Archive on Guardian Project

CameraV: Secure Verifiable Photo & Video Camera

Tue, 28 Jul 2015 03:07:37 -0400

THIS PROJECT IS NO LONGER ACTIVE - Please visit [Proofmode.org][https://proofmode.org] for our latest work in verifiable media capture.

CameraV is the easiest way to capture and share verifiable photos and video proof on a smartphone or tablet, all the while keeping it entirely secure and private. This is the official app from the InformaCam project, a partnership between the Guardian Project and WITNESS.

CameraV is easy to learn and simple to use (and insanely secure & powerful under the covers…). All photos and videos you take are password-protected and 100% encrypted on your device. You can also add private notes and tags to any photo or video, and choose who you share them with. CameraV also privately stores data from your device sensors and provides built-in tools to see and share it. Finally, it has a built-in secure camera that is simple, streamlined and even supports selfies.

CacheWord: Passphrase Caching and Management

Fri, 26 Sep 2014 21:44:19 -0400

GitLab - GitHub - Javadoc - blog posts

CacheWord is an Android library project for passphrase caching and management.
It helps app developers securely generate, store, and access secrets derived
from a user’s passphrase. It is designed to work easily with IOCipher and SQLCipher-for-Android, but it can be used any time an app needs to manage a password. Broadly speaking this library assists developers with two related problems:

Courier: Secure News reader

Mon, 12 May 2014 09:59:18 -0400

★★★ BETA: THIS IS A BETA RELEASE…. PLEASE REPORT BUGS HERE or GIVE US SOME FEEDBACK★★★

**Courier is a mobile news reader with enhanced security features, offline reading and device-to-device sharing capability. We’ve designed it to be fast and light on slow networks and secured from device and network monitoring.
**

KeySync: Syncing Trusted Identities

Thu, 12 Sep 2013 15:50:07 -0400

Privacy and security software like OTR encryption for chat and GnuPG for email and files all create digital identities that we can mark as trusted through a verification process. When using this software, each app needs completely new security identities that are separate from any existing identities used by the other apps. Then again, mobile software needs it own versions of these identity files. When setting up ChatSecure on a mobile device, all of the trust information from existing chat apps like Adium or Pidgin also needs to be converted and transferred so that ChatSecure has the same trusted identities. Or when switching from Pidgin to Jitsi for instant messaging, the trust information needs to be converted and synced so the trust information is not lost.

Weather Repo

Thu, 13 Jun 2013 13:52:02 -0400

The Weather Repo: A New Take On The Old App Store

    <div title="Page 1">
      <div>
        <div>
          <div>
            <h2>
              01 Why It’s Needed
            </h2>
            
            <p>
              Many groups ask whether the apps they're using are "safe". While it's hard for us to respond without knowing the specific context and doing a threat analysis, there are some short cuts. If the app is sending information in clear text, probably not. Who wants to send their data in the open? Unfortunately, most people don't know that companies like Yahoo broadcast all of their emails in the clear. And for smaller apps and companies, it's hard to know whether they do or not. Even further, it's hard to know whether apps that claim to be secure really are. Have they been vetted by a third party? Are there existing case studies? Has a threat analysis been performed?
            </p>
            
            <div title="Page 1">
              <div>
                <div>
                  <div>
                    <h2>
                      <a href="http://weatherrepo.com" target="_blank"><img class="aligncenter size-medium wp-image-4240" alt="weatherrepo1" src="https://guardianproject.info/wp-content/uploads/2013/06/weatherrepo1-300x300.png" width="300" height="300" srcset="https://guardianproject.info/wp-content/uploads/2013/06/weatherrepo1-300x300.png 300w, https://guardianproject.info/wp-content/uploads/2013/06/weatherrepo1-150x150.png 150w, https://guardianproject.info/wp-content/uploads/2013/06/weatherrepo1.png 512w" sizes="(max-width: 300px) 100vw, 300px" /></a>
                    </h2>
                    
                    <h2>
                      10 What We’re Building
                    </h2>
                    
                    <p>
                      How do we make good apps more discoverable? And what does a good app entail? For The Guardian Project, it's crucial that an app does what it says it does. In Android, that's a bit easier to see because they ask for certain permissions before a user can install them. This app transparency is a great start, but doesn't go far enough. We’re building a secure and federated app store for people around the world who need to know the real security behind the tools that they use and a system to find a more useful set of apps across every platform.
                    </p>
                    
                    <div title="Page 1">
                      <div>
                        <div>
                          <div>
                            <h2>
                              Features
                            </h2>
                            
                            <ul>
                              <li>
                                <strong>Integrated:</strong> There are a lot of stores filled with a lot of bad apps. Instead of sorting by platform (iPhone, Android, PC), why not sort by usefulness?
                              </li>
                              <li>
                                <strong>Secure: </strong>Safety and privacy are important to users. We're making a way for apps to be vetted by the pros and transparent to users.
                              </li>
                              <li>
                                <strong>Easy: </strong>If it's not simple, people won't use it. We aim for simplicity without sacrificing depth.
                              </li>
                            </ul>
                            
                            <h1>
                              Visit the site:
                            </h1>
                            
                            <p>
                              Go to <a title="The Weather Repo" href="http://weatherrepo.com" target="_blank">weatherrepo.com</a> to learn more
                            </p>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
    </div>
  </div>
</div>

Pixelknot: Hidden Messages

Wed, 10 Apr 2013 19:31:13 -0400

What is Pixelknot?

