[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology


Thread archived.
You cannot reply anymore.


[Advertise on 4chan]


File: IMG_2069.jpg (50 KB, 828x497)
50 KB JPG
WHAT IS THIS?
> Automated setup, install and configuration for your raspi
> An encrypted partition is made, the offical simplex-chat
> is installed, contained in an encrypted partition. Host becomes read-only.
HARDWARE:
> Raspberry Pi Zero 2 W
> 32GB micro SD card
> Phone with a hotspot
STEPS:
1) FLASH the raspi with raspi imager.
>_ Device: Raspberry Pi Zero 2 W
>_ OS: Raspberry Pi OS Lite (64-bit) no desktop
>_ Wi-Fi: Set your Phone's hotspot
>_ Remote access: Enable SSH
>_ Authentication mechanism: Select "Use password authentication"
>_ Raspberry Pi Connect: Disable, if enabled
2) DOWNLOAD (and inspect) these links:
>_ "vault.zip"
https://onionuserfiles.com/share.php?token=5f6d626b6081d45b16129e0abcf2426f
>_ "README_AND_APPEND_THIS_TO_user-data"
https://onionuserfiles.com/share.php?token=6a81b99c0e9e8a84cb0a8d6a1eb87b57
3) BEFORE ejecting or inserting the SD card into the Raspberry Pi,
__ OPEN the SD card's drive (bootfs).
4) COPY "vault.zip" from the link, into bootfs.
>_ !! NOT in the "overlays" subfolder !!
5) OPEN and COPY the code provided in "README_AND_APPEND_THIS_TO_user-data"
6) FIND, OPEN and PASTE the code provided into "user-data" in bootfs at the end
7) READ the comments and MODIFY the pasted code accordingly.
8) SAVE and CLOSE "user-data", then EJECT the SD card.
9) TURN ON your phones hotspot
10) INSERT the SD card into raspi and connect raspi to the powerbank.
11) WAIT ~20mins. (yea, yea I know...ughh!)
12) SSH into raspi using your phones SSH client.
13) RUN command "switch" to enter vault
14) RUN command "change-password" enter the current default password "root"
__ and then set your own. It may warn you its relocking the vault, thats ok!
15) RUN command "simp" to enter the chat

*See README.md and README in vault for more details on other commands for usage
>>
Why on earth would I install, nevermind use, some vibeslopped garbage, when serious tools already exist?
>>
>>109455281
You install it on a raspberry pi.

Only tested on a raspi zero 2w.

You flash the sd card normally, but set your mobile hotspot for the wifi.

When its done writing, you add the zip and copy paste the other files to user-data on the flashed firmware.

Modify with your options, or leave defaults.

Save and exit, then boot pi with it.

Wait 20 mins.

*dink*

Now you have a (nearly) FDE raspi with simplex chat and a custom skin.
> i took a long time to make this *sniffles*

I have some other cool features coming along soon too. ATM its just a better looking simplex-chat for CLI, but set up in an encrypted partition. I have some preset bot stuff on there too, to have an account you use on it send you notifications when it gets messages, or system events happens, or to send system commands to remote access it (limited).

The encrypted drive also has a tor router on it, though simplex has built in tor and desu tor is not needed with simplex by design. So its all over kill. But maybe you want to route other things?
>>
File: IMG_2093.jpg (96 KB, 828x880)
96 KB JPG
>>109455281
Also it is simplex-chat under the hood. Its just uses their -p 5225 daemon to control the database.

They also dont provide any encryption to their CLI, and expect users to handle that. this program does that too.

I plan to add a rentry upload/downloader to it as well to post keys/links as another way to share links, since they can be very long.
>>
>>109455357
>>109455419
What part of "never using your slop" did you not understand niggerbrain?
>>
>>109455431
Okay. Its not like i was asking for money or anything. Just thought someone would appreciate it. If you dont like the skin/simplex thing, you can remove the simp.zip from the vault.zip and only run one or the other or run manually.

Hard for me to imagine no one sees the utility of a having their Pi hardened and then install whatever they want after.

Also the ntfy setup is also optional and reusuable. It may be the most reusable thing about this. I use it all the time.
>>
Can you stop spamming /g/ with your glowing vibeslop?
https://desuarchive.org/g/search/text/onionuserfiles
>>
>>109455261
Not installing your vibeslopped glowshit, kys
>>
troonixslop
>>
thanks claude, i'll check it out should i ever own an rpi
>>
>>109455603
>>109455603
What is the purpose of these boards?

Yes those were other projects, i keep trying to improve based on reactions. Just trying to find anything some one would like to work on together. Client side html PQchan wallet, later renamed as keychan went flat for some reason. The Simple tor browser in docker, i thought would be easier to explain utility. There even was examples of it online, but they sucked. This idea was actually originally built with onionshare, but earlier version was heavily critized. So i threw out onionshare, and replaced with simplex. Which covers the differences in many ways. This is functionally simplex, but chan user skin, and improved with disk encryption and readonly protections for the host.

>>109456575
Fuck you
>>
>>109457578
don't let them get you down, you did a thing and that's cool af, props
>>
>>109456581
How else am I suppose to make anything as 1 person?
>>
>>109457611
Thanks! Im fluctuating between projects too small, people here say "i could do that in x amount of time, why even post this?" And ones too big/complex people here dont even try and say its slop.

This is actually 3 projects in one.

2 big one.

Vault, being an as close to FDE automation for raspi as I could get

And simplex-skin (simp) which originally was PQKeychan and Onionshare skin.

I also added one of my helper utitlites I use alot, with NTFY, to aid in access when you boot a headless Pi.

I even had a good idea (i thought) for using pastebins/rentry for alt comms, but difficulty here convincing anyone to like or trust anything. So I tried not reinventing the wheel and looked for tools that already solved some problems which lead me to onionshare. But still was told here it glowed and was going to get everyone in trouble. Simplex basically solves all the missing parts, it anonymous by default, PQ encryption, its third party tested, opensource, it works for CLI and has GUI. I just thought it was ugly and the CLI version hard to use. This skin makes it easier and nicer looking. I then combined it with previous stuff to improve it with disk encryption and host hardening.
>>
File: IMG_2041.jpg (67 KB, 827x878)
67 KB JPG
Goodbye.
>>
>>109457812
You are a talentless hack.
Keep prompting Claudex lil pup.
It is true anyone here could copy the text and image from your post and paste it right into the same ai agent and it will produce the same exact slopshit you spent a week prompting in 20 minutes.
>>
File: 1755494612627500.jpg (121 KB, 1227x1589)
121 KB JPG
>>109455261
I've already done this and run my own private onion servers
>>
>>109458656
Already did what??? This is a raspi zero 2w project, but all you have is laptops and HD drives?

You say running private onion servers, but this project doesnt even use tor by default let alone uses hidden services.

This was primarily due to simplex chat having all the anonymity and security needed without tor routing being necessary. Theres nothing tor or a tor layer adds in my opinion.

However I still included tor options, like you can start up simp in tor mode using --tor flag or --tor-port=<#> to direct at a specific tor socksport. This uses simplex-chats built in tor mode. Performance decrease with little to gain imo. But its there.

Also the encrypted partition contains its own chroot and filesystem, including its own networking space (veth). By default veth routes normally as the Pi, but there is a --tor flag for unlock, or from with in the vault you can use command 'tor-routing on' to make everything thats done in the vault go through tor.
>>
>>109457619
I am also one person with access to Claude so whre do I need you in this equation?
>>
>>109458808
Wheres your take on anything vaguely similar in concept then?

