lainchan / tech
Physical Privacy/Anonymity
Anonymous · 2015-06-09 08:33
Tech used in some physical way (no software) to better privacy and/or anonymity:
- Radio Jammer[1]:
Used as a scrambler[8] to eletromagnetic leaks from your eletronic device, including (but not limited to) Van Eck,
so you don't need a faraday cage.
>A radio jammer is any device that deliberately blocks, jams or interferes with authorized wireless communications
- Analog White Noise Generator[2][3][4]:
Used to prevent keyboard sound analyses, hdd sound analyses and other acoustic side channel attacks in general.
>Modern acoustic cryptanalysis mostly focuses on the sounds produced by computer keyboards and internal computer components [...]
>A vibration masker placed under the keyboard will radiate sufficient masking to block surveillance without disturbing the user.
- Display privacy filter[5]:
Used to mitigate leaks through surveillance cameras and/or people behind you. You can reduce the display constrast too, this improve
the effectiviness. I's a collimator effect[6].
>A collimator is a device that narrows a beam of particles or waves. To "narrow" can mean either to cause the directions of motion
>to become more aligned in a specific direction (i.e., make collimated light or parallel rays), or to cause the spatial cross
>section of the beam to become smaller (beam limiting device).
- Change your keyboard layout and remove the marks:
Even if you use a white noise generator, people still being able to see you typing.
You can use another keyboard layout (I suggest QGMLWB from Carpalx project[9]) and then remove the keys characters.
- Use direct current energy[7]:
>power analysis is a form of side channel attack in which the attacker studies the power consumption of a cryptographic hardware
>device (such as a smart card, tamper-resistant "black box", or integrated circuit).
- Don't use sticky:
They can say much of you and your software.
Any other idea?
[1] https://en.wikipedia.org/wiki/Radio_jamming
[2] https://en.wikipedia.org/wiki/Acoustic_cryptanalysis
[3] https://en.wikipedia.org/wiki/White_noise_machine
[4] https://en.wikipedia.org/wiki/Sound_masking#Computer_Keyboards
[5] http://solutions.3m.com/wps/portal/3M/en_US/3MScreens_NA/Protectors/Privacy/
[6] https://en.wikipedia.org/wiki/Collimator
[7] https://en.wikipedia.org/wiki/Power_analysis
[8] https://en.wikipedia.org/wiki/Scrambler
[9] http://mkweb.bcgsc.ca/carpalx/?full_optimization
ps: sorry for cross chan post... the other chan seem just want memes and no real discussion. I hope here we can do it better.
Anonymous · 2015-06-09 09:28
I would love to see a series or something about a guy that faces this kind of surv.
Or a documentary about Appelbaum, that would be close enough.
>Radio Jammer
They can jam your jammer with EMP
> Analog White Noise Generator
You seen this? http://newsoffice.mit.edu/2014/algorithm-recovers-speech-from-vibrations-0804
>Display privacy filter
Or better: http://www.instructables.com/id/Privacy-monitor-made-from-an-old-LCD-Monitor/
>Change your keyboard layout and remove the marks
A towel over your hands is a better solution because it's not vulnerable to frequence analysis. Leaving the marks would be better for obfuscation. You trick them into thinking you asdf all day.
>Carpalx project
Seems good, but I recommend getting any alternative layout and modifying it into a custom one, depending on how you like it.
>power analysis
Woah that's brilliant.
How about a laptop with all those defenses built in?
Anonymous · 2015-06-09 09:59
Here is the thread on fullchan if someone want to follow too:
fullchan4jtta4sx.onion/tech/res/251026.html
The current ideas on the other thread: use virtual keyboard (good idea, this would reduce the risk
of acoustic attacks, but it would require a Windowing System and it's not good for security,
especially Xorg 11) and "build a profile for yourself" (just set a automated script, a cron job,
to execute wget or curl and get some pages on google and others mainstream websites; don't forget
to change the http-header fields like "accept" header and user-agent).
Other idea: don't use common locks. See this video:
https://www.youtube.com/watch?v=nsJZ_kKjXcE
Use Abloy locker or any cylindrical locks.
