BF Repo V3 News

In March 2025 the Swedish government will propose a bill that will hurt E2EE (end-to-end encryption) if enforced in 2026. Signal already noted that they will leave the Swedish market if this new law will be enforced. It will be interesting to see how this development in Europe will continue. Especially for famous privacy service like Mullvad and many others that are based in Sweden.

Apparently Firefox got caught doing TOS/TOU ninja updates. Keep an eye out and if you depend on not being tracked by traffic analysis, it is probably time to switch browser.

A reminder that we rely heavily on the community regarding the repo and akula. All of this would not be possible without YOU. When files are being sent to us, we fully respect your decisions and instructions how they can be used (repo, akula, archive, cold storage). Files only automatically end up in the repo if they are sent to us without instructions. As an example, we have files that cannot be posted before 2026. If you find any files or links (file hosters, meganz, forum unlocks) please send them to the @BFRepoRelayBot. We want everything to stay community driven and for that we need YOU to contribute. Files and information are being posted everywhere, but we cannot be everywhere as individuals. As a community WE can be! It only takes a few seconds to send us a link or a file but it helps a lot. We are highly committed to keep everything non-commercial and non-profit, BUT that only works with YOU helping. In the near future, we will be open for donations and the outcome will decide what path we will take. This post is sponsored by flare.io (^ Yes, we don't want this to be the future)

CVE-2023-21563 (and many others) If you are still using BitLocker, nobody can help you. Update not possible. Switch to something else!

Akula v2 (https://t.me/+tObrYXqGOetmODhl) has been deployed a few days ago. Currently at 33 billion records, with a rough upper limit of 95 billion. Once we reached maximum capacity, v2.1 will be released, which will show you the origin of results. Private searches are temporarily disabled to get accurate performance numbers (because we don't log private searches). Work for v3 has already been started. It will allow you to retrieve files. Those files could contain weather reports or cookies.

- In Tails <= 6.10 a few problematic vulnerabilities have been found. Most of them are not simple ones. Update!

CVE-2024-11477 - 7zip (specific versions). RCE in the Zstandard implementation used by 7zip (does not affect Zstandard itself). Older versions that did not have Zstandard decompression implemented yet seem to be safe. Update! (https://www.7-zip.org/)

CVE-2024-9680 - Tor Browser, Firefox, Mullvad Browser Update!

Another week, another drama. It seems like a new campaign started, aiming to get the moderators and administrators of Breachforums exposed. While previous attempts were more aimed at the leadership, this campaign also involves moderators and supporters of the project. The Operation Endgame like approach, asking members of the community to become informants, is lead by @brunette and @slut. Well known names when it comes to Breachforums drama. Slut was involved in exposing some of the leadership figures and releasing the BF CDN in the past. Moskovski has a long standing feud with Breachforums recent administration and always contributed in operations that involved damaging or disrupting Breachforums. Normally those campaigns seem to target individuals, but this looks more like an attempt to demoralize supporters, preventing fresh blood to enter the ranks. Time will show how dedicated Slut and Moskovski are to bring Breachforums to its knees. We have been provided the following link for updates on their efforts: https://t.me/+Ubk4UEepawMyMTJh

If you are a XMR (Monero) user, take some time and read the recent news about possible issues with not running a local node. In summary, a shady corporation found a way to make Netflow Analysis on Monero users easier/possible. PLEASE take the time and read into this. Once Netflow logs are aggregated, they will not disappear. If the reports are accurate this will be a permanent fingerprint once the Netflow logs have been handed over by your ISP and you used a poisoned node. Best bet it so start with a new wallet and run a local node, if that is possible. DON'T IGNORE THIS MESSAGE IF YOU ARE A MONERO USER.

In case you are using windows in any shape or form, make sure you either disabled IPv6 (if that helps) or/and got the latest updates. This might be worse than the WIFI attack surface that was exposed some weeks ago. Not necessarily a newsworthy "report", but an urgent warning to everyone that did miss those reports. The general recommendation is to disable IPv6 on the router or managed switches. IPv6 is great for its IP range, but it has a lot of pitfalls if you don't know what you are doing. Especially for environments where OPSEC is important, there are not much drawbacks when disabling it entirely (also on linux servers).

404media is reporting Reddit is blocking ALL search engine crawls EXCEPT Google – which is currently paying $60,000,000/year for the right to scrape Reddit for AI training data. More information: https://www.404media.co/google-is-the-only-search-engine-that-works-on-reddit-now-thanks-to-ai-deal/

Every minute counts 🤡

NOW - Global cyber outage. Cybersecurity platform CrowdStrike is "down" worldwide, causing global IT problems, Microsoft crashes, 911 outages across several US states, and disruptions in international airlines, banks and media outlets. Source: disclosetv

You can contact the LockBit boss on the contacts below, waiting for an answer can take some time from 1 minute to several days depending on the workload. With questions about decryption to write only in a chat on the site, if the person who encrypted your network does not answer you more than two days or you have any other problems, you can contact me. Please write a single message and state the whole point, do not write just "hello", "here?", "can I ask you a question?" and other similar messages. PGP KEY, for encryption of some very important messages or files, the private key is in the hands of one person, on an encrypted computer of the main developer and organizer of the affiliate program, without access to the Internet, PGP KEY has never been transferred and will not be transferred to other people. Please expect an answer, absolutely everyone and always gets an answer, regardless of the question. ================================= Tox https://tox.chat/download.html Tox ID Support 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D9287582D6FCB ================================= XMPP XMPP Clients: https://pidgin.im https://adium.im/ https://psi-plus.com/wiki/en:downloads https://monal-im.org/ https://f-droid.org/packages/eu.siacs.conversations/ XMPP servers: https://anonym.im/ https://www.jabbim.com/ lockbit@anonym.im lockbitapt@jabb.im ================================= Briar https://briarproject.org LockBit Briar ID briar://abv3rrd62jpln5tyk6nbwospngef5ropu7gkrhnsjn5nvqglek3e2 ================================= Forum profile http://rampjcdlqvgkoz5oywutpo6ggl7g6tvddysustfl6qzhr5osr24xxqqd.onion/members/lockbit.9/ ================================= https://telegram.org/ Telegram (Experimental way of communication, I want to check how much these messengers are censored and controlled by the FBI, this way of communication can be blocked by the FBI at any time) Fox William Mulder @foxwm_apt Telegram channel (Experimental way of communication, I want to check how much these messengers are censored and controlled by the FBI, this way of communication can be blocked by the FBI at any time) Fox William Mulder https://t.me/foxwmapt ================================= https://www.signal.org/ Signal (Experimental way of communication, I want to check how much these messengers are censored and controlled by the FBI, this way of communication can be blocked by the FBI at any time) @lockbit20.19 ================================= PGP PUBLIC KEY http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/pgp.txt -----BEGIN PGP PUBLIC KEY BLOCK-----