded so if you don't want to answer, please point me the direction I should look to for learning about the topic and teaching. E.g. should I read a textbook on networking? Are there specific wikipedia pages I could learn from? Q1. How do I see where my network traffic goes, and where it is being masked by vpns and dns providers? I can see what people are seeing through my web browser but want to know if I'm masked, say, executing yt-dlp through the terminal. I want to totally understand all of this, the pathways, what's going on, etc. Q2. I use a proprietary vpn app created by a vpn provider. It advertises a kill-switch for preventing. I've tested this option the only way I know how (dnsleaktest.com) and see that, at the very least, my dns is leaked when my internet connection disconnects. Given this, what do you recommend I do? Is there a particular protocol I should learn to use, e.g. PPTP, SSTP, L2TP, OpenVPN, IKEV, etc. that has some compatible protection feature?

>>21115 Use Tor Browser or Whonix or Tails. You may want to use Quad9 DNS (if you trust it) or OpenNIC DNS (and perhaps configure Unbound). The reason for doing this is to minimize the harm that's caused by DNS leaks (you need to fix your client programs). >how to learn networking? Read Computer Networking: a Top Down Approach (or Computer Networks by AST). You want to learn TCP/IP (protocol suite) and OSI model (but not the OSI protocols). Also. use Wireshark. VPN makes it harder to know where you traffic goes (even harder for you).

>>21113 What make/model? (revision? etc.) Can you access webUI?

Is it safe to use bflix.to? I've bought things online, using this computer, I don't want them to get my banking info

I'm currently having severe analysis paralysis on what cert I should initially get as a beginner with some IT background, in order to get a red team job. Obviously OSCP is still the big boy cert and is mentioned in a lot of job ads in my country, but I want to start with something easier first. I've been looking over some linkedins of junior pentesters that got jobs just off certs and I noticed a few of them have eJPT (now v2). As far as I know, CompTIA doesn't seem to be particularly well regarded or mentioned in this country. I started doing the prerequisite course for eJPTv2 through INE, however so far I'm finding this course to be pretty disjointed, somewhat outdated and the video content is just not great. I would like the content I'm studying to be more geared towards examples of real world attacks and Kali tools that aren't outdated. I'm finding this with a lot of courses - an example would be mentioning WEP hacking at all when it's pretty much old news in 2023 and basically no routers have it here. I'm honestly stuck on what to start with - any ideas?

>>21130 Hey OP! as a red teamer myself I would say that while OSCP is sort of a "rite of passage", a great cert and quite recognized if you want to join specifically a red team then maybe go for Sektor7, SpecterOps, or rastamouses' CRTO. HtB certs also looking pretty good. Also, mind the "team" in RT, there are several steps to the cyber killchain, any of which you can specialize in and be an asset to the team. (e.g. osint recon, phishing, physsec, infra, malware, reveng, soceng).

Does anybody have a PDF, video, or webpage that can simply and comprehensively explain the basics of public-key cryptography? I have been trying to wrap my head around key-based stuff for a while now and for some reason it is just not getting through to me. Thanks in advance.

>>21136 > simply and comprehensively explain the basics of public-key cryptography not exactly what you're looking for, but this here may help a bit to get some context

>>21136 >>21137 it didn't attached the md file so here it is https://pomf2.lain.la/f/fyrjazpx.md

>>21136 https://emailselfdefense.fsf.org/en/

>>21143 >this is pretty much exactly what I was looking for. >Use case is extremely basic i'm glad the md file helped. whatever the use case is, it's never a bad thing to want to be informed for the sake of it, heck, i go every day really far to understand things i may never use, just because i like learning and understanding in general

Where can I find pirated books and resources for offensive security? I found a nice list of malware development stuff here, https://github.com/rootkit-io/awesome-malware-development In particular, I am interested in the "RED TEAM Operator" resources, which are paid only. I found a supposedly pirated version here, https://tut4sec.com/red-team-operator-windows-evasion-course-sektor7/ However, the site doesn't look legit (kinda looks like a site that offers you these things just to sell you a rapidgator account). I downloaded the course I linked above, when I tried to decompress it, it asked me for a password. There's no passwords to be found anywhere on the site for any of the courses. I only found an archived version of that page which had a "ThankYou" password hidden in the HTML, but that didn't work. Has anyone used that tut4sec.com site, or knows where I can find that course?

