From Newsgroup: alt.privacy

https://www.virebent.art/publishing-system.html

A new platform for anonymous publishing with serious privacy protections:

TECHNICAL FEATURES:
- Public key authentication system (no usernames/passwords)
- Client-side key generation using SHA-256
- Proof-of-Work anti-spam mechanism
- Canvas fingerprinting protection
- Timezone normalization (UTC only)
- Random submission delays (2-10 seconds)
- Automatic decoy traffic generation
- Zero server-side identity storage

CONTENT POLICY:
Accepted categories:
* Privacy Fundamentals
* Practical Security Guides
* Surveillance Analysis
* Community Resources
* Other privacy/security content

No tolerance for hate speech, discrimination, or misinformation.
Human moderation ensures quality while preserving anonymity.

ACCESS:
- Tor Browser recommended (but not required)
- No JavaScript frameworks/trackers
- No cookies for anonymous users
- Metadata scrubbing on all submissions

The system generates a unique key pair for each user locally.
Save your keys - they're your only identity. We don't store them.

Technical discussion welcome. Code review appreciated.

Gabx

https://www.virebent.art/publishing-system.html



--- Digital Signature --- A/wskXBSmB9B/BMb5rjCijlWDb5bi0xxGqNpu2NnS3bQqeokFSqXWabjJeznjjwr9XcWLQCRBO7CeXM5eLIsAw==


--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: alt.privacy

On Mon, 29 Sep 2025 13:16:42 +0000, Gabx <virebent@tcpreset.invalid>
wrote:

https://www.virebent.art/publishing-system.html

A new platform for anonymous publishing with serious privacy protections:

TECHNICAL FEATURES:
- Public key authentication system (no usernames/passwords)
- Client-side key generation using SHA-256
- Proof-of-Work anti-spam mechanism
- Canvas fingerprinting protection
- Timezone normalization (UTC only)
- Random submission delays (2-10 seconds)
- Automatic decoy traffic generation
- Zero server-side identity storage

CONTENT POLICY:
Accepted categories:
* Privacy Fundamentals
* Practical Security Guides
* Surveillance Analysis
* Community Resources
* Other privacy/security content

No tolerance for hate speech, discrimination, or misinformation.
Human moderation ensures quality while preserving anonymity.

ACCESS:
- Tor Browser recommended (but not required)
- No JavaScript frameworks/trackers
- No cookies for anonymous users
- Metadata scrubbing on all submissions

The system generates a unique key pair for each user locally.
Save your keys - they're your only identity. We don't store them.

Technical discussion welcome. Code review appreciated.

Gabx

https://www.virebent.art/publishing-system.html

That page told me I was not using Tor browser when I was. I was using -
13.5.22 (based on Mozilla Firefox 115.28.0esr)

It an older version I use with my Windows 7 computer.

Does one need the latest version of Tor?

--- Digital Signature --- >A/wskXBSmB9B/BMb5rjCijlWDb5bi0xxGqNpu2NnS3bQqeokFSqXWabjJeznjjwr9XcWLQCRBO7CeXM5eLIsAw==

--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: alt.privacy

cory@homer.net wrote:

That page told me I was not using Tor browser when I was. I was using - 13.5.22 (based on Mozilla Firefox 115.28.0esr)

You are right, i'm going to fix it!

Gabx
--
0745 074D FEAA 9CB7 62E9 D89D 3E54 F490 F2CC 5A82
--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: alt.privacy

Gabx <virebent@tcpreset.invalid> wrote:

https://www.virebent.art/publishing-system.html

A new platform for anonymous publishing with serious privacy protections:

TECHNICAL FEATURES:
- Public key authentication system (no usernames/passwords)
- Client-side key generation using SHA-256
- Proof-of-Work anti-spam mechanism
- Canvas fingerprinting protection
- Timezone normalization (UTC only)
- Random submission delays (2-10 seconds)
- Automatic decoy traffic generation
- Zero server-side identity storage

CONTENT POLICY:
Accepted categories:
* Privacy Fundamentals
* Practical Security Guides
* Surveillance Analysis
* Community Resources
* Other privacy/security content

No tolerance for hate speech, discrimination, or misinformation.
Human moderation ensures quality while preserving anonymity.

ACCESS:
- Tor Browser recommended (but not required)
- No JavaScript frameworks/trackers
- No cookies for anonymous users
- Metadata scrubbing on all submissions

The system generates a unique key pair for each user locally.
Save your keys - they're your only identity. We don't store them.

Technical discussion welcome. Code review appreciated.

Gabx

https://www.virebent.art/publishing-system.html

--- Digital Signature --- >A/wskXBSmB9B/BMb5rjCijlWDb5bi0xxGqNpu2NnS3bQqeokFSqXWabjJeznjjwr9XcWLQCRBO7CeXM5eLIsAw==

JS BS!

--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: alt.privacy

Gabx wrote:

You are right, i'm going to fix it!

Done !
unexpected token "*"

Gabx

Bonne soir !
--
0745 074D FEAA 9CB7 62E9 D89D 3E54 F490 F2CC 5A82
--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: alt.privacy

Fritz Wuehler wrote:

Gabx <virebent@tcpreset.invalid> wrote:

https://www.virebent.art/publishing-system.html

- No JavaScript frameworks/trackers

JS BS!

Four letters which tell the whole story, Garbagx's next lie.

--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: alt.privacy

Anonymous wrote:

Fritz Wuehler wrote:

Gabx <virebent@tcpreset.invalid> wrote:

https://www.virebent.art/publishing-system.html

- No JavaScript frameworks/trackers

Valid concerns about JavaScript. Here's exactly what our JS does:

PROTECTIVE MEASURES (Browser modifications):
- Canvas fingerprinting protection: Modifies HTMLCanvasElement.prototype
- Timezone normalization: Overrides Date.prototype.getTimezoneOffset
These DO alter browser behavior globally within the tab.

network activity:
- Decoy traffic: Auto-generates every 30-90 seconds
- Tor detection: One check to tor_check.php on load
Fair point - we should make these opt-in.

key generation:
- Client-side only using Web Crypto API
- Private keys NEVER leave your browser
- Server NEVER sees private keys
- This is MORE secure than server-side generation
- Code is readable/auditable in browser

Your private key exists only in your browser's memory.
We couldn't log it even if we wanted to - we never see it.
Compare: PGP also generates keys locally, not on keyservers.

TRANSPARENCY ISSUES (you're right):
- We should document each JS function clearly
- Decoy traffic should be opt-in, not automatic
- Need to provide NoJS fallback option

Working on:
1. NoJS version (less secure but functional)
2. Opt-in toggles for protective features
3. Complete JS documentation


Gabx
--
0745 074D FEAA 9CB7 62E9 D89D 3E54 F490 F2CC 5A82
--- Synchronet 3.21a-Linux NewsLink 1.2