A user-first approach to threat modeling.

Asynchronous Block-Level Storage Replication

A white-label, brandable VPN Desktop Application by LEAP

Obfs4proxy and Snowflake Pluggable Transports for iOS

docker native ndt5 and ndt7 server with prometheus integration

Truly minimal Docker images for Hugo open-source static site generator.

some papers we read and discuss about

s6 overlay for containers (includes execline, s6-linux-utils & a custom init)

HTTPS Everywhere ruleset for human-readable Onion URLs for SecureDrop instances

🔥 Open source static (serverless) status page. Uses hyperfast Go & Hugo, minimal HTML/CSS/JS, customizable, outstanding browser support (IE8+), preloaded CMS, read-only API, badges & more.

System administration tools

OONI Probe Engine and CLI

Simple, configuration-driven backup software for servers and workstations

Minimal Go webapp servicing json, certs, api

A Telegram Mass Surveillance Bot in Python

Create mails showing your configuration drift from an ansible repo

Supporting data for BAD TRAFFIC Citizen Lab report.

Faster incremental backups for logical volumes & disk images

A GoLang daemon for notifying Tor Relay and Hidden Service admins of status changes

pretty bad protocol

Manipulate DNS records on various DNS providers in a standardized way.

a set of tools to help with securely redacting and stripping metadata from documents before publishing

An (un-)ethical hacking-station based on Raspberry Pi and Python

vanity address generator for tor onion v3 (ed25519) hidden services

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

Fast, secure, efficient backup program

A interactive live debugger and REPL for the puppet language

Backup system built on Borg Backup