[Deutsche Bank]

Hey CurryFist,

Thank you for your review. To determine whether the fbi could still find out we must think of all possible ways that they could. Lets assume the user does not put any personal identifying information on their desktop.

The FBI would have to first figure out which of our servers are doing something malicious. They would have to somehow get around Tor to do this. I have read about attacks where they exploit Tor browser. SADD does not use Tor browser, we use Tor gateways. So any type of exploit to the desktop would still return a Tor IP address.

In the worst-case scenario, lets say they are able to get a copy of one of our server’s HDD. They would have to use forensics to obtain VM data. This would not work as we dispose of our VMs by overwriting each byte of a VM with random data.

The hardest part for them is saying that a particular VM belongs to a certain user.

Thanks,
NullifiedVoid

Where they would succeed is correlation attacks.
If you are actively engaging with your computer at the same time that a VM is seen to be doing malicious activities from accounts possibly linked to you, they would be able to say that you are the one controlling it.

If, however VM you could set your VM to reroute others traffic randomly (over the internal internal network) for set periods of time before/after/during you actually control the VM then it would allow for plausible deniability of correlation attacks between your access to the site and the actions performed by a VM.

Even then it is a flawed system, but a concept worth looking into nonetheless.

[henry]

Interesting concept, I'll keep it noted.

[.eXe]

Tried that free trial, this is damn awesome. Very clever idea.

Do they actually irrecoverably self destruct? Also, will you add more off-shore locations?

[nullifiedvoid]

Going through all of the posts.. seems legt

Hello nabhaservices,

Thanks for looking through the posts. Let me know of your experience whenever you use it.

Thanks,
NullifiedVoid

Tried it and it works really good, Thanks :)

Hello _Excide,

Thank you for giving it a go! Let me know how we can improve.

Thanks,
NullifiedVoid

Where they would succeed is correlation attacks.
If you are actively engaging with your computer at the same time that a VM is seen to be doing malicious activities from accounts possibly linked to you, they would be able to say that you are the one controlling it.

If, however VM you could set your VM to reroute others traffic randomly (over the internal internal network) for set periods of time before/after/during you actually control the VM then it would allow for plausible deniability of correlation attacks between your access to the site and the actions performed by a VM.

Even then it is a flawed system, but a concept worth looking into nonetheless.

Hello Shitposter,

I believe that your scienario of correlation attacks would apply if the user is using accounts already linked to themselves. Also the outside entity who is looking for the user would have to know of these accounts. One of the things mentioned in both the video and website text is to not login into anything personally identifying. If a user plans to do something malicious, they need to not use any accounts that would lead back to them.

The scenario that you describe was seen when a student tried to do something malicious to a school server through Tor while on the school network. The problem was that the student connected through Tor directly and the network administrators saw that he was the only one connected to Tor when the attack happened.

If we remove the “accounts possibly linked to you” attribute then all the victim would see if a Tor IP address doing an attack. There is no way for the victim to know what type of desktop the SADD victim is controlling. Remember SADD allows users to use a VPN as their gateway instead of Tor. Maybe another good idea for the user would be to connect to a VPN or proxy before connecting to SADD.

So my advice to all users is to be as abstract from your personal life as possible if your plan is to do something malicious.

Thanks,
NullifiedVoid

Interesting concept, I'll keep it noted.

Hello 0rang,

Thank you. Let me know when you give this a go!

Thanks,
NullifiedVoid

Tried that free trial, this is damn awesome. Very clever idea.

Do they actually irrecoverably self destruct? Also, will you add more off-shore locations?

Hello Evil.eXe,

Thank you! Yes they irrecoverably self destruct as all VMs as they are erased byte-by-byte. We will add off-shore locations once we see how the premium release goes.

Thanks,
NullifiedVoid

[.eXe]

Hello Evil.eXe,

Thank you! Yes they irrecoverably self destruct as all VMs as they are erased byte-by-byte. We will add off-shore locations once we see how the premium release goes.

Thanks,
NullifiedVoid

Can I ask what other protections you put in place to protect the users seeing as anonymity is key, here?
What happens if we pay for an account? Are those accounts connected/logged against VMs, anywhere?
What happens if another user does something malicious and your datacenter gets subpoenaed?

[nullifiedvoid]

Can I ask what other protections you put in place to protect the users seeing as anonymity is key, here?
What happens if we pay for an account? Are those accounts connected/logged against VMs, anywhere?
What happens if another user does something malicious and your datacenter gets subpoenaed?

Hey Evil.eXe,

Sure thing. So another thing we do to protect users from internal network attacks is place all desktops on separate VLANs. We also generate a Tor gateway (OS) with that VLAN making it difficult for an attacker to escape into the actual server.

When user’s purchase premium, they receive an order ID. The order ID is merely a ticket that allows the user to generate a premium desktop. There is no correlation between the order ID and generated desktop.

If a server is subpoenaed the requester would receive a HDD which contains no desktops. The server has triggers to wipe incase of situations like this (i.e. turning the server off or tampering with specific files).

Although, it would interesting to see the government prove that one of our servers did something malicious as they would have to break Tor.

Thanks,
NullifiedVoid

[.eXe]

Hey Evil.eXe,

Sure thing. So another thing we do to protect users from internal network attacks is place all desktops on separate VLANs. We also generate a Tor gateway (OS) with that VLAN making it difficult for an attacker to escape into the actual server.

When user’s purchase premium, they receive an order ID. The order ID is merely a ticket that allows the user to generate a premium desktop. There is no correlation between the order ID and generated desktop.

If a server is subpoenaed the requester would receive a HDD which contains no desktops. The server has triggers to wipe incase of situations like this (i.e. turning the server off or tampering with specific files).

Although, it would interesting to see the government prove that one of our servers did something malicious as they would have to break Tor.

Thanks,
NullifiedVoid

Thanks.

And what's to say you don't watch what users are doing? It's virtualbox afterall.

[nullifiedvoid]

Thanks.

And what's to say you don't watch what users are doing? It's virtualbox afterall.

Hey Evil.eXe,

The token located in the url of the user’s browser is how someone can view the desktop. These tokens are generated on the fly.

As far as server-side goes, we have permissions and locks in place to stop someone from viewing desktops. If an admin logs in, a wipe occurs and the SADD.io service is stopped.

Thanks,
NullifiedVoid

[Killy]

i tried the trial and it cant access a few sites that i wanted to go on
is this just the trial version or does the prem one offer more

[nullifiedvoid]

i tried the trial and it cant access a few sites that i wanted to go on
is this just the trial version or does the prem one offer more

Hello chetos22,

What errors are you getting? What operating system are you using?

Thanks,
NullifiedVoid

[Salodm]

super project for anonymity bro

[nullifiedvoid]

super project for anonymity bro

Hello Salodm,

Thank you much bro.

Thanks,
NullifiedVoid

[Ephorize]

Just tried this, quite happy with what I've seen. Can't wait to try out the premium service!

Any idea when this will be ready?

[nullifiedvoid]

Just tried this, quite happy with what I've seen. Can't wait to try out the premium service!

Any idea when this will be ready?

Hey My Turn,

Glad that you enjoyed the service! Premium servers will be purchased Friday and implemented by late next week.

We are also deploying a fix for the Kali Linux bug where the date and time is off!

Thanks,
NullifiedVoid

[M4rshall]

Thanks for this man you're the best !