>>7352
>I would love to see a series or something about a guy that faces this kind of surv.
Me too, but this kind of guy is too underground for a "series".
>They can jam your jammer with EMP
Well, a EMP would destroy the evidences... and a powerful jammer is very difficult to stop.
But, I agree, a faraday cage together with a jammer is recommended.
>You seen this?
Yeah, but this would require a camera on the scene and since you're using a jammer this would
be difficult to do without cables.
>A towel over your hands is a better solution
Agreed. But you'll seem strange and call more attention. Maybe some kind of glove?
>alternative layout and modifying it into a custom one
I personally already did it. Here is my OpenBSD /etc/wsconsctl.conf :
http://paste.debian.net/plainh/b7c78f73
>How about a laptop with all those defenses built in?
I almost did it in a x60. Pic related is all the crap that I removed.
Anonymous · 2015-06-09 10:19
One Time Password device.
It generate random keys in a period of time. So, even if someone try to crack your crypto using brutal force, the key will change in a short period of time.
There a open hardware for it:
https://www.nitrokey.com
I just need to know how to adapt it to softraid_crypto keydisk and root pass.
Anonymous · 2015-06-09 11:15
>>7353
>a "series"
Is it "a serie"? I'm not a good englishman.
>But you'll seem strange and call more attention
Yeah, I like it because it's what Snowden does.
>I personally already did it
Same. But not for security or speed reasons, it just makes my hands hurt less.
>I almost did it in a x60
I've heard a lot about that computer (or the T60) being the first choice for a free computer. Why's that? Libreboot support, old and possibly not backdoored hw?
>Pic related is all the crap that I removed.
lol cool. Wanna list the parts?
>>7354
>There a open hardware for it
Maybe you can save the buck if using some free-firmware USB drive, but I don't know if they exist yet.
Anonymous · 2015-06-09 11:52
>>7355
>Is it "a serie"?
Yeah, english is not my first language.
>Why's that? Libreboot support, old and possibly not backdoored hw?
Exactly. If you flash libreboot this hardware don't run any microcode.
This mean not tricky's with your data (see: http://io.smashthestack.org/me/ )
But I would not suggest it, since it use x86 architecture. For security there
better isa/microarchitectures like SPARC64.
>Wanna list the parts?
Sure:
- Wifi board;
- Bluetooth card;
- WLAN Modem (and modem jack and the Antennas above the display).
- SIM card;
- Microphone;
- Speaker;
- Infra-red;
- IEEE1349 (Firewire);
- HDD module;
- GPU (parcially);
- VGA port;
- CardBus;
- 2x USB;
- SD slot;
- Leds on display driver board;
- Dockstation port;
- PCI ports;
- CMOS battery; and
- Adhesives (Mac addresses and serial number leak).
I also removed all the lights (leds), due to this:
https://www.youtube.com/watch?v=tmZ4yXuDSNc
There a antenna above the display on almost all thinkpads (>2005), that you
can't remove without disassemble all the display. I breaked my LCD trying to
remove it.
Anonymous · 2015-06-09 11:55
>>7355
>but I don't know if they exist yet.
Yes, you can use Teensy++ 2.0 but the Nitrokey have a crypto processor inside, so the entropy generated is really random and not pseudo random (like in software).
Anonymous · 2015-06-09 12:08
>>7356
There a piece hardware on motherboard used for onboard ethernet controller.
If you remove it you disable all the possible leaks related with firmware of ethernet.
I'm not able to find it on my x60, but the pic related show the schematics (R422).
Anonymous · 2015-06-09 19:06
>>7349
Isn't that Shia LaBouf in the pic?
Anonymous · 2015-06-09 19:08
>>7364
Yes:
http://thecampaignbook.com
Anonymous · 2015-06-11 13:47
See >>>diy/730 . Related?
Anonymous · 2015-06-11 15:05
>>7392
>>>/diy/730
;) Try it in this format next time.
Anonymous · 2015-06-22 17:33
>>7349
I thought it was posted here first. Kek