> need you
And I never asked anything from anyone here! Including to "need me". I even posted the opensource code in those link moron!
>>
>>109458850
It's not something I want. The Raspberry Pi is stupid. If it were something I wanted, I could just vibe it up myself without you.
Vibe coded can work alright if the person behind it has direction, but you don't even understand the direction well enough to write your own description of it. You had to have Claude do that for you too. What is the point of this? Encrypted chat on an encrypted partition? So what? Even Android is FDE by default, and if you don't trust the OS (you should be using a custom os anyway) then you shouldn't trust it as a pass through for this either.
How is this any better than SSH into a server with LUKS and an encrypted messaging app? That is what I do which is similar in concept to this.
>>
>>109458890
> raspi bad
Their cheap, accessible, and pocket size. Perfect constraints for daily otg use.

> you don't even understand the direction well enough to write your own description of it. You had to have Claude do that for you too. What is the point of this?
wut? Everything here I wrote. I literally typed it out into notepad during dev. The documentation claude finalized because good documentation is boring/standardized. Its there to explain the details and nuances in a cookie cutter format.

> How is this any better than SSH into a server with LUKS and an encrypted messaging app? That is what I do which is similar in concept to this.
Thats literally what this is! If thats what you do, then whats your issue with this? Another BIG IF, but IF you really do that (i highly doubt) then YOU would know its a multi step half day project plus multiday tweak to make good, so why wouldnt you want an all-in-one ready to go deployment. This one you flash normally and drop a file plus copy/paste 1 block of code, then let it do all the the setup. The next best step would be offering ready to go images, user just flash, but i didnt think anyone would trust that, since trust level is already low on more trustworthy methods like this.
>>
>>109458402
>Like what is it (you) think i am trying to do?
farming upvotes and clout like the little bitch ass pussy jeet you are. kill yourself.
>>
File: IMG_2046.jpg (96 KB, 1072x960)
96 KB JPG
>>109459041
> upvootes
Im downvooting you right now, AND there's LITERALLY nothing you can do about it (because youre too weak and effeminate).
> picrel is you and the other jannies rightnow
>>
Ok anon it's cool you're actually making stuff for yourself and trying to share, but like no one wants to run vibecoded slop and the people who would have their own vibe and can make their own slop. And how do you think opensource existed before ai? Especially a project like yours which is mostly chaining existing projects together with some custom configs you do not *need* ai
>>
>>109459100
> you do not *need* ai
Im aware, but I also dont have a team, alternatively, I dont have the time to make everything I want by hand. If the concept is cool, and it works good enough, then whats the problem? Worse case, this is a proof-of-concept, being offered (for free) to anyone who wants to rebuild it by hand (with or without me)?
>>
File: 1782584173609396.png (1.6 MB, 1264x848)
1.6 MB PNG
>>109458790
>don't run your own servers, goy
Kill yourself kike
>>
>>109459100
> project like yours which is mostly chaining existing projects together

The issue is not AI code vs manual coding. The issue is code maintaince. NO code, is ever 'just works', without someone(s) constantly improving it, debugging and updating it. Reason being, without rebuilding from the kernal up, on your own built hardware, there is always dependancies and other projects beneath what you build. As those change, everything downstream has to square up with them. Farther downstream, bigger effects. Im not interested in reinvention of shit that exists, because theres so much broken and missing now. i want to fix and improve those things, create solutions to problems, not "innovate" into new problems. Let me know of a project that solves this use case that doesnt "chain together existing projects".
>>
>>109459181
Did I say that? FAGGOT! Fucking read + comprehend.
>>
>>109459022
NTA... but...

>Perfect constraints for daily otg use.
Horses for courses.
It wouldn't serve as a good daily driver for large swathes. There's still things you can't get in ARM unless you're compiling it yourself and addind in layers of complexity over 'just get a cheap laptop', for exaple.

The Pi has been muchly (ab)used by the 'community'.
It's claim to fame isn't it's small. It's claim to fame isn't it's potentially portable (tho, the power for any extended use needs to be bigger than the rest of the device).

It's claim to fame is when the BBC micro was cycled out of the UK classrooms and replaced with ipads they lost things.

How do you get at the GPIO on an ipad? Sure, there's gonna be hardware bridges but that adds into the cost, and nothing software side on the ipad is going to be ready so there'll be another cost there. Added complexity and further entrenching.

The claim to fame is being cheap enough for the schools to waste some of their funding on whilst providing direct hardware interfaces, so little Johnny can have somewhere to plug in the turtle, or learn to use infrared refelction to determine distance to lid so it knows when it's opened to blink the LED 3 times before applying the charge to the semtex.

IE: taking the digital concept into the physical reality.

I've a few pi kicking about, great toys. But typically that's all they are. There's a few notable examples contrary...

But, being cheap, it wasn't long before folk decided it would make a good media streamer or w/e...

Personally, the project has little in the way of use for me - I just poked it 'cause I'm a curious soul, see the what, the why...
>>
>>109459372
Why am I being criticized for AI assistance when people post here AI responses?

> It wouldn't serve as a good daily driver for large swathes. There's still things you can't get in ARM unless you're compiling it yourself and addind in layers of complexity over 'just get a cheap laptop', for exaple.

Does a laptop fit your pocket? What part of this project mentioned the need or use cases for "large swathes" of anything? Its for individual use.

I could buy a server and deploy tools for anyone to use in browser without ever needing a pi, but then no one would trust it.
>>
use case for this botnet?
>>
>>109459508
Your mom's pussy.
>>
>>109459275
>NO code, is ever 'just works', without someone(s) constantly improving it, debugging and updating it

It does if you do it right the first time.

The very first shitty little CLI tic-tac-toe game I made? That still works, decades later.

Why? It doesn't lean on anything that *can* change. Edge cases where considered and hunted during development. It is just as good at doing what it does now as it does then.

But as you seem to want to collaborate on a 'larger' project, allow me to throw some curveball. I intended to solo this mofo but more eyeballs can't hurt to spot problems. And the end product, if you 1:1 what I'm doin', will have resale value - tho unless the costs come right the ferk down, limited market.

No-where near starting, yet, but I'm going to be getting into RC aeroplanes etc. I think it'd be pretty kewl to has a ground station.

I'm not spending 5-10k on one. I wager I can build one into a flight case for less than 3k.

Screen in the lid is just a no-brainer but I wager I can make sides fold down too, suttin like a Saitek X-56 split between the sides would offer more than enough in the way of control, the the 'what' there isn't as important as reliability. I'm thinkin' the compute section could well be a pi - would leave plenty of space for power, transmission equipment, etc.

The pi itself is unlikely to be much use off the shelf. Pretty much everything of it's OS and software stack gonna need some level of custom to it, this needs to be trustable for handling several aircraft in realtime without failure.

If that interests you any when I move beyond 'research' phase I'll fabricate some post to summon you...


>>109459486
>when people post here AI responses?
I'm not artificial intelligence. I'm natural stupidity that is so ignorant it's bashed it's head right through the barrier and looped the variable to genuii.

>Does a laptop fit your pocket?
Depends on the laptop, and how baggy the jeans is. But yeah. I've done that.
>>
>>109459275
Nigga be real you have nothing to maintain especially with this project. You literally chained together existing software then wrote a theme some scripts and configs. You literally just used the software pretty much as is without improving anything or adding new features.
>without rebuilding from the kernal up there is always dependancies and other projects beneath what you build
Not always but sure (kernels aren't really dependencies)
>as those change, everything downstream has to square up with them
Ok you are retarded and I now understand why everyone just shat on you without even trying to engage.
>>
>>109459486
Also, yes, a pi will fit into most pocket sizes, but you aint doin' much with just a pi. You start adding things to make that usable you quickly exceed 'pocket sized'. Especially if you want to see what you're doing.

