Commit Graph

335 Commits

Author SHA1 Message Date
Alex Anderson
ae8cfc1bfc
Merge pull request #187 from TwoSixtyThreeFiftyFour/Updates-to-Appendix-B3-about-Threat-Modeling
Update of the threat modeling appendix (B3)
2022-08-15 21:04:28 +00:00
Alex Anderson
98f6c2215f
Merge pull request #202 from TwoSixtyThreeFiftyFour/Bad-link-fix
Update bad link Appendix R
2022-08-15 21:03:53 +00:00
Alex Anderson
96f9ca193a
Merge pull request #198 from TwoSixtyThreeFiftyFour/update-chatroom-rules
Update (current) chatroom rules to add #OSINT
2022-08-15 21:03:00 +00:00
Alex Anderson
92bb1e2a00
Update chatrooms-rules.md 2022-08-15 21:02:27 +00:00
Alex Anderson
3dc5e2e53f
Merge pull request #199 from TwoSixtyThreeFiftyFour/Update-of-side-channel-browser-attack-warning
Update on browser side-channel attack section
2022-08-15 20:57:41 +00:00
Alex Anderson
10be1bf92e
Merge pull request #201 from pterocles/types-of-cpu-attacks
Micro-architectural bugs in Intel and AMD CPUs
2022-08-15 20:57:21 +00:00
TwoSixtyThreeFiftyFour
01fe6744c1
Update bad link Appendix R
Update bad link Appendix R
2022-08-15 19:37:13 +00:00
T. H
cbb3c49666
Revert a commit and cleanup a pointer
This reverts commit 7736c42bd7.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:51:47 -04:00
pterocles
870347b784
Add microarchitecture bugs and related research to Appendix B5
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:41:04 -04:00
pterocles
5cca117aa1
Move content to Appendix B5: Types of CPU attacks
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:39:40 -04:00
T. H
1703ae02c8
Merge remote-tracking branch 'origin/types-of-cpu-attacks' into types-of-cpu-attacks 2022-08-14 19:38:33 -04:00
pterocles
6b5b8e5656
Fix pointer to Appendix B4 while adding Appendix B5
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 19:35:47 -04:00
pterocles
93c6825db8
Microarchitecture bugs in Intel and AMD CPUs
Add more information about microarchitecture bugs

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 11:01:23 -04:00
pterocles
7736c42bd7
a
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 11:01:18 -04:00
pterocles
7d80648d88
Doc: Microarchitecture bugs in Intel and AMD CPUs
Add information about microarchitecture bugs

It's been a very busy year for Intel and AMD CPUs. Researchers have
discovered bugs left and right. One of them was revealed recently and I
felt compelled to add not only it but also information regarding other
types of attacks that aren't yet in the guide.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-14 10:26:32 -04:00
TwoSixtyThreeFiftyFour
c3199f7cec
Update on browser side-channel attack section
See:

-  Release tweet: <https://twitter.com/ma1/status/1557751019945299969> <sup>[[Archive.org]](https://web.archive.org/web/https://twitter.com/ma1/status/1557751019945299969)</sup>
-  User explanation: <https://noscript.net/usage/#crosstab-identity-leak-protection> <sup>[[Archive.org]](https://web.archive.org/web/https://noscript.net/usage/#crosstab-identity-leak-protection)</sup>
-  Tor Project Forum Post: <https://forum.torproject.net/t/tor-browser-can-leak-your-identity-through-side-channel-attack/4005/2> <sup>[[Archive.org]](https://web.archive.org/web/https://forum.torproject.net/t/tor-browser-can-leak-your-identity-through-side-channel-attack/4005/2)</sup>
-  NoScript extension for Firefox (Firefox, and other Firefox-based browsers except Tor Browser): https://addons.mozilla.org/en-US/firefox/addon/noscript/
-  NoScript extension for Chromium based browsers (Brave, Chrome, Edge, and other Chromium-based browsers): https://chrome.google.com/webstore/detail/noscript/doojmbjmlfjjnbmnoijecmcbfeoakpjm?hl=en

