Deniable Upload and Download via Passive Participation
summary
CoverUp implements passive participation: a collaborating website serves a JavaScript snippet that stores one constant-size encrypted chunk at a time in local browser storage; active clients run a browser extension that assembles data using fountain codes so a feed-receiver achieves 10–50 Kbit/s (≈22 MB/day with 75 KB chunks). Indistinguishability holds against a global network adversary except for tiny timing leakage; a trusted cover-observer ensures JS integrity for full upload/download and noise padding reduces attacker advantage to ~0.001 after six months of continuous measurements.
AI-written summary · about
chapters (6)
- 0:00Start
- 2:28Passive Participation
- 9:45Bi-Directional Cover Up Transfer System
- 12:52Timing Leakage
- 17:30Interactive Browsing
- 18:03Performance
related talks
31mRemote Memory-Deduplication Attacks
20mDecentralizing Video Streaming
31mCommSec D1 - Steganography Ante Portas
53mPractical New Developments in The Breach Attack
25mEnd-to-End File Encryption in Browser with Open Source Penumbra
25mPrivacy Pass: A Lightweight Zero Knowledge Protocol Designed for the Web
15mDUPEFS: Leaking Data Over the Network With Filesystem Deduplication Side Channels
34mBreaching the Perimeter via Cloud Synchronized Browser Settings