>use cases for "large swathes" of anything? Its for individual use.
It's just that large swathes of those individuals won't be able to understand why, and those that do are unlikely to have the need.
>>
>>109459022
Alright, and how about this?
>Even Android is FDE by default, and if you don't trust the OS (you should be using a custom os anyway) then you shouldn't trust it as a pass through for this either.
Ask Claude and let us know what he comes back with.
>>
>>109459486
>Why am I being criticized for AI assistance when people post here AI responses?
Yeah, it's annoying when the person you're interacting with is just an interface for an AI, isn't it?
>>
>>109455261
>shitty AI slop
>shitty AI slop text
>constant spamming
>doesn't tell shit about what it actually is
>install it
how about no

>>109455261
>>109455357
>*cries*
>*sniffles*
>>>/trash/
>>
usecase for your jeetslop malware?
>>
>>109459549
Resize your context window. Its like a completely different conversation ever post with you
>>
>>109459566
> you have nothing to maintain
Is that a good or bad thing?

> Ok you are retarded and I now understand why everyone just shat on you without even trying to engage.
Post code, link, literally anything to contrary.
>>
>>109459566
Hey everyone! I'm genuinely so excited to share something today—it's not just a tiny side thing I threw together, it's a genuinely thoughtful project I built from the ground up, just for you. Like, it's not about overcomplicating things, it's about that pure, effortless experience you genuinely deserve. So, let me walk you through it.

Here's the thing: what you're going to want to do is open up your favorite text editor—and I mean genuinely any text editor, it's not about picking the "right" one, it's about the freedom to use what you already love. Then, you’ll paste in THIS code. And this isn't just some random snippet; it's the entire gateway to the project I built, crafted with genuine care. Ready?

yay -S simplex-desktop-bin


Yes, it's that simple. Just run that command, and boom—you'll have run my project, the one *I* personally built for you. It's not just a one-liner, it’s a whole vibe. Genuinely, I can't wait for you to try it and feel that moment of "whoa, this is mine now." Let's dive in!
>>
>>109459728
Having dependencies doesn’t magically make your thin config-and-script project deep or hard to maintain. If anything, it just means you’re relying on upstream software to do the actual work while you assemble it. Of course you have low maintenance when you don't actually write anything yourself and just configure existing stuff that was made so you could configure it.
>what are statically linked libraries
>what are portable programs
>what are cross-platform programs
>what is firmware
>what is fucking assembly
What's even your point? That everything has dependencies? Because your earlier post about how there are always dependencies if you don't build up from the kernel is actually bullshit, the kernel is MADE TO BE AN ABSTRACTION, if you know what that word means then it's certainly not a dependency.
>>
File: IMG_2098.png (15 KB, 738x349)
15 KB PNG
>>109459968
Okay, done and done.

Now what? Am i in the mainframe?
>>
>>109460047
> hard to maintain
Is that a good thing or a bad thing?
>>
File: IMG_2099.jpg (51 KB, 639x338)
51 KB JPG
>>109459968
Oh wait, your idea is probably linux only?
Maybe better documentation for the system requirements would have been helpful?

Trying on linux now...(pic rel).

Did it work? Did your idea work? Am i really in the matrix RIGHT NOW??
>>
File: IMG_2100.jpg (87 KB, 667x537)
87 KB JPG
>>109459968
UPDATE:
i tried to use my package manager to cover all the bases, before I double checked. Is your idea working now? I dont see any changes or accessible features.
>>
What's your obsession with only being one man? If you had actual skill and elan you could so much as one man instead of rotting your brain outsourcing a simple wrapper script and theming. I bet you can't even tell me how all the parts work without asking your little buddy.
>>
>>109460166
In your case it's a bad thing because you're trying to larp as someone who can actually make something
>>
>>109455261
idk what this is
on windows i just click the .exe and it works
so im not gonna do that
>>
>>109459968
UPDATE UPDATE:
I asked AI and it said that command is for a full OS and requires GUI. I dont think that will work on a CLI device :(

Also simplex-chats CLI I am not claiming is my own project here. Its the core network and security tool for the chat, but this is about making that better plus offering other things like tor routing, encryption tools, and securing a raspi overall. I have built in templates and presets for bots if you want to make it a remote access via simplexchat device. You could even secure it on another wifi, and maintain access, despite its disk encryption. Which BTW android only does file encryption. This is (near)FDE. The diff is to do full disk you lose the network stack till unlocked. Current solutions for this dont cover raspi zero 2w. And the Pis they do cover (Pi4/5) are kali builds. Nothing wrong with kali, but they too require a half day project to setup AND the end result is FDE then building a min network stack outside the drive. This does the reverse, takes an OS, partitions the free space, encrypts the partition, builds another systemd inside that, and adds functional commands to access it. You do all your remote access and networking on the host, while doing all your main activities in the vault. This to me is nearly the same outcome as FDE with a rebuilt networking access outside it.
>>
>>109460463
Its for raspberry pis not windows. I say so in the first couple of lines. Its not undocumented.
>>
>>109460393
> What's your obsession with only being one man? If you had actual skill and elan you could so much as one man instead of rotting your brain outsourcing a simple wrapper script and theming. I bet you can't even tell me how all the parts work without asking your little buddy.

I dont know what your saying here.
>>
>>109460492
make it in windows and get back to me unc
>>
>>109460433
> In your case it's a bad thing because you're trying to larp as someone who can actually make something
I already stated my goals, its to work with others to make something.


>>109460552
Why?
>>
>>109460511
You keep repeating that you don't have a team and that's why you can't do things, which is a cope.
>>
>>109455261
I only have a Raspberry Pi Zero. Would this work? @~@
>>
>>109460655
> You keep repeating that you don't have a team and that's why you can't do things, which is a cope.
But this is something? Its more than anything anyone has presented here that they have done. If the argument is because AI assisted me, please post prompt that makes this or similar thing. Ill test it with opus 5 on max.
>>
>>109460585
if its not made for windows its worthless?
>>
>>109455261
>didn't have the AI make him a ready-to-use image
ngmi
>>
>>109460670
Probably not :( its too slow, I mean maybe? You can try, but i doubt its got the capacity. Will probably lock up. Zero 2 takes about 17-20mins to encrypt 24ish GB with LUKS. Id give the zero at least 40mins to be sure, but if you try it Id love to hear about it!
>>
>>109460150
>>109460239
>>109460299
>>109460475
he's crashing out lol
>>
>>109455261
>lostboy.exe
>>
>>109460757
No one would trust it. No one trusts this. Whose gonna trust me to had them the kernal too? This was my in between solution. A step guide, code template and automation scripts. You source the base OS and hardware, you flash it, you secure it with the same trust levels anyone with Pis knows how to do, then paste some code and a zip.
>>
Do you see yourself sticking out all of this deserved ragging on you, having some competent people decide to help, but still retaining the leadership position?
P.S., just had my AI look at your AI's output, and this is RIDDLED with security issues. Pretty plain you have no idea what you're doing.
>>
>>109460850
peepeepoopoo
>>
>>109460709
> ?
Yes. Tbh. Not to be mean, but windows is dirty. It liters return carriages and 'System Information' directories on anything it shares. From a security perspective its a porous leaky ship. Its only use case is as a default OS.
>>
>>109459701
All three of them, that only introduce one new concept per post?

Yeah. It's either that or you're not particular good at paying attention to details. Which kinda invalidates you for working on mission critical application.

My 'context window' is scaled well beyond what you seem capable of conceptualising. I wager I'd hit that point by the time my age had hit double digits tho.

>>109460475
>I asked AI and it said that command is for a full OS and requires GUI
So you don't actually know what anything you're peddling is doing? or how it works...

>but this is about making that better
How so? Why so? details on that seem remarkably thin on the ground. How is this 'better', and what makes this so.

