est.social

0 postitusega0 osalejaga0 postitust täna

Kevin Karhan :verified:<a href="https://infosec.space/tags/WhatsMissing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WhatsMissing</a>: A tool to check if <a href="https://infosec.space/tags/TorBridges" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorBridges</a> are still available/online/reachable that one can use either <a href="https://infosec.space/tags/standalone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#standalone</a> (with <a href="https://infosec.space/tags/TorBrowser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorBrowser</a> and/or <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tor</a> Expert Bundle) or on <a href="https://venera.social/profile/tails_live" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@tails_live</a> / <a href="https://fosstodon.org/@tails" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@tails</a> / <a href="https://infosec.space/tags/Tails" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tails</a>. <ul><li>Cuz I do run into issues and kinda want to sort <a href="https://infosec.space/tags/Bridges" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bridges</a> by availability so I don't waste time on a <a href="https://infosec.space/tags/TorBridge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorBridge</a> that is down and also thin-out the list of bridges that ain't online anymore.</li></ul>Whilst I do acknowledge that <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@torproject</a> do disrecommend having a huge list of Tor Bridges on hand, I do regularly need them for contacts who are behind a <a href="https://infosec.space/tags/GreatFirewall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GreatFirewall</a> and can't <a href="https://infosec.space/tags/SSH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSH</a>-Tunnel out of it.<ul><li>Sadly <a href="https://infosec.space/tags/BridgeDB" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BridgeDB</a> <a href="https://bridges.torproject.org" rel="nofollow noopener noreferrer" target="_blank">doesn't offer</a> good <a href="https://infosec.space/tags/filtering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#filtering</a> options so one can't just query types effectively like "I need <a href="https://infosec.space/tags/webtunnel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webtunnel</a> on <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IPv4</a>" or "I can only use Ports 80 & 443 on <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IPv6</a>" which may work.</li></ul>Espechally being able to filter for <a href="https://infosec.space/tags/IPv4only" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IPv4only</a> and not just <a href="https://infosec.space/tags/IPv6only" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IPv6only</a> is something I miss, alongside the filter for <a href="https://infosec.space/tags/PluggableTransports" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PluggableTransports</a> type as <a href="https://social.librem.one/@guardianproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@guardianproject</a> <a href="https://infosec.space/tags/Orbot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Orbot</a> seems to only handle <a href="https://infosec.space/tags/obfs4" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#obfs4</a> and not webtunnel or <a href="https://infosec.space/tags/meek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#meek</a> at all...<ul><li>I'm pretty certain that merely pinging a bridge at it's port isn't working as a shure-fire way to check for it's availability.</li></ul>

Kevin Karhan :verified:<a href="https://chaos.social/@wmd" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@wmd</a> <a href="https://denden.world/@miqokin" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@miqokin</a> I've yet to find a nation that <a href="https://chaos.social/@wmd/113899189531053167" rel="nofollow noopener noreferrer" target="_blank">criminalizes</a> <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@torproject</a> but not <a href="https://infosec.space/tags/VPN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VPN</a>|s that facilitate the same...<ul><li>Also commercial VPN providers are relatively easy to detect, filter & block unless they support <a href="https://infosec.space/tags/SSH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSH</a>-Tunneling.</li></ul>Whereas <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tor</a> has multiple ways to circumvent <a href="https://infosec.space/tags/InternetCensorship" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InternetCensorship</a>, includibg multiple <a href="https://infosec.space/tags/proxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#proxy</a> & 9bfuscation systems like <a href="https://infosec.space/tags/obfs4" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#obfs4</a>, <a href="https://infosec.space/tags/meek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#meek</a>, <a href="https://infosec.space/tags/webtunnel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webtunnel</a> and regular <a href="https://infosec.space/tags/TorBridges" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorBridges</a> on included, public query-able amd private lists...

