Hello and welcome back to a
new video in the series of staying safe
on dark web Section 3 this video.
We will talk about secure Communications emails
and messaging first
of all, let's start with emails.
the most famous way to secure yourself
and emails is using one of
the best.
Leading security email Services is protonmail which
provide end-to-end encryption for Messengers sent
on the dark web.
It use a combination of public key and symmetric
key encryption to ensure that messages are sent and
received are private and secure. Let
me show you the website of proton email
and how to create an account.
So this is the website of proton.
You go to proton.me and create.
An account and you go for free.
Get proton for free.
You put a username.
Let's say Jack Wonka.
King
password
So after putting my password on completing the
the process nothing interesting, I just
put the password and then it asked me about the recovery email
and this kind of info but it's not required for
you to input it. So it's up to you but here's
the protonmail platform and now
you can use it on the dark web or anywhere you want.
moving on with the temporary or disposal email
address
that takes no time to make and protect your inbox from
all.
unwanted spam
and any security risk, so
apart from protonmail if you
want another good recommendation is using a temporary
email.
So why use a temporary email that has
generated every let's say
10 minutes 30 minutes one hour. It depends.
So temporary emails it gives you the freedom to
use. Let's say a generated email
for specific tasks that you want to do. Let's say
you want to keep your information private, which
is obviously want to do it.
Or for any testing purposes. Let's say
you want to create an account.
But you don't want to use your official email
so you can use this.
All you want to do a payment.
Through a generated the let's say
you want to do one payment only one time.
But you're using a credit card.
That you don't really use
it every time it's not your main credit card. It's just
like to try a free software and this kind of stuff so
you can use temporary email and also on
the dark web and the dark web you can also use temporary emails
to join chats to create user in
the forms and these kind of stuff and
Marketplace. So temporary image is also good
if you want something temporary or for any temporary
tasks or white scams to keep your information private.
File hosting testing purposes web web
testing anything. It can be anything. The options
are endless.
So if you just type on Google.
10 minute mail you will find a lot of resources.
Let's take example the first one.
So generated an email and
you can use it anywhere you want.
Now let's talk about secure messaging
in Secure messaging
on dark web. It's kind of tricky because there's lots
of solutions.
but the most famous ones are
basically is using a software called
pigeon.
So pigeon is a chat program, which lets you log
into accounts on multiple chat networks simultaneously. This
means that you can be chatting with friends
on XMP and sitting in an IRC
Channel at the same time. What are those
basically these are protocols.
Pigeon it gives you the freedom to chat malt
simultaneously in different
protocols. That's insane.
You can really find it in other in any kind of
or any other.
application or software
and pigeon runs on Windows the next vsd and
other unix-like operating system.
Also pigeon use to keep
the conversation private.
And decentralized it use
of the record messaging or for
short is OTR.
It's an encryption protocol that provides encryption and
authentication of messages to ensure secure
communication on the dark web OTR is
open source protocol that is designed to prevent if dropping
message tempering and other malicious activity.
and mainly
and our example today because I will
show you a demo about how to use.
Pigeon Bay and by the way, pigeon is
by default installed in on Tails. So
you can see how tails is amazing and also
entails OTR is enabled by
default on pigeon because OTR
it's a plugin for Pigeon. So if you're using Windows and
you downloaded pigeon from the link, I told
you about you need also to
download OTR and add it to Pigeon. Okay.
so basically today the example I
want to give about pigeon is the
secured communication of xmpp. What is
xmpp?
Exam PP is extensible messaging and
presence protocol a set of open Technologies
for instant messaging presence
multiparty chat voice and videos and collaboration.
For example, and the big example is
WhatsApp WhatsApp the messaging app that's widely
used across all countries and nowadays.
So basically xmpp is a good example
of WhatsApp.
And xmpp was originally developed in the zabard
open source community.
But the good thing about xmpp, it's
decentralized and it's
secure.
The architecture of xmpp networks is similar
to email as a result. Anyone can run their
own xmpp server enabling in
individuals and organization to take control of their communication
experience.
Like now we can create your
own xmpp server and you can launch it
online and let your and let anyone join it.
But in this course, I will show you how
to join an xmpp server and how to create a
user on that xmpp server for make it
easier and the good thing about xmpp. It's
use the sasl and TLS.