>>21153 I found two results on libgen.is when searching "red team operator". hopefully theyre the ones youre looking for

>>21198 Sadly the courses are comprised of videos + VMs, so it's way beyond what a regular book piracy site could handle. Thanks for the attempt to help, though. I did email the site owner and he never replied, so, I'm thinking he's running some kind of scam by uploading and promoting fake content on rapidgator, so people who are interested in pirating them end up having to buy an account (I used a free premium leech, but still, there's people who don't know about those).

>>21144 >i go every day really far to understand things i may never use, just because i like learning and understanding in general Yeah, this has started happening to me--I don't really know what happened, but a couple months ago I just caught this bug that caused me to stop playing vidya (like entirely) and focus my time on learning /sec & networking stuff. Just because it's out there? I dunno. Anyways, can't get my hands on enough of this stuff now.

Security camera recommendations? Needs to be something I can dvr to linux, backup without having to fuarrrk around and get the stuff with POE. I have been looking at chinese cameras but don't know what to buy yet.

>>18084 Should I have a separate laptop for doing sussy things on Tor? How useful is separate hardware for security and privacy?

>>21315 I really hope you aren't doing some messed up stuff on Tor, but to answer your question it's unneeded and dumb to use a separate laptop to access Tor, just install a GNU/Linux operating system and install the Tor browser on that, unless your laptop is compromised or something, then use a different laptop depending on how the malware is.

>>21315 Yes, you should have a separate device for "private" and or "anonymous" activity. Particularly if you are running Windows or Mac on the device you are currently using. Those operating systems are jeopardizing the firmware of your device, the compromise of the CPU firmware is an inevitability. Once that happens the entire device will be unusable if you wish for any activity you conduct upon it to remain "private" or "anonymous". It is not dumb at all to physically separate your activities by device, that is literally the only rational course of action one can take. Isolating activities with virtual machines is not sufficient, but it is slightly better than dual booting. In the event the device is compromised then your activities will be linked together regardless of the VMs. All of these methods are ineffective. I think you should have one device for activity linkable to your person, and a device for everything else. You'd be better off using Whonix as opposed to Tor Browser, don't bother using Tails it is soykaf, even Whonix is kind of starting to rot but it's better than the alternatives.

I found this honeypot scam on pastebin giving an SSH login to someone's "bitcoin wallet". Are there really people with the technical competence to use SSH who are falling for nigerian prince scams?

Does anyone know where I can pirate the bonus episodes of Darknet Diaries?

>>18084 How do you buy legal things online anonymously in the UK? The US has prepaid cards & privacy.com. There's pay-safe cards but those seem to be only accepted on betting sites. Is the only way monero?

If someone would remotely turn on my laptop camera, would the camera led indicator always turn on or is it possible to access the camera without turning the led on?

>>21383 >is it possible to access the camera without turning the led on? I don't know what make or model your laptop is, so I can't tell you for sure, but I'd assume that the indicator light isn't controlled by software. Assuming that the LED gets its power from the same circuit that connects your camera to the mainboard, the attacker would have to physically take possession of your laptop to do anything spooky. You should still cover up your camera with electrical tape while not in use