Kevin Karhan :verified:One thing that <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@torproject</a> is missing is a way to check availability and reachability of <a href="https://infosec.space/tags/Bridges" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bridges</a> with a simple tool. <ul><li>This is kinda vital as I do occasionally setup private <a href="https://infosec.space/tags/bridges" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bridges</a> and also want to enshure the private <a href="https://infosec.space/tags/TorBridges" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorBridges</a> list I have is up to date.</li></ul>Manually adding/removing one <a href="https://infosec.space/tags/bridge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bridge</a> after the other in <a href="https://infosec.space/tags/TorBrowser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorBrowser</a> and see if those connect is a relatively inefficient process and merely pinging them isn't viable either, espechally on <a href="https://infosec.space/tags/meek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#meek</a>, <a href="https://infosec.space/tags/obfs4" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#obfs4</a> and <a href="https://infosec.space/tags/snowflake" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#snowflake</a> type bridges.<ul><li>Now to make the obvious clear: I'd NEVER publicly list any <a href="https://infosec.space/tags/TorBridge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorBridge</a> on my <a href="https://github.com/greyhat-academy/lists.d" rel="nofollow noopener noreferrer" target="_blank">lists.d repo</a> obviously, because that would only harm <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tor</a>... </li></ul>I'm not even asking for like a fancy tool that is as clean as <a href="https://infosec.exchange/@micahflee" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@micahflee</a> 's <a href="https://infosec.space/tags/OnionShare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OnionShare</a> but merely a <a href="https://infosec.space/tags/CLI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CLI</a> thing (if necessary I'd build some <a href="https://infosec.space/tags/bash" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bash</a> script) to automatically attempt to connect to said bridge and either spit out an ok or error. <ul><li>Something one can just feed with a text file and that'll spit out a different file with ok/working bridges and/or discards the non-working ones from the list.</li></ul>And yes, this tool is kinda crucial as I want to quickly sift through a load of bridges that work on restricted ports (22, 80, 443) and thus can bypass the <a href="https://infosec.space/tags/GreatFirewall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GreatFirewall</a> and <a href="https://infosec.space/tags/Roskomnadzor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Roskomnadzor</a> filtering...<ul><li>So people fleeing can at least safely communicate.</li></ul>If anyone at <a href="https://infosec.space/tags/TorProject" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorProject</a> needs more details, I'll gladly exchange them in a secure manner. <ul><li>I also applied for a <a href="https://infosec.space/tags/gitlab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gitlab</a> account so I can help improve <a href="https://infosec.space/tags/documentation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#documentation</a> (ideally with some nice step-by-step screenshots so even "<a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechIlliterates</a>" can i.e. add a <a href="https://infosec.space/tags/bridge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bridge</a>)...</li></ul>

Kevin Karhan :verified:<a href="https://void.lgbt/users/ActuallyAubrey" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ActuallyAubrey</a> That depends on the juristiction in question, the plan & provider in question as well as used hardware in question.<ul><li>In case of even remotely suspected <a href="https://infosec.space/tags/Stalkerware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Stalkerware</a> I do recommend to get personally-owned, controlled, secured and hidden hardware to enable unsurveiled comms.</li></ul>Consider telephony & SMS inherently & unfixably insecure.<ul><li>If in doubt get a new Android with an anonymous prepaid SIM that has affordable data options and use <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@torproject</a> / <a href="https://infosec.space/tags/TorBrowser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorBrowser</a> and <a href="https://infosec.space/tags/Orbot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Orbot</a> with <a href="https://infosec.space/tags/TorBridges" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorBridges</a> on ports 80 & 443 which use <a href="https://infosec.space/tags/meek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#meek</a> & <a href="https://infosec.space/tags/webtunnel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webtunnel</a> transports, so any surveiling party will only see non-suspicious HTTPS traffic.</li></ul>OFC a maliciously configured CPE/Router can log & report all pachets that travel through, but <a href="https://infosec.space/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> & <a href="https://infosec.space/tags/HTTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HTTP</a> or any unencrypted comms are susceptible.

Viimatised otsingud

Otsimisvalikud

Administraator:

Serveri statistika:

#meek