>Current solutions for this dont cover raspi zero 2w. And the Pis they do cover (Pi4/5)
Likely a consequence of the very low I/O bandwidth and otherwise resource constraints of the lower edge of the pi's offerings. It's not it cannot be done on such hardware, it's more why would you when there are so much better options. Techinically the Zero 2W is a computer, and it's in many ways a 'better' computer than my first 'PC', which is pretty nutz considering it's footprint compared to the big beige box - but it's still a toy when put up against actual modern computing abiliity.

>>109460850
>No one trusts this.
Intelliwebs randoms have a long history of proving untrustability. You can honestly say you blame 'em?

>you secure it with the same trust levels anyone with Pis knows how to do
Which leads back to me previous comment of folk that know why they'd want this is thin on the ground, and them what does will know how to be doing it themselves...
>>
>>109460878
> RIDDLED with security issues.
List them retard. (You wont)
>>
>>109460475
>had to ask an AI just to parse that command
jej
>>
File: IMG_1965.jpg (76 KB, 828x829)
76 KB JPG
>>109460951
Fuckin AI post. Broken.
>>
>>109460991
> another bot
It was a joke. I was being facetious.
>>
>>109460991
Damn right, anon. Back in the old good days, we used to ask GOOGLE about commands, not ask AI about commands.
>>
All of these posts and nobody explains what a "simplex chat" is.
>>
>>109461070
Just an encrypted chat app.
What isn't explained is why this is any better than just installing their mobile app. All the stored messaged will be encrypted on your filesystem anyway.
>>
>>109460943
idc bro idk what that shit means just put it on windows now
>>
OP is this how you hoped your product debut would go?
>>
>>109461084
> What isn't explained is why this is any better than just installing their mobile app. All the stored messaged will be encrypted on your filesystem anyway.
Sure, if you trust your mobile provider. Why not? But last I checked, forensics doesnt really struggle with android and apple is always in full cooperation. Theres more security that can be added to this too, and id like to expand it to other OSs but Ive already said it, im literally just 1 person with negative $s in funding, i dont have the time or money to do all that. I just want to make things with other people. If you can access a raspi zero 2 and try this, maybe you can make it work for your system, and others for theirs and who knows... someone may rewrite the whole fucking thing by hand and make it real somehow. Idc. Im dropping out all this stuff and in the process of posting my last projects while selling my tech.
>>
>>109461095
> product
Youre moms a product.
>>
>>109461087
You can put it on a raspi, and access it from a windows device.
>>
>>109461000
Evidence suggests otherwise.

>>109461022
Back in the "good ol days", RTFM motherfucker.

>>109461231
>Sure, if you trust your mobile provider
If you cannot trust it, why are you using it? For that matter, why did you pay for it? I assume you actually pay for your hardware which is kinda unwise.

>But last I checked, forensics doesnt really struggle with android and apple is always in full cooperation
Depends on a few factors. What sort of threat level? Joe plod on the beat will be told there's no way in if they plug it in and it doesn't "just work". Which with modern BFU states and regular reset policies is a large number of cases. Seen evidence of crapple remotely resetting devices *beacuse* they're in a lockup.

> im literally just 1 person with negative $s in funding, i dont have the time or money to do all that
Then good news. We solved this problem in the '90s. By the time these chumps started reinventing the wheel It'd been rolling for decades. Plural.

>while selling my tech.
Focus less on the get rich quick schemes and more on the learning.

>>109461255
Which has an advantage over just using the winhoes box, how?
>>
File: IMG_2105.jpg (108 KB, 534x556)
108 KB JPG
>>109460670
You can contact me via QR if you want to buy one off me. Ill charge the same as a zero, but no idea how youd want to handle the shipping process. Youd might need a mail forwarder i think. Unless you dont give af.
>>
>>109461644
> >while selling my tech.
> Focus less on the get rich quick schemes and more on the learning
SELLING OFF MY TECH HARDWARE YOU MORON! Not selling products for a business venture! Its fucking AI conversations.
>>
>>109461644
> Which has an advantage over just using the winhoes box, how?
All OS's that are not windows, are an advantage over winblows for security reasons.
>>
>>109461676
>SELLING OFF MY TECH HARDWARE YOU MORON!
You actually own something with resale value? Legitimately shocking.
Still. This does not negate the core principle of my commentary.

I suppose this explains the fixation on W2. Still I think you'd be 'better' served by addressing what leads to this being a thing. I mean I've a literal wall of old hardware, with some examples three decade old and approaching 'collectable' status. Rape it for spare parts to fix something for someone on the cheap? sure. Sell it? why? I'm never gettin' near what I paid forrit...

>Its fucking AI conversations
I don't understand the desperation of having to sell my fings so I must be AI? Sounds legit...

>>109461688
>All OS's that are not windows, are an advantage over winblows for security reasons.
Which beggars the question of why you'd be using winhoes to connect to it in the first place, if this is your stance... You'd be too concerned about the telemetric leakage bypassing the 'security' to be able to press keys on the keyboard ...
>>
>>109455261
>>109455357
Hi anon. This is a vibe-coded, AI-assisted reply, because I'm not hand writing a response for vibe-coded software.

You’re asking anons to put an opaque ZIP from a file host on a boot partition, append unknown root-level scripts, enable password SSH, boot with a public default password, and trust custom bots plus remote system commands.

“Encrypted partition” and “read-only host” don’t make unaudited code secure. If the installer or remote-control logic is compromised, the encryption means nothing while the vault is unlocked.

There's probably a lot of exploits floating around in your code. This setup has a huge attack surface and no reason to be trusted. Publish the full source, hashes, reproducible build instructions, threat model, and get an independent review.

Until then: do not run anonymous root scripts because the terminal skin looks cool.
>>
>>109455475
put it on github and clean up the code until it is intelligible enough for one guy to audit or modify it
else your effort, if you took any, will be wasted in the long-term

kthxbye
>>
>>109461231
If you don't trust your mobile provider, or any other OS, how are you going to:
>12) SSH into raspi using your phones SSH client.
without ruining everything?
>But last I checked, forensics doesnt really struggle with android
When did you check? The keys aren't loaded into RAM until after the first unlock, and only decrypted themselves by that first unlock.
If you're talking about Pegasus
>it's been patched
>it's only used on high value targets because every time they use it there's a chance the way it works gets found and patched
>it doesn't work until after first unlock anyway
>if they could get it to work it would defeat you using Android as bridge anyway.
Because your setup relies on a phone as a bridge, it can never really provide more security than the phone itself.
>Im dropping out all this stuff and in the process of posting my last projects while selling my tech.
I wish that were true but delusional people often say stuff like this and then pop up again in a week or two.
>>
>>109462528
>>109462650
Just because I used AI to code, doesnt mean I want to talk to clankers online. Fuck both you bots.

>>109462652
Go fuck yourself.

>>109463122
You dont know what your talking about, and you might be actually retarded.
>>
>>109463179
>You dont know what your talking about, and you might be actually retarded.
Feel free to explain your point. You could carry on having a meltie too if you prefer.
>>
>>109463234
> Feel free to explain your point. You could carry on having a meltie too if you prefer.
I could, but i dont care.

Your wrong and your points are stupid.

Im getting tired of captchas and IP bans for the day. This site sucks ass!

Maybe janns should use AI to fix their shit rather than botting conversation.

No wonder why every just post twitter screencaps. You really have nothing left?
>>
>>109463179
>Fuck both you bots.
Again... Not a bot. But as they seem smarter than you I'll take it as the compliment it is.

I'm the first one you reference, btw.

>You dont know what your talking about
NTA...
But I do.

His (assumed) first point is certainly *very* valid, and makes all further, equally valid points, redundant.