This post is for thread >68631 . pic rel. Let's go about the 3 protocols in the post. >tl;dr look at >overall for good practices >wifi If both phones are connected on the same wifi network and one of your phone gets compromised, it's safe to assume that, as long as you infected device is in the same network as the other one, the other uninfected device is at risk. Keep 1 phone on wifi, the other off wifi, or both on different networks, and the threat of infecting your other phone is mitigated. >bt I'm not really aware on bluetooth vulnerabilities, so I'm going on limited knowledge. I think the real threat is if your connect your phone on an infected/malicious bluetooth connection. Always make sure you are connecting to a known location, basically. Rule of thumb: If you aren't using BT 24/7, you should disable BT on your phone when you aren't using BT. BT Kinda needs you to confirm if you want to pair to something or not. I think i'd be difficult for a malicious actor to pair your phone with his equipment by himself, unless his equipment is spoofed to be a known device already paired on your phone, but by that point, that actor must really be after you. I think it's very unlikely. If your phone is communicating with the other one via BT and one of your phone gets compromised in some way, then BT will become a problem. Keep BT off when you aren't using it. Otherwise, BT, on your phone without walls and no interference, as a range of about 55 meters. if you leave a phone on a table and walk away with the other in another part of the building, you'll likely loose connection with the other phone. >NFC I think NFC can be interesting. Don't keep your phone close together if you think NFC can be an compromised entry. One in each pocket is fine, needs to be close between eachother to communicate with NFC. Someone whose crafty enough could compromise a public NFC thing in a way that you interact with both the legit NFC point and the malicious one at the same time. Once that happens, it can gather info about your phone to do something else, for example. I don't think the attacked can infect your phone directly with just NFC alone, but hey, maybe it is possible. Not an attack I've personally encountered to be honest. Kinda requires the attacker to install physical stuff next to NFC point. Just need one guy to notice it and the attack is mitigated. Akin to one of those malicious card readers in public ATMs. >Overall I think WiFi is the only real likely possible risk here. Once your phone is compromised via WiFi, then yeah it can spread thru other means like BT or NFC maybe. Good practices: -turn off BT when not needed -Stay on trusted wifi spots, don't connect to public wifi spots if you are wary of them. -inspect NFC points if they seem fishy. -turn off 1 phone and keep the other powered on if you don't need them both powered on. -practice a routine. use 1 phone in specific cases and the other in other specific cases. private at home for personal stuff, work at job for job stuff.

>>21418 Your options are: - luck, hope that publicly listed free proxies haven't been blocked yet. even if you find one, it won't last for long. - buy from a provider of residential/mobile proxies. expensive unless you're doing bulk web scraping - steal someone else's network resources (malicious javascript, warez, exploits, all require a little skill) - pay for a 4chan pass using bitcoins and post with Tor

Is it overkill to set up IDS/IPS on my personal computers? I only have ports open for p2p and connection to offsite backup and I don't allow ssh in at all at. But I've heard getting around firewalls isn't particularly difficult if your determined and know what your doing. And I'm not sure if leaving those ports available without some attempt to prevent anything but normal p2p traffic is a good idea, or if this is even something I should worry about. Most of the soykaf I'm reading seems to be targeted at commercial webservers and such.

How can I delete an old cringe youtube account on my irl name? it was from 8 years ago. i don't know the email or pass. is it over?

>>21448 You can just report the channel for having videos of you on it.

>>21450 it doesn't have videos of me. it basically is a ps4 yt livestream scheduled on a due date in 2015 with my irl name as the title, and it shows up when i google my name

>>21448 You can't. Youtube support is terrible and it's impossible to regain access if you don't recall the email.

>>21451 >>21448 You can try to contact the Google customer support and ask them to delete it from the Google search results (I think you have the right to ask for deletion). To get rid of the YouTube channel/videos, you could try to also contact the YT support and ask them to delete the data because of GDPR (alternatively, you could say that the account has been stolen, but note that Google has your access logs). Or you can just hope that they do something.

>>21358 Sysadmins get phished, expert foragers get poisoned, and crypto ballooned in recent years--it's unlikely but it's known to happen. For that matter, are you sure it actually is a honeypot? If you have reason to be suspicious, why take it at face value? Maybe the point was to get it noticed. At least, seems like we don't actually know and this might not be that straightforward.

