PR0PH-1T

Host of the BarCode Podcast | Indie Filmmaker

[PR0PH-1T @BarCodeSecurity]

🙏 @technicallyDE

[Technical.ly Delaware @technicallyDE]

The popular Delaware-based podcast @BarCodeSecurity expands its offerings to include consulting https://t.co/dIOd9FtZD3 #netde

[PR0PH-1T @BarCodeSecurity]

We're not building the next Zoom. We're building what you use when Zoom isn't safe enough. https://t.co/0ONeOI90BP

[PR0PH-1T @BarCodeSecurity]

Browser note: Chrome and Edge work best. Firefox is solid but recording codec support is limited. Safari is hit or miss.

[PR0PH-1T @BarCodeSecurity]

If you build an interview or reporting platform ask yourself where the raw footage goes. Who can access it. With GhostLine the answer is nowhere and nobody.

[PR0PH-1T @BarCodeSecurity]

E2EE is coming to GhostLine. Insertable Streams API with ECDH key exchange. Encryption layered on top of the anonymization.

[Phillip Wylie @PhillipWylie]

Free Pentesting Methodology Course https://t.co/Z0XyVtRqdx

[PR0PH-1T @BarCodeSecurity]

Hardest part of building GhostLine was not the anonymization. It was WebRTC. If you've debugged ICE candidates across browsers you know exactly what I mean.

[PR0PH-1T @BarCodeSecurity]

GhostLine is open source. You don't have to take our word on the privacy stuff. Read the code yourself. https://t.co/0ONeOI90BP

[PR0PH-1T @BarCodeSecurity]

No accounts. No logins. No stored data. Room exists for the call then it's gone. We don't want your data and we built it so we literally can't keep it.

[PR0PH-1T @BarCodeSecurity]

Doing qualitative research where participants need anonymity? You can record the whole interview with GhostLine and never capture an identifiable frame.

[PR0PH-1T @BarCodeSecurity]

One rule for new features: does the guest's raw identity ever leave their device? If yes anywhere in the flow it doesn't get built.

[PR0PH-1T @BarCodeSecurity]

Thinking about adding a silhouette mode. Full black and white high contrast. Basically a shadow with a voice. Would you actually use this?

[PR0PH-1T @BarCodeSecurity]

Fun problem from last month: getting stable frame rates out of canvas captureStream while running the full anonymization pipeline without melting the CPU. OffscreenCanvas saved us.

[Higinio “w0rmer” Ochoa @0x686967]

Yeah Egert likes to just drop the most random shit and claim it’s solid evidence, there’s a reason he targets vulnerable women.

[PR0PH-1T @BarCodeSecurity]

Harder to build this way. We picked it anyway because the alternative isn't actually private.

[PR0PH-1T @BarCodeSecurity]

Why we do anonymization on the client:

[PR0PH-1T @BarCodeSecurity]

Client side means raw footage never leaves the guest's device. There's nothing to breach because we never had it.

[PR0PH-1T @BarCodeSecurity]

Three steps. Create a room. Share the code. Join the call. No accounts no signups nothing stored. https://t.co/0ONeOI90BP

[PR0PH-1T @BarCodeSecurity]

Ethics hotlines and internal reporting systems are mostly text based. Anonymous video would give way more context without putting anyone at risk.

[PR0PH-1T @BarCodeSecurity]

Went with WebM for recordings. Native support in Chrome and Edge with zero transcoding. Hit record and get a file when you stop. Nothing complicated.