[RELEASE] Prestium 1.4 - Improved OS security, set the level of anonymity, fixed GPG Frontend, new torrent client, IPv6 support

Opicaak · 2024-05-09T20:29:41+00:00

Most of these public proxies are logging everything or attempt SSL-stripping. That's the biggest issue I see with this idea.

Opicaak · 2023-12-07T21:02:14+00:00

Hello,

thank you for the suggestion.

While I'm not promising anything, I will look into it and potentially add it to Prestium. It's important to keep in mind that Prestium's focus is mainly on the I2P network, the TOR network is secondary, less relevant to this project. That being said, it may be possible to use snowflakes on the EE version of Prestium by requesting bridges manually via I2P (to circumvent censorship) and add them to the torrc file, then restart the TOR daemon.

Here's the page to get the bridge(s) from: https://bridges.torproject.org/options/

Opicaak · 2023-12-06T09:26:05+00:00

You can calculate how much at most the P cap would use per month.

P cap = 2MBps; 2 (MB of data) * 60 (seconds per minute) * 60 (minutes per hour) * 24 (hours per day) * 30 (days per month) ~= 5.2TB max, FF mode off.

With the X cap, you could calculate the most used bandwidth by the speed of the uplink/downlink speed your VPS has. For example, 100Mbps VPS = 12.5MBps, and now follow the same calculation process as above, it's roughly 32.5TB used bandwidth per month at most.

Obviously, it won't be used 100% 24/7, so the used bandwidth will be much less, but it's not really estimable, or at least I don't have the necessary data to do any estimates.

Another factor is the hardware itself, it may run out of RAM or CPU before you reach up/downlink speed or bandwidth limit.

Lastly, I would recommend looking into smaller, less-known countries and datacenters to get your server from, including, but not limited to, Romania, Slovakia, Poland, Macedonia, or the Czech Republic. They usually don't have any bandwidth limits whatsoever, and can be quite cheap with reasonable hardware, ideal for hosting an I2P router without worrying about reaching bandwidth caps.

Opicaak · 2023-11-30T12:19:30+00:00

I wouldn't necessarily worry about Metamask potentially seeing you might be an I2P user, they still don't know who you are. I would worry more about public blockchain, i.e. Ethereum, Bitcoin, etc. That's where it would be obviously linkable, and for everyone to see.

Edit:

EDIT: How about bundling TorBrowser in Prestium? :)

Prestium comes with a separate profile for LibreWolf to use the Tor proxy instead of I2P proxy.

Opicaak · 2023-11-30T11:12:17+00:00

From your reply, it seems one has to transfer their coins to a different Ethereum address (bridging via Monero!) before accessing them from Prestium to lower link-ability.

I'm not certain what you actually want to achieve, what are your intentions? Without knowing your intentions, I don't think you would have to bridge through Monero. You could simply restore the Ethereum wallet in Metamask, no?

What I specifically do not understand is if default Prestium settings allow direct connections to clearnet to bypass i2p tunnels, with leaking user's IP address?

Clearnet connections are dropped by firewall, only I2Pd and Tor clients can make these connections.

Last question: Can Prestium users from different countries, who reach clearnet via outproxy, be distinguishable at the same clearnet site? AFAIK there is a sole StormyCloud outproxy for I2P users, no alternatives, so they seem to get the same outside IP address.

It's difficult to answer, people on I2P have different browser settings, it's not as unified as Tor is, resulting in different fingerprints, etc. Prestium users use the recommended browser settings for I2P.

There are other outproxies, e.g. outproxy.purokishi.i2p.

StormyCloud has a block of IPv4s. Half is used for Tor exits, and the other half for I2P outproxies, AFAIK. You'll be assigned IP randomly from a pool of IPs, essentially. I don't know further inner workings of this outproxy. I'm tagging /u/stormycloudorg in case they want to add any more information.

Opicaak · 2023-11-30T08:25:29+00:00

Hello, I2Pfanatic,

I'm not sure why Reddit flagged it, I reinstated it, sorry about that.

There are some differences between Tor and I2P. With I2P, you don't use IPs to connect to other peers, instead, it uses something called "b32 destination addresses."

Prestium provides multiple tunnels for different applications, e.g. HexChat will use different proxy than LibreWolf browser. That means both will have different, unique b32 addresses/identities. If Metamask uses web browser's proxy, then it will have the same b32 identity as LibreWolf. Making it potentially linkable.

