Crypto communications and OPSEC thread - Tox edition

Secure Instant Messaging and Group Chat for Zig Forums
tox.chat/


Join our Zig Forums group chat. Tox is a secure program for message, voice and video communications. New features are soon to be added which will make the group chat protocol more robust and 100% decentralized, but for now we have a chatserver called lainbot (groupbot). Here are instructions for how to join:

1. Install qtox or any other Tox client, then add this ID (groupbot) as a friend 2167ED20D40E1A5557A7AEFE16D0E110920382A9F3AA6C6597EA71DF4E499C5942CD0768F260 by clicking the + icon at the bottom left corner of qtox.
2. Wait a moment until lainbot appears online. It will autoinvite you to the general group chat.
Optional: Set up Tox to use Tor for anonymity: wiki.tox.chat/users/tox_over_tor_tot

Consider using a VPN. Since Tox is a peer to peer program, just like bittorrent, you must take measures to hide your ip if you wish to prevent cyberpolice backtracing. However you can use a VPN and TOR concurrently if you wish for the most protection.

Shills can't handle real time bantz!

qtox github.com/tux3/qTox (recommended)
utox utox.org/
There are many other special snowflake clients as well.

Attached: pol_tox.png (2000x2000, 342.84K)

Other urls found in this thread:

tox.chat/faq.html#tox-leak-ip
github.com/Jfreegman/toxic
nodes.tox.chat/
retroshare.cc/
chat.nobodyhasthe.biz
archive.fo/rmwCJ
nobodyhasthe.biz
compliance.conversations.im/
homebrewserver.club/picking-modern-xmpp-clients.html
archive.org/details/SamCulperSecurityAResistanceManual
tails.boum.org/home/index.en.html
twitter.com/SFWRedditGifs

tox.chat/faq.html#tox-leak-ip

also if you give your voice and video you arent anonymous.

Feel free to use this thread to discuss other methods for communication: riotshare, telegram, riot, signal etc.

We need methods to continue to communicate and collaborate outside of 8/pol/. Fracturing over a myriad of other chans is not a solution, nor is (((discord))) the glowniggers' favourite doxing platform.

Reminder that if you're not already browsing or posting in Zig Forums behind TOR or a VPN you're doing it wrong

Attached: memetic warfare.png (998x998, 397.35K)

did not like the file %user%.tox format
ip servers are saved in it
and it is not known what else
fuck tox anonimity

If you give your voice or video, are you trying to be anonymous?

github.com/Jfreegman/toxic looks cool

Attached: Esculpture Facepalm.jpg (380x255, 31.44K)

and the proxy was broken for several months( (127.0.0.1:9050 for example)
and traffic went directly
it is not clear whether it was an accident or sabotage
but developers do not trust

nodes.json
or what you mean?

the irony of these arguments is quite hilarious

Your own link explicitly states that these are publicly listed DHT bootstrap nodes. It does not include user IP addresses, it's exclusively volunteering node maintainers.
nodes.tox.chat/

Which client was that? Care to prove your claim?

i'm not even terrorist lol
just shitposter
and I know how real terrorists communicate

i mean nodes ip not user ip
and that the .tox format is not transparent
maybe you can pack/unpack it

i thought tox had fallen out of favor? (… though i do see its been added to the repositories of a number of distros)

if all you want to do is chat, then why not use IRC? …like, with Matrix?


to be fair, you should be using a VPN anyway


great thread. good idea. I was the one bitching about Zig Forums taking a stand and moving to one platform. I really do think the preferable route is to go IRC and use Matrix, but then again I haven't explored the other options thoroughly. i'm just a super oldfag that still does irc like a tard


is that what happened? i knew something was no good. what about Matrix?

qtox linux github
you can try to build previous versions yourself
half a year or a year ago

(heil'd)
maybe you could make a list for us of these platforms?

