State of the Onion: Update on Tor Project from 2014

INTDB for Linux and Mac OS X

Hey guys

Many of you were asking for a version of INTDB to run in Linux or Mac OS and finally after many days of hard work I could find a way to do it.
Sadly this version won't be portable, but the installation process is short and simple and I wrote an step by step tutorial so you shouldn't have any problem.

This new INTDB version will work using XAMPP that is a multi-platform easy to install and use Apache web server with MySQL, Perl and PHP, although we only will use Apache and Perl to run the INTDB TWiki.

So now there will be two distros of INTDB, those are "INTDB Portable for Windows" and "INTDB4Xampp" for Linux and Mac OS X, both distros will keep the same version number for simplicity.

Besides releasing INTDB4Xampp I'm also releasing today the version 1.2 of INTDB, this new version includes:

• Basic usage & tips guide.
• Google Earth integration example.
• The following cheatsheets:
• Structural Labeling
• Movement speeds
• SALUTE report 
• METT-TC 
• Glossary

The "basic usage & tips guide" will explain you step by step how to create, delete and edit and how to include multimedia files and documents on your pages.

The Google earth integration example will show you a great tip as you can open .kmz files from your pages an see them on Google Earth and when you close it no traces are left of your work in it.

Also 5 new pages are included with cheat sheets that will help you with your intelligence tasks.

As usual you can contact me if you need any help or would like to share templates or ideas.

INT DB TWiki Update

Hey guys,

INT DB has it's first update, here is the changelog:

• Fixes configure script error.
• Includes ExitPlugin to take care of the referrer problem.
• Cleans up previous session log files on start up.
• Includes security notes in regards to document attachment.
• Includes POI, Enumeration and alphabetically sorted list templates. 

Besides fixing some bugs, the new INT DB TWiki will clean up the log files when you start it and also solves the issue of referrer leakages, using the ExitPlugin it will automatically redirect to any link using anonym.to, you can configure another link anonymizer if you wish.

The screenshot in this post is from the Person Of Interest Template, when you create a new page you'll be asked what template to use, there you can select it or also one of the other two included templates, one is a table to enumerate stuff, like your Intelligence requirements, and the other is an alphabetically sorted table to store links to your POI dossiers for instance.

I'm working on a file so you can install easily the INT DB in an already running TWiki installation, so you can use it in other OSs just installing Apache by yourself, soon there will be news about it.

FULL DOCUMENTATION AND DOWNLOAD LINK HERE

INT DB Portable TWiki

While doing the IPB course at culperinstitute.org I discovered that the amount of information you have to handle to be able to satisfy your intelligence requirements is huge and will require to be updated often.

I didn't find an already existing tool, and that's why I thought that a wiki page could help, because it's easy to update, can include media files and also keeps track of the changes you made, bad thing about a wiki is that it needs a webserver to run, and not tech-savvy guys will find really hard to set up one. INT DB solves that problem because with just one click you'll have a running wiki that leaves no trace of use in your computer.

INT DB is based on TWiki for Windows Personal but it includes the latest version of TWiki 6.0 with WYSIWYG editor, Tinyweb webserver, Perl and GNU Grep, all of it ready to use, no installation is required and it won't create entries in your registry.

You'll see that the INT DB home page is a plain wiki page for you to start working on, if you can create templates, cheat sheets or whatever may be helpful for our purposes, please contact me and I'll include it in a new version.

FULL DOCUMENTATION AND DOWNLOAD LINK HERE

#ResetTheNet

The NSA has corrupted the Internet. On June 5, we will Reset the Net. We hope you’ll join us.

June 5 is the one-year anniversary of the first documents leaked by Edward Snowden. While EFF has
been fighting NSA surveillance for years, 2013 marked a new chapter in our battle against mass
spying. The documents made it clear to everyone why we care so much, and why they should too.

