DOCS (installation guide, history) | DOWNLOAD

Over the past few days, instead of revising for the exams that I am entrenched in, I decided to program UnsignedThread.

Unsigned thread is essentially a helpdesk with ADHD, it’s an anonymous helpdesk allowing guests to securely communicate with site administrators (yes, multi-user support). It was designed in the format of Twitter Direct Messages (but without the character limits). It can be used for anything from sources communicating with journalists, to traditional website support.

How is this different from existing tools?

Anonymous communication, no login, email, etc. required.

Very lightweight, no excessive dependancies, no mail servers required. Streamlined.

It’s free and open source.

What security mesures can/have been taken?

In an Apache2 install it can easily be bound to a Tor hidden service, or a TLS based HTTPS site for security. However as it is plain PHP/HTML/CSS it can be bound to any web server. Note that UnsignedThread does not magically secure all your communications, it is only as secure as both the host running the service and the guest using the service wants it to be. Auth keys are hashed in SHA256 format and salted, also SQL data has been sanitised as standard with most web tools.

I highly recommend you either install this on a TLS secured site (HTTPS) or even better a Tor hidden service.

Specification:

Designed with Twitter Bootstrap.

Easy to post and reply to posts rapidly.

Programmed in PHP using MySQL database.

No personal details required.

High security hashing of auth keys and passwords.

No mail server or excessive dependancies required.

Admin management console with multiple user support.

Can be configured with HTTPS and/or a Tor Hidden Service easily.

No absolute referencing, put it in a directory if you want.

Sorting in Managment Console.

Pagination in Management Console.

Reply to posts.

Updating status.

Real Life Examples of people using this script:
BritiLeaks

Potential issues:

Same hashing of passwords as auth keys. This issue is not really an issue as hashed auth keys are not visible to the end-user.

Enjoy, leave any suggestions in the comments.

In the wake of UK ISPs being forced to censor ThePirateBay, and Pirate Party amongst others offering a proxy to access the site that many indie artists use to get their content recognised; it came to my attention that aside from a 90MB backup of some of the torrents on the site, there were no large scale mirrors of the site. Upon realising this, I noted how impractical it would be simply wget the entire contents of the site.

It was for this reason that TPCrawler was born. TPCrawler is an open-source PHP tool to mirror magnet URLs, source URLs and the descriptions from torrents on ThePirateBay (and on other sites with simple modifications) entirely autonomously. It is a minimalistic tool that mirrors that stores information using MySQL with a search and viewing front-end.

To find people using this tool, you can simply search: ”Powered by TPCrawler.”

Google | DuckDuckGo

DOCS (installation guide, history) | DOWNLOAD

The tool is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported (CC BY-NC-SA 3.0) licence. Note; this tool was created with the intent it is used to mirror content from artists that wish to get exposed or human rights workers who wish to make their findings known, who likewise offer their work up in a Copyright Free sense; free to share; CopyLeft, if you will; and not for the intent of illegal piracy. You can utilise the blacklist feature, and use the tool to only mirror content which is legal to download by modifying the script. This tool only mirrors “Magnet URLs”, which are essentially just hashes that point to a file, and cannot download/mirror any copyright material in any way on its own (unless you somehow own copyright on a computer hash). If any illegal magnets do creep though your filter, you can delete them and not download the files. Furthermore I do not host any live version of this tool at all, any live version is operated by people who are not personally affiliated to me in any way, all screenshots on this site have been obtained from these sites. Furthermore this work is provided as-is, no warranties or guaranties in any way shape or form. I do not directly profit commercially from this script in any way.

Features:

Autonomous mirroring of magnet URLs, source URLs and descriptions on ThePirateBay by default, or any other script if the URL is changed (DOM values may need to be changed).
Data is paginated and truncated descriptions on home to avoid massive page loads.
Data stored in MySQL database.
Search function.
Open-source, simplistic PHP, HTML and a tiny tiny bit of CSS. No images, works best on LAMPP install (Linux, Apache, MySQL, PHPMyAdmin).
Crawler starts on every page load, unless modified.
The crawler script can be externally called by running this command on a Linux system: php crawler.php | /dev/null &

This script has been very rapidly created, and uses everything I hate (MySQL, manipulating arrays, DOM). So do not expect perfection.

TPCrawler running as a website (not operated by me).

A frozen sky, encumbered with darkness,

The icebound pavement, glazed with ice.

A shadowed figure emerged, his eyes glazed with tears,

The fire had burned.

His long black militaristic coat, concealed his body,

His formless expression, as he stared into the oblivion,

Highlighted as a silhouette by the rudy street lamps,

His long black hair, masked his face,

Not even the unflinching wind could reveal him.

His black eyes focussed, he had found his victim.

The fire was relight, for he knew the time was ripe.

His high black leather boots came alive,

Mortifying the pristine ice,

And with a flick of his coat,

He was gone.