Most of these have plugins for pidgin (+otr), btw… and don't forget about XMPP

seriously, if you guise want to have some serious fun, do IRC with irssi (or mirc, if you're a retard and use winblows). there's a bit of a learning curve, but once you master the scripts, the shitpost capabilities are tremendous

just need to be careful with dev versions
i don't know

Use RetroShare
Tox is meme software written by /g/. RetroShare is real audited software that uses PGP for decentralized instant chatting, decentralized forums, decentralized email, decentralized file sharing, and decentralized audio and video calls. It's integrated with tor so your ip is never seen by anyone you're connecting to.
retroshare.cc/

Attached: Retroshare.png (256x256, 18.14K)

all the insufferable antifa faggots on irc use Matrix. i checked it out and it looks legit

That's too vague of a time frame, I've been using Tox for the last couple years and never have I had a problem with it not routing through tor. Can you link to a specific build or bug on the github which alludes to this?


Retroshare is good, but it's not normie friendly at all.

Here are some webms meant to help people get it up and running. I don't know how potentially outdated they are as Retroshare is now at 0.6.5.

Attached: RetroShareHiddenModeOnLinuxMintTutorial.webm (1920x1080 7.54 MB, 7.67M)

The following is a lie:
The NSA doesn’t make mass surveillance tools at all, they just use piggyback hacks.

They have an entire website with their hacking tools.

Would like to point out, the NSA uses National Socialist colors internally.

Add me on Retroshare then, my ID is:
CQEGAcGZxsBNBFz8rQsBCADdQuvywE+bgwDxK/u/JaoFk4thNHlHzG7L9CrZ26YD
eGGX2ycx8OapNbP5leQS4ZcRY/VADn9pU1hDGoRn8ICF2GKpMK19PBLpGI29rFaw
wCgQ5E7iDONr4oc8R1tlvYuD+dyjCKN1CjFPTTWUzGMuVgCYoP58xB+RIrF+i5qc
1/Qq0z9doUyAE+n08R2i/opMVd4AYRq7aqgIIYFqtrbkhFIKXikTpG8v1X9hY65D
fVVW5q0XmVJ6sN1jIX3Wq0DPKR/6JxHekkaf9ktp72S/lIGxuoILF5TjM+OrUbEL
Yk3wJK3b6aNu8XE4PgezmhO6Gt+u5+O9oklMhamQJ7LhABEBAAHNJVViZXJ2b2xr
IChHZW5lcmF0ZWQgYnkgUmV0cm9TaGFyZSkgPD7CwF8EEwECABMFAlz8rQsJEJGC
N8P3uLtlAhkBAAD5ewf/ZyF460jZdqkIyW4SxVnEjl/sF3oDlxU9cQG6hgoIF9Q9
p+cUQmGTOtjlCFRgKlAmTkxqwxDvdQcG5uZXDWanyFEbll4uA2W1fk9GXDeuA2nh
jRGkwKMmXl9a4oLywjyEC4m5yu5Vl6IQ4naylnk6/QIoxFl36yWFLAud+o+2a7na
BznX10bisWYD9TU3Ra8yYKibRG+RGStH0sduZCk+xuBGfUpiZ4WlLyiZa+52vYZu
7vMM1W7fajKOtH4y4E4X9a5BF4bFOW+60KAoqpGtyxVi40CQqc3A5EGEaf4aC/UL
H9kpwBKtGbtiri6bVITH2USDacuGjI0Le6Qfkqg0XQgOMTI3LjAuMC4xOjkxNTAG
C0hhdGVNYWNoaW5lBRB6azu1D9x5hBZWDxBpqMyzBwMQmL0=

Attached: trisquel.jpg (2000x1500, 2.09M)

based user

Attached: BasedAF.gif (367x358, 1.8M)

why not use ricochet.im?

Man, I remember Zig Forumstox when we all played pulsar together. Are you guys still drinking together every weekend?

Attached: 6 million kills.jpg (835x773, 57.54K)

Any good VPNs you would recommend? I thought someone from another thread recommanded crypto or mullvad. What about protonvpn? I also hear that NordVPN is falling got of favor.