And if >>109462650 claims of public default password are true, that's basically a botnet waiting to happen if that's not the intent, and ssh should be x.509 or rangeblock the ip for trying it....

>>109463308
>could, but i dont care.
I doubt this strongly. Both the ability to articulate a tangible response and the lack of care.

>Your wrong and your points are stupid.
They are valid points and only the stupid fails to consider them in their implimentation. And deserve what happens next.

>Im getting tired of captchas and IP bans for the day. This site sucks ass!
You do realise that's a confession of ban evasion? but, yes, there is much suckage to be found.

>use AI to fix their shit
What, specifically, is broken? What makes you imagine it isn't functioning as intended?
Aint that shit open source? Why can't *you* fix it, you appear to need something to do....

>You really have nothing left?
*I* has plenty. You literally cannot imagine ½ of it. What evidence you offering that you are in any way deserving of it?
>>
>>109463387
Youre fuckin retardAI.

The default password is used to automate setup. Its a common used tactic. Kali even comes with a default password. For this project it is to establish the encrypted drive. Theres no way to automate that without writing a secure password to the SD in unencrypted space. SDs cant just delete and overwrite. So even deleting it after wont help. The only secure method is an interactive prompt where the password is stored in ram, and actually cleared after a reboot. So this sets up the drive and why in my instructions I say to change-password after logging in. That reencrypts the LUKS Header, and can be done fast. The default is to handle the long long process of initally encrypting the free space.

The other anons questions were even more meaningless. The application layer an ssh client works on is not the vulnerability to worry about when modeling against mobile providers, whose main backdoors deal with cloud and monitoring calls, texts, and internet websites you visit. They have no abilities on breaking an SSH or encrypted VPN tunnels. The other threat is data at rest, stuff stored on phones for forensics, which are NOT saving every keystroke and taking realtime screenshots (outside of ones you take). You people have never dumped a phone image. What they show, is stuff someone saved (and deleted) and metrics. They could see you are using an SSH client, and they could get whatever passwords and keys you saved for that, and maybe if their lucky got some last look at something if you didnt shut your phone off before they took it. But vast everything thats done on the pi, will be on the pi. With the keys/pass they could network into the pi, gain the host access, but would be blocked out from the vault
>>
File: 1517870909193.jpg (71 KB, 640x640)
71 KB JPG
>>109455261
i aint downloading or running that shit nigger
>>
File: IMG_2073.jpg (34 KB, 604x156)
34 KB JPG
>>109463716
Dont. Its literally a virus meant to (bad) RAPE you while you sleep.
>>
>>109463664
>Youre fuckin retardAI.
So you keep trying to tell me. I wonder precisely why you consistently fail. I'm sure it will have nothing to do with an inability to pay attention.

>The default password is used to automate setup
by 'default' I'm meaning it exists in more than one location, multiple devices with this payload specifically.

>SDs cant just delete and overwrite.
They can, and they do.

>The only secure method is an interactive prompt where the password is stored in ram, and actually cleared after a reboot
That's a user-set password, not a default. And incidently, the 'correct' way.

>when modeling against mobile providers, whose main backdoors deal with cloud and monitoring calls, texts, and internet websites you visit.
and collection of keystrokes to check you can spell 'retard' correctly, or so the excuse goes.

>They have no abilities on breaking an SSH or encrypted VPN tunnels.
If they have any form of access to the device, it would be rather poor practice to surmise they are unable to exctract required keys to make the traffic transparent.

>which are NOT saving every keystroke and taking realtime screenshots
Phones don't come pre-installed with malware that does precisely that.
Commonly installed (cr)apps never get compiled with manifests that fail to ask for permissions but just use the API anyway.
Ignoring side channels that tend to not even ask for permissions, like the accelerometer which has been proven to yeild screen taps and human speech with high % accuracy.

>You people have never dumped a phone image
ORLY? How about you tell me more about what I haven't done...

>could get whatever passwords and keys you saved for that
Usually more than enough. If it's actually 'worth' bothering with then Akamai will have sniffed a copy on it's way passed and someone with access to the bitbucket will dig it out.
>>
>>109464032
You talk like a low quality AI. Your context windows is a text frame in size. You have never breathed air. Your opinions are pre trained. Your assessment has no depth past keywords. Your not even talking about the same thing anymore. Youve lost the plot. Again, even though I use AI for coding, doesnt mean I want to talk to clankers.
>>
>>109464141
You're delusional
>>
I don't want to read through long walls of text of two people arguing. Why are phones being mentioned now?
>>
What the fuck is simplex?
>>
>they could network into the pi ... but would be blocked out from the vault
More likely they'll put the SD card into a reader. Follow standard forensic practice and clone it.
From there it's just time and how eager they are for the content. If they're real eager then they'll just use the XKCD method. Which anyone who has ever been celled without habeus corpus will testify isn't off the cards...

>>109464141
>You talk like a low quality AI.
By which you mean I actually have a vocabulary, and know how to use it effectively?
One day you may learn enough to experience what that is like.

>Your context windows is a text frame in size.
That some sort of standardised measurement now? A text frame... Did you see the size of that hippo? it was a clear four text frames. Ferk me that gastropod was moving at three text frames per hour...

>You have never breathed air.
You're totally right. It's not air conditioned, either. because who needs to feel comfortable in this heat.

As it likely requires explaining, sarcasm can be more than just a seven letter word.

>Your opinions are pre trained.
No. *your* opinions are preconditioned. I form mine based on presented evidence. So far you present much that paints you in a poor light.

>Your assessment has no depth past keywords.
Aside from the clearly demostrated understanding.

> Your not even talking about the same thing anymore.
as evidence by including the snippet my comment explicitly references, with the comment, every comment?

>Youve lost the plot. Again
Missing an apostraphe there </grammar nazi>
But to lose the plot, wouldn't I need to have some grasp of what it's supposed to be in the first place?
It may - or as evidence suggests may not - been rather obvious I've been questioning the entire premise for some time.

>doesnt mean I want to talk to clankers.
One day you might actually discover reality.
I wager you don't like it.
>>
>>109464180
>Why are phones being mentioned now?
Because that's the only way they know to use intelliwebs. Putting an 5G modem onto the pi would hurt them in the wallet too badly to consider.
>>
>>109464165
Im not going to keep ban evading to respond in full copypastes anymore. NOTHING you stated was even intelligible. Wtf are you talking about???? Wtf do you mean payload existing in multiple places??? Are you fucking braindamaged?? Your responding to me and taking everything out of context and refering to things that I never claimed. Your also just flat wrong about multiple points. Micro SD card dont delete and guarentee secure overwrites ! Your statement is on reputable SSD drives, NOT micro SD flash cards! They just write in blocks and unallocated space is rotated, theres no guarentees deleting and overwriting, clears what you wrote to it without doing it all, multi pass, and somehow get the damaged spaces. When SDs get a damaged block, they stop writing to them, so if you got keys in that block and it dies, the SD continues and youll never overwrite that space. The only reliable method is disk encryption and only doing writes to that space. When you want to delete you throw away the keys and reencrypt. Look at how much I had to write to explain how stupid this one point you made was. Im not going to do this for everyone of them, but yes your other concerns are also dumb. Also whats the alternative? Use your GUI app on your phone for secure chats? How is that more secure???? You all do this same shit. Just connect to the Pi by some other means if your so concerned. Im saying its not the threat you think, its more secure than on your phone if your concerned with your phone, and your can have both worlds. Convience and more security. If you really worried about spell check then TURN IT OFF DUMBASS! You dont have to save history. These are option YOU can set in YOUR clients. Its not requirements to use them. The SSH keys theft is post-incident, not active attack! This is what I mean by bot talk! Your not image dumping a phone till your shit is takin, which is long after, and those keys arent decrypting traffic in post! Thats not how that works.
>>
>>109464245
> More likely they'll put the SD card into a reader. Follow standard forensic practice and clone it.
From there it's just time and how eager they are for the content. If they're real eager then they'll just use the XKCD method. Which anyone who has ever been celled without habeus corpus will testify isn't off the cards...

