Tor

No more “Root” features in Orbot… use Orfox & VPN instead!

October 27, 2017

Since I first announced the available of Orbot: Tor for Android about 8 years ago (wow!), myself and others have been working on various methods in …

Tracking usage without tracking people

June 8, 2017

One thing that has become very clear over the past years is that there is a lot of value in data about people. Of course, the most well known examples …

HOWTO: get all your Debian packages via Tor Onion Services

July 31, 2016

Following up on some privacy leaks that we looked into a while back, there are now official Debian Tor Onion Services for getting software packages …

Building the most private app store

June 2, 2016

App stores can work well without any tracking at all Attackers are increasingly seeing app stores as a prime attack vector, whether it is aimed at the …

Orfox: Aspiring to bring Tor Browser to Android

June 30, 2015

Update 24 September, 2015: Orfox BETA is now on Google Play: https://play.google.com/store/apps/details?id=info.guardianproject.orfox In the summer of …

Reducing metadata leakage from software updates

October 16, 2014

Update: now you can do this with Tor Onion Services Many software update systems use code signing to ensure that only the correct software is …

Automatic, private distribution of our test builds

June 6, 2014

One thing we are very lucky to have is a good community of people willing to test out unfinished builds of our software. That is a very valuable …

Your own private dropbox with free software

November 12, 2013

There are lots of file storage and sharing software packages out there that make it easy for a group of people to share files. Dropbox is perhaps the …

Issues when distributing software

October 31, 2013

There is currently a discussion underway on the Debian-security list about adding TLS and Tor functionality to the official repositories (repos) of …

Orweb Security Advisory: Possible IP leakage with HTML5 video/audio

August 21, 2013

The Orweb browser app is vulnerable to leak the actual IP of the device it is on, if it loads a page with HTML5 video or audio tags on them, and those …