- Removed advice to install Lekuidator+ on TBB since it's now handled by NoScript and on by default.
- Added NoScript as preferred for other Browsers (requires settings, on by default on private Windows).
- Changed Lekuidator+ from main mitigation to alternative to NoScript.
2022-08-13 15:30:58 +00:00
TwoSixtyThreeFiftyFour
3f2934458e
Update chatroom rules to add #OSINT
Update chatroom rules to add #OSINT
2022-08-12 16:53:18 +00:00
TwoSixtyThreeFiftyFour
2a72f370fb
Approved
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-09 10:09:19 +00:00
TwoSixtyThreeFiftyFour
d98d84379c
Merge branch 'master' into Updates-to-Appendix-B3-about-Threat-Modeling 2022-08-09 10:07:58 +00:00
TwoSixtyThreeFiftyFour
d046572694
Merge pull request #2 from pterocles/pterocles/update-threat-modeling-section
Additional commits for #187 [draft] [hold]
2022-08-09 09:30:07 +00:00
TwoSixtyThreeFiftyFour
0f15b8f74f
Merge branch 'Updates-to-Appendix-B3-about-Threat-Modeling' into pterocles/update-threat-modeling-section 2022-08-09 09:28:09 +00:00
TwoSixtyThreeFiftyFour
a99181080b
samm update removing name 2022-08-09 09:19:46 +00:00
Alex Anderson
3179482c22
Merge pull request #189 from TwoSixtyThreeFiftyFour/e-mail-fix-on-about-page
Fixed wrong e-mail on about page
2022-08-07 20:56:05 +00:00
Alex Anderson
66227ce576
Merge pull request #149 from pterocles/patch-1
Appendix L: list format, make it easier to skim through
2022-08-07 20:55:35 +00:00
Alex Anderson
5f9242537a
Merge pull request #162 from TwoSixtyThreeFiftyFour/Small-fixes-in-the-pay-with-crypto-section
Small fix in the "pay with crypto section"
2022-08-07 20:55:14 +00:00
Alex Anderson
3f6665f9d1
Merge pull request #153 from TwoSixtyThreeFiftyFour/Add-Tor-Mirror-URL-to-Readme-and-Guide
Add tor mirror url to readme and guide
2022-08-07 20:52:35 +00:00
Alex Anderson
1ed668550d
Merge pull request #183 from TwoSixtyThreeFiftyFour/move-to-1.1.6pre
Move to 1.1.6pre1
2022-08-07 20:47:39 +00:00
TwoSixtyThreeFiftyFour
6cd3d17b07
Update guide.md
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-06 19:57:50 +00:00
TwoSixtyThreeFiftyFour
65ebc3fe04
Update about.md
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-06 07:31:41 +00:00
T. H
9e6cd3826f
Update guide.md 2022-08-06 06:24:27 +00:00
TwoSixtyThreeFiftyFour
505d612191
Changing link to PGP sign to in-line
Changing link to PGP sign to in-line
2022-08-05 10:07:05 +00:00
pterocles
a193dcba82
The commit 0ef3728442 ("Update of the threat modeling section") is
missing some key elements:

Specify whom created the LINDDUN online tool. Define acronym and
explain that it is synergistic with STRIDE methodology. Add optional
illustration from Dr. K. Wuyts' 2015 publication: Privacy Threats in Software
Architectures, Ph.D. Thesis, Doctor of Engineering Science (PhD) (Leuven),
KU Leuven, January 16, 2015.

Fixes: #188 ("Update of the threat modeling section")

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-04 14:27:44 -04:00
TwoSixtyThreeFiftyFour
d5bbf1ef87
Fixed wrong e-mail
Fixed wrong e-mail
2022-08-04 16:13:50 +00:00
TwoSixtyThreeFiftyFour
0ef3728442
Update of the threat modeling section
Update of the threat modeling section
2022-08-04 15:00:20 +00:00
TwoSixtyThreeFiftyFour
736f7f5a45
Merge pull request #1 from pterocles/origin/pr/183
Bump version to 1.1.6-pre1
2022-08-03 20:06:50 +00:00
pterocles
7ad1e7922b
Bump version to 1.1.6-pre1
Certain fixes and additions have been made to warrant a version bump.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-03 15:21:25 -04:00
TwoSixtyThreeFiftyFour
a3e487a79c
Update guide.md
Co-authored-by: T. H. <pterocles@proton.me>
2022-08-03 19:07:00 +00:00
TwoSixtyThreeFiftyFour
454f04492e
Move to 1.1.6pre
Move to 1.1.6pre to change the date and reflect that many changes did happen since 1.1.5
2022-08-03 14:19:26 +00:00
Alex Anderson
8de6b5bb69
Merge pull request #182 from pterocles/pterocles/update-tor-route
Update on Tor Browser
2022-08-01 21:10:32 +00:00
pterocles
524331a69f
Update options for Tor route on Android
Fix out of date options/settings for Tor on Android.

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 12:06:01 -04:00
pterocles
aabd9a121d
Update images for Tor route
Images were out of date. Updated and used PNGs for them.

Tor Project has condensed their settings and it is no longer
necessary to manually configure bridges.

Automatic censorship detection and circumvention:
https://blog.torproject.org/new-release-tor-browser-115/

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:48:02 -04:00
pterocles
79bdd14fbb
Refine and finish Connection Assist notification
Add refined notice and Archive link

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:17:57 -04:00
pterocles
b208098eae
Add notice about Connection Assist
Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 11:07:19 -04:00
pterocles
6a183e5865
Fix a word/typo
Overlooked a word

Signed-off-by: pterocles <pterocles@proton.me>
2022-08-01 10:56:43 -04:00
Alex Anderson
c8b03a5228
Merge pull request #173 from TwoSixtyThreeFiftyFour/add-link-to-stylometry-reduction-article
Added link to countering linguistic analysis
2022-07-31 22:09:57 +00:00
Alex Anderson
3ac382a96e
Merge pull request #175 from TwoSixtyThreeFiftyFour/remove-bad-links
Removal and fix of some bad links
2022-07-31 22:07:58 +00:00
Alex Anderson
c174ce335f
Merge pull request #178 from TwoSixtyThreeFiftyFour/recommended-vpn-logging-policies-links
Adding recommended VPNs logging policies links
2022-07-31 22:06:36 +00:00
Alex Anderson
eef63e3bd1
Merge pull request #179 from TwoSixtyThreeFiftyFour/update-of-bad-links-to-old-repo
Update of bad links from old repo to org repo
2022-07-31 22:05:45 +00:00
pterocles
2d8480417a
Update on Tor Browser
Tor Browser Bundle (TBB) now has easier settings for the user.

TBB also makes the connection simpler for the user:
- Now enabled by default, moat will help you configure bridges.
- Bridge cards for viewing your Tor bridges make it both pretty and more useful for the user.
2022-07-31 15:57:02 -04:00
TwoSixtyThreeFiftyFour
174bbdf42a
Update one link from old to org repo
Update one link from old to org repo
2022-07-31 14:16:09 +00:00