What is differences between Tox and RetroShare?

lol
irc.rizon.net
##Zig Forums
dont connect from home and stop over-autisming your comms you faggot

I accepted the group invite and nothing happened. What next?

YOU'VE BEEN DOXXED HARHARHARHAR

Try restarting, if the autoinvite doesn't work just tell lainbot "invite 0"

Wonderful, a highly secure way to communicate with 3 other autists, 2 of which are federal agents

...

ricochet is another good one, yes


i think VPNs fall into four categories
(1) logging VPNs – DO NOT USE
(2) non-logging VPNs – use
(2)(a) those that have not been tested by courts – most of them. use your judgement
(2)(b) those that have capitulated to courts – when this is found out, they usually crumble. idk of any off hand
(2)(c) those that have been sued by cops/doj and have proven to be non-logging – only one i know in this category is PIA

other than that, just look at features. for instance, use one that also offers http or socks proxies so you can tunnel your p2p through a second tunnel inside your primary vpn tunnel. look for proven protocols and programs (openvpn, etc), and if you travel look into ones that have the ability to fool router VPN blocks, etc. also, of course, number of different servers

just go to torrentfreak or another website like that and look for what is recommended. this is kind of one of those things you have to research for yourself. but, keep this in mind: there is no non-logging VPN that we know of that has secretly logged and/or cooperated with law enforcement – that we know of. There is only one that we know of that has been sued in court for release of records, fought back and successfully protected user privacy: PIA


ran by faggot retards. go to #Zig Forums instead


tox/pol/ has been like this for years. it only picks up during election activities

Club Cyberia has been fairly active, albeit full of a few autists

Nigger how the fuck am I supposed to remember a user name like that?

You copy and paste it, it's the ID that you need to add a friend on retroshare, the username within the program is different and customisable - it could be GayNiggers123 for example.

Damn, those were the days. Why not try and do something like that again? Those sessions were /comfy/ as fuck.

Attached: 1439490900932.jpg (345x420, 40.6K)

Is there a Linux distro to go to? AFAIK Ubuntu is partnered with Amazon so are Ubuntu based distros compromised? Debian based, Manjaro or some Slackware seems the go to.
Is the country of origin an issue too? Peppermint OS is from UK which could raise a red flag.

How about Matrix/Riot?
chat.nobodyhasthe.biz ?
archive.fo/rmwCJ

There is the irony: Posting on this site probably counts as affiliating with terrorists at this point. Flimsy, but totally not beyond those who might want to ruin you.

Debian, like any Linux distro is only "secure" if you know what you're doing I imagine. For example, everytime I install Linux I break it.
But you're on TOR, you should know this.

Only use Ugandan software and you're golden.

I like Riot and Tox, but as far as I'm aware there's no Zig Forums groups on Riot.

No one cares you colossal vagina. Run away if you're scared.

afaik, ubuntu is only compromised in the "FOSS" sense, not any other. Ubuntu got in big shit for having its installer default to "reporting errors" and such, which caused a big stink. My understanding is that they discontinued this practice. What this user says is essentially correct, with a few possible exceptions. Some complain that systemdick is a real problem. Most debian-based distros still use it, thought iirc its falling out of favor, or at least being used for less and less services (the main thing was that it was one attack vector that allowed access to too much of the system, not that it was necessarily insecure). Further, using a number of non-debian distros might present the advantage of "security through obscurity" since their file structures, etc might be different and therefore an attack vector or virus might not work bc its written for the most common distribution(s) ie. debian-based distros. Linux itself benefits from this (since most viruses are written for winblows).

Still, in hacking competitions, winblows always gets hacked first, followed (these days by only a few seconds) by OSXlgbtqia, while linux is far, far behind in the amount of time it takes to hack.

but, again, this user is essentially correct in that it is most about the skill of the user and the precautions you take. best thing to do is find a linux distro and stick with it until you learn it in and out. Find a "hardening guide" and follow it. Learn iptables (you can start with ufw if you want) and how to use it. And, most of all, protect your browser and be careful what you click on! (>protip: only run browsers from non-admin accounts, preferably sandboxed with firejail or such)

Mint is fine, but I wouldn't use it for very sensitive material. Trisquel and other GNU distros are much better.