Play Store

Pixelknot is an Android application that allows users to hide short text-based messages in photographs and share them across trusted channels.

Have a secret that you want to share? Why not hide it in a picture? With PixelKnot, only your friends with the secret password can unlock your special message. Everyone else just sees a pretty picture. It’s a fun and easy way to share hidden messages without anyone knowing. Take those pixels, twist them in a knot, and see for yourself!

Tutorials

Thu, 21 Feb 2013 16:46:40 -0400

Security doesn’t have to be hard. Here are a few videos that’ll make using our apps easier (and more awesome).

Interactive

Videos

Orbot: Mobile Anonymity + Circumvention

Gibberbot: Secure Instant Messaging

FFMPEG: Media Privacy Framework

Wed, 02 Jan 2013 12:43:43 -0400

ffmpeg is a popular, widespread framework for transcoding and filtering digital videos. On Android, it has a simple Java API. Our version includes filters for redaction and pixelization of video and audio, which we hope will become standard features for any app that supports on device video processing.

It has been essential to our apps ObscuraCam, InformaCam, and Murrow/StoryMaker. We are working to make it dead simple for developers to build their own apps on it. We are also extending it to provide a full framework for audio and image redaction, metadata management, and encryption of sensitive parts of the media. This will make it easy for media app developers to build in privacy to their own apps.

Ostel: Encrypted Phone Calls

Thu, 04 Oct 2012 12:29:35 -0400

Ostel: Encrypted Phone Calls
A tool for having end-to-end encrypted phone calls. This is a public testbed of the Open Secure Telephony Network (OSTN) project, with the goal of promoting the use of free, open protocols, standards and software, to power end-to-end secure voice communications on mobile devices, as well as with desktop computers.

August 2017: Ostel is permanently offline. Learn more here: https://guardianproject.info/2017/08/10/ostel.co-is-permanently-offline/
**Open Secure Telephony
Find out more on our Wiki.
Download a supported app (Android, iPhone, Blackberry, Nokia, Windows, Mac OS X, GNU/Linux).
Setup your App.
View the source code.

Developer Square

Thu, 04 Oct 2012 00:42:29 -0400

NO LONGER MAINTAINED

GitHub

Developer Square is our public community site for sharing, discussing, connect and learning. The main DevSq.net page offers an index of the content and resources we are promoting and sharing, while the “Talk” site (https://talk.developersquare.net) is a full fledged community discussion site focused on open-source, mobile app development.

GnuPG: OpenPGP Encryption

Thu, 04 Oct 2012 00:42:29 -0400

NO LONGER MAINTAINED

This project is UNMAINTAINED, we recommend OpenKeychain instead. The core porting work has all be included upstream in the official GnuPG source repositories. The Android app needs a new maintainer. This could be you! Email us at support@guardianproject.info

Gnu Privacy Guard (GnuPG) for Android brings the widespread standard in OpenPGP encryption to Android. GnuPG provides solid encryption for keeping emails and files private, and for verifying that emails and files are who you think they are. GnuPG is built-in to basically every GNU/Linux distro, in GPGTools for Mac OS X and Apple Mail, a GPG4Win for Windows and Outlook, Enigmail for Thunderbird, etc. We are working to bring GnuPG to Android to make it the cornerstone of Android encryption like it is elsewhere.

InformaCam: Verified Mobile Media

Tue, 20 Mar 2012 01:17:29 -0400

We’ve launched CameraV, the first public InformaCam App! Click the image below to learn more and get the app…

A project funded by the Knight News Challenge

There is currently a deluge of media coming from the world’s mobile devices for potential use as evidence or trusted sources for journalists. WITNESS and the Guardian Project seek to provide a mechanism through InformaCam to verify and authenticate this footage. Our approach is to create an app that leverages the sensors used in modern smartphones create a “snapshot” of the environment in which a piece of media is captured. This information is used, along with a digital “fingerprint” of the cameraphone sensor, to sign the video or image and ensure that the media hasn’t been tampered. It also verifies that it was captured by a specific device at a specific time and place.

libsqlfs: filesystem on top of SQLite/SQLCipher

Thu, 27 Oct 2011 00:00:00 +0000

GitLab - GitHub - blog posts

libsqlfs provides a complete virtual disk on top of a SQLite or SQLCipher database. The virtual disk is encrypted and contained in a single file, which can be easily moved around, copied, shared, etc. It is a standard FUSE filesytem that can work on Android, GNU/Linux, and perhaps also macOS.

