Take back your privacy. Lose yourself in the haystack.
Your ISP is most likely tracking your browsing habits and selling them to marketing agencies (albeit anonymised). Or worse, making your browsing history available to law enforcement at the hint of a Subpoena. Needl will generate legitimate random Internet traffic in order to conceal your "real" traffic, essentially making your data the Needle in the haystack. The goal is to make it harder for your ISP, government, etc to track your browsing habits.
It's not perfect. But it's a start. Have an idea? Get involved!
On 16th November 2016 the UK's IP Bill passed parliament and is set to become law. ISPs will be required to keep a 12-month web history and bulk collection of your data.
- Google: generates a random search string, searches Google and clicks on a random result.
- Alexa: visits a website from the Alexa Top 1 Million list.
- Twitter: generates a popular English name and visits their profile; performs random keyword searches
- DNS: produces random DNS queries.
Modules in the roadmap (feel free to get stuck in):
Warning: the Alexa list contains a lot of porn websites. If this is of concern then don't use Needl until adult content filtering is added.
Needl will work on pretty much any Linux system with Python 3.0+. A simple
sudo apt-get install python3 python3-pip (replace
apt-get with your OS' package manager) will take all of your troubles away.
You can then install Needl in 4 simple steps:
git clone https://github.com/eth0izzle/needl.git
sudo make installor
sudo pip3 install -r requirements.txt
python3 needl.py --daemon(todo: write service scripts)
Needl runs as a daemon and will happily sit in the background chomping away 24/7, 365. Each module (task) has scheduled actions, for example random DNS queries will happen every 1 to 3 minutes. You can configure the intervals within
usage: needl.py [-h] [--datadir DATADIR] [-d] [-v] [--logfile LOGFILE] [--pidfile PIDFILE] Take back your privacy. Lose yourself in the haystack. optional arguments: -h, --help show this help message and exit --datadir DATADIR Data directory -d, --daemon Run as a deamon -v, --verbose Increase logging --logfile LOGFILE Log to this file. Default is stdout. --pidfile PIDFILE Save process PID to this file. Default is /tmp/needl.pid. Only valid when running as a daemon.
Why not just use a VPN/Tor? And you should! We suggest using Needl alongside. Slap it on a Raspberry Pi and let it do it's thing.
Can [insert service here] differentiate between Needl and legitimate requests? In theory, yes. [insert service here] can track you with Cookies or Session data. Needl will tackle this in the future.
Where are your tests?!? Submit a pull request. Please.
Check out the issue tracker and see what tickles your fancy.
- Fork it, baby!
- Create your feature branch:
git checkout -b my-new-feature
- Commit your changes:
git commit -am 'Add some feature'
- Push to the branch:
git push origin my-new-feature
- Submit a pull request
v0.1 First release
MIT. See LICENSE