Commit Graph

542 Commits

Author SHA1 Message Date
Alex Anderson
ae8cfc1bfc
Merge pull request #187 from TwoSixtyThreeFiftyFour/Updates-to-Appendix-B3-about-Threat-Modeling
Update of the threat modeling appendix (B3)
2022-08-15 21:04:28 +00:00
Alex Anderson
98f6c2215f
Merge pull request #202 from TwoSixtyThreeFiftyFour/Bad-link-fix
Update bad link Appendix R
2022-08-15 21:03:53 +00:00
Alex Anderson
96f9ca193a
Merge pull request #198 from TwoSixtyThreeFiftyFour/update-chatroom-rules
Update (current) chatroom rules to add #OSINT
2022-08-15 21:03:00 +00:00
Alex Anderson
92bb1e2a00
Update chatrooms-rules.md 2022-08-15 21:02:27 +00:00
Alex Anderson
3dc5e2e53f
Merge pull request #199 from TwoSixtyThreeFiftyFour/Update-of-side-channel-browser-attack-warning
Update on browser side-channel attack section
2022-08-15 20:57:41 +00:00
Alex Anderson
10be1bf92e
Merge pull request #201 from pterocles/types-of-cpu-attacks
Micro-architectural bugs in Intel and AMD CPUs
2022-08-15 20:57:21 +00:00
TwoSixtyThreeFiftyFour
01fe6744c1
Update bad link Appendix R
Update bad link Appendix R
2022-08-15 19:37:13 +00:00
T. H
cbb3c49666
Revert a commit and cleanup a pointer
This reverts commit 7736c42bd7.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:51:47 -04:00
pterocles
870347b784
Add microarchitecture bugs and related research to Appendix B5
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:41:04 -04:00
pterocles
5cca117aa1
Move content to Appendix B5: Types of CPU attacks
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:39:40 -04:00
T. H
1703ae02c8
Merge remote-tracking branch 'origin/types-of-cpu-attacks' into types-of-cpu-attacks 2022-08-14 19:38:33 -04:00
pterocles
6b5b8e5656
Fix pointer to Appendix B4 while adding Appendix B5
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:35:47 -04:00
pterocles
93c6825db8
Microarchitecture bugs in Intel and AMD CPUs
Add more information about microarchitecture bugs

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 11:01:23 -04:00
pterocles
7736c42bd7
a
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 11:01:18 -04:00
pterocles
7d80648d88
Doc: Microarchitecture bugs in Intel and AMD CPUs
Add information about microarchitecture bugs

It's been a very busy year for Intel and AMD CPUs. Researchers have
discovered bugs left and right. One of them was revealed recently and I
felt compelled to add not only it but also information regarding other
types of attacks that aren't yet in the guide.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 10:26:32 -04:00
TwoSixtyThreeFiftyFour
f4d6530ffd
Adding warning about cars emergency calling features
Small update to Appendix N: Warning about smartphones and smart devices

Adding small warning about cars having some cell network related features
2022-08-13 17:02:51 +00:00
TwoSixtyThreeFiftyFour
c3199f7cec
Update on browser side-channel attack section
See:

-  Release tweet: <https://twitter.com/ma1/status/1557751019945299969> <sup>[[Archive.org]](https://web.archive.org/web/https://twitter.com/ma1/status/1557751019945299969)</sup>
-  User explanation: <https://noscript.net/usage/#crosstab-identity-leak-protection> <sup>[[Archive.org]](https://web.archive.org/web/https://noscript.net/usage/#crosstab-identity-leak-protection)</sup>
-  Tor Project Forum Post: <https://forum.torproject.net/t/tor-browser-can-leak-your-identity-through-side-channel-attack/4005/2> <sup>[[Archive.org]](https://web.archive.org/web/https://forum.torproject.net/t/tor-browser-can-leak-your-identity-through-side-channel-attack/4005/2)</sup>
-  NoScript extension for Firefox (Firefox, and other Firefox-based browsers except Tor Browser): https://addons.mozilla.org/en-US/firefox/addon/noscript/
-  NoScript extension for Chromium based browsers (Brave, Chrome, Edge, and other Chromium-based browsers): https://chrome.google.com/webstore/detail/noscript/doojmbjmlfjjnbmnoijecmcbfeoakpjm?hl=en

- Removed advice to install Lekuidator+ on TBB since it's now handled by NoScript and on by default.
- Added NoScript as preferred for other Browsers (requires settings, on by default on private Windows).
- Changed Lekuidator+ from main mitigation to alternative to NoScript.
2022-08-13 15:30:58 +00:00
TwoSixtyThreeFiftyFour
3f2934458e
Update chatroom rules to add #OSINT
Update chatroom rules to add #OSINT
2022-08-12 16:53:18 +00:00
pterocles
022c9f6169
Update transparency reports
- Discord transparency report
- Snapchat transparency report
- TitkTok transparency report
- Reddit transparency report
- Twitter transparency report (link)