Nibbas, I can't even make a gmail without the dogs wanting my mobile number. I've been trying all day now to get around it but can't. I even paid for a service that was unable to get around it, i think because all the numbers in their pool were already used. can anyone help me with this? I'm an Ausfag too by the way in case it's necessary information.

forgot to bracket the (((gmail)))

Have made a gmail in the last month with only a different email box. Using a VPN terminating in the US. You might want to try that, AUS seems to falling to darkness pretty quick, Google might have to be complying with local regs. Good idea to make sure nothing your browser is sending has a hint it isn't a US browser as well. (Plenty of websites to break down what your browser is revealing.) Should only need to worry about all that crap long enough to make the account.

I'll give it a try but I think they may have changed there policy since the vox fiasco. i set one up about a month ago too and didn't need the phone activation then either. it's fucking starting to get insane. won't be long until our online identity is given out at birth to go hand in hand with your real identity and all anonymity is removed from the internet. big brother is coming boys.

If you think IRC/Matrix is a replacement for Tox, you don't understand.
The point of Tox is that it's uncensorable on a technological level. That's what P2P does. Raid what? The chilling effect is architecturally absent.
See you in cyb.

irc doesn’t support encrypted private messages. For open enrollment chatrooms, we have to be realistic, there will be an FBI goon in there. But the capacity for real encrypted coms, no phone number needed (or email - Wire requires email), is very impressive. File transfers are also possible BUT NOT ROBUST!!!

This is a very good point. The basic question is, “what is the ai system censoring?” And, if it’s Tox, well, nothing, because it can’t be done.

Voat is down now? Anyone know why?

I’m not getting the invite.

I tried telling Lainbot “invite” but it doesn’t work. I’m connected to lainbot, otherwise it wouldn’t give me errors if I type non-commands.

it would be nice to hear that systemd is falling out of favor, there was nothing wrong with sysv. I don't believe it though, everything is going to "it just works" and systemd is part of the process.

When linux "just works" it will be windows.

have just tried to make another one signed into a USA server on my VPN and still no way around giving those faggots my number. seriously, it's getting beyond a joke all this added forced (((security))). it doesn't matter if you don't want it, goy, jewgle knows best. oh, you don't want 2 factor authentication, goy? Oy Gevalt, soon it's going to be 3 factor authentication. it's for the (((security))) of your account, goy.

Attached: 646f3a76df72ac6cd224f83d89b0b2f5c580ea52ca384a2eff2fe5dc37706e24.webm (640x360, 885.08K)

you can use tutanota protonmail.

Is there a bot other than the
2167ED20D40E1A5557A7AEFE16D0E110920382A9F3AA6C6597EA71DF4E499C5942CD0768F260

one that can be added to chat with people?

We should make a Zig Forums room. I'm still trying to understand riot/matrix's claim that they are "decentralized", but evidently, there must be some server-aspect to it where messages are stored, or else how are you able to access past messages when you log in? Even though the messages can be encrypted end-to-end, my understanding is that means you could have potentially compromising material, albeit encrypted, stored away somewhere.

Attached: Dededegiorno.png (600x600, 791.78K)

there's no central server. all the past messages are saved in a distributed manner. there's just a way to reconcile different chains of info, like the blockchain. end-to-end encrypted messages always have the material stored "away somewhere" – ie. on the harddrives of those involved. Matrix is no different. the matrix website literally has a video explaining this. check it out


try using an australian vpn. that seemed to work for me for some reason. also this


devuan is the full-throttle anti-systemdick debian distro


not true. irssi, hexchat and other clients have OTR plugins


IRC w/ Matrix is fucking distributed you fucking moron (ie. p2p). you're a fucking dipshit

NatSoc lads with the tryskelion wreaths look like they know how to party. Much better than these syphilitic nightmare cunts. Remove shameless greedy kike wenches, et.al.

