Tor

Building a Signing Server

December 18, 2017

The Android APK signing model sets the expectation that the signing key will be the same for the entire lifetime of the app. That can be seen in the …

No more “Root” features in Orbot… use Orfox & VPN instead!

October 27, 2017

Since I first announced the available of Orbot: Tor for Android about 8 years ago (wow!), myself and others have been working on various methods in …

Tracking usage without tracking people

June 8, 2017

One thing that has become very clear over the past years is that there is a lot of value in data about people. Of course, the most well known examples …

HOWTO: get all your Debian packages via Tor Onion Services

July 31, 2016

Following up on some privacy leaks that we looked into a while back, there are now official Debian Tor Onion Services for getting software packages …

Building the most private app store

June 2, 2016

App stores can work well without any tracking at all Attackers are increasingly seeing app stores as a prime attack vector, whether it is aimed at the …

Orfox: Aspiring to bring Tor Browser to Android

June 30, 2015

Update 24 September, 2015: Orfox BETA is now on Google Play: https://play.google.com/store/apps/details?id=info.guardianproject.orfox In the summer of …

Reducing metadata leakage from software updates

October 16, 2014

Update: now you can do this with Tor Onion Services Many software update systems use code signing to ensure that only the correct software is …

Automatic, private distribution of our test builds

June 6, 2014

One thing we are very lucky to have is a good community of people willing to test out unfinished builds of our software. That is a very valuable …

Your own private dropbox with free software

November 12, 2013

There are lots of file storage and sharing software packages out there that make it easy for a group of people to share files. Dropbox is perhaps the …

Issues when distributing software

October 31, 2013

There is currently a discussion underway on the Debian-security list about adding TLS and Tor functionality to the official repositories (repos) of …