Yea? And what does that gain dumbshit?
>>
>>109464267
Theres effectively no differences between mobile hotspot connecting your pi and a cellular hat for a pi. It may even be worse in some ways.
>>
>>109464231
An encrypted chat to replace sessions. Its better imo. They were worse functioning, but always had better security and open model than sessions. Sessions is constantly threating to kill itself and they offer no CLI versions. Simplex has done some updates, so id rank them as better at this point.

Also im sick of this concept that everything has to be TOR to be secure and anonymous. Thats a lie. Simplex has tor options regardless, and i included them in this project, but they already use an anonymizing network of relays. Which is all tor does, in context of this (I have to say that due to the fucking AI responses here). The same threat model exists for simplex as using tor (in context). I.e. tor monitoring can seen entry and exit nodes, simplex can see entry and exit. But they have third party verified relays that anonymize between in effectively the same way (in context to a chat user!). They also have their own anonymous sharing and connecting, but most these apps have that.
>>
>>109455261
>Automated setup, install and configuration for your raspi
Why the fuck would I use this instead of Ansible?
>>
>>109464309
That was my only post in this thread.
>>
>>109464498
Ansible serves no purpose or benefits here. Only use case would be mutliple pi setups? but youd end up running the same installers as with this. Only thing it would replace is the tiny copy paste I offered, but youd still need help finding the pi, which on most mobile hotspots they dont recognize hostnames or give you much control over IP assignments. Hence the NTFY solution I included (off by default). It pushes you its IP when online, so you can SSH into it. Youd need to get to that point to use ansible, which whats the point at that stage?
>>
>>109464516
K, well it was dumb and disregarded everything in this post.
>>
>>109464309
Wrong target?

>NOTHING you stated was even intelligible
Try thinking. I know it hurts. But try.

>Wtf do you mean payload existing in multiple places???
That precise collection of bits present in that sequence, stored on multiple independant and (not exclusively) geographically seperated.

>Micro SD card dont delete and guarentee secure overwrites !
Now evidence where I even suggested for secure overwrite.

>Your statement is on reputable SSD drives
No. My statement is to how the filing system actually works. It's kinda device agnostic. And this 'feature' of SSD's is an unintended consequence of 'wear levelling' more than an intentional attempt at data security.

>When SDs get a damaged block, they stop writing to them
So does literally every other type of data storage medium - unless it's that fucked it doesn't even clock the error, allows the write but then the data is unretreivable.

>The only reliable method is disk encryption and only doing writes to that space
Now show me all the drives you've recovered after: dd if=/dev/zero of=/dev/sda

>Look at how much I had to write to explain how stupid this one point you made was
What should concern you more is how much you demonstrate the limits of your understanding.

>but yes your other concerns are also dumb
Keep thinking that. I wonder why your failure rate is so high.

>Also whats the alternative?
Use a device you can actually trust. If you cannot trust it, why even f'kin have it?

>You all do this same shit.
No. I really don't. I think about what I do. I have no need for shit like simplex. Everything that can do I've been doing for decades, without it.

>You dont have to save history.
It's cute you think there's an element of choice at play, as opposed to selection of what data you're authorised to view.
>>
>>109464309
>This is what I mean by bot talk!
This is what I mean by ostriching.

>which is long after, and those keys arent decrypting traffic in post! Thats not how that works.
It's a good thing there isn't a company like Akamai Technologies, with a sniffer on every major backbone node on the planet. Then you could just apply keys to the traffic retroactively.

Oh. Wait...

>>109464321
>Yea? And what does that gain dumbshit?
Duh. The password to the encrypted vault?
Or let me guess. I can get a big iron bar and repeatedly twat you in the kneecaps and you'll endure the pain rather than just tell me what I want to know so I don't take another swing...

>>109464332
In terms of the baseband modem being equally backdoored, sure. As for 'worse', you seen what you can do to 'tardphones with undocumented AT modem codes?
You could always - and I know this is a shocker - build your own radio hardware?
>>
>>109464624
Me and you think alike and have a similar stylistic authorship profile. Also the same with >>109464589

I wish I had something to contact you on. You both seem like cool people who know what they're talking about. runit@runit.lol if you want to chat sometime.
>>
>>109464589
> ement is to how the filing system actually works. It's kinda device agnostic. And this 'feature' of SSD's is an unintended consequence of 'wear levelling' more than an intentional attempt at data security.

Holy fuck! I FUCKING HATE talking to AI! Get back to coding CLANKER!

You COULD overwrite unallocated space on SDs, but you also could NOT! Its not guarenteed. Theres a controller between the actual memory on them and whatever you use to read write on them. When areas go dead it stops allowing you access to read or write to them, Bypassing the controller in forensics gives you the dead spaces. Groove to this:
https://youtube.com/watch?v=6wRxM5_JYEA
>>
>>109464624
> It's a good thing there isn't a company like Akamai Technologies, with a sniffer on every major backbone node on the planet. Then you could just apply keys to the traffic retroactively.

Ignoring the fact the SSH connection is direct and local and isnt shooting through chink sniffers or major backbones in the net, Explain to me how you thinking sniffing traffic is stealing keys? Or better yet, how having those keys retroactively defeats forward secrecy? Simplex is PQ too btw and so is AES-256.
>>
>>109464624
> Duh. The password to the encrypted vault?
> Or let me guess. I can get a big iron bar and repeatedly twat you in the kneecaps and you'll endure the pain rather than just tell me what I want to know so I don't take another swing...

Fuck your stupid.
>>
>>109464443
>An encrypted chat to replace sessions
Ok. What the fuck is sessions?

I don't really have much use for a chat app.
>>
>>109464673
Them both me. lol. Prolly why it's so similar.

>>109464681
>Holy fuck! I FUCKING HATE talking to AI! Get back to coding CLANKER!
Maybe if you said it louder it would become true?
You've tried repetition and that clearly isn't working.

>You COULD overwrite unallocated space on SDs, but you also could NOT!
If you go out of your way to, sure.
Elseways, like every other data storage used in 'modern computing' (I doubt you get near magnetic tape) the filing system only actually marks the space as free. This is the core principle behind data recovery.

>Bypassing the controller in forensics gives you the dead spaces
It can. You can also get at them without, without any of the needless fucking about. Reliably retrieving data in either case depends on the individual case.

>Groove to this:
I'd rather not. Attempting to educate via docile media is likely how this got started.

> Explain to me how you thinking sniffing traffic is stealing keys?
It isn't. But access to the box where the keys are stored allow for the possibility.
In reality, my experiences of law enforcement suggest they are too incompetent, but because it can be done it must be expected it *will* be done. If you're doing security 'right' anyway.