Attached: b6a979842db6a42ca7778729cbd0a3cec329b30eef9ca16106b71cd53511c5dd.jpg (541x373, 54.4K)

(trips)

i'm aware there's other options than jewmail; I want jewmail specifically for reasons.
does anyone know how to activate this shit without giving them my actual phone number?

—–BEGIN PGP PUBLIC KEY BLOCK—–
Version: OpenPGP:SDK v0.9
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=kZ/1
—–END PGP PUBLIC KEY BLOCK—–

fuck it's not the thing
here:
CQEGAcGcxsBNBF0HQYMBCACddagqMeznc7xB4IyLVNaqHZVVOA0pVXn71zr6pUnM
vEp3YpF6Azdwfc533/k46soOlSW0cSzt+MCk7neXBPQj+OslWq1bKbLYfaa0AxEH
zX6o1UPkCprd0bnfDbJ8T/EcU+Lb3cvcl3GzY8IZ7B735aduMUNQKlbs3C8NjTmW
X2YaF2cPBW3KLcuXHaTcH4ibCDpxe/ekmmscUiKyro4ZtIDNHr55eSPRCJr0UpjC
bULexpO9ZkNL1YtwYsB58RNvj02PUUP846kGDsR3qfcqHw7FJBM8F0PrDa+H8NR8
YknmwyyeHtFdYG+kc7tlYMGW0jLZpz7DJW04TG3XltQjABEBAAHNKGplcnJ5YnV6
emVyIChHZW5lcmF0ZWQgYnkgUmV0cm9TaGFyZSkgPD7CwF8EEwECABMFAl0HQYMJ
EC2cxr5s6KseAhkBAAD/jgf+NcF7jRPxzCSIRHACAv17lVxCFV7Im4WLzINEkqGX
l5ExoMQEP6YFHP/kUn8fnksVvd+/qG/jupysBi9uVtCI8ZQzzitqv5RKsjUfFMVQ
+Q+O+5mxP+Ifcfj5SCYC+h0BYTNopHvUmI+AQq4OleGOVCZNLxlu+LhYeIIu8ar6
Vk8brIhUyO4bQduTk9Wyz4QaOo1s2FYvTQuatrQVfd+gS6qUXMSa1RREyH7u/dOl
luWEYbMUDNEMMhWSZp2HJtdpQ6ULco9pDZ8tcsOQCG9eVDGkurKBH0AL+KW7PnyH
2l1U/WY5JyI9n814rmJcjiOpnSD1ObkPgmmWr8KYaNWm1AgbNXBqM3IzbjJpb3V5
bW1mcC5vbmlvbjo5ODc4BgtNeSBjb21wdXRlcgUQnb2eULXn+mlDELp2EtTUGgcD
NsNh

Tox is pretty comfy, the one room that is linked in the OP is nice, but I wish there were others.

hexchat support is experimental.

Let’s say it’s great (it isn’t). Still, it suffers the super-nerd problem. Nerds are like “do it this way” but bad ways are easier, so they’re what normies will use, and it will fuck them up.

So, is it any good? No, it requires a “shared secret”. That’s because irc has a mitm problem that won’t go away without a completely new design, ie, irc is shit, don’t use it, you stupid fucking nigger.

I'm an absolutely mad lad and I'm posting on Zig Forums from my job. Should I worry. I don't know OPSEC at all. I have linux installed, but I'm not using it that frequently, though I should.

I use VPN, HTTPS, but I think I should use TOR too, should I become a TORnigger?

A VPN is babby's first OPSEC; a good first step to make sure your network administrator doesn't know you're visiting here, provided the VPN is reliable (no logs policy etc.). However, keep in mind that, for a network of work computers which are most likely named after your actual legal names, the network administrator can see that "user is connected to a VPN" but can't see where you're hanging out or what you're posting, provided your VPN is set up correctly and there isn't a DNS leak. You could further route your VPN connection through Tor nodes if you want extra anonymity, but it doesn't change what your job's network admin sees you doing; it's still going to be "user is connected to a VPN".

