OK, just a wild idea I had all of 3 seconds ago.
For chaff 'history', talk to the nice folks at TOR, and ask them to modify their program some what like this:
Those who use TOR for a school-based purpose *cough me cough* probably aren't doing anything too illicit with it. Ergo, we figure out a list of 'censor friendly' sites and use TOR to shift around these sights and send them to PL to use as history, to help with chaff.
This <strong>should<should> work around those oh-so-pesky packet sniffers, because we are actually using real history. Sneaky.
(Or possibly very stupid and 100% detectable, as I really don't know my donkey from my elbow when it comes to this kind of stuff)
F3l1x
"The only thing that hasn't changed since 9/11 is that the government is still *u**ing up"
-Steal This Book Today
This place seems almost stagnant, a pitiable state given the alarming nature of the threat we should be addressing. I wish you all well and hope you will find some motivation to stimulate the development of ParanoidLinux.
Sp00ky
"No matter how paranoid you are, it isn't paranoid enough." -- X-files
I am on Dial Up. Torrents do not really work for me. I usually go up to the University Library to download something like this, but the University Library does not allow Torrents. Perhaps someone can put a Download onto Ibiblio?
i'm downloading the torrent. once it arrives, i'll host it behind a htpasswd on my server, so people who can't get it via torrent can dl it more easily.
________________________ http://softpixel.com/~bbinkovitz
I think that several layers of simplicity are required. Like having the logon completely seperate from the central OS. Or a rand letter numeral code generator that changes every quarter hour via a complex mathematical equation. or even the same letter codes you use, but with a twist, like going one letter down the alphabet for each of them. ex: code: A F b n is ACTUALLY B G c m.
I've read Doctorow's book, and I was impressed with it. Now here's this Paranoid Linux, and I can't
feel it's an inappropriate idea. But my topic is *how to do it.* And I have some ideas about that.
I think it wants to be small and simple. Small like Puppy Linux; simple like earlier unixes before
all the elaboration came in. I believe the current trend which seems to aim for as far as possible
from simplicity, is an emulation of Microsoft and a mistake in itself. Part of the beauty of math is
that it's pared to a bare minimum, I think this new Linux needs that as a standard.
And, that it wants to be structured like a Rescue Linux, so that it can live on a flash or on a disk
and be used to answer difficult questions like, 'Have I been rooted?' which you cannot answer from
within your system. Further, this gives Paranoid Linux a second application, always a good thing
to have in hand.
And, *watch out* for complexification! It's dangerously seductive. It also *always* offers new
ways to crack into the system. I recall an old engineering motto: Simplificate and add lightness!
So that's what I'd like to see in this new Paranoid Linux.
Personally I don't think this project should begin with trying to create a fully fledged distro.
I think it would suffice to have a forum and a wiki dedicated to security in linux, instructing people on how to secure local files from intrusion, how to browse the web without arising suspicion (tor/chaff), how to communicate through the internet privately (otr), and perhaps look at where the gaps are today in the software and try to get people together to write new programs to fill them.
Eventually when this has been tested etc a distro could be build around intergrating these features into and easy to install, lightweight, distro
Additionally, the goals for this project don't seem to be layed out simply.
Some things which I would consider the goals of this project (feel free to dissagree):
Making sure no-one can see what you're doing on the web
Making sure you're not suspected of doing anything suspicious even if they're not sure what
Maintaining anonymity so if someone reads something that was posted on the web, it can't be traced back to you
Have the ability to know 100% who you're communicating with if both parties consent (so as not to cancel out the last one)
Keep no record of things you have done/accesesed anywhere on the local machine
Keep the local machine secure from outside threats
Keep data on machine secure in the event of the machine falling into the wrong hands
Not sure if anyone is going to read this, but I would like to help as much as I can in making this a reality, is there a forum or something for this?
Take it from me that the government will do anything in it's power to take away your rights.
The feds claimed that I am a terrorist yet all of the following apply:
- I have never shot a living thing
- I have never built a bomb
- I don't have a nuclear reactor
- I don't have any an never had any missiles
and so on.
Keep up the good work. Look forward to using it. I use various proxies and secure networks from time to time, but making it faster, easier, and permanent is important.
It seams that ther's always an excuse for putting yet another stick in the front wheel of communal development or w/e you wanna call it.
- "There are terrorists in the world, so lets put surveillance on everyone just to make sure"
- "There are illegal file-sharing going on somewhere in the world, lets block all the network traffic on the (example) torrent protocol!"
And the list grows bigger every day for the excuses that the government can come up with. Pure (pardon me) BS from some up-tight people to control the "small" people. This is my own personal thoughts so.