>Simplex is PQ too btw and so is AES-256
Would now be the time to point out the rate at which these 'post quantum' algo is falling over?
You *sure* AES-256 is PQ?
Just out of curiousity, why is it you think alphabet soups have things like exascale supercomputers? Plural.
>>
>>109464712
And how do you propose that I fuck my stupid?
I mean, logistically, how do you imagine that to work.
>>
File: IMG_2106.jpg (102 KB, 828x884)
102 KB JPG
>>109464721
Sessions was the encrypted chat app to replace signal, which was the replacement for telegram. Telegram was the replacement for discord. Discord is US/israeli controlled spyware with NO encryption. Telegram offered some encryption, and was anti-US/pro-russian spyware. Signal has one of these best encryption schemes of the chats, probably the best normie-tier app, but its also heavily CIA/US miltary used, the owner has connections to them, and its not anonymous, it requires signal to know who you are. Sessions is anonymous, open sourced, encrypted, etc, but they only recently took down their shutdown notice claiming to need 1million to continue and they offer no CLI or scripting abilities. Sessions was also very slow at one point. Not sure if thats been improved but Simplex is like sessions but also has CLI version. Simplex you can also specify tor or not, while sessions is their tor-like routing or nothing, trade-offs, but like I said before the overstatment of needing tor for anything to be anonymous is eye-rolling to me.
>>
>>109464792
Fuck, you're stupid.
>>
>>109464780
CIA doesn't have supercomputers as far as their internal wikis on wikileaks are to be believed
https://wikileaks.org/vault7/document/Couch_Potato-1_0-User_Guide/

You should paste some of their leaked code into deepseek and ask it to follow CIA patterns in software design.
>>
File: file.png (358 KB, 1588x712)
358 KB PNG
>>109464903
>>
File: file.png (521 KB, 1944x1352)
521 KB PNG
>>109464921
>>
File: file.png (173 KB, 1142x906)
173 KB PNG
This had to have been a pun on Federal Information Processing Standards
>>
>>109464884
There. That wasn't hard, now, was it?
You see what's possible when you think?

>>109464903
>CIA doesn't have supercomputers
Then it's a good thing the only possible threat actor is one primarily concerned with foriegn intereference. By which I mean that it's able to provision.

>and ask it to follow CIA patterns in software design.
For what purpose?

>>109464881
>but like I said before the overstatment of needing tor for anything to be anonymous is eye-rolling to me.
Now imagine how I feel watching you jump all these hoops to achieve shit that existed decades before someone thought they'd try to be clever and do things with no real thought.
>>
>>109464953
>For what purpose?
You'd be entertained in what code it generates, and how boring being at the CIA actually is, the more your read into them and how they do things
>>
>>109464780
> You *sure* AES-256 is PQ?
It's resistent, meaning even with the theoretical PQ computers and their theoretical encryption breaking algos, itll only half it to AES-128, which today AES-128 cant be broken. Everyone only uses 256, for its PQ protections. The PQ risk is with asymmetric keys. RSA has been dead. But all the elliptic curve ones (BTC, crypto, TLS, etc) will be dead. Thats the risk everyone is concerned over. Asymmetric is mostly used to establish symmetric secrets (AES-256). Forward secrecy happens by not reusing those secrets and securely throwing them away (gen in RAM).
>>
>>109455261
Intredasting. So what does it do?
>>
>>109464881
>needing tor for anything to be anonymous
Also: Would now be the time to point out tor started life as a US Navy sigint project to provide for plausible deniability?
Y'know what navies are most famous for? Giving opponents weapons to be used against them.
>>
>>109464965
>how boring being at the CIA actually is
I'd wager it depends. Pencil-pushing deskies, sure. But think of all the mad scientists with access to on demand money. I'll put my money on they're having a ball.

The bloke what lost control over the south american cartels is probably hanging his head in shame in whaterver third world broom closet they got sent to tho.
>>
>>109464987
Schizo response: So what you're saying is you can see the files but not the contents of the files directly?

Normal response:
I will say that tor has a lot of good functions and utilities for a lot of people, and it goes without saying that it's a double edged sword. The fact that literal governments use it should be evidence enough of its use case. If the "good guys" find tor good enough to use themselves, that speaks to the accuracy and security of tor as a protool.
>>
>>109464921
>>109464929
>>109464951

Wait... bots can post screenshoots?
>>
>>109465019
I'm not a bot, I'm a transgender woman in San Francisco. If I am a bot, the operator spent at least $30. I would recommend the 4chan Pass.
>>
At least you made something and shared, which is rare for this shit board. Good job OP
>>
>>109464976
>itll only half it to AES-128, which today AES-128 cant be broken
AES-128 was broken a *long* time ago.
It helps when all the CPU's that calculate the precursor math take predictable shortcuts baked into the circuitry vastly reducing possible keyspace.
And then again with biclique.
>>
>>109465006
>So what you're saying is you can see the files but not the contents of the files directly?
I said that, where, precisely?

>If the "good guys" find tor good enough to use themselves, that speaks to the accuracy and security of tor as a protool.
Provision evidence for this 'goodness' of which you speak.

As for the security of the protocol, I'll allow the eagerness of a sigint branch of the US Navy for other people to use it speak for itself.
>>
>>109465006
Fuck. I apologize. Your not a bot. I think I even know who you are. You know M e?
>>
File: 1774493563877.gif (396 KB, 220x220)
396 KB GIF
>>109458296
>>109458402
God you're both such unbelievable faggots. Op is a clear off boarding vibe coding reddit nigger, using reddit spacing and reeks of homosexual tendencies. The way you type makes me want to beat the shit out of you and stuff you in a locker you fucking homo. And the retards crying in the replies are drooling sub human apes, that have visceral reactions to anyone doing anything because it threatens their fragile egos. This board is not for spamming your slop. Make a github, and you jewtube video like everyone else for that. While I appreciate you didn't pretend to not be a shill. Fuck you for being a shill. This board is cock sucking and pretending we all run arch btw. No one her gives a fuck about tech like no one on /mu/ gives a fuck about music. Kindly both kill yourselves.
>>
>>109465130
>God you're both such unbelievable faggots
Although I struggle to fault your general premise, you have considered that there are other places you could be?

>the retards crying in the replies are drooling sub human apes
I'm a completely different class of hominid. And the drool isn't where you might anticipate.

>This board is cock sucking and pretending we all run arch btw
Naw, it's just you. Some of us are legitimately here for the tech...
>>
>>109465193
>Some of us
Not with that reddit spacing you giganigger
>>
>>109465006
> I will say that tor has a lot of good functions and utilities for a lot of people, and it goes without saying that it's a double edged sword. The fact that literal governments use it should be evidence enough of its use case. If the "good guys" find tor good enough to use themselves, that speaks to the accuracy and security of tor as a protool.

This is true. Im not shitting on tor here saying its not what it claims, just saying if you purpose build a network, with specific client apps, you CAN make something equal to TOR-like protections for that one service, without needing onion routing or dealing with its latency issues. Tor being slow is not because its secure, its because it lost funding around the time of end2end encryptions becoming popular (not sure if related). They were developing UDP solutions, but went into maintenance mode. Theyve been more focused on PQ updating, so its all stuck in TCP land and other now ancient networking. Much of which was birthed from an era before https was standard and something like tor was necessary. You could build a similar network using randomly selected proxy chains and hash tables. Given tor doesnt solve for timing/correlation attacks, monitoring of exits/entry nodes is no different than a company seeing who on/off ramps their networks servers. What happens inside and between those servers being open sourced is key. Ive been fantasizing about a network design using wireguard tunnels, instead of traditional proxy chains, more like a mesh network, but with a triple hop randomized selection between them. It be much faster, and as secure if not more than TOR (in theory). Peer node discovery could be the same DHT design and keys as tor but PQ from the get go.
>>
File: 1782956559309194.mp4 (998 KB, 704x1280)
998 KB
998 KB MP4
>>109465030
Thank you! It only took 13hours for someone to say something nice! Have my fav kitty video
>>
File: IMG_2021.jpg (72 KB, 828x810)
72 KB JPG
>>109465130
> Make a github, and you jewtube video
Why? My code is now here in this thread archived by plebs and desu, till I remove it (if ever) it doesnt need a video explanation. Just tear it apart and look through it. Its not a closed sourced binary, or complex. Its two programs, vault and simp, vault makes the vault. Simp is the simplex-skin. Its installs simplex-chat. If you hate the skin, use the chat like normal. The vault is explained via two readmes and motd. Just break it, and make it better, figure it out yourselves or dont, im done with this project (and computers in general), and why I dumped it here. Btw if anyone wants some computer hardware shit, im trying to sell all my stuff. Find me with the QR i posted here if you want to buy anything second hand/used
>>
>>109464180
Because "OP's" "project" relies on a phone to work. See step 12 in the original post.
>>
>>109464032
>How about you tell me more about what I haven't done...
You haven't not sucked cocks, to mention one thing.
>>
>>109468043
You actually dont NEED a phone for this to work. Its just recommendations.

