Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - deviant_sheep

Pages: [1]
1
Android / Awesome collection of tools and resources
« on: September 29, 2015, 01:58:37 pm »
Im not sure if I'm late to the party on this one but a quick search didnt find anything posted on the forums about this site. Either way, its a huge, awesome list.

    https://mobilesecuritywiki.com/ 


Quote
Categories
 Forensics Tools
Development Tools
Static Analysis Tools
Dynamic Analysis Tools
Reverse Engineering Tools
Hooking Tools
Obfuscators & Deobfuscators Tools
Online Analyzers
Android Testing Distributions
Android Vulnerable Apps
Android Security Apps
Application Security Framework
Android Malwares Related
Tutorials
Android Vulnerability List
Android Security Libraries
Best Practices
Books
Android Security Research Papers
Security Overview
Presentations

2
Anonymity and Privacy / Re: Anonymous Maximus - What would you do?
« on: July 04, 2015, 03:29:49 am »
I'm sure there are a handful of services like this on the web, but i just found this one and it reminded me of this thread.   http://ip-check.info

Try it with no proxy / tor and all your settings in "non-paranoid" configuration.. enable javascript etc (not  flash though, don't even install that garbage)  then try it using tor browser with noscript enabled etc in a live os etc...

Interesting just to see the possibilities and dangers of browser leaked data.


3
General discussion / Re: Share your Rig
« on: July 03, 2015, 03:15:42 am »
Motherboard: Gigabyte GA-970A-UD3
CPU: AMD Quadcore 3.0ghz AM3 Engineering Sample
Memory: 8Gb DDR3
Video: NVIDIA Geforce 8800 GT
Sound: Creative X-fi Fatal1ty w/ front panel

Nerd porn UITB.

Who has the most computers?


Surely that would be me.. I think HTH can verfiy that  :p  and Just this week I received another desktop and 2 laptops  :-[

Ill try and post some pics of my mountains of computers if i get a chance to clean up a bit

4
Anonymity and Privacy / Re: Anonymous Maximus - What would you do?
« on: June 29, 2015, 12:23:07 pm »
If the NSA wants to know where u are u are pretty much fucked and should find refuge in an embassy,
...
(or maybe for the FBI).

^this basically.  If you've already made enough noise as to have attracted the feds, or worse, the NSA, then its too late for anonymity.  If thats the case, even completely avoiding all electronic communications might not be enough to evade their watch. 

In your question you specified as anonymous as possible, so I'm going to try and think of, and apply as many levels of anonymity as I can think of.   
I would definitely start with booting a live distro, TAILS being the most efficient (most likely) as it has been designed from the ground up for privacy and anonymity.  Next you'll need to configure how you will connect to the outside world.  In this case since we're paranoid, so hop in the car and drive a few hours to a large metropolitan city (if you already live in one, then you might have to drive farther to find  another.) Once youve found a suitable city, purchase a prepaid creditcard with *cash.*    Before heading back home, find an open wifi network, or better yet hack an encrypted network (WEP is easy, WPA(2) with WPS would be a better choice.)  Once your connected to the internet (while booted into TAILS) rent a server, use fake name, address etc and pay with your prepaid creditcard. Make sure your server is located offshore, in a privacy friendly country like iceland, denmark, france or switzerland.  Configure a VPN server and TOR on your new box. Now you can go home.

Now you'll need to purchase a prepaid burner simcard and mobile hotspot, probably would have been a better idea to purchase that before you came home... thats not your fault though, your new to this so I'll let you off on that one.   Immediately once connected to your new hotspot, connect to your vpn and then out from your vpn through tor, to the internet. 

Once on the web,
NEVER use your real name for anything
NEVER tell personal stories or the like.. no matter how arbitrary and generic you think they are.
ALWAYS spread disinformation, make a back story for your alter ego and stick with it. 
NEVER order anything to your home address
NEVER communicate to personal friends or family while using your anonymous connection
ALWAYS disable javascript
NEVER install flash, or JAVA browser plugins
and lastly (because im getting tired)
ALWAYS use tor browser  (as opposed to a common browser set to use tor as a proxy) this is because tor browser emits the same fingerprint no matter what device its installed on so every tor user using a vanilla copy of tor will all give the same fingerprint. browser fingerprinting has  shown to be pretty accurate and  it seems the more you do to try and avoid this the more unique your fingerprint becomes in most cases (i could go into detail but browser fingerprinting is beyond the scope of this rant, but i suggest anyone that isnt familiar to read about it.)

Any way you could basically keep adding inifite layerrs of anonymity but the more you do, the more limitations you will encounter and  the less enjoyable your web experience becomes.  So what I suggest for anyone is to first determine exactly how much privacy and anonimity you require and go from there, and also don't forget that being so quiet on the web can attract attention on its own, so disinformation and alter ego's are a must.  Don't be TOO quiet.

5
Oh shit.. this is good stuff.. I read about this a few months ago but this tool wasnt available afaik.. Im giving this a try like.. now.  Will post back with results.

Pages: [1]