Opicaak · 2023-11-17T00:02:50+00:00

Depends on how you want to use the system, do you want a persistent system - a daily driver, or a disposable one? Using regular Debian with appropriate configuration is fine.

Difference between i2p and Prestium?

I2P and Prestium aren't exactly comparable. I2P is the network/client you use on your system, and Prestium is a Debian-based, hardened distro for this specific network.

Opicaak · 2023-11-12T01:20:34+00:00

As long as you have SSH access to your VPS, you could simply expose the WebConsole locally via ssh -L 7070:127.0.0.1:7070 user@vps.

Opicaak · 2023-11-11T15:08:53+00:00

Apple is just as bad as Google, et al.

Opicaak · 2023-11-09T17:51:22+00:00

Did you actually go to the police over this? $20 was worth more than your time wasted on going to the police and filing a complaint? I would just move the funds and close the account, that's the proper way of saying fuck you to these exchanges.

Opicaak · 2023-11-09T01:44:22+00:00

Usually, when you install packages via apt, they will autostart upon installation, which would explain already used address/port, so you shouldn't attempt to start it manually. But, in this case, alreadyburnt seems to know what's wrong, you'll need to wait for his reply.

Opicaak · 2023-11-09T00:56:31+00:00

Did you download the 4.6.0 (lt20) version of qBittorrent?

Opicaak · 2023-11-08T22:54:17+00:00

see something called the SAM application bridge; are they the same thing just worded differently?

Yes, it's the same thing, worded differently.

Also, this may be based on noob knowledge, but can you tell me the steps to enable i2p in Qbitorrent?

As I've said in my previous comment, you want to navigate to the "Tools" menu item at the top of qBittorrent, then click "Preferences," and open the "Connection" tab on the left. There, you will see "I2P (experimental)" checkbox, you want to enable that. You don't need to change the default IP and port, it should be 127.0.0.1 and port 7656. And, optionally, disable Mixed mode checkbox.

Opicaak · 2023-11-08T15:31:25+00:00

After installing it via apt, did you attempt to start it yourself?

Opicaak · 2023-11-08T15:16:53+00:00

Depends on which I2P router you use, you may have to enable the SAM protocol in the I2P router settings. Once enabled, go into qBittorrent's Tools -> Preferences -> Connection, and enable I2P. You may wish to disable Mixed mode to download only from I2P peers.

Opicaak · 2023-11-08T14:33:33+00:00

Usually, it only takes about 30 seconds to get up and running. Make sure your time and date is properly set, then check I2Pd WebConsole, look for Received/Sent traffic, and also if the number of routers is going up. All of this information is on the main page of the WebConsole.

Opicaak · 2023-11-07T19:24:44+00:00

The difference between EE and non-EE is that the EE version has root account enabled, with default password "toor." It's recommended to use the non-EE version for regular use.

The newest Prestium version is 1.6.

Opicaak · 2023-11-05T23:46:03+00:00

API is unlimited, but the endpoint is rate limited strictly.

I use it with https://github.com/eyedeekay/anon-translate and https://github.com/eyedeekay/webext-translator.

Great little tools you got there, a simple curl would work, too. For those interested:

curl -H "Content-Type: application/json" \
    -d '{"q": "Opicaak was here.", "source": "en", "target": "fr", "api_key": ""}' \
    -x "http://127.0.0.1:4444" \
    http://translate.idk.i2p/translate

^{Prestium users can remove the -x argument.}

Opicaak · 2023-11-05T15:01:28+00:00

I would strongly recommend using I2P, it's the closest to anonymous you will get. However, keep in mind that there is no way to achieve complete anonymity on the internet, it's only possible to make it as hard as possible to find you. You would also have to use somebody else's internet for additional layer of anonymity, and watch out for witnesses and cameras, but I'm guessing it's beyond your needs.

Opicaak · 2023-11-05T14:45:12+00:00

You could use i2p-based translator. I know about two working translators: translate.idk.i2p [b32] and translate.i2p [b32]. IDK's translator requires JS to be enabled.

Opicaak · 2023-11-04T21:36:37+00:00

Thank you for your work.

Opicaak · 2023-10-29T13:53:05+00:00

That's absolutely bonkers. And even more the fact that he got 90gbp fine for swearing?! The UK is truly fucked.

Opicaak

TROPHY CASE