Information
ID: 536
PHID: PHID-TASK-54qu7fhsljttkgdswp4l
Author: HulaHoop
Status at Migration Time: resolved
Priority at Migration Time: Normal
Description
I’ve been thinking about some of the ways users can deanonymize themselves when posting on a forum.
Besides password re-use from non-anonymous accounts (which password managers deal with), writing style (Anonymouth is supposed to deal with that - openjdk support in progress), Re-using a non-anonymous username by mistake is a remaining problem.
I found a simple python username generator that has an optional GUI. It combines words from a pre-defined list:
License: GPL2
IMHO this is a simple tool really worth packaging for Whonix.
Comments
Patrick
2016-08-05 16:37:09 UTC
I don’t think this tool is ready for prime time.
# Verbs and nouns for namegen
verbs =
['happy','sad','tall','short','malious','ravenous','smooth','loving','mean']
nouns = ['hacker','lumberjack','horse','unicorn','guy','girl']
# Not Safe For Work verbs and nouns to be added in later
verbs_nfsw = []
nouns_nfsw = ['rapist','fuck']
Can you ask on tor-talk please which tools are advisable for this purpose?
HulaHoop
2016-08-05 18:35:55 UTC
HulaHoop
2016-08-05 18:46:46 UTC
HulaHoop
2016-08-05 19:06:42 UTC
Patrick
2016-08-10 17:20:22 UTC
HulaHoop
2016-08-11 18:58:20 UTC
Is any of these tools popular?
No.
No such tool already in Debian?
Not exactly. The closest thing I found is meant to be a password generator but it can do good job generating pronounceable usernames.
Cons:
The word length is fixed at eight characters. That’s not too bad because a user can just append some characters from the next word. People might be tempted to misuse it for passwords instead though they can do that anyway with any other solution.
Debian -- Error
What about the list / generator by Tails?
If its easier for packaging why not? However I don’t really like being limited to a predefined list. Makes profiling of users easier - network observer would say “probably the person behind that username is an anonymous OS user because it comes from this word list”
If you don’t find gpw acceptable then Word-Name-Generator/Generator.py at master · MGakowski/Word-Name-Generator · GitHub is the next best thing. Users can choose the word length.
HulaHoop
2016-08-12 01:48:35 UTC
pwgen is perfect for our purposes.
[tor-talk] Username Generator programs
Packaged in Debian
Reliable enough that its used by Debian Installer to recommend stronger passwords
Can control length, capitalization, special symbols and numbers.
Patrick
2016-08-12 22:42:15 UTC
https://screenshots.debian.net/screenshots/000/000/598/large.png
Such strings (from the above screenshot) would be used as user names? Probably better than anything a user could manually make up. And since there is no standard on pseudonymous user names, I don’t see anything that speaks against this.
Installing pwgen by default would be super simple (can be done for Whonix14). Send a pull request for anon-meta-packages? Fits in anon-workstation-packages-recommended.
HulaHoop
2016-08-17 05:30:18 UTC
Patrick
2016-08-17 19:21:00 UTC