Lil' Debi: Mobile Debian Installer

Fri, 24 Jun 2011 15:28:42 -0400

NO LONGER MAINTAINED

Have an Android phone and want an easy Debian chroot running that you can trust? Install Lil’ Debi, and you can have a Debian install running with a single click of a button. It builds up a whole Debian chroot on your phone entirely using debootstrap. You choose the release, mirror, and size of the disk image, and away it goes. It could take up to an hour on a slow device, then its done. The entire package is built from source using publicly available, repeatable builds. It even includes gpgv and the Debian repository keys in the apk and verifies the packages it downloads in the first stage of debootstrap before installing them. It will also check and update a SHA1 checksum to make sure your debian.img file has not be tampered with.

Hardware Guide

Thu, 24 Feb 2011 03:47:39 -0400

January 2013: We recognize this page is quite out of date and are working to update it.

While we don’t (yet) produce our own hardware, we do offer custom configured versions of off-the-shelf devices. We’re also often asked “which phone should I get?” or “which carrier should I choose?”, so we decided to gather that information here for you.

If you would like more information on our custom configured Guardian devices, please contact us. Otherwise, read on below…

LUKS: Disk Encryption

Sat, 19 Feb 2011 09:05:06 -0400

If you are looking for the homepage for LUKS, you can find it here: https://gitlab.com/cryptsetup/cryptsetup/

We are not the creators or maintainers of LUKS. We simply got it working on Android a long, long time ago!

LUKS is the standard for Linux hard disk encryption. By providing a standard on-disk-format, it does not only facilitate compatibility among distributions, but also provides secure management of multiple user passwords. In contrast to existing solution, LUKS stores all setup necessary setup information in the partition header, enabling the user to transport or migrate his data seamlessly.

Firefox Mobile: Privacy Enhanced

Mon, 15 Nov 2010 13:48:35 -0400

Fall 2016: We no longer promote the user of Firefox with add-ons, as the solution can be insecure still and easily misconfigured.

Please use our new Orfox browser for Android, based on Tor Browser.

The latest releases of

Firefox on Android are proving to be very usable, stable and an increasingly viable alternative to the built-in webkit browser. However, it unfortunately lacks the ability to manually configure proxy settings through any sort of standard user interface. This is a common problem for Android, which also lacks the ability to set browser or system-wide proxy settings. To solve this problem, we have created a very simple Firefox add-on Proxy Mobile that exposes the Firefox browser’s proxy settings through a simple, graphical options menu.

OnionKit for Android

Thu, 07 Oct 2010 21:11:55 -0400

https://github.com/guardianproject/onionkit

This is an Android Library Project that provides multiple means to improve network security in mobile applications. The “Onion” name refers to not only the Onion Routing concept used by Tor (which provides anonymity and resistance to traffic surveillance), but also the idea of multiple layers of security that any application should utilize.

More specifically this library provides:

StrongTrustManager: a robust implementation of an TLS/SSL certificate verifier, that can be customized with any set of certificate authorities
Proxied Connection Support: HTTP and SOCKS proxy connection support for HTTP and HTTP/S traffic through specific configuration of the Apache HTTPClient library
OrbotHelper: a utility class to support application integration with Orbot: Tor for Android. Check if its installed, running, etc.

IT MUST BE NOTED, that you can use this library without using Orbot/Tor, but obviously we think using strong TLS/SSL connections over Tor is just about the best thing in the world.

Orweb: Private Web Browser

Wed, 10 Mar 2010 19:20:33 -0400

Our new Orfox browser is now released and makes Orweb obsolete.

There are now three new options for you to browser easily through Tor with Orbot:

Use Orfox, the NEW browser for Orbot based on Tor Browser and Firefox, that is currently in stable BETA: https://guardianproject.info/apps/orfox
Use Orbot’s VPN mode feature to proxy any app through Tor. WARNING: This does not make you anonymous, but does help you get through firewalls, filters and other network troubles that may be blocking access to a website or app. You can use Chrome browser with this, but your identity won’t be protected, ONLY your network traffic.

Orbot: Tor for Android

Mon, 08 Feb 2010 06:09:43 -0400

What is Orbot?

Orbot is a free proxy app that empowers other apps to use the internet more securely. Orbot uses Tor to encrypt your Internet traffic and then hides it by bouncing through a series of computers around the world. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Orbot creates a truly private mobile internet connection.

Download Orbot: Google Play | F-Droid | Direct Download (.apk)

Archived Apps

Mon, 01 Jan 0001 00:00:00 +0000

These are all totally unmaintained and just listed here for the record.

- Blog Posts - website

GitHub - Blog Posts - website