Coincidentially, that's why #Android (and #iOS) doesn't let users have #root access because billions of devices owned by mostly "#TechIlluterates" thathardly get #SecurityUpdates would be an even bigger risk if they didn't boot a locked-down #ROM image, thus only allowing for #malware in user-privilegued userspace!

I'd even go so far that I'd wish for @torproject to basically merge fmr. #FirefoxOS / #KaiOS & @tails_live / @tails / #Tails to build a #privacy-focussed #ROM for #Smartphones and #Tablets i.e. "#TailsMobile" or sth.

Cuz having a mobile OS that shoves everything through #Tor and only allows #userspace-Apps in the form modern web technologies would be a big #security and #privacy gain.

Not to mention #amd64 is on it's way out and inevitably they gotta have to transition to supporting #arm64 and eventually #RISCv-#64bit at some point.

#amd64 #arm64 #riscv

Continued thread

**Alexander Hansen Færøy** @ahf@mastodon.social · 3d

Alexander Hansen Færøy @ahf@mastodon.social

This is undoubtedly the most promising Post-Quantum TLS deployment situation I have seen for #Tor since we started discussing it more actively in the team. Very exciting!

I hope that OpenSSL 3.5, when released, will make it into #Debian Trixie. That would make deployment of this so much more snappy and easy for the Tor network to upgrade, but that may be dreaming. The timelines here look quite difficult for that to happen, but let's hope.

#cryptography #pqc #pqcrypto

Continued thread

**Alexander Hansen Færøy** @ahf@mastodon.social · 3d

Alexander Hansen Færøy @ahf@mastodon.social

OpenSSL, unlike BoringSSL, did not require us to make any additions to our codebase (BoringSSL required the PQ-KEM to be enabled explicitly via a function call): the ML-KEM is enabled by default, which will do wonders for adoption as OpenSSL 3.5 gets bundled in more and more OS distributions over time.

However, we did need to modify #Tor slightly to be less conservative with which TLS cipher suites it is willing to use. I will talk with the team about what we do here to get this fixed soon.

**Alexander Hansen Færøy** @ahf@mastodon.social · 3d

Alexander Hansen Færøy @ahf@mastodon.social

Trying out the Post-Quantum TLS feature (called ML-KEM) in #OpenSSL 3.5-beta1 and #Tor was a success!

The experiment is using the same setup as we did with #BoringSSL back when they enabled the Kyber768/x25519 TLS 1.3 group: we use a Tor binary, compiled against a PQC-enabled lib(ssl|crypto), to run a Bridge Server locally and connect a local Bridge Client to the server.

The branch used for this experiment is available from https://gitlab.torproject.org/ahf/tor/-/commits/ahf/openssl-3.5-pqc-experiments

Terminal output showing console debug output from a Tor client connecting to a Tor bridge using the TLS 1.3 x25519/mlkem768 group.

**Nos oignons** @nos_oignons@mamot.fr · 5d *

5d *

Nos oignons @nos_oignons@mamot.fr

Les relais de sortie en hommage à Lunar sont en ligne ! <3

Consultez notre annonce ici https://nos-oignons.net/Actualit%C3%A9s/20250320_lunar_en_ligne

#tor #torproject #nosoignons

cc @torproject

nos-oignons.netLes relais de sortie en hommage à Lunar sont en ligne

Continued thread

**Alexander Hansen Færøy** @ahf@mastodon.social · 5d

Alexander Hansen Færøy @ahf@mastodon.social

Lo and behold, #OpenSSL 3.5 (their upcoming LTS release) will come out here at the beginning of April, and it does indeed support some of these hybrid PQC schemes. Their recent beta2 announcement can be read here: https://openssl-library.org/post/2025-03-25-openssl-3.5-beta/ and their roadmap is at https://openssl-library.org/roadmap/index.html

Very excited by this work. Big kudos to the OpenSSL Team here! Already planning on giving this a spin with the C implementation of #Tor later this week to see how it goes!

