485: Mystery Box

What this episode covers

We dig into Shufflecake, a tool that lets Linux users hide data with plausible deniability, then let our live stream SSH into our server and see if they can discover our secret data. Plus, we follow up on Brent's never-ending desktop distro search and Chris' new Linux rig.Sponsored By:Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!Linode Cloud Hosting: A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account. Bitwarden: Bitwarden is the easiest way for businesses and individuals to store, share, and sync sensitive data.Support LINUX UnpluggedLinks:Just a bunch of idiots having fun—a photo history of the LAN partyIntroducing Shufflecake — Shufflecake is a tool for Linux that allows creation of multiple hidden volumes on a storage device in such a way that it is very difficult, even under forensic inspection, to prove the existence of such volumes. Each volume is encrypted with a different secret key, scrambled across the empty space of an underlying existing storage medium, and indistinguishable from random noise when not decrypted.Hidden Filesystem Design and Improvement - Elia Anzuoni — We propose a novel design, a scheme called Shufflecake, which targets a more balanced compromise between performance and security. The level of deniability it offers, while not protecting against attacks in the most stringent threat model, is sufficient in many practical scenarios.Tommaso Gagliardoni’s HomepageLinux kernel module for ShufflecakeShufflecake Userland ToolsFedora upgrade failed due to dep failureComparing openSUSE MicroOS and Fedora Silverblue 37Scaling Mastodon is ImpossibleUsing Mastodon for comments on a static blogTwitterToNitter — Bookmarklet that shows the current Twitter page on Nitter. On every click it choses a random Nitter instance.libredirect — A web extension that redirects YouTube, Twitter, Instagram... requests to alternative privacy friendly frontends and backends.