Surveillance affects everyone, in the United States and internationally. Millions of innocent people
have had their communications swept up by the NSA’s dragnet surveillance. Thomas Drake, former
NSA official and whistleblower described recently retired NSA chief General Keith Alexander’s
surveillance philosophy: “He is absolutely obsessed and completely driven to take it all, whenever
possible.” This philosophy clearly underpinned his nearly nine year tenure at the NSA. In addition to
this collect-it-all strategy, the NSA has used tactics such as deploying malware, trying to weaken 
encryption, and other sophisticated techniques that make the Internet less secure.

Mass surveillance is toxic for the Internet. The Internet is a powerful force that can promote
democracy, innovation, and creativity, but it’s being subverted as a tool for government spying.

That’s why EFF has joined with dozens of other organizations in calling for a day of action to Reset
the Net. On June 5^th, Reset the Net is asking everyone to help by installing free software tools that
are designed to protect your privacy on a computer or a mobile device. Reset the Net is also calling
on websites and developers to add surveillance resistant features, like HTTPS and forward secrecy.

Don’t wait for your privacy and freedom. Start taking it back.

#resetthenet
https://www.resetthenet.org/

http://resetthenet.tumblr.com/

Bundy's ranch information flow thoughts

This reflects my personal opinion as someone outside Bundy's ranch wanting to know what was going on and just receiving reports like "This is a mess, no one knows shit, the feds didn't shot yet".

I believe Bundy's Ranch event demonstrated a big flaw in Militia's SOP and is that they failed to create an official information source until a week after it started.

An official reporting channel is key absolutely, specially when the opponent is the gov. Venezuela is a clear example, the gov and media report nothing is going on, but people using social media like Twitter report the abuse and violence they are suffering.

If shots were fired and the militia guys in there were reduced to turtle food, the gov could start talking about how the domestic terrorist attacked and they had no other option but to repel the attack, and manipulate how the history is presented to the public.

Every unconventional force first has to obtain populace support to win, otherwise they will fail like Guevara in Congo and Bolivia. Part of getting populace support comes from showing them the flip side of the coin of what mass media feeds them.

A lot of people love to bash Occupy movement, but even if you don't fully agree with Occupy movement methodologies or ideology, there is always something to learn, specially for a country like the US, where you like it or not you don't have much experience manifesting against the government.

Occupy movement guys as soon as they took a place set up free Wi-Fi networks for people to be able to communicate and report anything that was happening, that is awesome, because the first thing the gov does is to shut down cell phone networks.

Also in Spain they created something called the "wifineta" that is a conjunction of the words Wi-Fi and truck in Spanish, that truck has the equipment to provide Wi-Fi and 3G for the people around it.

Also we need to keep in mind the COMSEC, if there is a centralized information outlet, it could define what should be public knowledge and what not, and then instruct the protestors about the information release guidelines.

Check this videos of the Occupy Wi-Fi providing tents.

Forward Observer #1 is out

Hey guys

Forward Observer #1 is out, it has articles by John Mosby and Max Velocity among others.
Go check it out at: http://forwardobservermagazine.com/SPRING14/

I'm not posting much lately because real life is keeping me really busy, but as Arnold said
"I'll be back".

See ya

Why do I need encryption? I have nothing to hide!

You're a normal guy, you have nothing to hide why should you use encryption?

Well, today you THINK you have nothing to hide.

Snowden leaked documents prove that the NSA can store your communications metadata/content for
15 years, 10 online and 5 offline.
Maybe today being a patriot or a gun owner isn't so bad, yes people think you're kind of crazy, but
whatever...

But let's suppose the next president cares about constitution and civil rights even less than the current
one and decides that your political beliefs, religion or sexual preference is a danger to society and
decides that people like you should be actively prosecuted, incarcerated or maybe summarily
executed?

You never know...
And besides that, NSA can't read and catalog your messages and they absolutely hate it!

The day we fought back results

Thanks to everyone who participated on Tuesday. Together we demonstrated that activists,
organizations, and companies can work in unison to fight mass surveillance, and laid a

foundation for escalation over months to come.

