Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

SADD.IO: Web-Based Anonymity, Security, and Privacy

I appreciate you bro :) I'll try this out
(Apr 24, 2018 02:01 PM)Corver Wrote:  Looks pretty cool, i must say. But its nothing new. RDI's have been around for a long time.

Hey Corver,

Thanks for taking a look.

Thanks,
NullifiedVoid

(Apr 24, 2018 02:10 PM)K3njii Wrote:  pretty cool man, athlough i prob wont use it its really cool

Hey K3njii,

Awesome. Thanks for taking a look.

Thanks,
NullifiedVoid

(Apr 24, 2018 02:13 PM)Tesla Wrote:  I appreciate you bro :) I'll try this out

Hey Baked,

No problem! Let me know of any improvement ideas.

Thanks,
NullifiedVoid
I wouldn't feel safe using this tbh.
(Apr 24, 2018 11:24 PM)SIM-964740 Wrote:  I wouldn't feel safe using this tbh.

Why's that?
(Apr 25, 2018 02:20 AM)Tree of Life Wrote:  Why's that?

Because it wasn't made by me, I didn't install the software and I am controlling through someone elses servers.
(Apr 25, 2018 02:35 AM)SIM-964740 Wrote:  Because it wasn't made by me, I didn't install the software and I am controlling through someone elses servers.

haha man we are commenting on the same shit


but Yah, i mean they are surely logging everything you are doing on the servers ?


just double checked and there's not a privacy policy afaik

I mean it's a neat project, and I would use it definitely for certain things, but I wouldn't use it for something I wanted anonymity with
[Image: sralabf.png]
(Apr 25, 2018 05:51 AM)Flu0z Wrote:  haha man we are commenting on the same shit


but Yah, i mean they are surely logging everything you are doing on the servers ?


just double checked and there's not a privacy policy afaik

I mean it's a neat project, and I would use it definitely for certain things, but I wouldn't use it for something I wanted anonymity with

Yep, it's just allowing an additional vulnerability, an unnecessary middle-man if you will.
Wow what a great idea this man! I will have to give this a go. :)
(Apr 25, 2018 02:35 AM)SIM-964740 Wrote:  Because it wasn't made by me, I didn't install the software and I am controlling through someone elses servers.

Hello Deadpan,

Interesting train of thought, but wouldn’t you say in the case of VPNs that just because you installed their software, does not justify whether or not your data is secure. At the end of the day it is whether or not you trust the VPN. If you do not trust SADD.IO that is completely fine and you are entitled to your opinion.

Thanks,
NullifiedVoid

(Apr 25, 2018 05:51 AM)Flu0z Wrote:  haha man we are commenting on the same shit


but Yah, i mean they are surely logging everything you are doing on the servers ?


just double checked and there's not a privacy policy afaik

I mean it's a neat project, and I would use it definitely for certain things, but I wouldn't use it for something I wanted anonymity with

Hello Digibit,

What information do you think would be logged? There is no purpose of making attempts to log a machine that will be destroyed in a 15 - 60 minute time span, especially when there is zero information on the user.

Unlike VPNs there is no need to collect any information about the users. When a user generates a desktop (virtual machine) they are given a randomly generated token. This token gives them access to that particular machine. Users do not have to register, purchase, or provide any information about themselves to use this service.

Since all generated desktops are routed through the TOR network, in what ways do you think a user could be identified? If user A and B is using SADD.IO what distinguishes the two from each other or other TOR users?

VPNs are great but the owners have the ability to look at any traffic coming through them. Again I must reiterate the trust factor.

Your VPN service looks great!

Thanks,
NullifiedVoid

(Apr 25, 2018 06:18 AM)SIM-964740 Wrote:  Yep, it's just allowing an additional vulnerability, an unnecessary middle-man if you will.

Hey Deadpan,

If you would not mind showing a proof of concept in regards to additional vulnerabilities, please post them here. We are interested in seeing vulnerabilities and will pay well for them. :)

We invite anyone to pen-test our systems!

