youandme/README.md

38 lines
1.5 KiB
Markdown
Raw Normal View History

2020-04-23 10:18:31 +00:00
# youandme 🧑‍🤝‍🧑
2020-04-20 11:15:19 +00:00
2020-04-23 09:30:05 +00:00
[![Build Status](https://travis-ci.org/beardog108/youandme.svg?branch=master)](https://travis-ci.org/beardog108/youandme)
2020-04-24 23:34:31 +00:00
Only you and the person you're talking to should know the details of the conversation.
2020-04-23 10:18:31 +00:00
This is a Python library to share data anonymously and securely* with limited traffic metadata. It is designed for generic byte streaming, but a script 'yam' is included to enable basic CLI instant messaging.
2020-04-20 11:15:19 +00:00
\* The ID one connects to a host with must be shared via a secure (private, authenticated) channel.
`$ pip install youandme`
2020-04-23 10:14:50 +00:00
You also need a recent Tor daemon in executable path. 0.4 Tor is what is tested. https://www.torproject.org/download/tor/
2020-04-20 11:15:19 +00:00
# why
In normal socket connections, Eve can see when Alex and Bob communicate and the size of their communications.
2020-04-20 11:25:56 +00:00
This library sends continuous streams of data (null bytes) even when no information is being communicated, in order to increase unobservability of transmission times and packet sizes.
2020-04-20 11:15:19 +00:00
2020-04-20 11:18:27 +00:00
Anonymity and encryption is provided via Tor onion services, though this library could easily be adapted to use plaintext (and encryption by an application) or another relay like I2P.
2020-04-20 11:15:19 +00:00
# security
As stated above, this library does no authentication. However, if the ID is shared privately and safely, the tunnel will have roughly the security of a Tor v3 onion service, with increased metadata unobservability.
## What an attacker sees in a normal Tor connection
![](no-dummy.png)
## What an attacker sees in a youandme connection
2020-04-20 11:18:27 +00:00
![](dummy.png)