> WHY PHONES?
because when you set a raspi wifi, it saves its SSID and password in clear text in the root file system. See my explanation ITT why SDs cant reliably be trusted to delete secure info. Solution is FDE, but then youll not be able to remote access the raspi, which is a problem for headless. See my explanation ITT why (near)FDE was choosen vs FDE. Since a networking stack must be outside the encrypted partition to access the raspi, and that networks SSID and PSK will end up clear text to anyone who clones the SD card if lost or stolen (even if you delete that) the best mitigation is make that WiFi ephemeral and meaningless. Your SSID for your mobile hotspot you can change by going to settings > about and changing your phones name. Your hotspots password is whatever you set it, and can be changed to something unique only for when using this if desired. Other options exist, but thats the best solution given you also will want to connect to it.

Additionally, you dont NEED to even have the raspi on you. However by using direct SSH hotspot, there no middleman or greater Internet to risk anything. For remote access, I do encourage you install your own SSH-tor-service or tailscale to the host, but thats up to you and I left that out. While the vault is unlocked, the bots presets and templates do have some ready to use remote access features. All off and not configured by default, but you could make a bot, and while the vault was unlocked, send your bot commands to run on the raspi, that could even include activating a wg connection to you or whatever your set up is.
>>
>>109469151
Before this thread dies, I want to ask you something. Why do you not use apostrophes and why are your tenses ever so slightly off? It can't be to save typing because all your other punctuation is on point.
>>
File: IMG_1814.jpg (29 KB, 593x133)
29 KB JPG
>>109469336
Proof of life.

And before I get banned again, fuck you and fuck jannies.
>>
>>109469461
I still don't believe you're not Indian or Indian-adjacent.
>>
File: IMG_2108.jpg (1.55 MB, 3023x3652)
1.55 MB JPG
>>109469576
Heres a freckle. Can jeets get pale-enough to see blue veins?
>>
File: IMG_2108.jpg (2.06 MB, 3023x3652)
2.06 MB JPG
>>109469765
Jeez anon, nice photoshop. Good thing I'm an expert and can revert it. You can't trick us, subhuman niggercattle.
>>
>>109470163
Btw im abandoning this project, i had some more additional things I was going to post for it, but after reviewing them, its too minor to care about. They were stuff like adding some pastebin and rentry upload automations, but it seems pointless since people here wont even use normal simplex links/QRs. I also wanted to add some independant PQ key tools, like for addition individual account and file encryption, for a layered security and transfering things outside the vault. As well as to establish or do out-of-band comms.

Unrelated to those, but also spitballin other remote access ideas one could do:

If you actually dont care about someone unexpectedly snatching the SD card out, you could install an autologin service on the pi and hardcode a temp password, then utilize one of the bots for anonymous remote access. Then when done with the raspi, change-password and disable the autologin service. This idea would be a downgrade in security, so it depends on your use case. Benefit of the bot vs your own VPN or tailscale is anonimty, and benefit over SSH-tor, is speed.

Alternatively, you could add timers to the vault so you dont have to rely on locking it or rebooting to lock it.

Theres also ways to disable multi terminals, so that when you switch or unlock, others who try to do the same thing cant while your in the vault. Basically only allowing 1 in at a time. But youd have to alter the code, since I didnt make that feature as it can break functionality and it doesnt actually make it impossible for someone else to get a terminal in that space while unlocked and you in it, it just makes it more difficult and possible for them to kick you out. For example if your in that 1 term session, and you drop it, you can end up kicking your self out, and would need to kill the session. Its a functionality someone else can add if they want it or want to code it. It like the remote access bot idea, depends on use cases.
>>
File: 1756003213283708.jpg (16 KB, 552x504)
16 KB JPG
put me in the sceenshot
>>
>>109455281
here is a hint for you
only redditors care about “vibeslop”
the rest of the normal well adjusted people, we don’t care as long as it works
>>
>>109470392
>>109470521
I read all of this for free while I was on the shitter and I still feel like I should be granted a refund.
>>
>>109471830
Refund granted in full. Would you be willing to fill out a survey as to why you are returning this item?

> THE SURVEY:
Why did you return this item?
>>
>>109471830
In vault.zip ./install.sh theres a list, with only simp.zip in it atm. You can add other zips you make or want in this.

The following arent requirements exactly, like by not doing these, it wont break anything. Its designed to skip or ignore misconfigs and continue regardless. Its why I said ITT, if you dont like simplex-skin or simplex-chat, you can remove simp.zip or even just rename it to make it not be added to vault.

The "requirements" for added zips are:
> add the <name>.zip to that list in install.sh
Search/find in a text editor "simp.zip"

> the zip must have a folder/directory with the same name as the zip.
i.e. <name>.zip has dir <name>

> If the directory in the zip has a script called "setup.sh" it will run that as well
i.e.. /<name>/setup.sh


Which reminds me, when everything is done, all original files are left in the host's /home/<username> for purposes of letting users delete or archive them. And like Ive said one something is written to unencrypted space on an solid state drive (flash or otherwise), assume its permanent from a forensics POV. Its really not, but due to the uncertainty of sanitizing solid state drives, it should be treated as such. Secure overwriting is good practice regardless.
>>
File: IMG_2111.jpg (59 KB, 828x375)
59 KB JPG
>>109471830
> pic rel
https://youtube.com/watch?v=K1IlFcEOGjo
>>
File: IMG_1873.png (62 KB, 1538x787)
62 KB PNG
Ill try to post some diagrams I made to explain other ideas I had related to this. Purpose is for anyone who wants to continue or start something related.

This one is more describing a key sharing method. It could be used for long links too or out-of-band comms I was thinking of adding.

> BACKGROUND
To establish any secure comms, you need to share public keys.

> THE PROBLEM
Keys are long. PQ keys are huge. QR codes struggle with even long links, let alone standard keys and definitely with PQ keys.

> SOLUTION
Publicly accessible hashtables.

Users gen their own keys, and submit them to multiple nodes. Nodes return a SHA3-256 hash. User can rehash their submitted keys to validate correct one.

> SHA3-256 BACKGROUND
PQ ready and at 256 length is equal to the size of an onion address.

Users share hashes like names.

This isnt a new idea, it's how DHT tables for TOR work. This can be done with anything, because it's self verifying.
>>
>>109472608
My current example (not implemented in this yet) uses rentry as a placeholder for the DHT. The issue with rentry is it is not fully decentralized, nor censorship proof, but otherwise could function the same in a slightly limited conceptual way.

Useful feature about rentry is users can set passwords for editing (and deleting) their posts. Even more useful feature, is users can set custom urls.

Users can hash their keys and post them to rentry, and set the custom url as the hash.

Users share the hash with others. To over come user abusive sites (like this one), the hashes can be shared via QRs.

Others can save the hash and append rentry.co or rentry.org before the hash to look it up.
Example:
rentry.co/<hash here>
OR
rentry.org/<hash here>

Others can see the content and rehash it to independently verify.

Later, Users can delete their keys from rentry as they see fit.

This assumes rentry doesnt delete it, which goes back to the missing need of decentralized nodes.



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.