In the following link there are some numbers to quantify how we did.

https://thedaywefightback.org/the-results/

Edward Snowden Interview in English (1/27/2014)

Whistleblower Edward Snowden leaked the documents about US mass
surveillance. He spoke about his disclosures and his life to NDR investigative
journalist Seipel in Moscow.

The Day We Fight Back

https://thedaywefightback.org/

Maybe the Most Orwellian Text Message a Government's Ever Sent

“Dear subscriber, you are registered as a participant in a mass disturbance.”

That's a text message that thousands of Ukrainian protesters
spontaneously received on their cell phones today, as a new law prohibiting
public demonstrations went into effect. It was the regime's police force, sending
protesters the perfectly dystopian text message to accompany the newly
minted, perfectly dystopian legislation. In fact, it's downright Orwellian (and I
hate that adjective, and only use it when absolutely necessary, I swear).

But that's what this is: it's technology employed to detect noncompliance, to
hone in on dissent. The NY Times reports that the "Ukrainian government used
telephone technology to pinpoint the locations of cell phones in use near clashes
between riot police officers and protesters early on Tuesday." Near. Using a cell
phone near a clash lands you on the regime's hit list.

See, Kiev is tearing itself to shreds right now, but since we're kind of burned out
on protests, riots, and revolutions at the moment, it's being treated as below-
the-fold news. Somehow, the fact that over a million people are marching,
camping out, and battling with Ukraine's increasingly authoritarian government
is barely making a ripple behind such blockbuster news bits as bridge closures
and polar vortexes. Yes, even though protesters are literally building catapults
and wearing medieval armour and manning flaming dump trucks.

Hopefully news of the nascent techno-security state will turn some heads—it's
right out of 1984, or, more recently, Elysium: technology deployed to "detect"
dissent. Again, this tech appears to be highly arbitrary; anyone near the protest
is liable to be labeled a "participant," as if targeting protesters directly and so
broadly wasn't bad enough in the first place.

It's further reminder that authoritarian regimes are exploiting the very
technology once celebrated as a vehicle for liberation; last year, in Turkey, you'll
recall, the state rounded up dissident Twitter users. Now, Ukraine is tracing the
phone signal directly. Dictators have already proved plenty adept at pulling the 
plug on the internet altogether.

All of this puts lie to the lately-popular mythology that technology is inherently a
liberating force—with the right hack, it can oppress just as easily.

By Brian Merchant
http://motherboard.vice.com/en_ca/blog/maybe-the-most-orwellian-text-message-ever-sent 


 

Reduce your online traces with DuckDuckGo

Lately I've trying to reduce the signature I'm leaving online with Google following me everywhere I
go, and is pretty hard, specially for email, I'll let you know if I found a solution.

Escaping from Google to go to other US provider/host won't solve anything, US gov can still analyze
your traffic and can access the provider's internal network and DBs.

You don't know what I'm talking about? All of that was leaked by Edward Snowden, you can check
this nice article at the Washinton Post about it.

Anyway, this is an easy step everyone can take to stop being related to everything they search, which
could have nasty results, you can see this great infographic explaining why: http://donttrack.us/

To start trying it just go to https://duckduckgo.com/ and in the bottom right corner there is an option
to configure it as your browser default search engine.
The first days your fingers will try to type google as soon as you open a new tab, but try to resist it :D

DuckDuckGo as a lot of great functionalities, for instance I love the !bangs, that is using something
like !a to search directly in Amazon, !yt to search directly in Youtube etc.
It also supports the classic keywords like 'site:' or 'inurl:'

Besides by default it will run using HTTPS, not like other services where you need to configure it
manually.

And there is another great advantage, you can use it directly from the Tor network as it also runs as
an hidden service!

Give it a try, I really liked it

https://ddg.gg/
https://duckduckgo.com/
https://3g2upl4pq6kufc4m.onion

Introduction to Bitcoin

Hey guys

Lately everyone talks about Bitcoins but not many really understand what a Bitcoin is, and I don't
mean the inner workings that are way too complicated dealing with mathematics and cryptography,
but their simple usage or understanding about the implications of such system.