OpenSSL Library · Mar 25OpenSSL 3.5 Beta Release AnnouncementThe OpenSSL Project is pleased to announce that OpenSSL 3.5 Beta1 pre-release is released and adding significant new functionality to the OpenSSL Library.

#foss #cryptography #pqc

**DEF CON** @defcon@defcon.social · 6d

DEF CON @defcon@defcon.social

The #DEFCON #Tor onion services should have some bumpy times as we migrate from the old server to the new one. So far so good, but we will need to do a few reboots and config tweaks.

**Lisa Kalayji** @LisaKalayji@infosec.exchange · Mar 28

Mar 28

Lisa Kalayji @LisaKalayji@infosec.exchange

It is the year two thousand and twenty five CE and these basic-ass chumps are still out here equipping governments to target journalists and human rights defenders and immigrants and abortion seekers, and then patting themselves on the back for helping law enforcement (the... good... guys??) catch "bad guys" and kidnap them and lock them in torture dungeons. Congrats, assholes, great job, the Führer will be very proud of you. CHRIST.

"Identifying IP addresses is central to thwarting attacks and helping law enforcement put the bad guys out of business and in jail."

https://www.scworld.com/feature/novel-technique-can-unmask-up-to-70-of-crooks-hiding-behind-vpns-proxies-tor

SC Media · Mar 27Novel technique can unmask up to 70% of crooks hiding behind VPNs, proxies, TorTechnique claims it can unmask crooks hiding behind VPNs, proxy servers and Tor browsers with up to 70% reliability.

#Privacy #InfoSec #CivilRights

**nemo™** @nemo@mas.to · Mar 28 *

Mar 28 *

nemo™ @nemo@mas.to

The #CIA "Found" The #Ark Of The #Covenant... (not really)#sog #yt

https://youtu.be/GVJkcSEpDBw

Check out this interesting documents on the CIA's website! https://www.cia.gov/readingroom/docs/CIA-RDP96-00789R002100240001-2.pdf As it's a .gov site, some may prefer using a VPN or Tor. Just a thought! #CIA #GovDocs #VPN #Tor #PrivacyMatters

https://www.cia.gov/readingroom/docs/CIA-RDP96-00789R002100220001-4.pdf
#someordinarygamers

Dude, just cite your sources so that folks can follow your presentation. :/

YouTubeThe CIA "Found" The Ark Of The Covenant...By SomeOrdinaryGamers

**Justin D Kruger (he/him)** @jdavidnet@me.dm · Mar 27 *

Mar 27 *

Justin D Kruger (he/him) @jdavidnet@me.dm

#HELP

I just received a concerning email from the OTF (@opentechfund.bsky.social) stating that a major source of their funding is in jeopardy.

If you care about open-source, anti-censorship, or the open internet, please consider supporting one of the projects they fund.

#FOSS #OpenSource #TechNews
#USPol #Politics #News #PoliticalNews
#NetNeutrality #EFF
#Wikimedia #Signal #SignalApp
#TOR #TAILs #OpenVPN #VPN #LetsEncrypt #HTTPS #SSL
#Censorship #AntiCensorship

https://www.opentech.fund/projects-we-support/supported-projects/?sc=&filter1=&filter2=&order-by-selector=date-desc&pageno=1

Continued thread

**utzer [Pleroma]** @utzer@soc.utzer.de · Mar 27

Mar 27

utzer [Pleroma] @utzer@soc.utzer.de

#Tor unterstützen:
https://donate.torproject.org/

donate.torproject.orgDonate to the Tor ProjectIf you value privacy, support Tor

Replied in thread

**Kevin Karhan** @kkarhan@infosec.space · Mar 26

Mar 26

Kevin Karhan @kkarhan@infosec.space

@signalapp It's not #disinfo when one points out that you demand #PII aka. #PhoneNumbers from Users and that is literally a architectural vulnerability, alongside your #proprietary & #Centralized #Infrastructure.

