Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
communication:mumble [2013/07/13 06:29] – samthetechie | connect:contact:mumble [2022/05/08 11:42] (current) – external edit 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ======Mumble + Tor====== | + | {{ : |
- | Mumble is an open source project intended for gaming, but which can also siphon all voice traffic over TCP exclusively and also run well without much bandwidth. The fact that it’s designed for low-bandwidth situations also makes it ideal for being bounced around in encrypted chunks across the global Tor network. | + | ======Mumble |
+ | | ||
- | Mumble is set up as a client and a server, with the client | + | * The fact that it’s designed for low-bandwidth situations also makes it ideal for being bounced around in encrypted chunks across |
- | =====Step 1: Set up a Mumble Server===== | + | * Mumble is set up as a client and a server, with the client being the thing you talk to on your computer and the server offering the connection between computers wanting to talk. |
- | * For simplicity’s sake, we’ll be using an Amazon EC2 instance. | + | * Mumble does **not** provide end to end encryption between the clients, i.e. the server has access to al unencrypted voice data, hence it is **necessary** to run your own server. |
+ | |||
+ | =====Step 1: Set up a Mumble Server===== | ||
- | * The process of creating an EC2 instance can easily be found by searching online. | + | * Install Ubuntu or Debian on a VPS. |
* From this point the guide assumes you’ve already created an Ubuntu instance and are logged in. | * From this point the guide assumes you’ve already created an Ubuntu instance and are logged in. | ||
- | Install the mumble server software: | + | * Install the mumble server software: |
$ sudo apt-get update | $ sudo apt-get update | ||
Line 22: | Line 25: | ||
* For the prompts that ensue, say yes to autostart and high priority and set up an administrator password of your choice, ensure all passwords are secure. | * For the prompts that ensue, say yes to autostart and high priority and set up an administrator password of your choice, ensure all passwords are secure. | ||
- | * In your AWS console, configure your security group and add some custom | + | * Make sure your firewall has TCP rules to allow inbound traffic on the port Mumble is using (default is 64738). |
+ | |||
+ | * Note for advanced users (consider running the mumble server as a tor hidden service). More information: | ||
=====Step 2: Set up Tor===== | =====Step 2: Set up Tor===== | ||
Line 30: | Line 35: | ||
* Search for "what is my ip" to obtain your public IP address. After you’ve made note of that, start up the Tor Browser. | * Search for "what is my ip" to obtain your public IP address. After you’ve made note of that, start up the Tor Browser. | ||
- | * From the firefox | + | * From the firefox |
=====Step 3: Set up Mumble Client===== | =====Step 3: Set up Mumble Client===== | ||
- | Like Tor, Mumble can probably also run on your computer unless you use a D-Wave quantum computer or Commodore 64. Download the Mumble client for your system and install it. The first time you run Mumble it will ask you to go through an audio tuning wizard, so do that and fine-tune your audio settings as much as you’d like. | + | * Download the [[http:// |
- | In Mumble, go to Configure > Settings > Network and make sure “Advanced" | + | * In Mumble, go to Configure > Settings > Network and make sure “Advanced" |
{{https:// | {{https:// | ||
- | Under Proxy, choose “SOCKS5 proxy" and enter “Localhost" | + | * Under Proxy, choose “SOCKS5 proxy" and enter “Localhost" |
+ | |||
+ | * Unfortunately, | ||
+ | |||
+ | * Hence, unless your OS is fully torified, you need to invoke Mumble with __torsocks__ (see [[documentation/ | ||
+ | * usewithtor mumble | ||
+ | * proxychains4 mumble | ||
+ | * check for success by watching the network, e.g. running " | ||
+ | |||
+ | * Unchecking | ||
+ | |||
+ | * Also check “Suppress certificate and password storage" | ||
{{https:// | {{https:// | ||
Line 46: | Line 62: | ||
=====Step 4: Call Your Friends!===== | =====Step 4: Call Your Friends!===== | ||
- | Now that you have Mumble and Tor running, go to Server > Connect > Add New and add the IP address and port number of the Mumble server you set up in Step 1. Use whatever label you want to name the server with and whatever username you want to make up. If you have friends, invite them to do Steps 2 to 4 and talk about Pokemon/ | + | * Now that you have Mumble and Tor running, go to Server > Connect > Add New and add the IP address |
- | =====Step 5: Audit for Shenanigans===== | + | * Use whatever label you want to name the server with and whatever username you want to make up. |
- | Since we have our own Mumble server, we can take a peek at the logs and see what sort of IP addresses have been recorded. Incoming connections are logged in / | + | * A Mumble chatroom is basically a group voice chat, much like a conference call but without a phone system. |
+ | |||
+ | * Your chat will be encrypted using TLS with 256-bit AES-SHA for the control channel and 128-bit OCB-AES for voice. | ||
+ | |||
+ | =====Step 5: Audit===== | ||
+ | |||
+ | * Since we have our own Mumble server, we review | ||
+ | |||
+ | * Incoming connections are logged in / | ||
+ | |||
+ | * If you run “tail | ||
< | < | ||
Line 62: | Line 88: | ||
< | < | ||
- | Generally, clients generate their own certificates, | + | * Generally, clients generate their own certificates, |
{{https:// | {{https:// | ||
- | The lack of any real-world personal information is great for anonymity, but a lot of commercial Mumble servers will require a certificate issued by a certificate authority, which normally entails forking over personal details, and would thus defeat the purpose of this exercise | + | * The lack of any real-world personal information is great for anonymity, but a lot of commercial Mumble servers will require a certificate issued by a certificate authority, which normally entails forking over personal details. |
+ | |||
+ | * For this and many other reasons, running your own mumble server | ||
- | Credit/ | + | Credit/ |