>>18084 I want to root my Samsung Galaxy Tab A7 Lite, what is the most secure way I could do this? Also does this impact the security of the device? And if it does what can I do to mitigate security risks?

>>21466 >Also does this impact the security of the device? You get full access and apps can be run with root. It has the exact same caveats as running stuff as admin or root in Windows or Linux. A random app is not any better than a random shell script Sure, Android apps are somewhat sandboxed by default, but you shouldn't rely on that. Also, if you unlock the bootloader, anyone can flash a custom ROM on your device (and you device may be (?) more vulnerable to evil maid attacks?). >And if it does what can I do to mitigate security risks? Avoid running anything as root. Do not install or use apps that you do not trust.

>>21470 Thank you for answering my question, but what software should I use to root it? What is the most secure option?

I want to make payments for anonymous hosting. I'm not hiding from the government, mostly just from doxxing and hackers. I believe the transaction will look like: [bank account] -> [crypto exchange] -> [host company] What kind of information could each of these parties deduce? Let's assume Bitcoin, all know how to access the public ledger. > the bank company - (can they deduce the money went to the host company? what about after 3 of these payments?) > the server company, or someone hacking it - can they deduce which bank I use? > the exchange, or someone hacking it - I assume they can deduce the bank account and the host company?

>>21479 In that scenario the exchange (which if they accept bank payments can be presumed to have KYC and knows who you are) can know that you have sent a payment to that hosting company, the hosting company can know which crypto exchange you used to make the payment. Bank -> host or host -> bank could happen if the exchange gets hacked and leaks info, which has happened and is a possibility. It's often recommended against for multiple reasons to send crypto payments directly from an exchange, instead you should set up a wallet and withdraw the coins there first. If you did that, used XMR instead of Bitcoin, and purchased/withdrew a meaningful sum in advance instead of exactly the monthly bill amount as needed, it would significantly reduce your visibility.

>>21480 Thanks lainon, especially for that second paragraph. I was wondering if a wallet would be beneficial, even if the amount going in and out of it were around the same.

>>21419 https://privacyraccoon.tk/ ?

>>21482 That's it! Thank you.

>>18084 how private are distros like ubuntu or mint compared to modern windows is it worth making the leap or should i use a different distro as a beginner? how do you move windows files to linux without losing the data? also how do you switch to a private way of internet browsing after having your data/accounts all interconnected and completely compromised for years?

>how private are distros like ubuntu or mint compared to modern windows is it worth making the leap or should i use a different distro as a beginner? They don't send any "telemetry"/analytics data. I recommend the Mate edition of Linux Mint. >how do you move windows files to linux without losing the data? Copy them to external drive and drag&drop them to your home dir (/home/my_user/). An other way (but more risky if you make a mistake when partitioning the disk) is to use Windows disk management tools to shrink a partition (reserve 30GB or more for Linux) and installing Linux on the free space. >also how do you switch to a private way of internet browsing after having your data/accounts all interconnected and completely compromised for years? Make new accounts with new passwords. Delete the old accounts. If you can't remember the passwords, use a password manager (I recommend keepassxc). Be sure to backup the password database securely somewhere. Then use Tor Browser for private web browsing but don't log in to any account over Tor (install TorBrowser-launcher).

>>21514 I want to clarify regarding signing into accounts over Tor. The idea of signing into an account over Tor is not inherently harmful to the anonymity or privacy of the session, but in order to actually benefit from its anonymity you would have to keep the account only within Tor, never signing into it on the clearnet. If you ever have any concerns about your Tor session you can always just get a new identity.

