Main Page

From Telecomix Crypto Munitions Bureau

Jump to: navigation, search

All edits are anonymous. No IP-numbers are saved in the logs. ORLLY? -- Quite rly, yes.

Telecomix root certificate, agents signature.

Telecomix Crypto Munitions Bureau is part of Telecomix. This wiki is used for discussing technology and philosophy. For other Telecomix projects, see the the Blue Cabinet Wiki (on Tor) (data on surveillance companies, products) and WeRebuild (Heavily outdated)

If you find anything interesting and want to talk about it (we don't bother with e-mails) join us at irc.telecomix.org Port 6667 (6697 for SSL). We can also be reached at WNH. IRC is irc://irc.wnh.me Port 6667 (6697 SSL). (all these IRC servers seem down. anyone have a good idea for a backup? #datalove on any server you happen to be on?)

Telecomix Crypto Munitions Bureau?

A decentralized organization without membership. The bureaus goals are described in this paper issued by Cameron. Beyond that, we also do whatever we want.

The Bureau need helps!

After years of sleep, the Bureau has awoken again, and it need your help! This wiki was recreated from an HTML static mirrors, meaning that there is certainly a lot of problems like:

the images in text are allmost all not working (look for the "[File:" pattern)
some internals links have a ".html" which then does not link anywhere
some pages have two table of contents
title seems to be one level under what they should (level 2 instead of 1 for exemple), on certain page. If you see a page that start with a level 2, change the page :)
certainly MOAR things broken...

If a page looks weird to you, use the mirror as a model.

The original WARC (Web ARChive) that the mirror is created from, can be found at https://archive.org/details/CryptoAnarchyWarc - this is guaranteed to contain the page exactly as it was served up on the original wiki, including HTTP headers.

To participate, two possibilities:

use the following anon account: "unregistred"/"Km:?_r`9qKNlong passphrases with fünn¥ ©ħæræ¢ŧæ®ßf0rtCMb"
or create an account (no log, no e-mail, nothing)

Much datalove to you agent <3

News

I love you. We should be more careful with steg. Use it and chaff less, please.
Aint No Party Like a Cryptoparty!
TETRA hacking is coming: OsmocomTETRA
Slideshow on hacktivism, encryption, online anonymity, & darknets 101 now up at: http://scr.bi/yLxMak (same with https)
WSJ Surveillance Catalog / Spy Files aka axis of evil
HTTPS/SSL probably dead: Deep Packet Spying Breaches Gmail and All Security, also: Hackers break SSL encryption used by millions of sites.
Added a basic guide to Deploying, Implementing and Using Cryptographic Systems.
AES weakened by 2 Bits
TCMB Station 7 checks in for the first time :)
Older news

Scratchpad(s)

Software

Full communication and storage system
- Freenet
- Project Byzantium
- RetroShare: a decentralised communication platform / darknet based on GPG & OpenSSL Needs moar analyzing(Maybe not safe) Still very much in Beta.
- Tahoe-LAFS Distributed encrypted file system

Encrypted Communication
- GPG / Mac Encryption for mails, files and more. No forward secrecy!
- JavaScript GPG for the GMail webinterface
- OTR Extremely IMPORTANT for Instant Messaging - USE THIS
- Tomb strong semi-deniable encryption for the desktop and safe transports
- Tcpcrypt a protocol that attempts to encrypt (almost) all of your network traffic.
- CurveCP Usable security for the Internet
- Crayfish Safe IRC shelter server (concept).
- LUKS LUKS is the standard for Linux hard disk encryption.
- Truecrypt Disk encryption
- URC : An IRC-client compatible and distributed chat daemon using NaCl crypto.
- Silc : Secure Internet Live Conferencing : IRC like but much more safer (to be written) SILCNET Offical Website
- Cryptocat -- in-browser c(h)atroom with clientside encryption for 2+ chatters. Join Cryptocat-IRC channel: #Cryptocat
- Enigmail OpenPGP add-on for Thunderbird
- Mumble, voice communication like the non-free TeamSpeak, with SSL encryption, good and very simple replacement to Skype (if video is not needed)
- Jitsi Crypted instant messaging, voice communication, video, screen share. Java based (disable Java in browser).
- Anontwi Shell client to have more privacy on Twitter and identi.ca

CCTV

Alternatives to Certificate Authorities

Anonymous General Purpose Operating Systems
- Whonix

Firewall
- Communism (known_certs), a joint project between TCMB and the PSYCs
- iptables (linux firewall)
- Authority Netblock Blacklist (huge blacklist useful if you dont want the authorities to contact you)
- pf (OpenBSD firewall)

Anonymous and Alternative Networks
- Telex (Telex is a complex and extreamly effective anti-censorship system. WARNING: Still in testing stages, not ready for actual deployment.)
- Tor (Peer reviewed, understood and very secure anonymity network.)
- Tor combined with VPN, SSH or Proxy
- Mobile Anonymity
- I2P (Likely unsafe in extremely dangerous situations, peer review needed)
  - OnionCat (Anonymous IPv6 tunneling on top of Tor/I2P.)
- cjdns (No peer review, early-stage friend-to-friend IPv6 VPN)
- Netsukuku - Internet Protocol based alternative to ICANNnet - currently lacks dedicated anonymization mechanism, mainly based on physical WLAN links

General-purpose VPN software
- curvetun (lightweight multiuser IP tunnel based on elliptic curve cryptography, howto)
- OpenVPN (Direct p2p VPN.) - Lacking peer review
- VTun - Peer review: no strong security
- PPTP (Knowledge needed to set up a linux computer as an IPREDATOR-router for your entire net.) PPTP is not safe to use
- tinc
- gvpe
- quicktun - uses Elliptic Curves, popular in dn42 community
- SSH
- IPSec (for example OpenSWAN)

Libraries
- SECCURE - Elliptic Curve Crypto
- NaCl - Networking and Cryptography library - used by quicktun, curvetun, and cjdns
- Kademlia DHT - Kademlia Distributed Hash Table

BGP - border gateway protocol
- Quagga (all unixes)
- OpenBGPD (*BSD)
- BIRD

Economy & Money
- Bitcoin - P2P cryptocurrency
- bmoney - specs
- Open Transactions - untraceable digital cash

Virtualization
- XEN
- VirtualBox
- CoLinux
- LXC ([1])
- qemu

IPv6 (collection of micro-tutorials)
- IPv6 firewall

Backup software
- Backup software

SSH
- SSH Tunnels

Databases
- MySQL

Browser
- Recommended firefox extensions for the crypto-anarchist

Sousveillance/Counter Surveillance
- OpenWatch

Sniffing, scanning, hax0ring
- hax0ring tools (backup of original: long list of tools)

Miscellaneous Scripts
- Random hostname on boot
- Random MAC when bringing the network interfaces
- astraceroute Autonomous System trace route and DPI tester
- Root password recovery

Hardware security
- Physical memory attacks via firewire - Overview-and-mitigation

Services
- Anonymous hosting
- Anonymous VPN

LiveCDs
- Tails Debian based OS using Tor
- Liberté Linux Gentoo-based LiveUSB for communication in hostile environments (seems discountinued since 2012)
- dyne:bolic 100% free GNU/Linux
- Discussion About Privacy And Anonymity Kids
- Haven is a Live operating system based on Ubuntu - RIP (Development discountinued as of v1.3.4)
- Byzantium Secure live CD for emergency situations to communicate and collaborate.
- OccupyOS Secure live CD developed with ease of use and secure, deniable communication in mind.
- Pirate Linux developed by members of the Canadian Pirate Party.
- Build your own livething using qemu