- 519
- 39
Hello, I won't beat around the bush, but I'll briefly show you a couple more programs for online anonymity and security:
Cwtch,
a decentralized messenger built on top of Tor onion services. The key difference from regular messengers is that the server doesn't see the connection graph—who's communicating with whom. Group chats operate through a shared onion service run by one of the participants. From the Open Privacy Research Society, the code is open source, and it's been audited.
Ricochet Refresh:
Each user is an onion service. There's no central server—the connection is direct between two onion addresses via Tor. No one knows who's talking to whom, including the Tor nodes themselves. Independently audited by Cure53. One drawback: both users are online simultaneously; there are no asynchronous messages.
Lokinet is
an anonymity network based on the Oxen protocol with DHT routing. Tor has director servers that know the network topology—a potential attack surface. In Lokinet, the topology is distributed among participants. It operates at the IP level, anonymizing any protocol, not just HTTP. It also anonymizes VoIP, games, and any TCP/UDP connections.
Shufflecake:
Academic project 2023. Up to 15 hidden volumes on a single drive, each with a separate password. The main difference from Veracrypt hidden volumes: it operates at the block device level and is statistically indistinguishable from random data even with advanced forensic analysis. Proving the existence of hidden volumes is cryptographically impossible.
Kloak
protects against keystroke dynamics—biometric analysis based on typing rhythm and speed. It intercepts keyboard events and adds random delays before transmitting them to the system. In studies, the accuracy of identification based on typing dynamics exceeds 90%—a vector that almost no one addresses.
Portmaster is
a firewall with application-level connection control. It shows in real time which applications are connecting to which servers, allowing you to block specific connections and DNS requests. It's useful for auditing: most applications that appear local regularly connect to external servers.
Dangerzone
from the Freedom of the Press Foundation. Safely open potentially infected documents. The document opens in an isolated container and is converted using pixel-by-pixel visual rendering—macros, scripts, and embedded objects are not preserved. The resulting PDF contains only visual content.
Cwtch,
a decentralized messenger built on top of Tor onion services. The key difference from regular messengers is that the server doesn't see the connection graph—who's communicating with whom. Group chats operate through a shared onion service run by one of the participants. From the Open Privacy Research Society, the code is open source, and it's been audited.
Ricochet Refresh:
Each user is an onion service. There's no central server—the connection is direct between two onion addresses via Tor. No one knows who's talking to whom, including the Tor nodes themselves. Independently audited by Cure53. One drawback: both users are online simultaneously; there are no asynchronous messages.
Lokinet is
an anonymity network based on the Oxen protocol with DHT routing. Tor has director servers that know the network topology—a potential attack surface. In Lokinet, the topology is distributed among participants. It operates at the IP level, anonymizing any protocol, not just HTTP. It also anonymizes VoIP, games, and any TCP/UDP connections.
Shufflecake:
Academic project 2023. Up to 15 hidden volumes on a single drive, each with a separate password. The main difference from Veracrypt hidden volumes: it operates at the block device level and is statistically indistinguishable from random data even with advanced forensic analysis. Proving the existence of hidden volumes is cryptographically impossible.
Kloak
protects against keystroke dynamics—biometric analysis based on typing rhythm and speed. It intercepts keyboard events and adds random delays before transmitting them to the system. In studies, the accuracy of identification based on typing dynamics exceeds 90%—a vector that almost no one addresses.
Portmaster is
a firewall with application-level connection control. It shows in real time which applications are connecting to which servers, allowing you to block specific connections and DNS requests. It's useful for auditing: most applications that appear local regularly connect to external servers.
Dangerzone
from the Freedom of the Press Foundation. Safely open potentially infected documents. The document opens in an isolated container and is converted using pixel-by-pixel visual rendering—macros, scripts, and embedded objects are not preserved. The resulting PDF contains only visual content.