Comments
Semi-chaff idea
OK, just a wild idea I had all of 3 seconds ago.
For chaff 'history', talk to the nice folks at TOR, and ask them to modify their program some what like this:
Those who use TOR for a school-based purpose *cough me cough* probably aren't doing anything too illicit with it. Ergo, we figure out a list of 'censor friendly' sites and use TOR to shift around these sights and send them to PL to use as history, to help with chaff.
This <strong>should<should> work around those oh-so-pesky packet sniffers, because we are actually using real history. Sneaky.
(Or possibly very stupid and 100% detectable, as I really don't know my donkey from my elbow when it comes to this kind of stuff)
F3l1x
"The only thing that hasn't changed since 9/11 is that the government is still *u**ing up"
-Steal This Book Today
So long, and thanks for all the fish ...
Folks,
This place seems almost stagnant, a pitiable state given the alarming nature of the threat we should be addressing. I wish you all well and hope you will find some motivation to stimulate the development of ParanoidLinux.
Sp00ky
"No matter how paranoid you are, it isn't paranoid enough." -- X-files
Just looking at downloading
I am on Dial Up. Torrents do not really work for me. I usually go up to the University Library to download something like this, but the University Library does not allow Torrents. Perhaps someone can put a Download onto Ibiblio?
Thanks for listening.
i'm downloading the torrent.
i'm downloading the torrent. once it arrives, i'll host it behind a htpasswd on my server, so people who can't get it via torrent can dl it more easily.
________________________
http://softpixel.com/~bbinkovitz
rand letter codes
I think that several layers of simplicity are required. Like having the logon completely seperate from the central OS. Or a rand letter numeral code generator that changes every quarter hour via a complex mathematical equation. or even the same letter codes you use, but with a twist, like going one letter down the alphabet for each of them. ex: code: A F b n is ACTUALLY B G c m.
A new Linux! Good. But....
I've read Doctorow's book, and I was impressed with it. Now here's this Paranoid Linux, and I can't
feel it's an inappropriate idea. But my topic is *how to do it.* And I have some ideas about that.
I think it wants to be small and simple. Small like Puppy Linux; simple like earlier unixes before
all the elaboration came in. I believe the current trend which seems to aim for as far as possible
from simplicity, is an emulation of Microsoft and a mistake in itself. Part of the beauty of math is
that it's pared to a bare minimum, I think this new Linux needs that as a standard.
And, that it wants to be structured like a Rescue Linux, so that it can live on a flash or on a disk
and be used to answer difficult questions like, 'Have I been rooted?' which you cannot answer from
within your system. Further, this gives Paranoid Linux a second application, always a good thing
to have in hand.
And, *watch out* for complexification! It's dangerously seductive. It also *always* offers new
ways to crack into the system. I recall an old engineering motto: Simplificate and add lightness!
So that's what I'd like to see in this new Paranoid Linux.
Titeotwawki -- mha [2008 Jun 15]
Yeah I agree with the
Yeah I agree with the simplicity thing.
Personally I don't think this project should begin with trying to create a fully fledged distro.
I think it would suffice to have a forum and a wiki dedicated to security in linux, instructing people on how to secure local files from intrusion, how to browse the web without arising suspicion (tor/chaff), how to communicate through the internet privately (otr), and perhaps look at where the gaps are today in the software and try to get people together to write new programs to fill them.
Eventually when this has been tested etc a distro could be build around intergrating these features into and easy to install, lightweight, distro
Additionally, the goals for this project don't seem to be layed out simply.
Some things which I would consider the goals of this project (feel free to dissagree):
Not sure if anyone is going to read this, but I would like to help as much as I can in making this a reality, is there a forum or something for this?
You can never be paranoid enough
Cool!
Take it from me that the government will do anything in it's power to take away your rights.
The feds claimed that I am a terrorist yet all of the following apply:
- I have never shot a living thing
- I have never built a bomb
- I don't have a nuclear reactor
- I don't have any an never had any missiles
and so on.
Keep up the good work. Look forward to using it. I use various proxies and secure networks from time to time, but making it faster, easier, and permanent is important.
Agreed.
It seams that ther's always an excuse for putting yet another stick in the front wheel of communal development or w/e you wanna call it.
- "There are terrorists in the world, so lets put surveillance on everyone just to make sure"
- "There are illegal file-sharing going on somewhere in the world, lets block all the network traffic on the (example) torrent protocol!"
And the list grows bigger every day for the excuses that the government can come up with. Pure (pardon me) BS from some up-tight people to control the "small" people. This is my own personal thoughts so.
Python - Your interface to the world!