Another recommendation for babby's first OPSEC is to not use your work computer to surf here because, even though they might not know what you're doing on the internet, they could still have access to the hardware side of things. Instead, get a separate shitty laptop, load Linux onto that, and use that as your browsing comp. Try not to use your home internet connection, particularly if you're thinking of downloading Minecraft.

Attached: hackerman.jpg (960x960, 141.92K)

I can't join the Cyberia room. Lainbot is sending me the invite, I accept, but the room does not show up on the list.

Another thing that should be mentioned is to not go bare-back on Tor because people can guess it's you even if they can't read the exact contents of data that you received/sent.

Take the example of the kid who sent a bomb threat to Harvard in an effort to postpone his final exam:

How did this happen?

Attached: Gondola computer.jpg (1200x773, 43.92K)

Anons, thank you very much. I already have a notebook with Manjaro and Botnet7 installed. I just need to get familiar with linux more. I hate that I'm still not using it, but that is it. I will deploy my notebook. Should I keep manjaro or go for another distro?

I'd say keep manjaro if you're comfortable with using it. What's more important is how familiar you are with your system and how to protect it, not necessarily what specific flavor of linux you're using.

The only difference between the vast majority of linux distros is the package manager and default software installed.

brent_rambo.jpg

nobodyhasthe.biz - /ourguy/ homeserver (matrix is shit and got hacked recently, but there are other homeservers that are BASED!!111!!)
#MDE_Public:matrix.ordoevangelistarum.com - MDE subplebbit exiles.
if anyone has more feel free to add

Use XMPP for encrypted chat
compliance.conversations.im/
homebrewserver.club/picking-modern-xmpp-clients.html

I just checked out the chatroom, seems pretty nice, but can someone tell me how to create new channels on here? It seems silly that there is only a single Zig Forums groupchat how do I create new stuff?

Also, nice room, you seem like a bunch of nice lads.

Some OpSec:
archive.org/details/SamCulperSecurityAResistanceManual

Use:
tails.boum.org/home/index.en.html

I just created a new Zig Forums room, you just have to do invite 1 instead of 0.

HONEY POT
HONEY POT
HONEY POT

HONEY POT
HONEY POT
HONEY POT

HONEY POT
HONEY POT
HONEY POT

HONEY POT
HONEY POT
HONEY POT

HONEY POT
HONEY POT
HONEY POT

HONEY POT
HONEY POT
HONEY POT

HONEY POT
HONEY POT
HONEY POT


fed.

hey Rabbi

...

TOX is not secure. Chat logs and IPs got leaked. Leftists are monitoring chat rooms.

no one is a terrorist user.
they are all just shitposters.

wave to the fedfags

wingless purple duck in a peperobe?
I am trying user…

use a vpn, retard. Leaked chats don't mean anything

Kikes sure are butthurt about this, what with their spam and non-sequitur gay shit and all.

Privacytools.io

everyone should be using privacytools.io, it has great guides on basically everything.

nothing I have to say shouldn't be said in public. If you want to talk to me talk where others can hear you

Attached: satanbling.png (792x473, 644.26K)

eat shit fed

is there really only one room on tox? how do i find the other channels?

Literally all of the internet is kiked except this board. You're supposed to build a DIY firewall and block all traffic except this board. Anyone linking to anything that is not this board is a fedzodkikeshill. Do not communicate in any way that is not on this board.

does not work

Attached: the_plan.png (1876x1120, 149.96K)

It's P2P, niggas; there's no server involved. To be able to talk with the other person, they need to be online too.


Basic OPSEC; don't dox yourself and use a VPN or Tor to scramble your IP.
Only if they're added, you stupid nigger.

Attached: Meloven.jpg (324x395, 18.21K)

Very interesting, then, that one of the stated goals of systemd is to erase those differences. No?