>>21479 Depends on the cryptocurrency. In the case of Bitcoin, an adversary with enough time and effort could conceivably trace the coins back to Coinbase or Kraken or whatever exchange you use, although they likely wouldn't be able to find your identity. That kind of power is mostly held by law enforcement who can subpoena the exchange. While you could use mixers to try obfuscating the transactions/transfers, I personally don't trust them and would rather exchange for Monero, which inherently hides transactions and wallet amounts. The best-case method would be withdrawing cash, buying XMR on localmonero.co, and using that to pay for the hosting that you log in via Tor. But for your threat model, it might be okay to allow a central exchange to know your identity or allowing your bank to know that you buy crypto. It's up to you to decide.

For any lainon keeping an eye on the new and hot CVEs (AKA being email spammed with any sort of CVE that affects the software you use), has anyone noticed the huge spike of CVEs related to browsers? Chrome or Firefox, it don't matter. It is constant. at least one everyday. Am I just dumb and never noticed it?

>>21518 >an adversary with enough time and effort could conceivably trace the coins back to Coinbase or Kraken or whatever exchange you use, although they likely wouldn't be able to find your identity. That kind of power is mostly held by law enforcement who can subpoena the exchange. if lain is concerned about motivated attackers, social engineering those exchanges or using falsified subpoena requests is within the realm of possibility for non-LE actors. There's also the risk of the exchange being hacked and customer info being leaked like with some popular exchanges in the past. >localmonero they stopped allowing exchanges months ago and will be fully shutting down this week, so lain will have to find a different way of getting it. but yes xmr is best and if the hosting provider doesn't accept xmr, use an exchange from kyc-not to switch the xmr to whatever coin they do accept

Anyone know a free VPN add-on for Firefox with lots of IPs/servers? I don't mind if it's a honeypot, I just need it to have lots of IPs/servers, for free. I already know about Ur**nVPN (censoring just so no one thinks I'm advertising) but I need more.

>>25060 You mean a free VPN that also has a add-on?

>>25060 Do not use VPN addons. You should use Tor Browser if you want something free. Proton VPN has a freetier and they are reasonably trustworthy.

>>25060 Not an addon but Mullvad Browser? Made by the Tor Project and Mullvad IIRC. Like Tor Browser, just with (Mullvad) VPN instead of Tor. You can also configure your machine to connect to a VPN over Tor, but that is more work.

>>20606 Also for practical hacking, set up a lab. You can do this with two PCs or a PC and a Raspberry Pi, using a second router (one that’s isolated from your main network). This way, you can practice to your heart's content without worrying about causing real damage or getting caught.

don't both mullvad and proton vpn have addons doe

>>25187 Mullvad browser extension: 1. Not a requirement of using Mullvad 2. Provided directly by Mullvad, not some add-on "store" 3. Open source: https://github.com/mullvad/browser-extension 4. Doesn't do anything malicious or questionable 5. Has value-add features, not a basic proxy: SOCKS5 proxy (static exit IP option, IPv6 through IPv4 VPN tunnel, partial kill switch), connection check, multihop setup 6. These can all be done manually without running any of Mullvad's code, the extension and the VPN app are tools of convenience https://mullvad.net/en/help/mullvad-browser-extension Not that >>25060 would care about free proxy privacy and security implications. He is willing to run literal malware to get the job done in a new VM which he then deletes.

>>18084 What does it mean if Current i2p checksums are mixed up! Checksum from their official website (the Linux .jar): ea3872af06f7a147c1ca84f8e8218541963da6ad97e30e1d8f7a71504e4b0cee Calculated from my downloads folder: d70ee549b05e58ded4b75540bbc264a65bdfaea848ba72631f7d8abce3e3d67a Downloads/i2pinstall_2.7.0.jar ea3872af06f7a147c1ca84f8e8218541963da6ad97e30e1d8f7a71504e4b0cee Downloads/i2pinstall_2.7.0_windows.exe Also, can someone ping the i2p team and ask them about this? Preferably on a public forum (mailing lists or IRC or something) so other people can see it.