It's built into the security
communication of xmpp, and it's
end to end incrypted to make it more and
more harder to read the messages of anyone
communication, but it's near impossible.
so now let's let me show you a demo
about pigeon and how to
sign up on the xmpp server.
And we will do private chat between two entities.
So back on tails.
Since it's pigeon is already installed on.
on the machine so to
access
Open Terminal.
type
pigeon
enter
Okay, so basically now it's running.
So basically in position you need
to add.
And since I told you in this
in this example, I will show
the xmpp, but if you want to
learn how to do it in IRC basically just type by
username and just add it.
And if it's connected then it's working if it's not
just change the username.
But for this example, I will go through an example.
As you can see we need a username domain and password
to get it launch.
So how to get an xmpp server and
how to get a username out of it.
So basically there's a lot of xmpp server
that
that are available online.
One of my favorite is this it's a German
xmpp server.
It's called.
Well, it's hard to pronounce it but weiew.e something
like that.
So basically you go to the website.
wi-u-w-i-u.de
and you click register.
your type
username
Okay now.
a password
the password again
the capture
to make sure I'm a human.
and register
it should be good now.
So basically it's telling us our account is created.
now
let's add.
protocol xmpp
Okay, what's the username? I username
was Jack Wonka King
3.
The domain is the URL of the xmpp.
w i uw-i-u dot d
which is German the
and my password
Jack
I was spelling my password a huge mistake.
But don't do that.
Okay, so
you can obviously do remember password or no
as you like, but I would recommend no.
so add
now let's added.
So when he when it says here, it's connected. It's
good. If it's not we need to check the configuration again.
Okay, so now it's working.
Let me maximize this.
As you can see here. That's the OTR button I
was talking about.
The good thing entails in the plugin is
already installed in Pigeon by default on
Tails rather than other operating system that
you need to do with manually.
So what you can do now is basically go
to bodies.
Add a chat.
And check rooms.
The rooms that it's like saying groups.
Inside This Server. So let's find some groups
or rooms and the language of pigeon.
So we have a lot of rooms some
of them might not work.
And some of them might work.
So here it is Coronavirus emergency information
Channel as join.
Okay.
so now
we are in.
the corona
group or room
and here we have 18 people in the room.
You can by the way.
Talk with someone of them and try.
Talk to them.
But I want you also to learn something about private chat.
By default. It's not private.
Now you will now you will understand why.
So let's add.
Let's say I want to add a friend.
Okay, let's remove this.
bodies
Add a body.
So I want to add myself another account.
Just for testing purposes.
Jack Wonka King
two at
the Domain
and that's it.
Just type the username and the
server of your friend and click
add.
So basically
the other user is my Windows machine.
So here it's saying.
Jack Wonka 3 wants to add you
authorize
add now in my
Tails I need to authorize to
and now we can chat together.
So here in my Windows machine, I'm gonna type hello.
It's displayed on my tails.
As you can see by default. It's not private.
So you go not private and start a private
conversation.
Click OK here. It's generated a private
key.
Now it will generate private key also on Windows.
Okay.
Now we click on unverified.
and authenticate body
Basically, there's three ways to do it either by question
and answered shared secret and manual finger
friend. The most complex one is the fingerprint. Basically, it's
the keys and these kind of stuff.
So let's try the simplest one question and answer
enter a question name of your
paths. Let's say
And the answer should be.
Max
okay.
So I received on my Tails machine.
Name of your path. I will say Max.
waiting
and now it's private.
And remember it's using the OTR of that
occurred.
Okay.
So to authenticate also my body, I will
ask him. Also another question from the tail side.
So a question here.
What name?
of
my lover.
Or it can be anything.
I don't know. Let's say.
SSH
it can be anything.
authenticating
so and the Windows machine
I should get.
Okay. Yeah, I got it now.
It's here name of my lover SSH.
authenticate
Yes, all good now.
And basically now we can chat.
and
chat privately and fully encrypted
You can send emojis or anything you want and the
same logic is applied on dark web. You can
do this or join rooms or join
anything on the dark web, but remember when you
invite someone to talk with him?
remember to stay in a private conversation
and never never
do or
Like reveal your real identity.
Like as you can see, I used a fake name. It's
not even my name.
I used a jack Wonka King to like who named
us? Okay.
so
that's it.
I hope you enjoyed this and I will see
you in the next section. Where will the talk about
more interesting stuff the Cyber threat
intelligence and Dark World. See you in the next section.