lainchan / sec

(untitled)

Dozer · 2022-04-01 07:17
I'm learning C right now, likely going to learn some C++ to be able to apply object orientation as needed. While I'm learning, I need to think of a project to actually practice coding rather than just being able to read code and fix code or just know it in theory. The things that interest me are anonymity, security, and privacy. I'm not interested in making anything like a firewall or antivirus or soykaf like that, but something that would be useful to the greater anon and hacking community. With that said, I'd like input from others. What is anon needing developed? How can I help make others more anonymous? There are already darknets, encrypted communication solutions, stuff like pihole to fight against trackers, at least one tool for resisting fingerprinting based on things you write, tools for leaking, tools to stripping metadata, etc so I'm drawing a blank as far as something new and I don't want to have a case of coming up with a new thing that's been done many times like the ass load of soykafcoins.
Jet Black · 2022-04-03 19:25
>>19016 >I'm learning C right now You might be interested in this thread --> >>>/λ/29649
Anonymous · 2022-04-04 02:00
I am in the same boat as you, except I have a number of projects I'm starting to work on. (key in email field if anyone ever considers doing and if/when i get to it) The one thing that I really aspire to, is a dummy traffic upgrade of something like Tor- the 'weakness' of Tor is that, while it is true that it significantly increases the costs of tracing traffic, bandwidth correlation could theoretically be done. My goal is to eliminate retroactive bandwidth correlation entirely, see the so-called "Anonymity Trilemma". Imagine a network in which users are transmitting at a fixed rate to their chosen entry relays, and another fixed rate through their 3 chosen relays. The relays themselves could still attempt correlation, but the key is that no one else possibly could. Well, a global adversary could drop packets on purpose and observe when [pseudonym] goes offline.... but why use a pseudonym? Anonymity is ALWAYS stronger. My idea would also have a few more bells and whistles, like easily letting you proxy into it via wireless (imagine this system, but with the membership concealment of connecting to a relay via chain of physical wireless relays!), decentralized, with a web of operator trust (you could require that X hops use the parts of the web of trust you have opted into. Anonymity requires that relay operators are transparent and not botnets.) I'm sure the bandwidth expenditure is expensive, but that doesn't mean such a thing shouldn't be made at all. I'm not at the required skill level quite yet I think, but I'll be trolling bad global actors with ideas like this until the day I die for sure.
Masami Eiri · 2022-04-04 02:04
>>19034 For clarification about one point, the logs of the infrastructure traversed by packets between relays, like ISP logs or the packets NSA copies at internet exchange points, become almost meaningless for retroactive tracing. Not entirely, because you could still tell who is connecting to the net (pool of potential suspects if net is too small) unless an effort is put in to hide that too (membership concealment).
Linda Lee · 2022-04-04 13:14
>>19016 https://stackoverflow.com/questions/388242/the-definitive-c-book-guide-and-list
Switch · 2022-04-04 16:06
>>19016 Contribute to a stacking Wayland compositor, like labwc: https://github.com/labwc/labwc There isn't any usable stacking Wayland compositor but there is a good tiling Wayland compositor, called Sway (a drop-in replacement for i3/i3-gaps).
Elliot Alderson · 2022-04-08 02:31
>>19016 >What is anon needing developed? I have always wanted a FOSS alternative to https://masterpiece-generator.org.uk/overview/ . The site seems to be under maintenance right now but you can check the generators like https://www.character-generator.org.uk/personality/ . I always have a hard time coming up with good fake personal info when signing up to some services or when communicating online anonymously. C may not be the right fit for projects like these though as it requires a lot of string handling and maybe some ML. Anyway, I just wanted to put it out there in case anyone is interested. I don't have time to do it myself. Alternatively, you can try implementing cryptographic algorithms for fun or even image and audio steganography (audio steganography was used in Mr. Robot for storing personal info on music CDs). I don't know about other lainons but I will be excited to test it out.