At bitcointalk.org there is an excellent intro to what Bitcoin is that I wanted to share with you

Introduction to Bitcoin

Forget most things you've heard.  

People discover Bitcoin in a variety of ways, but usually pick up some sort of misconception like 
"Bitcoin gives free money to people with computers" or "in order to use Bitcoin I have to use a 
program that wastes electricity for nothing" along the way.  Here is a good summary to help you 
understand Bitcoin in general, by focusing on what Bitcoin is and what problem it solves.  
These two things are not typically well explained on most websites, and it is difficult to appreciate 
just how effective a technology Bitcoin is until they are understood.

What Bitcoin is:  

An agreement amongst a community of people to use 21 million secure  mathematical 
tokens--"bitcoins"--as money, like traditional African and Asian societies used the
money cowry.  

Unlike the money cowry:

• there will never be more bitcoins
• they are impossible to counterfeit
• they can be divided into as small of pieces as you want
• and they can be transferred instantly across great distances via a digital connection such as the internet.

This is accomplished by the use of powerful cryptography many times stronger than that used by 
banks.  Instead of simply being "sent" coins have to be cryptographically signed over from one entity 
to another, essentially putting a lock and key on each token so that bitcoins can be securely backed up 
in multiple places, and so that copying doesn't increase the amount you own.

Because bitcoins are given their value by the community, they don't need to be accepted by anyone
else or backed by any authority to succeed.  They are like a local currency except much, much more
effective and local to the whole world.  As an example of how effective the community is at "backing" 
the bitcoin: on April 4th 2011 30,000 bitcoins were abruptly sold on the largest Bitcoin exchange, 
consuming nearly all "buy" offers on the order book and dropping the price by nearly 1/3.  But within 
a couple of days, the price on the exchange had fully rebounded and bitcoins were again trading at 
good volumes, with large "buy" offers slowly replacing the ones consumed by the trades.  The ability 
of such a small economy (there were only 5 million out of the total 21 million bitcoins circulating 
then, or about 3.75 million USD worth at then-current exchange rates) to absorb such a large sell-off 
without crashing shows that bitcoins were already working beautifully.


What problem Bitcoin solves:  

Mathematically, the specific implementation of the bitcoin protocol solves the problem of "how to do 
all of the above without trusting anyone".  If that sounds amazing, it should!  Normally a local 
currency has to trust all kinds of people for it to be able to work.  So does a national currency.  And 
in both cases, that trust is often abused.  But with Bitcoin, there's no one person who can abuse the 
system.  Nobody can print more money, nobody can re-use the coins simply by making a copy, and 
nobody can use anyone else's coins without having direct access to their keys. 
 People who break its mathematical "rules" simply end up creating a whole different system 
incompatible with the first.  As long as these rules are followed by someone, the only way Bitcoin can 
fail is for everyone to stop using it.


This marvelous quality of not having to trust anyone is achieved in two ways.  First, through the use 
of cutting-edge cryptography.  Cryptography ensures that only the owner of the bitcoins has the 
 authority to spend them.  The cryptography used in Bitcoin is so strong that all the world's online 
banking would be compromised before Bitcoin would be, and it can even be upgraded if that were to 
start to happen.  It's like if each banknote in your pocket had a 100-digit combination lock on it that 
couldn't be removed without destroying the bill itself.  Bitcoin is that secure.

But the second way of securing the system, called the blockchain, is where the real magic happens. 
 The blockchain is a single, authoritative record of confirmed transactions which is stored on the 
peer to peer Bitcoin network.  Even with top-notch digital encryption, if there was no central registry 
to show that certain bitcoins had already been "paid" to someone else, you could sign over the same 
coins to multiple people in what's called a double-spend attack, like writing cheques for more money 
than you have in your account.  Normally this is prevented by a central authority, the bank, who 
keeps track of all the cheques you write and makes sure they don't exceed the amount of money you 
have.  Even so, most people won't accept a cheque from you unless they really trust you, and the bank 
has to spend a lot of money physically protecting those central records, whether they are kept in a 
physical or digital form.  Not to mention, sometimes a bank employee can abuse their position of 
trust.  And, in traditional banking, the bank itself doesn't have to follow the rules you do--it can lend 
out more money than it actually has.