Thanks,
NullifiedVoid


(Apr 25, 2018 09:23 AM)DefiantOne Wrote:  Wow what a great idea this man! I will have to give this a go. :)

Hey DefiantOne,

Let me know how it goes for you and how it can be improved.

Thanks,
NullifiedVoid
i tried this and now my mother banned me from the family computer for 1 freaking month
thanks a lot DUDE.
Man! This is really cool. I'm so jumping on it.


(Apr 25, 2018 10:43 AM)lary Wrote:  i tried this and now my mother banned me from the family computer for 1 freaking month
thanks a lot DUDE.

🤣


(Apr 25, 2018 10:43 AM)lary Wrote:  i tried this and now my mother banned me from the family computer for 1 freaking month
thanks a lot DUDE.

🤣
(Apr 25, 2018 04:06 PM)sly7x Wrote:  Man! This is really cool. I'm so jumping on it.

Hey sly7x,

Thanks for taking a look at this project! Let me know if any possible improvements.

Thanks,
NullifiedVoid
Aye,

I meant like

There is a plain ISP log of me going to your website on my end if I go to it, and if somehow they knew that the task I had done as used using your website they may get logs from the ISP / Server Provider you are using

I mean it looks like a good service, don't get me wrong at all, and it's probably very useful and I haven't seen anything like this before

I also apologies because I believe you had to register for an account and such and potentially pay in the future
[Image: sralabf.png]
(Apr 26, 2018 05:14 AM)Flu0z Wrote:  Aye,

I meant like

There is a plain ISP log of me going to your website on my end if I go to it, and if somehow they knew that the task I had done as used using your website they may get logs from the ISP / Server Provider you are using

I mean it looks like a good service, don't get me wrong at all, and it's probably very useful and I haven't seen anything like this before

I also apologies because I believe you had to register for an account and such and potentially pay in the future

Hey Digibit,

Its all good!

I have actually discussed the ISP situation with a user before. So lets imagine that the authorities has to do an investigation on someone.

Lets assume that the user is using the premium version (HTTPS for the desktops). The logs that the ISP would have would not contain the token identifier for them to access your generated desktop. All they would see is that you are using SADD.IO. Would be very difficult for them to identify what desktop you used. Also keep in mind the desktops get deleted within 15 - 60 minutes. Investigations take longer than 1 hour!

In regards to the payment system, when released, this is how it would work:

1. A user would purchase premium (or private) package.
2. The user receives an order ID.
3. The order ID will be entered on the site.
4. If validated a token would be generated.
5. The user will access their desktop using the token.

Note: The token and the order ID have no correlation. The order ID is just a validator. Order IDs can be shared but only one desktop will be generated at a time per order ID.

Thanks,
NullifiedVoid
(Apr 26, 2018 09:32 AM)nullifiedvoid Wrote:  Hey Digibit,

Its all good!

I have actually discussed the ISP situation with a user before. So lets imagine that the authorities has to do an investigation on someone.

Lets assume that the user is using the premium version (HTTPS for the desktops). The logs that the ISP would have would not contain the token identifier for them to access your generated desktop. All they would see is that you are using SADD.IO. Would be very difficult for them to identify what desktop you used. Also keep in mind the desktops get deleted within 15 - 60 minutes. Investigations take longer than 1 hour!

In regards to the payment system, when released, this is how it would work:

1. A user would purchase premium (or private) package.
2. The user receives an order ID.
3. The order ID will be entered on the site.
4. If validated a token would be generated.
5. The user will access their desktop using the token.

Note: The token and the order ID have no correlation. The order ID is just a validator. Order IDs can be shared but only one desktop will be generated at a time per order ID.

Thanks,
NullifiedVoid


I guess, you've got a good system then, good luck :) 🤝 Apologies
[Image: sralabf.png]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by bleepsheepOct 10, 2021 05:19 AM 0 154 Oct 10, 2021 05:19 AM
Last Post: bleepsheep
by ElysiumOct 30, 2019 01:57 PM 10 835 Oct 30, 2019 01:57 PM
Last Post: ThatCoderX
by CocaineAddictAug 27, 2016 09:15 PM 0 205 Aug 27, 2016 09:15 PM
Last Post: CocaineAddict