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-12 02:00:19 -04:00
TwoSixtyThreeFiftyFour
40e4a28464
Adding mention of OSINT room in guide
Adding mention of OSINT room in guide
2022-08-09 10:41:50 +00:00
TwoSixtyThreeFiftyFour
2a72f370fb
Approved
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-09 10:09:19 +00:00
TwoSixtyThreeFiftyFour
d98d84379c
Merge branch 'master' into Updates-to-Appendix-B3-about-Threat-Modeling 2022-08-09 10:07:58 +00:00
TwoSixtyThreeFiftyFour
6d7d57e9e2
Fix bad links to VPN logging policies
Fix bad links to VPN logging policies
2022-08-09 09:35:05 +00:00
TwoSixtyThreeFiftyFour
d046572694
Merge pull request #2 from pterocles/pterocles/update-threat-modeling-section
Additional commits for #187 [draft] [hold]
2022-08-09 09:30:07 +00:00
TwoSixtyThreeFiftyFour
0f15b8f74f
Merge branch 'Updates-to-Appendix-B3-about-Threat-Modeling' into pterocles/update-threat-modeling-section 2022-08-09 09:28:09 +00:00
TwoSixtyThreeFiftyFour
a99181080b
samm update removing name 2022-08-09 09:19:46 +00:00
Alex Anderson
3179482c22
Merge pull request #189 from TwoSixtyThreeFiftyFour/e-mail-fix-on-about-page
Fixed wrong e-mail on about page
2022-08-07 20:56:05 +00:00
Alex Anderson
66227ce576
Merge pull request #149 from pterocles/patch-1
Appendix L: list format, make it easier to skim through
2022-08-07 20:55:35 +00:00
Alex Anderson
5f9242537a
Merge pull request #162 from TwoSixtyThreeFiftyFour/Small-fixes-in-the-pay-with-crypto-section
Small fix in the "pay with crypto section"
2022-08-07 20:55:14 +00:00
Alex Anderson
3f6665f9d1
Merge pull request #153 from TwoSixtyThreeFiftyFour/Add-Tor-Mirror-URL-to-Readme-and-Guide
Add tor mirror url to readme and guide
2022-08-07 20:52:35 +00:00
Alex Anderson
1ed668550d
Merge pull request #183 from TwoSixtyThreeFiftyFour/move-to-1.1.6pre
Move to 1.1.6pre1
2022-08-07 20:47:39 +00:00
TwoSixtyThreeFiftyFour
6cd3d17b07
Update guide.md
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-06 19:57:50 +00:00
TwoSixtyThreeFiftyFour
65ebc3fe04
Update about.md
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-06 07:31:41 +00:00
T. H
9e6cd3826f
Update guide.md 2022-08-06 06:24:27 +00:00
TwoSixtyThreeFiftyFour
505d612191
Changing link to PGP sign to in-line
Changing link to PGP sign to in-line
2022-08-05 10:07:05 +00:00
pterocles
a193dcba82
The commit 0ef3728442 ("Update of the threat modeling section") is
missing some key elements:

Specify whom created the LINDDUN online tool. Define acronym and
explain that it is synergistic with STRIDE methodology. Add optional
illustration from Dr. K. Wuyts' 2015 publication: Privacy Threats in Software
Architectures, Ph.D. Thesis, Doctor of Engineering Science (PhD) (Leuven),
KU Leuven, January 16, 2015.

Fixes: #188 ("Update of the threat modeling section")

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-04 14:27:44 -04:00
TwoSixtyThreeFiftyFour
d5bbf1ef87
Fixed wrong e-mail
Fixed wrong e-mail
2022-08-04 16:13:50 +00:00
TwoSixtyThreeFiftyFour
0ef3728442
Update of the threat modeling section
Update of the threat modeling section
2022-08-04 15:00:20 +00:00
TwoSixtyThreeFiftyFour
c3b9f0b9a6
Adds https://generated.photos/face-generator to creating identities section
Adds https://generated.photos/face-generator to creating identities section

Removes the archive.org link to thispersondoesnotexist as it's pointless?
2022-08-04 14:25:37 +00:00
TwoSixtyThreeFiftyFour
79b01253a0
little grammar fix 2022-08-04 14:03:06 +00:00
TwoSixtyThreeFiftyFour
9256fc675a
Adds Molly next to Signal in the guide
Adds Molly next to Signal in the guide
2022-08-04 14:00:53 +00:00
TwoSixtyThreeFiftyFour
736f7f5a45
Merge pull request #1 from pterocles/origin/pr/183
Bump version to 1.1.6-pre1
2022-08-03 20:06:50 +00:00
pterocles
7ad1e7922b
Bump version to 1.1.6-pre1
Certain fixes and additions have been made to warrant a version bump.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-03 15:21:25 -04:00
TwoSixtyThreeFiftyFour
a3e487a79c
Update guide.md
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-03 19:07:00 +00:00
TwoSixtyThreeFiftyFour
454f04492e
Move to 1.1.6pre
Move to 1.1.6pre to change the date and reflect that many changes did happen since 1.1.5
2022-08-03 14:19:26 +00:00
Alex Anderson
8de6b5bb69
Merge pull request #182 from pterocles/pterocles/update-tor-route
Update on Tor Browser
2022-08-01 21:10:32 +00:00
pterocles
524331a69f
Update options for Tor route on Android
Fix out of date options/settings for Tor on Android.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 12:06:01 -04:00
pterocles
aabd9a121d
Update images for Tor route
Images were out of date. Updated and used PNGs for them.

Tor Project has condensed their settings and it is no longer
necessary to manually configure bridges.

Automatic censorship detection and circumvention:
https://blog.torproject.org/new-release-tor-browser-115/

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:48:02 -04:00
pterocles
79bdd14fbb
Refine and finish Connection Assist notification
Add refined notice and Archive link

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:17:57 -04:00
pterocles
b208098eae
Add notice about Connection Assist
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:07:19 -04:00