The blockchain fixes all these problems by creating a single master registry of the already-
cryptographically-secured bitcoin transfers, verifying them and locking them down in a highly 
competitive market called mining.  In return for this critical role, the Bitcoin community rewards 
miners with a set amount of bitcoins per block, taken from the original limited quantity on a 
pre-agreed schedule.  As that original amount gradually runs out, this reward will be replaced by fees 
paid to prioritise one transaction over another--again in a highly competitive market to ensure the 
lowest possible cost.  The transactions are verified and locked in by the computational work of 
 mining in a very special way so that no one else can change the official record of transactions 
without doing more computational work than the cumulative work of all miners across the whole 
network.

In conclusion:  

All this mathematical technology may be a bit of a mouthful, but what it means in practice is that 
Bitcoin works just like cash.  Bitcoin transactions are intentionally irreversible--unlike credit cards 
or PayPal where chargebacks can invalidate a payment that has already been made.  And there are 
no middlemen.  Transactions are completed directly between the sender and the receiver via the peer 
to peer network.

Because of Bitcoin's intricate design, the network remains secure no matter where or how you 
process Bitcoin transactions.  Which is incredible--no one else has ever tried to create a system that 
worked this way!  All previous monetary systems have relied on trusting somebody, whether it was 
the king, town hall, the federal reserve, or banks.  Bitcoin doesn't.  It's guaranteed instead by the laws
of  mathematics, and that's why it has everyone from technologists to economists very excited.  I'm 
sure you have lots more questions, so scan the index below to see if they've been asked before, then 
dive in!  The so-called "canonical" threads linked from this index are considered newbie-friendly 
zones;  outside of them you're welcome to try your own luck.

And if you want to immerse yourself into the mysteries of Bitcoin and his creator 'Satoshi Nakamoto'
you can read this awesome research blog called Bitslog.

Also you can check the original paper at: http://bitcoin.org/bitcoin.pdf

For the tl;dr; kind of guys, you can watch the following video, but you'll get just a bare idea of what it is all about.

Bitcoin Dark Wallet

Dark Wallet is a light browser wallet relying on an independent Bitcoin implementation with out-of-
the-box security and privacy features. Release early 2014.



http://igg.me/at/darkwallet/x/5141070

Wikileaks Spy Files 3

Hey guys, I wasn't able to read all the documentation yet but in these documents you can see how
companies sell to governments, maybe other companies?, all your internet/phone traffic details.

Documentation is highly technical, who knows maybe I'll post something in plain English about this...
 
On Wednesday 4 September 2013 at 1600 UTC, WikiLeaks released 'Spy Files #3' – 249 documents
from 92 global intelligence contractors. These documents reveal how, as the intelligence world has
privatised, US, EU and developing world intelligence agencies have rushed into spending millions on
next-generation mass surveillance technology to target communities, groups and whole populations.

http://wikileaks.org/spyfiles3

Here is a nice Reuters coverage about this: http://rt.com/news/wikileaks-spy-files-release-402/

July 9th

On July 9th 1816 Argentina declares his independence from Spain and any other foreign nation
following the example set by the United States 40 years before and by France 27 years before.

Let's hope people across the world can continue positively influencing each other to fight for freedom.

NSA whistleblower Edward Snowden

'I don't want to live in a society that does these sort of things'




https://petitions.whitehouse.gov/petition/pardon-edward-snowden/Dp03vGYD

Unchained Preppers

Hey guys

Today we just opened unchainedpreppers.com.
That board is the continuation of straightprep.com that is the continuation of mrlockandload.com.
I'm one of the admins there, so if you want to learn some stuff and enjoy some online time with other
prepper guys you are welcomed.

http://unchainedpreppers.com

STOP CISPA

https://www.cyberguerrilla.org/
http://www.cispaisback.org/