#Signal being a #SingleVendor & #SingleProvider #Solution is literally the reason why I consider it #insecure.

Not to mention the lack of @torproject / #Tor support with an #OnionService or the willingness to fulfill #cyberfacist "Embargoes" or shilling a #Shitcoin #Scam named #MobileCoin!

#KYC is the illicit activity!!!

And don't get me started on the #cyberfacism that is #CloudAct.

If you were secure, criminals would've used your platform so hard, it would've been shutdown like #EncroChat and #SkyECC.

I may nit have allvthe.evidence yet, but #Signal stenches like #ANØM: #Honeypot-esque!

**utzer [Pleroma]** @utzer@soc.utzer.de · Mar 25

Mar 25

utzer [Pleroma] @utzer@soc.utzer.de

Kann die #EU oder wenigstens #Deutschland bitte jetzt einspringen? Wenn der #OTF (Open Technology Fund) in Schwierigkeiten ist, wird das für viele Menschen weltweit zum Problem.

• #Tor ist essenziell für digitale #Freiheit – für #Journalistinnen, Aktivistinnen, Bewegungen für #Demokratie, z. B. gerade wieder in der #Türkei.
• #Signal wurde (mit)gefördert.
• #LetsEncrypt ist aus dem sicheren #Internet nicht mehr wegzudenken.
• #FDroid, #VPN-Dienste und viele weitere freie Tools hängen da mit dran.

Stellt euch vor, all das wird wegen ein paar lumpiger Dollar kaputtgespart – aus ideologischer Laune heraus.

Wir sollten jetzt handeln:
• Diese Projekte fördern.
• #OTF retten.
• Und fordern, dass zentrale Dienste, Entwicklung und Infrastruktur verstärkt in die #EU verlagert werden – so wie sie bisher oft in den #USA konzentriert waren.

Zeigen wir ihnen, wie sich #Trump gerade selbst rücklings ins Knie schießt.

https://www.heise.de/news/Nach-Trump-Dekret-Kampf-um-US-Foerdermittel-fuer-Tor-F-Droid-und-Let-s-Encrypt-10328226.html

heise online · Mar 25US-Behörde stoppt Gelder für Let's Encrypt und Tor ‒ Open Tech Fund wehrt sichBy Sven Festag

**Acmeworks** @acmeworks@social.tchncs.de · Mar 25

Mar 25

Acmeworks @acmeworks@social.tchncs.de

Having just read that the dogebags have taken vital funding from #tor and #fdroid (among others) I'd like to advertise my favourite bot to those whose timeline is as much of a display of the general fucked-upness of current affairs as mine. It's @scream It won't change anything, it just periodically toots a scream so I don't have to. It helps me cope.

https://bots.robots.rodeo/@scream

**cr0n0s:~ #** @cr0n0s@social.tchncs.de · Mar 25 *

Mar 25 *

cr0n0s:~ # @cr0n0s@social.tchncs.de

Por aquí les dejo mi dirección SimpleX Chat, para darle movimiento a este tan buen mensajero. Que se une a otro que vengo probando.

Por si no lo conoces @simplex protege la privacidad de tu perfil, contactos y metadatos, ocultándolos de los servidores de la plataforma SimpleX y de cualquier observador. No tiene identificadores así que el resto puedes revisar https://simplex.chat/es/

Dirección: https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FN_McQS3F9TGoh4ER0QstUf55kGnNSd-wXfNPZ7HukcM%3D%40smp19.simplex.im%2FM6jJP5cVowwYNvskzH44_XXJEgcfzJrk%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAzIpeUB6rxRMYPD5gb4r8wqRfQ0ynGKYDqXGGZ03-nyo%253D%26srv%3Di53bbtoqhlc365k6kxzwdp5w3cdt433s7bwh3y32rcbml2vztiyyz5id.onion

#simplexchat #freesoftware #tor