Your privacy - VPN & Firefox (+ other Gecko browsers)* rev. 0.3.11

[chan] Crypto-Anarchist Federation
Nov 12 19:29

+----------------------------------------------------------------------------------+ | VPN, privacy & Firefox (+ other Gecko browsers)* rev. 0.3.11 | +----------------------------------------------------------------------------------+ ========== VPN section ========== + You can try free OpenVPN configs or Softether: + OpenVPN: - OpenVPN - you can edit configs (.ovpn) with notepad to change encryption (line 88 - standard is not so good: AES-128-CBC - try AES-256-CBC instead) - OpenVPN - you can edit configs (.ovpn) with notepad to add option "block-outside-dns" (for example in line 104) to avoid DNS leaks - OpenVPN - if you add option "block-outside-dns" you don't need (Simple) DNSCrypt (my testing suggest that when you using OpenVPN without "block-outside-dns" option together with Simple DNSCrypt you are affected by DNS leaks) (Simple DNSCrypt not working for me, anyway this needs further testing...) - OpenVPN - you can edit configs (.ovpn) with notepad to add option "--remote-cert-tls server" (for example in line 21) to avoid "Man-in-the-Middle" attack https://openvpn.net/index.php/open-source/documentation/howto.html#secnotes [OpenVPN 2.1 and above] - https://www.vpnbook.com/ (few free OpenVPN configs) - http://www.vpngate.net/en/ (a lot of free OpenVPN configs) + OpenVPN manuals: - https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage - https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage - https://openvpn.net/index.php/open-source/documentation/howto.html - https://openvpn.net/index.php/open-source/documentation/security-overview.html + Softether: - http://www.vpngate.net/en/ - you need good server with strong encryption (standard is really bad: RC4 MD5) https://en.wikipedia.org/wiki/RC4#Security https://en.wikipedia.org/wiki/MD5#Security - I recommend to use DNSCrypt to avoid DNS leaks (check your DNS leaks - links are below) - http://www.softether.org/1-features/3._Security_and_Reliability + Softether disadvantages: - logging policy: 2 weeks [default] - when you will be disconnected then your IP will be exposed (there is no 'kill switch' feature) - DNS leaks... ========== Browser section ========== + Secure your privacy in Firefox: - by using addons like in IceCat [https://directory.fsf.org/wiki/IceCat] I mean: Adblock Plus (ABP), Disable WebRTC, Fat-Free Fox, No Resource URI Leak, NoScript, Privacy Badger, uBlock Origin (uBO), uMatrix etc. Additionally you can add: CanvasBlocker, Disconnect, FoxyProxy, Https Everywhere, Privacy Settings, Random Agent Spoofer. Take a look @ these sites: - https://web.archive.org/web/20170404173124/http://b.agilob.net/better-security-privacy-and-anonymity-in-firefox - http://configfox.sourceforge.net/ - https://www.bestvpn.com/make-firefox-secure-using-aboutconfig/ - https://www.bestvpn.com/privacy-news/control-firefox-privacy-settings-with-an-add-on/ - https://vikingvpn.com/cybersecurity-wiki/browser-security/guide-hardening-mozilla-firefox-for-privacy-and-security - https://www.howtogeek.com/102032/how-to-optimize-mozilla-firefox-for-maximum-privacy/ - http://www.ghacks.net/2015/07/01/control-privacy-settings-in-firefox-easily/ + If you would like to use Google Chrome anyway you can replace it with Chromium or Iron: - https://en.wikipedia.org/wiki/Chromium_(web_browser) - https://en.wikipedia.org/wiki/SRWare_Iron + Use Tor or Tor Browser (based on Firefox): - "We will never be able to de-anonymize all Tor users all the time. • With manual analysis we can de-anonymize a very small fraction of Tor users" - https://edwardsnowden.com/docs/doc/tor-stinks-presentation.pdf‎ - https://commons.wikimedia.org/wiki/File:Tor_Stinks.pdf - https://en.wikipedia.org/wiki/Tor_(anonymity_network)#Tor_Browser - https://www.torproject.org/docs/tor-manual.html.en - https://www.torproject.org/docs/faq.html.en - https://blog.torproject.org/improving-tors-anonymity-changing-guard-parameters + SSH/SOCKS/proxy: - Privoxy - https://en.wikipedia.org/wiki/Privoxy - https://lifehacker.com/5763170/how-to-secure-and-encrypt-your-web-browsing-on-public-networks-with-hamachi-and-privoxy - https://lifehacker.com/237227/geek-to-live--encrypt-your-web-browsing-session-with-an-ssh-socks-proxy - https://outflux.net/blog/archives/2006/12/07/paranoid-browsing-with-squid/ - https://embraceubuntu.com/2006/12/08/ssh-tunnel-socks-proxy-forwarding-secure-browsing/ - https://pl.terminal28.com/instalacja-i-konfiguracja-squid3-tor-privoxy-anonimowosc-w-sieci [translate with your favourite translator] - https://www.reaper-x.com/2011/10/17/how-to-install-squid-proxy-on-windows/ - https://www.unixmen.com/install-configure-squid-proxy-ubuntu-debian/ - https://www.cyberciti.biz/faq/debian-ubuntu-linux-install-onionrouter-software/ - Pirate Tor Browser - http://www.softpedia.com/get/Internet/Browsers/PirateBrowser.shtml or http://www.majorgeeks.com/files/details/piratebrowser.html + Change your UserAgent frequently (get UA addon for your browser). Example of UA sites: - Random Agent Spoofer addon for firefox: https://addons.mozilla.org/en-US/firefox/addon/random-agent-spoofer/ List of UA sites: - http://www.browser-info.net/useragents - http://mybrowseraddon.com/custom-useragent-string.html - https://developers.whatismybrowser.com/useragents/explore/ - https://udger.com/resources/ua-list - https://techblog.willshouse.com/2012/01/03/most-common-user-agents/ - http://www.useragentstring.com/pages/useragentstring.php + Fingerprint (fingerprinting algorithms): - https://en.wikipedia.org/wiki/Fingerprint_(computing) - https://en.wikipedia.org/wiki/Canvas_fingerprinting - https://en.wikipedia.org/wiki/Device_fingerprint - https://browserleaks.com/canvas + Check your browser privacy: - https://browserleaks.com/ - http://browserspy.dk/ - https://panopticlick.eff.org/ + Other sites worth mentioning: - riseup.net/en/better-web-browsing - privacytools.io - https://en.wikipedia.org/wiki/Category:Internet_privacy - https://en.wikipedia.org/wiki/Category:Crypto-anarchism ========== OS section ========== + Check Tails Linux: - https://en.wikipedia.org/wiki/Tails_(operating_system) - https://www.wired.com/2014/04/tails/ + Check Whonix Linux: - https://en.wikipedia.org/wiki/Whonix - https://www.whonix.org/ + Secure you DNS with DNSCrypt: - For Linux follow this: http://www.webupd8.org/2014/08/encrypt-dns-traffic-in-ubuntu-with.html - For Windows - you need: "dnscrypt-winclient" or "Simple DNSCrypt". URLs: - https://simplednscrypt.org/ - https://github.com/jedisct1/dnscrypt-proxy/wiki - https://github.com/Noxwizard/dnscrypt-winclient (Simple DNSCrypt not working for me (I'm still using "block-outside-dns" option in OpenVPN config file). (Anyway this needs further testing...) + Check your DNS leaks: - https://ipleak.net/ - https://www.dnsleaktest.com/ - https://whoer.net/ __________________________________________________________ * Other Gecko browsers - this means it may also work with: Airfox, Beonex Communicator, Camino, Comodo IceDragon, Conkeror, Classilla, Firefox for Android, Flock, Galeon, Ghostzilla, HP Secure Web Browser, IceCat (GNU IceWeasel), K-Meleon, Kazehakase, Kirix Strata, Lotus Symphony, Lunascape, MicroB, Minimo, Netscape 6, Nightingale, Oxygen, Pale Moon, Portable FireFox, SeaMonkey, Swiftfox, Swiftweasel, Sylera (for mobile), TenFourFox, Timberwolf (AmigaOS 4), Tor Browser, Waterfox, xB Browser https://en.wikipedia.org/wiki/Gecko_(software) Any suggestions are welcomed. Source: https://beamstat.com/chan/privacy https://beamstat.com/chan/Crypto-Anarchist%20Federation (Bitmessage channel)

[chan] general
BM-2cW67GEKkHGonXKZLCzouLLxnLym3azS8r

Subject Last Count
Critical vulnerability in v0.6.2 Feb 17 14:58 6
porno Feb 17 14:23 1
hire a hacker/access database/spy Feb 17 14:00 7
MeinCoin Crypto Research - Screenshot Feb 17 13:19 3
The image of Allah Feb 17 11:14 1
