Privacy is a usually included in the larger security landscape, but it deals with aspects that concern people more that technologies and tries to answer a very tough question: “How to access/compute data without the owner know who you are?”. While, like everything, is a sword with two blades, it tries to allow people own their data in the digital world and to provide anonymity while browsing the Internet.
Create the following users: red, green and blue. Make sure that you can ssh into the VM using this users. For example, copy the ”.ssh/” directory from student to the newly added users and “chown” it accordingly.
sudo useradd -m -s /bin/bash red sudo useradd -m -s /bin/bash green sudo useradd -m -s /bin/bash blue
sudo apt-get install rng-tools sudo systemctl status rng-tools # e pornit => TOTUL OK
Pretty Good Privacy (PGP) is an encryption standard that can be used to authenticate in a distributed manner. GNU Privacy Guard (GPG) is an open-source implementation of the PGP standards. In this exercise you are required to send one file encrypted from one user to the other.
For the next exercises, you will need to be logged in as users red/green/blue via ssh in order to generate the gpg key.
su
(tty permission problems, owned by student
). If you want to do this, either use ssh
, or tmux
after logging in: it allocates a new TTY ;)
green@isc:~$ gpg --list-keys /home/green/.gnupg/pubring.gpg ------------------------------ pub 2048R/13C73580 2019-04-23 uid green <green@cs.pub.ro> sub 2048R/F1C1FF9A 2019-04-23 pub 2048R/860244A1 2019-04-23 uid red-student <red@cs.pub.ro> sub 2048R/E7626ADD 2019-04-23
The Tor (The Onion Routing) project is an implementation of the more generic “onion routing” idea that allows a user to gain network anonymity while surfing the Internet. The mechanism that allows for a private surfing is based on re-encryption and “randomly” routing of the packet at the level of each router within the network, allowing each router to only know the previous and the next router in the route (not the source/destination of the packet) ref. Accessing the Tor network can be done either through a local proxy of via a Browser pre-configured with the proxy server.
sudo apt update sudo apt install tor
SOCKSPort 9050
;)
dig TXT +tcp +short o-o.myaddr.l.google.com @ns1.google.com | awk -F'"' '{ print $2}'
ssh -J <username>@fep.grid.pub.ro -L 9050:localhost:9050 student@<VM_IP>
http://6mirq5p7welrf44rptugei55cv26qqwmpqluafehnpfv7jqgyu3pbeyd.onion
;) Please take a minute to fill in the feedback form for this lab.