Any noob guides to stay safe on IRC? reddit / irc ---------------------------------------------------------------------- overclock351 · 2021-06-18 07:34 Hi guys i've known about IRC for a while but i never had the need to use it. Do you have a guide for cloaking/ip spoofing or other stuff concerning security on a IRC server? thx ---------------------------------------------------------------------- mill_en_ial · 2021-06-18 07:43 In libera, ask for a cloak in #libera. Connect to SSL port (6697). They also have a TOR hidden service: https://libera.chat/guides/connect ---------------------------------------------------------------------- Harold_Callahan · 2021-06-18 08:25 Better to join #libera-cloak and say !cloakme, since that is automated. ---------------------------------------------------------------------- overclock351 · 2021-06-18 08:28 can you explain what cloaking is? is it like ip spoofing or am i confusing stuff? ---------------------------------------------------------------------- Harold_Callahan · 2021-06-18 09:39 A cloak is a string of text like "user/yournickhere" that can be shown instead of the ip address/domain name of your client on IRC. It makes it a little bit harder to figure out where you are connecting from. It is not in any way a perfect disguise, e.g. staff can still see where you're connecting from; if you join a channel before identifying with nickserv everyone there can see it; if you accept a DCC file transfer they'll see it; if you click a link and the person who wants your ip address controls the web server they can get your ip address from the logs, et.c. Point is, if someone really wants to find out your ip address, a cloak will not stop them completely. So if this level of privacy is a concern to you, you should probably connect via TOR (and of course still be careful about e.g. what links you click, especially if your browser does not route via TOR. ---------------------------------------------------------------------- overclock351 · 2021-06-18 09:54 i was thinking a vpn like proton on a vm with a tor connection EDIT: could you guys explain the downvotes? i am kind of ignorant when it comes to opsec ---------------------------------------------------------------------- mill_en_ial · 2021-06-18 10:02 cool. didn't know that, i joined libera before the automated cloak ---------------------------------------------------------------------- Kilobyte22 · 2021-06-18 11:11 You can mitigate the "before you identify" by identifying using sasl ---------------------------------------------------------------------- l0c0dantes · 2021-06-18 15:06 It entirely depends on which network you're on. Some have cloaking turned on by default, some by request, some don't have cloaking capabilities at all. For the most part, your IP address isn't that big a concern. Your security will be impacted much more by what you say than what your client puts out. ---------------------------------------------------------------------- OMGItsCheezWTF · 2021-06-18 16:35 Even then it's not perfect. There are various ways to try and determine the real host behind a cloak, but chances are you'll be detected and k-lined for doing so. But the chance isn't 100% so a cloak isn't a 100% protection. ---------------------------------------------------------------------- SqualorTrawler · 2021-06-18 16:54 I have been on IRC for 29 years. I have never had a problem in that time. If they offer cloaks, get a cloak. Use SASL. You can use VPNs or tor, but some networks may block these, or some channels may block people connecting through these. Ideally you run a bouncer that you install and control, on, say, a $5 Digital Ocean or Linode droplet. /u/l0c0dantes says: > Your security will be impacted much more by what you say than what your client puts out. This is a good point. ---------------------------------------------------------------------- olliec420 · 2021-06-18 18:16 wEaR a MaSk ---------------------------------------------------------------------- Jonno_FTW · 2021-06-18 23:16 Assume everything is logged. If you're looking for super secret chat to say things that nobody other than you and the recipient need to hear, IRC isn't it. ---------------------------------------------------------------------- [deleted] · 2021-06-19 07:17 [deleted] ---------------------------------------------------------------------- ILikeBumblebees · 2021-07-09 02:00 Some tips: * Don't use IRC while skydiving. * Don't use IRC while juggling meat cleavers. * Don't use IRC while driving a large automobile. * Or a small one. * Don't use IRC while SCUBA diving. * Don't use IRC in the presence of open, uncontrolled flames. * Don't use IRC while wrestling an alligator. * Don't use IRC, or any other internet protocols, in North Korea. * Don't use IRC in a crowded public space during an Ebola outbreak. ---------------------------------------------------------------------- [deleted] · 2021-07-15 14:33 [deleted] ---------------------------------------------------------------------- hopingforabetterpast · 2021-08-02 10:44 I have p2p encrypted conversations on IRC. Maybe you don't know what you're talking about. ---------------------------------------------------------------------- Jonno_FTW · 2021-08-02 12:20 Nothing stopping the other person from logging your p2p encrypted conversation in plain text. ---------------------------------------------------------------------- hopingforabetterpast · 2021-08-02 14:50 I'll stop using it when we have access to telepathy then.