Don't forget to flush Feb 17 11:14 8
hire a hacker/delete criminal records Feb 17 09:01 4
Catching a cheating spouse Feb 17 08:01 5
Download it. Feb 17 07:55 2
teen girl Feb 17 06:42 23
A GUY WILL PERSUADEA GIRL TO SUICIDE! Feb 17 02:02 7
sup Feb 16 17:04 3
View from above Feb 16 16:27 2
CHEATING SPOUSE Feb 16 14:19 2
$ cd PyBitmessage ; git log | grep Author | sort -u | blacklist Feb 16 08:08 2
My confession Feb 16 08:01 3
Smell this Feb 15 16:32 2
Authenticity Feb 15 16:01 2
Rere Fact Feb 15 15:59 2
Clearing of Criminal record Feb 15 15:58 2
Naked teen girl Feb 15 15:58 1
Eliza 1 Feb 15 10:27 2
Eliza 3 Feb 15 09:47 1
Eliza 2 Feb 15 09:36 1
Help a child Feb 15 08:59 2
Spouse hunter Feb 15 08:58 2
Love for hacking Feb 15 08:58 2
Mitigating exploited software with firejail Feb 15 05:25 1
(no subject) Feb 15 02:49 15
NOTICE: Address Revocation Feb 15 02:27 1
Hack into your cheating spouse whatsapp and bank Feb 14 10:46 3
Genghis Koyn Broadcast : BM-5oDU4A7qT6dTKoJJGRkp3bUiZcXMcG8 Feb 14 10:41 2
looool Feb 13 23:25 1
Trump for 2020 Feb 13 21:10 2
Looking for historical copy of bitmessage objects Feb 13 17:56 1
Latest commit borked Feb 13 17:00 4
Death to all christians! Feb 13 15:57 1
Now wash your hands Feb 13 10:13 3
Bitcoin is a failure Feb 13 09:16 1
beach girl Feb 12 23:56 8
vv Feb 12 21:43 2
Image Feb 12 19:06 1
This denial of service shit needs to be patched Feb 12 18:51 7
What my dog did Feb 12 16:18 1
Miley-Cyrus-nude-003 Feb 12 16:17 3
Miley-Cyrus-nude-004 Feb 12 15:50 2
Now wipe your ass Feb 12 13:11 1
Bullshit Feb 12 04:22 1
Peckerwood Feb 12 04:17 1
so happy Feb 11 19:16 1
That feels better Feb 10 14:18 2
HALKETT, FREDERICK GODAR Feb 10 11:31 2
having him desirous for the release Feb 10 11:29 2
oppenheimer research to spheres Feb 10 11:02 2
93A5BA2BEF0A6EC71435CF417A0695EC Feb 10 10:42 1
Marijuana Cookbook Feb 10 10:36 1
[chan] 411 BM-2cW53MzWqtod8TA6vybdUeqd2LhTuXCX3L Feb 10 10:26 2
qwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyui Feb 10 09:32 1
qwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyuiqwertyui Feb 10 09:31 2
3F414A2933B1D3E26F3F8E73D14008FA Feb 10 09:31 1
z Feb 10 09:25 1
Any hoaxes under a set-up such as this could almost certainly be exposed Feb 10 09:24 1
mommy Feb 10 08:39 1
Culture Feb 10 08:27 1
You don't need to be a pervert. Feb 10 08:03 2
You should watch your mouth Feb 9 19:42 1
Fwd: Re: Did everyone else's BM starting freezing up Feb 9 12:31 1
Not much Feb 9 12:00 2
test2 Feb 9 11:44 1
test1 Feb 9 11:44 1
The Canonical List of Telephone Answering Machine Messages Feb 8 17:07 5
Forgiven Feb 8 16:39 4
Nationalism Feb 8 16:37 7
Extra Large! Feb 8 16:13 3
KCaH Needed Feb 8 08:21 1
sqlite> update inbox set folder="quarantine" where subject like "Warning! denial%"; Feb 8 03:52 1
DadaDodo for Windows Feb 7 11:37 2
Just for you Feb 7 11:37 1
Dark web child porn site ran ‘much better’ with FBI in charge Feb 7 09:15 1
WTF #centercore #falconheavy?? Feb 6 22:13 1
Доступ к кошельку Сатоши Накомото. Feb 6 17:58 1
Dead and gone Pakistan Feb 6 17:13 1
Searching for somewhat retro software Feb 6 12:53 3
channel flooder special Feb 6 11:40 4
Chew on this! Feb 6 11:01 3
ewe eet crae awn Feb 6 10:48 1
In the 'Bog of Eternal Stench' Feb 5 19:01 6
My CB radio Feb 5 13:10 1
pedo punisher requires apologies from the perverts Feb 5 12:52 2
boat girl Feb 5 12:50 1
beach girls Feb 5 12:37 1
There's no shortcut to fixing credit, I charge no upfront fee but patience must be paid in full Feb 5 08:38 30
NO Feb 4 22:14 1
better out than in Feb 4 19:58 2
PizzaGate - made in Moscow Feb 4 16:38 3
Alex Jones's InfoWars - a copy-paste RussiaToday outlet Feb 4 15:34 1
Links between Trump associates and Russian officials Feb 4 15:17 1
60 right-wing terrorist plots have been uncovered in the U.S. Feb 4 12:50 1
I did this Feb 4 12:37 5
posting pictures of poop is evil. it is not appropriate human behavior. it is wrong and you don't have a right to subject people to such disgusting behavior. Feb 4 12:32 8