[tor-talk] Nice to meet you! / WhatsApp by Tor?

[Cyaniventer]

On Tue, 16 Apr 2019 13:05:50 -0400
"GTI .H" <gti9070h at gmail.com> wrote:

> Em ter, 16 de abr de 2019 às 12:33, Cyaniventer
> <cyaniventer at riseup.net> escreveu:
> 
> > No! Don't use it if you are actually very serious about this.
> >  
> 
> Well, my mistake can cost me my life.
> My country is one of those who has blocked WhatsApp and dings who
> tries to show their abuses. It is repressive, but for some reason the
> world sees it with good eyes, perhaps because it is not openly
> declared socialist, but it is certainly authoritarian, corrupt and
> very dangerous and constantly puts innocents in jail without the
> slightest humanitarian feeling.

My advice is to stay away from Tor. DO NOT connect to Tor network
directly because if they are blocking whatsapp then probably there are
idiots in power and they would do the same thing for using Tor. 

> > > or whatever you want and set that vpn to  
> > > > `always on`. Idk what else you can do, also your first method of
> > > > routing your traffic through your computer is not that good.
> > > >  
> > > Why?  
> >
> > because what if something fails somewhere and your ip gets leaked?
> > are you really sure that everything you've setup will work without
> > fail? Also see nathan at freitas.net 's email, > Since WhatsApp is
> > executable code on your Android phone, it can access information
> > about your device directly. This includes accessing your "real" IP
> > address through local network information APIs.
> >  
> 
> That's why I'm here asking, I'm not sure of anything.

If they've blocked whatsapp and you can face jail time for using it,
then don't use it. If you want to talk encrypted with your
friends/families then there are lots of other services that support end
to end encryption. signal, wire, keybase, email with gpg, xmpp, matrix,
(tutanota, protonmail - both, not good but okay in this case).

On android download f-droid (https://f-droid.org) and look for delta
chat, that probably makes email with gpg easier. For gpg download
openkeychain. you can also use k9-mail if you don't care about the ui.

for gpg resources see:
https://invidio.us/watch?v=4PZb0tkxuUk,
https://invidio.us/watch?v=GSIDS_lvRv4,
and links below.

> > > > If you are real serious about this thing then just setup a
> > > > virtual machine and route all traffic from that vm through Tor.
> > > > This is the best method that comes to my mind.
> > > >  
> > > Could you give me more details?
> > >  
> >
> > The idea is you'll setup a virtual machine and route all traffic
> > from that vm through Tor. First search result is ->
> >
> > https://www.howtoforge.com/how-to-set-up-a-tor-middlebox-routing-all-virtualbox-virtual-machine-traffic-over-the-tor-network
> >
> > Note: I don't know how they did it and didn't read that article.
> >  
> 
> I'll take a look, but what the best current way is the physical
> protection how to use public WiFi far.
> It's disappointing.

Yes, feels bad. Internet was meant to be open for everyone.

Jailtime for using something like whatsapp is insanity, they will fill
up the jails real quick if they try to arrest everyone. Do they only
arrest those who speak against them, or everyone? You have to decide
for yourself what you are going to do about this.

These websites have good information and you should read it all.
https://ssd.eff.org/
https://sec.eff.org/
https://riseup.net/en/security

The real question should've been, `how do I hide my whatsapp usage from
my government/isp?`. You should always explain what you are trying to
achieve and not how you would achieve the method you thought. Maybe
someone will have some other idea that is better than yours.

Anyways, I looked up that article and read it and I wouldn't recommend
doing that because you can still get it wrong and thats going to be
very bad in your case. Also see, https://tails.boum.org/

Connect to Tor through a bridge and not directly. See
https://invidio.us/watch?v=DkEqWGF3cvg,
https://invidio.us/watch?v=VmsFxBEN3fc,
https://invidio.us/watch?v=JWII85UlzKw,
https://bridges.torproject.org/

-- 
Cyaniventer
BBBB 882A 5A00 FCB6 8704 E9BC 757D E342 DB4E 576C